_ZNK5Botan7AES_1284nameEv: 28| 105| std::string name() const override { return "AES-128"; } _ZNK5Botan7AES_2564nameEv: 119| 379| std::string name() const override { return "AES-256"; } _ZNK5Botan13AlgorithmSpec7matchesERKNS_16AlgorithmPatternE: 292| 140|inline bool AlgorithmSpec::matches(const AlgorithmPattern& pattern) const { 293| 140| return match(pattern).has_value(); 294| 140|} _ZNK5Botan16AlgorithmPattern9to_stringEv: 98| 5.09k| std::string_view to_string() const { return m_text; } _ZNK5Botan16AlgorithmPattern8any_headEv: 103| 18.6k| bool any_head() const { return m_head_count == 0; } _ZNK5Botan16AlgorithmPattern17head_alternativesEv: 105| 18.6k| std::span head_alternatives() const { return std::span(m_heads).first(m_head_count); } _ZNK5Botan16AlgorithmPattern8elementsEv: 107| 10.1k| std::span elements() const { return std::span(m_elements).first(m_element_count); } _ZNK5Botan13AlgorithmSpec4headEv: 171| 5.66k| std::string_view head() const { return m_head; } _ZNK5Botan13AlgorithmSpec9with_headENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 193| 569| AlgorithmSpec with_head(std::string_view head) const { return AlgorithmSpec(text_with_head(head)); } _ZNK5Botan14AlgorithmMatch4headEv: 240| 29| std::string_view head() const { return m_head; } _ZN5Botan13AlgorithmSpecC2Ev: 212| 10.1k| AlgorithmSpec() = default; _ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EED2Ev: 64| 13.9k| ~AlignmentBuffer() { secure_zeroize_buffer(m_buffer.data(), sizeof(T) * m_buffer.size()); } _ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EEC2Ev: 62| 13.9k| AlignmentBuffer() = default; _ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE5clearEv: 71| 54.1k| void clear() { 72| 54.1k| zeroize_buffer(m_buffer.data(), m_buffer.size()); 73| 54.1k| m_position = 0; 74| 54.1k| } _ZN5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EEC2Ev: 62| 2.56k| AlignmentBuffer() = default; _ZN5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EE5clearEv: 71| 11.0k| void clear() { 72| 11.0k| zeroize_buffer(m_buffer.data(), m_buffer.size()); 73| 11.0k| m_position = 0; 74| 11.0k| } _ZN5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EED2Ev: 64| 2.56k| ~AlignmentBuffer() { secure_zeroize_buffer(m_buffer.data(), sizeof(T) * m_buffer.size()); } _ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE21handle_unaligned_dataERNS_12BufferSlicerE: 166| 71.7k| [[nodiscard]] std::optional> handle_unaligned_data(BufferSlicer& slicer) { 167| | // When the final block is to be deferred, we would need to store and 168| | // hold a buffer that contains exactly one block until more data is 169| | // passed or it is explicitly consumed. 170| 71.7k| const size_t defer = (defers_final_block()) ? 1 : 0; ------------------ | Branch (170:31): [True: 0, False: 71.7k] ------------------ 171| | 172| 71.7k| if(in_alignment() && slicer.remaining() >= m_buffer.size() + defer) { ------------------ | Branch (172:13): [True: 67.2k, False: 4.42k] | Branch (172:31): [True: 26.2k, False: 41.0k] ------------------ 173| | // We are currently in alignment and the passed-in data source 174| | // contains enough data to benefit from aligned processing. 175| | // Therefore, we don't copy anything into the intermittent buffer. 176| 26.2k| return std::nullopt; 177| 26.2k| } 178| | 179| | // Fill the buffer with as much input data as needed to reach alignment 180| | // or until the input source is depleted. 181| 45.4k| const auto elements_to_consume = std::min(m_buffer.size() - m_position, slicer.remaining()); 182| 45.4k| append(slicer.take(elements_to_consume)); 183| | 184| | // If we collected enough data, we push out one full block. When 185| | // deferring the final block is enabled, we additionally check that 186| | // more input data is available to continue processing a consecutive 187| | // block. 188| 45.4k| if(ready_to_consume() && (!defers_final_block() || !slicer.empty())) { ------------------ | Branch (188:13): [True: 2.08k, False: 43.3k] | Branch (188:36): [True: 2.08k, False: 0] | Branch (188:61): [True: 0, False: 0] ------------------ 189| 2.08k| return consume(); 190| 43.3k| } else { 191| 43.3k| return std::nullopt; 192| 43.3k| } 193| 45.4k| } _ZNK5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE18defers_final_blockEv: 233| 102k| constexpr bool defers_final_block() const { 234| 102k| return FINAL_BLOCK_STRATEGY == AlignmentBufferFinalBlock::must_be_deferred; 235| 102k| } _ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE6appendENSt3__14spanIKhLm18446744073709551615EEE: 90| 84.3k| void append(std::span elements) { 91| 84.3k| BOTAN_ASSERT_NOMSG(elements.size() <= elements_until_alignment()); ------------------ | | 84| 84.3k| do { \ | | 85| 84.3k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 84.3k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 84.3k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 84.3k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 84.3k] | | ------------------ ------------------ 92| 84.3k| std::copy(elements.begin(), elements.end(), m_buffer.begin() + m_position); 93| 84.3k| m_position += elements.size(); 94| 84.3k| } _ZNK5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE24elements_until_alignmentEv: 221| 202k| size_t elements_until_alignment() const { return m_buffer.size() - m_position; } _ZNK5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE16ready_to_consumeEv: 231| 167k| bool ready_to_consume() const { return m_position == m_buffer.size(); } _ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE7consumeEv: 200| 42.3k| [[nodiscard]] std::span consume() { 201| 42.3k| BOTAN_ASSERT_NOMSG(ready_to_consume()); ------------------ | | 84| 42.3k| do { \ | | 85| 42.3k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 42.3k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 42.3k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 42.3k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 42.3k] | | ------------------ ------------------ 202| 42.3k| m_position = 0; 203| 42.3k| return m_buffer; 204| 42.3k| } _ZNK5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE12in_alignmentEv: 226| 171k| bool in_alignment() const { return m_position == 0; } _ZNK5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE23aligned_data_to_processERNS_12BufferSlicerE: 126| 28.3k| [[nodiscard]] std::tuple, size_t> aligned_data_to_process(BufferSlicer& slicer) const { 127| 28.3k| BOTAN_ASSERT_NOMSG(in_alignment()); ------------------ | | 84| 28.3k| do { \ | | 85| 28.3k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 28.3k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 28.3k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 28.3k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 28.3k] | | ------------------ ------------------ 128| | 129| | // When the final block is to be deferred, the last block must not be 130| | // selected for processing if there is no (unaligned) extra input data. 131| 28.3k| const size_t defer = (defers_final_block()) ? 1 : 0; ------------------ | Branch (131:31): [True: 0, False: 28.3k] ------------------ 132| 28.3k| const size_t full_blocks_to_process = (slicer.remaining() - defer) / m_buffer.size(); 133| 28.3k| return {slicer.take(full_blocks_to_process * m_buffer.size()), full_blocks_to_process}; 134| 28.3k| } _ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE18fill_up_with_zerosEv: 79| 40.2k| void fill_up_with_zeros() { 80| 40.2k| if(!ready_to_consume()) { ------------------ | Branch (80:13): [True: 40.2k, False: 42] ------------------ 81| 40.2k| zeroize_buffer(&m_buffer[m_position], elements_until_alignment()); 82| 40.2k| m_position = m_buffer.size(); 83| 40.2k| } 84| 40.2k| } _ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE20directly_modify_lastEm: 113| 38.9k| std::span directly_modify_last(size_t elements) { 114| 38.9k| BOTAN_ASSERT_NOMSG(size() >= elements); ------------------ | | 84| 38.9k| do { \ | | 85| 38.9k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 38.9k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 38.9k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 38.9k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 38.9k] | | ------------------ ------------------ 115| 38.9k| return std::span(m_buffer).last(elements); 116| 38.9k| } _ZNK5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE4sizeEv: 217| 38.9k| constexpr size_t size() const { return m_buffer.size(); } _ZN5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EE21handle_unaligned_dataERNS_12BufferSlicerE: 166| 18.8k| [[nodiscard]] std::optional> handle_unaligned_data(BufferSlicer& slicer) { 167| | // When the final block is to be deferred, we would need to store and 168| | // hold a buffer that contains exactly one block until more data is 169| | // passed or it is explicitly consumed. 170| 18.8k| const size_t defer = (defers_final_block()) ? 1 : 0; ------------------ | Branch (170:31): [True: 0, False: 18.8k] ------------------ 171| | 172| 18.8k| if(in_alignment() && slicer.remaining() >= m_buffer.size() + defer) { ------------------ | Branch (172:13): [True: 15.8k, False: 2.96k] | Branch (172:31): [True: 8.49k, False: 7.38k] ------------------ 173| | // We are currently in alignment and the passed-in data source 174| | // contains enough data to benefit from aligned processing. 175| | // Therefore, we don't copy anything into the intermittent buffer. 176| 8.49k| return std::nullopt; 177| 8.49k| } 178| | 179| | // Fill the buffer with as much input data as needed to reach alignment 180| | // or until the input source is depleted. 181| 10.3k| const auto elements_to_consume = std::min(m_buffer.size() - m_position, slicer.remaining()); 182| 10.3k| append(slicer.take(elements_to_consume)); 183| | 184| | // If we collected enough data, we push out one full block. When 185| | // deferring the final block is enabled, we additionally check that 186| | // more input data is available to continue processing a consecutive 187| | // block. 188| 10.3k| if(ready_to_consume() && (!defers_final_block() || !slicer.empty())) { ------------------ | Branch (188:13): [True: 15, False: 10.3k] | Branch (188:36): [True: 15, False: 0] | Branch (188:61): [True: 0, False: 0] ------------------ 189| 15| return consume(); 190| 10.3k| } else { 191| 10.3k| return std::nullopt; 192| 10.3k| } 193| 10.3k| } _ZNK5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EE18defers_final_blockEv: 233| 27.3k| constexpr bool defers_final_block() const { 234| 27.3k| return FINAL_BLOCK_STRATEGY == AlignmentBufferFinalBlock::must_be_deferred; 235| 27.3k| } _ZN5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EE6appendENSt3__14spanIKhLm18446744073709551615EEE: 90| 17.7k| void append(std::span elements) { 91| 17.7k| BOTAN_ASSERT_NOMSG(elements.size() <= elements_until_alignment()); ------------------ | | 84| 17.7k| do { \ | | 85| 17.7k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 17.7k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 17.7k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 17.7k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 17.7k] | | ------------------ ------------------ 92| 17.7k| std::copy(elements.begin(), elements.end(), m_buffer.begin() + m_position); 93| 17.7k| m_position += elements.size(); 94| 17.7k| } _ZNK5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EE24elements_until_alignmentEv: 221| 41.1k| size_t elements_until_alignment() const { return m_buffer.size() - m_position; } _ZNK5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EE16ready_to_consumeEv: 231| 34.8k| bool ready_to_consume() const { return m_position == m_buffer.size(); } _ZN5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EE7consumeEv: 200| 8.55k| [[nodiscard]] std::span consume() { 201| 8.55k| BOTAN_ASSERT_NOMSG(ready_to_consume()); ------------------ | | 84| 8.55k| do { \ | | 85| 8.55k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 8.55k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 8.55k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 8.55k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 8.55k] | | ------------------ ------------------ 202| 8.55k| m_position = 0; 203| 8.55k| return m_buffer; 204| 8.55k| } _ZNK5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EE12in_alignmentEv: 226| 46.2k| bool in_alignment() const { return m_position == 0; } _ZNK5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EE23aligned_data_to_processERNS_12BufferSlicerE: 126| 8.51k| [[nodiscard]] std::tuple, size_t> aligned_data_to_process(BufferSlicer& slicer) const { 127| 8.51k| BOTAN_ASSERT_NOMSG(in_alignment()); ------------------ | | 84| 8.51k| do { \ | | 85| 8.51k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 8.51k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 8.51k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 8.51k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 8.51k] | | ------------------ ------------------ 128| | 129| | // When the final block is to be deferred, the last block must not be 130| | // selected for processing if there is no (unaligned) extra input data. 131| 8.51k| const size_t defer = (defers_final_block()) ? 1 : 0; ------------------ | Branch (131:31): [True: 0, False: 8.51k] ------------------ 132| 8.51k| const size_t full_blocks_to_process = (slicer.remaining() - defer) / m_buffer.size(); 133| 8.51k| return {slicer.take(full_blocks_to_process * m_buffer.size()), full_blocks_to_process}; 134| 8.51k| } _ZN5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EE18fill_up_with_zerosEv: 79| 8.54k| void fill_up_with_zeros() { 80| 8.54k| if(!ready_to_consume()) { ------------------ | Branch (80:13): [True: 8.54k, False: 4] ------------------ 81| 8.54k| zeroize_buffer(&m_buffer[m_position], elements_until_alignment()); 82| 8.54k| m_position = m_buffer.size(); 83| 8.54k| } 84| 8.54k| } _ZN5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EE20directly_modify_lastEm: 113| 7.42k| std::span directly_modify_last(size_t elements) { 114| 7.42k| BOTAN_ASSERT_NOMSG(size() >= elements); ------------------ | | 84| 7.42k| do { \ | | 85| 7.42k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 7.42k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 7.42k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 7.42k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 7.42k] | | ------------------ ------------------ 115| 7.42k| return std::span(m_buffer).last(elements); 116| 7.42k| } _ZNK5Botan15AlignmentBufferIhLm128ELNS_25AlignmentBufferFinalBlockE0EE4sizeEv: 217| 7.42k| constexpr size_t size() const { return m_buffer.size(); } _ZN5Botan15AlignmentBufferIhLm16ELNS_25AlignmentBufferFinalBlockE0EEC2Ev: 62| 558| AlignmentBuffer() = default; _ZN5Botan15AlignmentBufferIhLm16ELNS_25AlignmentBufferFinalBlockE0EED2Ev: 64| 558| ~AlignmentBuffer() { secure_zeroize_buffer(m_buffer.data(), sizeof(T) * m_buffer.size()); } _ZN5Botan15AlignmentBufferIhLm16ELNS_25AlignmentBufferFinalBlockE0EE5clearEv: 71| 1.27k| void clear() { 72| 1.27k| zeroize_buffer(m_buffer.data(), m_buffer.size()); 73| 1.27k| m_position = 0; 74| 1.27k| } _ZN5Botan15AlignmentBufferIhLm16ELNS_25AlignmentBufferFinalBlockE0EE21handle_unaligned_dataERNS_12BufferSlicerE: 166| 1.85k| [[nodiscard]] std::optional> handle_unaligned_data(BufferSlicer& slicer) { 167| | // When the final block is to be deferred, we would need to store and 168| | // hold a buffer that contains exactly one block until more data is 169| | // passed or it is explicitly consumed. 170| 1.85k| const size_t defer = (defers_final_block()) ? 1 : 0; ------------------ | Branch (170:31): [True: 0, False: 1.85k] ------------------ 171| | 172| 1.85k| if(in_alignment() && slicer.remaining() >= m_buffer.size() + defer) { ------------------ | Branch (172:13): [True: 1.55k, False: 300] | Branch (172:31): [True: 531, False: 1.02k] ------------------ 173| | // We are currently in alignment and the passed-in data source 174| | // contains enough data to benefit from aligned processing. 175| | // Therefore, we don't copy anything into the intermittent buffer. 176| 531| return std::nullopt; 177| 531| } 178| | 179| | // Fill the buffer with as much input data as needed to reach alignment 180| | // or until the input source is depleted. 181| 1.32k| const auto elements_to_consume = std::min(m_buffer.size() - m_position, slicer.remaining()); 182| 1.32k| append(slicer.take(elements_to_consume)); 183| | 184| | // If we collected enough data, we push out one full block. When 185| | // deferring the final block is enabled, we additionally check that 186| | // more input data is available to continue processing a consecutive 187| | // block. 188| 1.32k| if(ready_to_consume() && (!defers_final_block() || !slicer.empty())) { ------------------ | Branch (188:13): [True: 300, False: 1.02k] | Branch (188:36): [True: 300, False: 0] | Branch (188:61): [True: 0, False: 0] ------------------ 189| 300| return consume(); 190| 1.02k| } else { 191| 1.02k| return std::nullopt; 192| 1.02k| } 193| 1.32k| } _ZNK5Botan15AlignmentBufferIhLm16ELNS_25AlignmentBufferFinalBlockE0EE18defers_final_blockEv: 233| 2.98k| constexpr bool defers_final_block() const { 234| 2.98k| return FINAL_BLOCK_STRATEGY == AlignmentBufferFinalBlock::must_be_deferred; 235| 2.98k| } _ZNK5Botan15AlignmentBufferIhLm16ELNS_25AlignmentBufferFinalBlockE0EE16ready_to_consumeEv: 231| 3.07k| bool ready_to_consume() const { return m_position == m_buffer.size(); } _ZNK5Botan15AlignmentBufferIhLm16ELNS_25AlignmentBufferFinalBlockE0EE12in_alignmentEv: 226| 6.34k| bool in_alignment() const { return m_position == 0; } _ZNK5Botan15AlignmentBufferIhLm16ELNS_25AlignmentBufferFinalBlockE0EE23aligned_data_to_processERNS_12BufferSlicerE: 126| 831| [[nodiscard]] std::tuple, size_t> aligned_data_to_process(BufferSlicer& slicer) const { 127| 831| BOTAN_ASSERT_NOMSG(in_alignment()); ------------------ | | 84| 831| do { \ | | 85| 831| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 831| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 831] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 831| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 831] | | ------------------ ------------------ 128| | 129| | // When the final block is to be deferred, the last block must not be 130| | // selected for processing if there is no (unaligned) extra input data. 131| 831| const size_t defer = (defers_final_block()) ? 1 : 0; ------------------ | Branch (131:31): [True: 0, False: 831] ------------------ 132| 831| const size_t full_blocks_to_process = (slicer.remaining() - defer) / m_buffer.size(); 133| 831| return {slicer.take(full_blocks_to_process * m_buffer.size()), full_blocks_to_process}; 134| 831| } _ZN5Botan15AlignmentBufferIhLm16ELNS_25AlignmentBufferFinalBlockE0EE6appendENSt3__14spanIKhLm18446744073709551615EEE: 90| 1.32k| void append(std::span elements) { 91| 1.32k| BOTAN_ASSERT_NOMSG(elements.size() <= elements_until_alignment()); ------------------ | | 84| 1.32k| do { \ | | 85| 1.32k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 1.32k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 1.32k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 1.32k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 1.32k] | | ------------------ ------------------ 92| 1.32k| std::copy(elements.begin(), elements.end(), m_buffer.begin() + m_position); 93| 1.32k| m_position += elements.size(); 94| 1.32k| } _ZNK5Botan15AlignmentBufferIhLm16ELNS_25AlignmentBufferFinalBlockE0EE24elements_until_alignmentEv: 221| 2.05k| size_t elements_until_alignment() const { return m_buffer.size() - m_position; } _ZN5Botan15AlignmentBufferIhLm16ELNS_25AlignmentBufferFinalBlockE0EE18fill_up_with_zerosEv: 79| 726| void fill_up_with_zeros() { 80| 726| if(!ready_to_consume()) { ------------------ | Branch (80:13): [True: 726, False: 0] ------------------ 81| 726| zeroize_buffer(&m_buffer[m_position], elements_until_alignment()); 82| 726| m_position = m_buffer.size(); 83| 726| } 84| 726| } _ZN5Botan15AlignmentBufferIhLm16ELNS_25AlignmentBufferFinalBlockE0EE7consumeEv: 200| 1.02k| [[nodiscard]] std::span consume() { 201| 1.02k| BOTAN_ASSERT_NOMSG(ready_to_consume()); ------------------ | | 84| 1.02k| do { \ | | 85| 1.02k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 1.02k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 1.02k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 1.02k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 1.02k] | | ------------------ ------------------ 202| 1.02k| m_position = 0; 203| 1.02k| return m_buffer; 204| 1.02k| } _ZNK5Botan8ARIA_1284nameEv: 34| 22| std::string name() const override { return "ARIA-128"; } _ZNK5Botan8ARIA_2564nameEv: 104| 26| std::string name() const override { return "ARIA-256"; } _ZNK5Botan17Barrett_Reduction4cubeERKNS_6BigIntE: 66| 14| BigInt cube(const BigInt& x) const { return this->multiply(x, this->square(x)); } _ZNK5Botan17Barrett_Reduction12modulus_bitsEv: 71| 276| size_t modulus_bits() const { return m_modulus_bits; } _ZN5Botan10ct_is_zeroITkNSt3__117unsigned_integralEhEET_S2_: 37| 124k|BOTAN_FORCE_INLINE constexpr T ct_is_zero(T x) { 38| 124k| return ct_expand_top_bit(~x & (x - 1)); 39| 124k|} _ZN5Botan17ct_expand_top_bitITkNSt3__117unsigned_integralEhEET_S2_: 28| 124k|BOTAN_FORCE_INLINE constexpr T ct_expand_top_bit(T a) { 29| 124k| const T top = CT::value_barrier(a >> (sizeof(T) * 8 - 1)); 30| 124k| return static_cast(0) - top; 31| 124k|} _ZN5Botan9var_ctz64Em: 181| 847|BOTAN_FORCE_INLINE constexpr size_t var_ctz64(uint64_t n) { 182| 847|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_ctzll) 183| 847| if(n == 0) { ------------------ | Branch (183:7): [True: 0, False: 847] ------------------ 184| 0| return 64; 185| 0| } 186| 847| return __builtin_ctzll(n); 187| |#else 188| | return ctz(n); 189| |#endif 190| 847|} _ZN5Botan17ct_expand_top_bitITkNSt3__117unsigned_integralEmEET_S2_: 28| 103M|BOTAN_FORCE_INLINE constexpr T ct_expand_top_bit(T a) { 29| 103M| const T top = CT::value_barrier(a >> (sizeof(T) * 8 - 1)); 30| 103M| return static_cast(0) - top; 31| 103M|} _ZN5Botan10ct_is_zeroITkNSt3__117unsigned_integralEmEET_S2_: 37| 63.9M|BOTAN_FORCE_INLINE constexpr T ct_is_zero(T x) { 38| 63.9M| return ct_expand_top_bit(~x & (x - 1)); 39| 63.9M|} _ZN5Botan6chooseITkNSt3__117unsigned_integralEmEET_S2_S2_S2_: 217| 950M|BOTAN_FORCE_INLINE constexpr T choose(T mask, T a, T b) { 218| | //return (mask & a) | (~mask & b); 219| 950M| return (b ^ (mask & (a ^ b))); 220| 950M|} _ZN5Botan8high_bitITkNSt3__117unsigned_integralEjEEmT_: 73| 6.48k|BOTAN_FORCE_INLINE constexpr size_t high_bit(T n) { 74| 6.48k| size_t hb = 0; 75| | 76| 38.8k| for(size_t s = 8 * sizeof(T) / 2; s > 0; s /= 2) { ------------------ | Branch (76:38): [True: 32.4k, False: 6.48k] ------------------ 77| | // Equivalent to: ((n >> s) == 0) ? 0 : s; 78| 32.4k| const size_t z = s - ct_if_is_zero_ret(n >> s, s); 79| 32.4k| hb += z; 80| 32.4k| n >>= z; 81| 32.4k| } 82| | 83| 6.48k| hb += static_cast(n); 84| | 85| 6.48k| return hb; 86| 6.48k|} _ZN5Botan17ct_if_is_zero_retITkNSt3__117unsigned_integralEjEEmT_m: 45| 32.4k|BOTAN_FORCE_INLINE constexpr size_t ct_if_is_zero_ret(T x, size_t s) { 46| | /* 47| | Similar to `return ct_is_zero(x) & s` but has to account for possibility that 48| | sizeof(T) is smaller than sizeof(size_t) which would lead to incomplete masking 49| | */ 50| 32.4k| const T a = ~x & (x - 1); 51| 32.4k| const size_t a_top = static_cast(CT::value_barrier(a >> (sizeof(T) * 8 - 1))); 52| 32.4k| const size_t mask = static_cast(0) - a_top; 53| 32.4k| return mask & s; 54| 32.4k|} _ZN5Botan17significant_bytesITkNSt3__117unsigned_integralEmEEmT_: 94| 10.6k|BOTAN_FORCE_INLINE constexpr size_t significant_bytes(T n) { 95| 10.6k| size_t b = 0; 96| | 97| 42.7k| for(size_t s = 8 * sizeof(T) / 2; s >= 8; s /= 2) { ------------------ | Branch (97:38): [True: 32.0k, False: 10.6k] ------------------ 98| | // Equivalent to: ((n >> s) == 0) ? 0 : s; 99| 32.0k| const size_t z = s - ct_if_is_zero_ret(n >> s, s); 100| 32.0k| b += z / 8; 101| 32.0k| n >>= z; 102| 32.0k| } 103| | 104| 10.6k| b += (n != 0); 105| | 106| 10.6k| return b; 107| 10.6k|} _ZN5Botan17ct_if_is_zero_retITkNSt3__117unsigned_integralEmEEmT_m: 45| 18.6M|BOTAN_FORCE_INLINE constexpr size_t ct_if_is_zero_ret(T x, size_t s) { 46| | /* 47| | Similar to `return ct_is_zero(x) & s` but has to account for possibility that 48| | sizeof(T) is smaller than sizeof(size_t) which would lead to incomplete masking 49| | */ 50| 18.6M| const T a = ~x & (x - 1); 51| 18.6M| const size_t a_top = static_cast(CT::value_barrier(a >> (sizeof(T) * 8 - 1))); 52| 18.6M| const size_t mask = static_cast(0) - a_top; 53| 18.6M| return mask & s; 54| 18.6M|} _ZN5Botan3ctzITkNSt3__117unsigned_integralEmEEmT_: 115| 98.3k|BOTAN_FORCE_INLINE constexpr size_t ctz(T n) { 116| | /* 117| | * If n == 0 then this function will compute 8*sizeof(T)-1, so 118| | * initialize lb to 1 if n == 0 to produce the expected result. 119| | */ 120| 98.3k| size_t lb = ct_if_is_zero_ret(n, 1); 121| | 122| 688k| for(size_t s = 8 * sizeof(T) / 2; s > 0; s /= 2) { ------------------ | Branch (122:38): [True: 590k, False: 98.3k] ------------------ 123| 590k| const T range = (static_cast(1) << s) - 1; 124| | // Equivalent to: ((n & range) == 0) ? s : 0; 125| 590k| const size_t z = ct_if_is_zero_ret(n & range, s); 126| 590k| lb += z; 127| 590k| n >>= z; 128| 590k| } 129| | 130| 98.3k| return lb; 131| 98.3k|} _ZN5Botan9swap_bitsITkNSt3__117unsigned_integralEmEEvRT_S3_S2_m: 203| 166k|BOTAN_FORCE_INLINE constexpr void swap_bits(T& x, T& y, T mask, size_t shift) { 204| 166k| const T swap = ((x >> shift) ^ y) & mask; 205| 166k| x ^= swap << shift; 206| 166k| y ^= swap; 207| 166k|} _ZN5Botan13ceil_divisionITkNSt3__117unsigned_integralEmEET_S2_S2_: 167| 20.1k|BOTAN_FORCE_INLINE constexpr T ceil_division(T a, T b) { 168| | // Same as `(a + b - 1) / b` but avoids possible overflow 169| 20.1k| return a / b + ((a % b != 0) ? 1 : 0); ------------------ | Branch (169:20): [True: 16.3k, False: 3.78k] ------------------ 170| 20.1k|} _ZN5Botan13is_power_of_2ITkNSt3__117unsigned_integralEmEEbT_: 62| 5.06k|BOTAN_FORCE_INLINE constexpr bool is_power_of_2(T arg) { 63| 5.06k| return (arg != 0) && (arg != 1) && ((arg & static_cast(arg - 1)) == 0); ------------------ | Branch (63:11): [True: 5.06k, False: 0] | Branch (63:25): [True: 5.06k, False: 0] | Branch (63:39): [True: 3.07k, False: 1.99k] ------------------ 64| 5.06k|} _ZN5Botan8majorityITkNSt3__117unsigned_integralEmEET_S2_S2_S2_: 223| 2.44M|BOTAN_FORCE_INLINE constexpr T majority(T a, T b, T c) { 224| | /* 225| | Considering each bit of a, b, c individually 226| | 227| | If a xor b is set, then c is the deciding vote. 228| | 229| | If a xor b is not set then either a and b are both set or both unset. 230| | In either case the value of c doesn't matter, and examining b (or a) 231| | allows us to determine which case we are in. 232| | */ 233| 2.44M| return choose(a ^ b, c, b); 234| 2.44M|} _ZN5Botan8high_bitITkNSt3__117unsigned_integralEmEEmT_: 73| 2.99M|BOTAN_FORCE_INLINE constexpr size_t high_bit(T n) { 74| 2.99M| size_t hb = 0; 75| | 76| 20.9M| for(size_t s = 8 * sizeof(T) / 2; s > 0; s /= 2) { ------------------ | Branch (76:38): [True: 17.9M, False: 2.99M] ------------------ 77| | // Equivalent to: ((n >> s) == 0) ? 0 : s; 78| 17.9M| const size_t z = s - ct_if_is_zero_ret(n >> s, s); 79| 17.9M| hb += z; 80| 17.9M| n >>= z; 81| 17.9M| } 82| | 83| 2.99M| hb += static_cast(n); 84| | 85| 2.99M| return hb; 86| 2.99M|} _ZN5Botan12ceil_tobytesITkNSt3__117unsigned_integralEmEET_S2_: 176| 14.4k|BOTAN_FORCE_INLINE constexpr T ceil_tobytes(T bits) { 177| 14.4k| return (bits + 7) / 8; 178| 14.4k|} _ZN5Botan6chooseITkNSt3__117unsigned_integralEhEET_S2_S2_S2_: 217| 7.58k|BOTAN_FORCE_INLINE constexpr T choose(T mask, T a, T b) { 218| | //return (mask & a) | (~mask & b); 219| 7.58k| return (b ^ (mask & (a ^ b))); 220| 7.58k|} _ZN5Botan17ct_expand_top_bitITkNSt3__117unsigned_integralEtEET_S2_: 28| 32.9k|BOTAN_FORCE_INLINE constexpr T ct_expand_top_bit(T a) { 29| 32.9k| const T top = CT::value_barrier(a >> (sizeof(T) * 8 - 1)); 30| 32.9k| return static_cast(0) - top; 31| 32.9k|} _ZN5Botan10ct_is_zeroITkNSt3__117unsigned_integralEtEET_S2_: 37| 16.4k|BOTAN_FORCE_INLINE constexpr T ct_is_zero(T x) { 38| 16.4k| return ct_expand_top_bit(~x & (x - 1)); 39| 16.4k|} _ZN5Botan8high_bitITkNSt3__117unsigned_integralEhEEmT_: 73| 8|BOTAN_FORCE_INLINE constexpr size_t high_bit(T n) { 74| 8| size_t hb = 0; 75| | 76| 32| for(size_t s = 8 * sizeof(T) / 2; s > 0; s /= 2) { ------------------ | Branch (76:38): [True: 24, False: 8] ------------------ 77| | // Equivalent to: ((n >> s) == 0) ? 0 : s; 78| 24| const size_t z = s - ct_if_is_zero_ret(n >> s, s); 79| 24| hb += z; 80| 24| n >>= z; 81| 24| } 82| | 83| 8| hb += static_cast(n); 84| | 85| 8| return hb; 86| 8|} _ZN5Botan17ct_if_is_zero_retITkNSt3__117unsigned_integralEhEEmT_m: 45| 24|BOTAN_FORCE_INLINE constexpr size_t ct_if_is_zero_ret(T x, size_t s) { 46| | /* 47| | Similar to `return ct_is_zero(x) & s` but has to account for possibility that 48| | sizeof(T) is smaller than sizeof(size_t) which would lead to incomplete masking 49| | */ 50| 24| const T a = ~x & (x - 1); 51| 24| const size_t a_top = static_cast(CT::value_barrier(a >> (sizeof(T) * 8 - 1))); 52| 24| const size_t mask = static_cast(0) - a_top; 53| 24| return mask & s; 54| 24|} _ZN5Botan7BlinderD2Ev: 80| 272| ~Blinder() = default; _ZN5Botan13reverse_bytesITkNSt3__117unsigned_integralEmQooooooeqstT_Li1EeqstS2_Li2EeqstS2_Li4EeqstS2_Li8EEES2_S2_: 25| 547k|inline constexpr T reverse_bytes(T x) { 26| | if constexpr(sizeof(T) == 1) { 27| | return x; 28| | } else if constexpr(sizeof(T) == 2) { 29| |#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap16) 30| | return static_cast(__builtin_bswap16(x)); 31| |#else 32| | return static_cast((x << 8) | (x >> 8)); 33| |#endif 34| | } else if constexpr(sizeof(T) == 4) { 35| |#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap32) 36| | return static_cast(__builtin_bswap32(x)); 37| |#else 38| | // MSVC at least recognizes this as a bswap 39| | return static_cast(((x & 0x000000FF) << 24) | ((x & 0x0000FF00) << 8) | ((x & 0x00FF0000) >> 8) | 40| | ((x & 0xFF000000) >> 24)); 41| |#endif 42| 547k| } else if constexpr(sizeof(T) == 8) { 43| 547k|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap64) 44| 547k| return static_cast(__builtin_bswap64(x)); 45| |#else 46| | uint32_t hi = static_cast(x >> 32); 47| | uint32_t lo = static_cast(x); 48| | 49| | hi = reverse_bytes(hi); 50| | lo = reverse_bytes(lo); 51| | 52| | return (static_cast(lo) << 32) | hi; 53| |#endif 54| 547k| } 55| 547k|} _ZN5Botan13reverse_bytesITkNSt3__117unsigned_integralEtQooooooeqstT_Li1EeqstS2_Li2EeqstS2_Li4EeqstS2_Li8EEES2_S2_: 25| 1.48k|inline constexpr T reverse_bytes(T x) { 26| | if constexpr(sizeof(T) == 1) { 27| | return x; 28| 1.48k| } else if constexpr(sizeof(T) == 2) { 29| 1.48k|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap16) 30| 1.48k| return static_cast(__builtin_bswap16(x)); 31| |#else 32| | return static_cast((x << 8) | (x >> 8)); 33| |#endif 34| | } else if constexpr(sizeof(T) == 4) { 35| |#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap32) 36| | return static_cast(__builtin_bswap32(x)); 37| |#else 38| | // MSVC at least recognizes this as a bswap 39| | return static_cast(((x & 0x000000FF) << 24) | ((x & 0x0000FF00) << 8) | ((x & 0x00FF0000) >> 8) | 40| | ((x & 0xFF000000) >> 24)); 41| |#endif 42| | } else if constexpr(sizeof(T) == 8) { 43| |#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap64) 44| | return static_cast(__builtin_bswap64(x)); 45| |#else 46| | uint32_t hi = static_cast(x >> 32); 47| | uint32_t lo = static_cast(x); 48| | 49| | hi = reverse_bytes(hi); 50| | lo = reverse_bytes(lo); 51| | 52| | return (static_cast(lo) << 32) | hi; 53| |#endif 54| | } 55| 1.48k|} _ZN5Botan13reverse_bytesITkNSt3__117unsigned_integralEjQooooooeqstT_Li1EeqstS2_Li2EeqstS2_Li4EeqstS2_Li8EEES2_S2_: 25| 306k|inline constexpr T reverse_bytes(T x) { 26| | if constexpr(sizeof(T) == 1) { 27| | return x; 28| | } else if constexpr(sizeof(T) == 2) { 29| |#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap16) 30| | return static_cast(__builtin_bswap16(x)); 31| |#else 32| | return static_cast((x << 8) | (x >> 8)); 33| |#endif 34| 306k| } else if constexpr(sizeof(T) == 4) { 35| 306k|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap32) 36| 306k| return static_cast(__builtin_bswap32(x)); 37| |#else 38| | // MSVC at least recognizes this as a bswap 39| | return static_cast(((x & 0x000000FF) << 24) | ((x & 0x0000FF00) << 8) | ((x & 0x00FF0000) >> 8) | 40| | ((x & 0xFF000000) >> 24)); 41| |#endif 42| | } else if constexpr(sizeof(T) == 8) { 43| |#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap64) 44| | return static_cast(__builtin_bswap64(x)); 45| |#else 46| | uint32_t hi = static_cast(x >> 32); 47| | uint32_t lo = static_cast(x); 48| | 49| | hi = reverse_bytes(hi); 50| | lo = reverse_bytes(lo); 51| | 52| | return (static_cast(lo) << 32) | hi; 53| |#endif 54| | } 55| 306k|} _ZN5Botan12BufferSlicerC2ENSt3__14spanIKhLm18446744073709551615EEE: 25| 117k| explicit BufferSlicer(std::span buffer) : m_remaining(buffer) {} _ZN5Botan12BufferSlicer4takeEm: 37| 318k| std::span take(const size_t count) { 38| 318k| BOTAN_STATE_CHECK(remaining() >= count); ------------------ | | 51| 318k| do { \ | | 52| 318k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 318k| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 318k] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 318k| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 318k] | | ------------------ ------------------ 39| 318k| const auto result = m_remaining.first(count); 40| 318k| m_remaining = m_remaining.subspan(count); 41| 318k| return result; 42| 318k| } _ZNK5Botan12BufferSlicer9remainingEv: 73| 498k| size_t remaining() const { return m_remaining.size(); } _ZN5Botan12BufferSlicer9take_byteEv: 57| 224k| uint8_t take_byte() { return take(1)[0]; } _ZNK5Botan12BufferSlicer5emptyEv: 75| 622k| bool empty() const { return m_remaining.empty(); } _ZN5Botan13BufferStufferC2ENSt3__14spanIhLm18446744073709551615EEE: 26| 3.07k| constexpr explicit BufferStuffer(std::span buffer) : m_buffer(buffer) {} _ZN5Botan13BufferStuffer4nextEm: 32| 13.2k| constexpr std::span next(size_t bytes) { 33| 13.2k| BOTAN_STATE_CHECK(m_buffer.size() >= bytes); ------------------ | | 51| 13.2k| do { \ | | 52| 13.2k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 13.2k| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 13.2k] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 13.2k| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 13.2k] | | ------------------ ------------------ 34| | 35| 13.2k| const auto result = m_buffer.first(bytes); 36| 13.2k| m_buffer = m_buffer.subspan(bytes); 37| 13.2k| return result; 38| 13.2k| } _ZN5Botan13BufferStuffer6appendENSt3__14spanIKhLm18446744073709551615EEE: 59| 4.18k| constexpr void append(std::span buffer) { 60| 4.18k| const size_t len = buffer.size(); 61| 4.18k| const auto sink = next(len); 62| 129k| for(size_t i = 0; i != len; ++i) { ------------------ | Branch (62:28): [True: 125k, False: 4.18k] ------------------ 63| 125k| sink[i] = buffer[i]; 64| 125k| } 65| 4.18k| } _ZN5Botan13BufferStuffer6appendEhm: 67| 9.07k| constexpr void append(uint8_t val, size_t repeat = 1) { 68| 65.7k| for(auto& b : next(repeat)) { ------------------ | Branch (68:22): [True: 65.7k, False: 9.07k] ------------------ 69| 65.7k| b = val; 70| 65.7k| } 71| 9.07k| } _ZNK5Botan13BufferStuffer4fullEv: 73| 5.91k| constexpr bool full() const { return m_buffer.empty(); } _ZNK5Botan13BufferStuffer18remaining_capacityEv: 75| 3.84k| constexpr size_t remaining_capacity() const { return m_buffer.size(); } _ZN5Botan13BufferStuffer4nextILm32EEENSt3__14spanIhXT_EEEv: 41| 382| constexpr std::span next() { 42| 382| BOTAN_STATE_CHECK(m_buffer.size() >= bytes); ------------------ | | 51| 382| do { \ | | 52| 382| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 382| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 382] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 382| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 382] | | ------------------ ------------------ 43| | 44| 382| const auto result = m_buffer.first(); 45| 382| m_buffer = m_buffer.subspan(bytes); 46| 382| return result; 47| 382| } _ZN5Botan13BufferStuffer4nextILm48EEENSt3__14spanIhXT_EEEv: 41| 492| constexpr std::span next() { 42| 492| BOTAN_STATE_CHECK(m_buffer.size() >= bytes); ------------------ | | 51| 492| do { \ | | 52| 492| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 492| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 492] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 492| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 492] | | ------------------ ------------------ 43| | 44| 492| const auto result = m_buffer.first(); 45| 492| m_buffer = m_buffer.subspan(bytes); 46| 492| return result; 47| 492| } _ZN5Botan13BufferStuffer4nextILm64EEENSt3__14spanIhXT_EEEv: 41| 178| constexpr std::span next() { 42| 178| BOTAN_STATE_CHECK(m_buffer.size() >= bytes); ------------------ | | 51| 178| do { \ | | 52| 178| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 178| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 178] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 178| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 178] | | ------------------ ------------------ 43| | 44| 178| const auto result = m_buffer.first(); 45| 178| m_buffer = m_buffer.subspan(bytes); 46| 178| return result; 47| 178| } _ZN5Botan13BufferStuffer4nextILm28EEENSt3__14spanIhXT_EEEv: 41| 8| constexpr std::span next() { 42| 8| BOTAN_STATE_CHECK(m_buffer.size() >= bytes); ------------------ | | 51| 8| do { \ | | 52| 8| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 8| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 8] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 8| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 8] | | ------------------ ------------------ 43| | 44| 8| const auto result = m_buffer.first(); 45| 8| m_buffer = m_buffer.subspan(bytes); 46| 8| return result; 47| 8| } _ZN5Botan13BufferStuffer4nextILm66EEENSt3__14spanIhXT_EEEv: 41| 140| constexpr std::span next() { 42| 140| BOTAN_STATE_CHECK(m_buffer.size() >= bytes); ------------------ | | 51| 140| do { \ | | 52| 140| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 140| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 140] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 140| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 140] | | ------------------ ------------------ 43| | 44| 140| const auto result = m_buffer.first(); 45| 140| m_buffer = m_buffer.subspan(bytes); 46| 140| return result; 47| 140| } _ZNK5Botan12Camellia_1284nameEv: 26| 32| std::string name() const override { return "Camellia-128"; } _ZNK5Botan12Camellia_2564nameEv: 106| 35| std::string name() const override { return "Camellia-256"; } _ZN5Botan14CBC_EncryptionC2ENSt3__110unique_ptrINS_11BlockCipherENS1_14default_deleteIS3_EEEENS2_INS_28BlockCipherModePaddingMethodENS4_IS7_EEEE: 79| 168| CBC_Mode(std::move(cipher), std::move(padding)) {} _ZN5Botan14CBC_DecryptionC2ENSt3__110unique_ptrINS_11BlockCipherENS1_14default_deleteIS3_EEEENS2_INS_28BlockCipherModePaddingMethodENS4_IS7_EEEE: 120| 105| CBC_Mode(std::move(cipher), std::move(padding)), m_tempbuf(ideal_granularity()) {} _ZNK5Botan8CBC_Mode6cipherEv: 45| 1.84k| const BlockCipher& cipher() const { return *m_cipher; } _ZNK5Botan8CBC_Mode10block_sizeEv: 52| 786| size_t block_size() const { return m_block_size; } _ZN5Botan8CBC_Mode5stateEv: 54| 708| secure_vector& state() { return m_state; } _ZN5Botan8CBC_Mode9state_ptrEv: 56| 853| uint8_t* state_ptr() { return m_state.data(); } _ZN5Botan14CCM_EncryptionC2ENSt3__110unique_ptrINS_11BlockCipherENS1_14default_deleteIS3_EEEEmm: 94| 58| CCM_Mode(std::move(cipher), tag_size, L) {} _ZN5Botan14CCM_DecryptionC2ENSt3__110unique_ptrINS_11BlockCipherENS1_14default_deleteIS3_EEEEmm: 117| 52| CCM_Mode(std::move(cipher), tag_size, L) {} _ZNK5Botan8CCM_Mode8tag_sizeEv: 46| 760| size_t tag_size() const final { return m_tag_size; } _ZNK5Botan8CCM_Mode1LEv: 53| 942| size_t L() const { return m_L; } _ZNK5Botan8CCM_Mode6cipherEv: 55| 157| const BlockCipher& cipher() const { return *m_cipher; } _ZNK5Botan8CCM_Mode6ad_bufEv: 61| 157| const secure_vector& ad_buf() const { return m_ad_buf; } _ZN5Botan8CCM_Mode7msg_bufEv: 63| 314| secure_vector& msg_buf() { return m_msg_buf; } _ZNK5Botan14CCM_Decryption18minimum_final_sizeEv: 121| 49| size_t minimum_final_size() const override { return tag_size(); } _ZNK5Botan21ChaCha20Poly1305_Mode8key_specEv: 38| 82| Key_Length_Specification key_spec() const override { return Key_Length_Specification(32); } _ZNK5Botan21ChaCha20Poly1305_Mode8tag_sizeEv: 42| 460| size_t tag_size() const override { return 16; } _ZNK5Botan21ChaCha20Poly1305_Mode12cfrg_versionEv: 60| 350| bool cfrg_version() const { return m_nonce_len == 12 || m_nonce_len == 24; } ------------------ | Branch (60:42): [True: 350, False: 0] | Branch (60:63): [True: 0, False: 0] ------------------ _ZNK5Botan27ChaCha20Poly1305_Decryption18minimum_final_sizeEv: 91| 37| size_t minimum_final_size() const override { return tag_size(); } _ZNK5Botan22CharacterValidityTableclEc: 125| 4.75k| constexpr bool operator()(char c) const { 126| 4.75k| const uint8_t uc = static_cast(c); 127| 4.75k| return ((m_tbl[uc / 32] >> (uc % 32)) & 1) != 0; 128| 4.75k| } _ZN5Botan6concatINSt3__16vectorIhNS_16secure_allocatorIhEEEETpTkNS_6ranges14spanable_rangeEJRNS1_4spanIKhLm18446744073709551615EEESA_EEEDaDpOT0_Q10all_same_vIDpNS1_11conditionalIXsr21__is_primary_templateINS1_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS1_6ranges5__cpo5beginEEclsr3stdE7declvalIRSB_EEEEEEEEE5valueENS1_26indirectly_readable_traitsISK_EESL_E4type10value_typeEE: 97| 2.10k|{ 98| | if constexpr(std::same_as) { 99| | // Try to auto-detect a reasonable output type given the input ranges 100| | static_assert(sizeof...(Rs) > 0, "Cannot auto-detect the output type if not a single input range is provided."); 101| | using candidate_result_t = std::remove_cvref_t>>; 102| | using result_range_value_t = std::remove_cvref_t>; 103| | 104| | if constexpr((ranges::statically_spanable_range && ...)) { 105| | // If all input ranges have a static extent, we can calculate the total size at compile time 106| | // and therefore can use a statically sized output container. This is constexpr. 107| | constexpr size_t total_size = (decltype(std::span{ranges})::extent + ... + 0); 108| | using out_array_t = std::array; 109| | return detail::concatenate(std::forward(ranges)...); 110| | } else { 111| | // If at least one input range has a dynamic extent, we must use a dynamically allocated output container. 112| | // We assume that the user wants to use the first input range's container type as output type. 113| | static_assert( 114| | concepts::reservable_container, 115| | "First input range has static extent, but a dynamically allocated output range is required. Please explicitly specify a dynamically allocatable output type."); 116| | return detail::concatenate(std::forward(ranges)...); 117| | } 118| 2.10k| } else { 119| | // The caller has explicitly specified the output type 120| 2.10k| return detail::concatenate(std::forward(ranges)...); 121| 2.10k| } 122| 2.10k|} _ZN5Botan6detail11concatenateITkNS_6ranges14spanable_rangeENSt3__16vectorIhNS_16secure_allocatorIhEEEETpTkNS2_14spanable_rangeEJRNS3_4spanIKhLm18446744073709551615EEESB_EEET_DpOT0_Qoosr8conceptsE20reservable_containerISC_Esr6rangesE25statically_spanable_rangeISC_E: 36| 2.10k|{ 37| 2.10k| OutR result{}; 38| | 39| | // Prepare and validate the output range and construct a lambda that does the 40| | // actual filling of the result buffer. 41| | // (if no input ranges are given, GCC claims that fill_fn is unused) 42| | // NOLINTNEXTLINE(*-const-correctness) the fixed-size branch returns a mutable lambda 43| 2.10k| [[maybe_unused]] auto fill_fn = [&] { 44| 2.10k| if constexpr(concepts::reservable_container) { 45| | // dynamically allocate the correct result byte length 46| 2.10k| const size_t total_size = (ranges.size() + ... + 0); 47| 2.10k| result.reserve(total_size); 48| | 49| | // append each input as a whole range, so contiguous byte 50| | // buffers are copied with memcpy rather than element by element 51| 2.10k| return [&result](auto&& range) { 52| 2.10k| auto& out = unwrap_strong_type(result); 53| 2.10k| out.insert(out.end(), std::ranges::begin(range), std::ranges::end(range)); 54| 2.10k| }; 55| 2.10k| } else { 56| 2.10k| if constexpr((ranges::statically_spanable_range && ... && true)) { 57| | // all input ranges have a static extent, so check the total size at compile time 58| | // (work around an issue in MSVC that warns `total_size` is unused) 59| 2.10k| [[maybe_unused]] constexpr size_t total_size = (decltype(std::span{ranges})::extent + ... + 0); 60| 2.10k| static_assert(result.size() == total_size, "size of result buffer does not match the sum of input buffers"); 61| 2.10k| } else { 62| | // at least one input range has a dynamic extent, so check the total size at runtime 63| 2.10k| const size_t total_size = (ranges.size() + ... + 0); 64| 2.10k| BOTAN_ARG_CHECK(result.size() == total_size, 65| 2.10k| "result buffer has static extent that does not match the sum of input buffers"); 66| 2.10k| } 67| | 68| | // fill the result buffer and hold the current output-iterator position 69| 2.10k| return [itr = std::ranges::begin(result)](auto&& range) mutable { 70| 2.10k| std::copy(std::ranges::begin(range), std::ranges::end(range), itr); 71| 2.10k| std::advance(itr, std::ranges::size(range)); 72| 2.10k| }; 73| 2.10k| } 74| 2.10k| }(); 75| | 76| | // perform the actual concatenation 77| 2.10k| (fill_fn(std::forward(ranges)), ...); 78| | 79| 2.10k| return result; 80| 2.10k|} _ZZN5Botan6detail11concatenateITkNS_6ranges14spanable_rangeENSt3__16vectorIhNS_16secure_allocatorIhEEEETpTkNS2_14spanable_rangeEJRNS3_4spanIKhLm18446744073709551615EEESB_EEET_DpOT0_Qoosr8conceptsE20reservable_containerISC_Esr6rangesE25statically_spanable_rangeISC_EENKUlvE_clEv: 43| 2.10k| [[maybe_unused]] auto fill_fn = [&] { 44| 2.10k| if constexpr(concepts::reservable_container) { 45| | // dynamically allocate the correct result byte length 46| 2.10k| const size_t total_size = (ranges.size() + ... + 0); 47| 2.10k| result.reserve(total_size); 48| | 49| | // append each input as a whole range, so contiguous byte 50| | // buffers are copied with memcpy rather than element by element 51| 2.10k| return [&result](auto&& range) { 52| 2.10k| auto& out = unwrap_strong_type(result); 53| 2.10k| out.insert(out.end(), std::ranges::begin(range), std::ranges::end(range)); 54| 2.10k| }; 55| | } else { 56| | if constexpr((ranges::statically_spanable_range && ... && true)) { 57| | // all input ranges have a static extent, so check the total size at compile time 58| | // (work around an issue in MSVC that warns `total_size` is unused) 59| | [[maybe_unused]] constexpr size_t total_size = (decltype(std::span{ranges})::extent + ... + 0); 60| | static_assert(result.size() == total_size, "size of result buffer does not match the sum of input buffers"); 61| | } else { 62| | // at least one input range has a dynamic extent, so check the total size at runtime 63| | const size_t total_size = (ranges.size() + ... + 0); 64| | BOTAN_ARG_CHECK(result.size() == total_size, 65| | "result buffer has static extent that does not match the sum of input buffers"); 66| | } 67| | 68| | // fill the result buffer and hold the current output-iterator position 69| | return [itr = std::ranges::begin(result)](auto&& range) mutable { 70| | std::copy(std::ranges::begin(range), std::ranges::end(range), itr); 71| | std::advance(itr, std::ranges::size(range)); 72| | }; 73| | } 74| 2.10k| }(); _ZZZN5Botan6detail11concatenateITkNS_6ranges14spanable_rangeENSt3__16vectorIhNS_16secure_allocatorIhEEEETpTkNS2_14spanable_rangeEJRNS3_4spanIKhLm18446744073709551615EEESB_EEET_DpOT0_Qoosr8conceptsE20reservable_containerISC_Esr6rangesE25statically_spanable_rangeISC_EENKUlvE_clEvENKUlOSC_E_clISB_EEDaSH_: 51| 4.21k| return [&result](auto&& range) { 52| 4.21k| auto& out = unwrap_strong_type(result); 53| 4.21k| out.insert(out.end(), std::ranges::begin(range), std::ranges::end(range)); 54| 4.21k| }; _ZN5Botan5CPUID3hasENS_10CPUFeatureE: 93| 125k| static bool has(CPUID::Feature feat) { return state().has_bit(feat.as_u32()); } _ZN5Botan5CPUID3hasENS_10CPUFeatureES1_: 98| 11.4M| static bool has(CPUID::Feature feat1, CPUID::Feature feat2) { 99| 11.4M| return state().has_bit(feat1.as_u32() | feat2.as_u32()); 100| 11.4M| } _ZN5Botan5CPUID6is_setEjNS_10CPUFeatureE: 126| 5| static inline bool is_set(uint32_t allowed, CPUID::Feature bit) { 127| 5| const uint32_t feat_bit = bit.as_u32(); 128| 5| return ((allowed & feat_bit) == feat_bit); 129| 5| } _ZNK5Botan5CPUID10CPUID_Data7has_bitEj: 143| 11.5M| bool has_bit(uint32_t bit) const { return (m_processor_features & bit) == bit; } _ZN5Botan5CPUID5stateEv: 155| 11.5M| static CPUID_Data& state() { 156| 11.5M| static CPUID::CPUID_Data g_cpuid; 157| 11.5M| return g_cpuid; 158| 11.5M| } cpuid_x86.cpp:_ZN5Botan5CPUID6if_setIZNS0_10CPUID_Data19detect_cpu_featuresEjE16x86_CPUID_1_bitsEEjmT_NS_10CPUFeatureEj: 116| 7| static inline uint32_t if_set(uint64_t cpuid, T flag, CPUID::Feature bit, uint32_t allowed) { 117| 7| const uint64_t flag64 = static_cast(flag); 118| 7| if((cpuid & flag64) == flag64) { ------------------ | Branch (118:13): [True: 7, False: 0] ------------------ 119| 7| return (bit.as_u32() & allowed); 120| 7| } else { 121| 0| return 0; 122| 0| } 123| 7| } cpuid_x86.cpp:_ZN5Botan5CPUID6if_setIZNS0_10CPUID_Data19detect_cpu_featuresEjE16x86_CPUID_7_bitsEEjmT_NS_10CPUFeatureEj: 116| 8| static inline uint32_t if_set(uint64_t cpuid, T flag, CPUID::Feature bit, uint32_t allowed) { 117| 8| const uint64_t flag64 = static_cast(flag); 118| 8| if((cpuid & flag64) == flag64) { ------------------ | Branch (118:13): [True: 5, False: 3] ------------------ 119| 5| return (bit.as_u32() & allowed); 120| 5| } else { 121| 3| return 0; 122| 3| } 123| 8| } cpuid_x86.cpp:_ZN5Botan5CPUID6if_setIZNS0_10CPUID_Data19detect_cpu_featuresEjE18x86_CPUID_7_1_bitsEEjmT_NS_10CPUFeatureEj: 116| 3| static inline uint32_t if_set(uint64_t cpuid, T flag, CPUID::Feature bit, uint32_t allowed) { 117| 3| const uint64_t flag64 = static_cast(flag); 118| 3| if((cpuid & flag64) == flag64) { ------------------ | Branch (118:13): [True: 0, False: 3] ------------------ 119| 0| return (bit.as_u32() & allowed); 120| 3| } else { 121| 3| return 0; 122| 3| } 123| 3| } _ZN5Botan10CPUFeatureC2ENS0_3BitE: 54| 22.9M| CPUFeature(Bit b) : m_bit(b) {} // NOLINT(*-explicit-conversions,*-explicit-constructor) _ZNK5Botan10CPUFeature6as_u32Ev: 56| 22.9M| uint32_t as_u32() const { return static_cast(m_bit); } _ZN5Botan2CT8is_equalIhEENS0_4MaskIT_EEPKS3_S6_m: 798| 17.7k|constexpr inline CT::Mask is_equal(const T x[], const T y[], size_t len) { 799| 17.7k| if(std::is_constant_evaluated()) { ------------------ | Branch (799:7): [Folded, False: 17.7k] ------------------ 800| 0| T difference = 0; 801| | 802| 0| for(size_t i = 0; i != len; ++i) { ------------------ | Branch (802:25): [True: 0, False: 0] ------------------ 803| 0| difference = difference | (x[i] ^ y[i]); 804| 0| } 805| | 806| 0| return CT::Mask::is_zero(difference); 807| 17.7k| } else { 808| 17.7k| volatile T difference = 0; 809| | 810| 305k| for(size_t i = 0; i != len; ++i) { ------------------ | Branch (810:25): [True: 288k, False: 17.7k] ------------------ 811| 288k| difference = difference | (x[i] ^ y[i]); 812| 288k| } 813| | 814| 17.7k| return CT::Mask::is_zero(difference); 815| 17.7k| } 816| 17.7k|} _ZN5Botan2CT4MaskIhE7is_zeroEh: 437| 124k| static constexpr Mask is_zero(T x) { return Mask(ct_is_zero(value_barrier(x))); } _ZN5Botan2CT4MaskIhEC2Eh: 637| 129k| constexpr explicit Mask(T m) : m_mask(m) {} _ZNK5Botan2CT4MaskIhE7as_boolEv: 614| 17.3k| constexpr bool as_bool() const { return unpoisoned_value() != 0; } _ZNK5Botan2CT4MaskIhE16unpoisoned_valueEv: 598| 23.1k| constexpr T unpoisoned_value() const { 599| 23.1k| T r = value(); 600| 23.1k| CT::unpoison(r); 601| 23.1k| return r; 602| 23.1k| } _ZNK5Botan2CT4MaskIhE5valueEv: 630| 230k| constexpr T value() const { return value_barrier(m_mask); } _ZN5Botan2CT8unpoisonITkNSt3__18integralEhEEvRKT_: 112| 23.4k|constexpr void unpoison(const T& p) { 113| 23.4k| unpoison(&p, 1); 114| 23.4k|} _ZN5Botan2CT8unpoisonIhEEvPKT_m: 67| 24.7k|constexpr inline void unpoison(const T* p, size_t n) { 68| |#if defined(BOTAN_HAS_VALGRIND) 69| | if(!std::is_constant_evaluated()) { 70| | VALGRIND_MAKE_MEM_DEFINED(p, n * sizeof(T)); 71| | } 72| |#endif 73| | 74| 24.7k| BOTAN_UNUSED(p, n); ------------------ | | 151| 24.7k|#define BOTAN_UNUSED Botan::ignore_params ------------------ 75| 24.7k|} _ZN5Botan2CT6Choice9from_maskEm: 303| 1.68M| constexpr static Choice from_mask(underlying_type v) { return Choice(v); } _ZN5Botan2CT6Choice3yesEv: 305| 272| constexpr static Choice yes() { return !no(); } _ZN5Botan2CT6Choice2noEv: 307| 281| constexpr static Choice no() { return Choice(0); } _ZNK5Botan2CT6ChoicentEv: 309| 65.6k| constexpr Choice operator!() const { return Choice(~value()); } _ZNK5Botan2CT6ChoiceaaERKS1_: 311| 205k| constexpr Choice operator&&(const Choice& other) const { return Choice(value() & other.value()); } _ZNK5Botan2CT6ChoiceooERKS1_: 313| 18.7k| constexpr Choice operator||(const Choice& other) const { return Choice(value() | other.value()); } _ZNK5Botan2CT6Choice7as_boolEv: 329| 62.1k| constexpr bool as_bool() const { return m_value != 0; } _ZNK5Botan2CT6Choice5valueEv: 332| 2.04M| constexpr underlying_type value() const { return value_barrier(m_value); } _ZN5Botan2CT6ChoiceC2Em: 341| 1.99M| constexpr explicit Choice(underlying_type v) : m_value(CT::value_barrier(v)) {} _ZN5Botan2CT4MaskImE7is_zeroEm: 437| 58.5M| static constexpr Mask is_zero(T x) { return Mask(ct_is_zero(value_barrier(x))); } _ZNK5Botan2CT4MaskImE5valueEv: 630| 595M| constexpr T value() const { return value_barrier(m_mask); } _ZNK5Botan2CT4MaskImEcoEv: 533| 53.0M| constexpr Mask operator~() const { return Mask(~value()); } _ZN5Botan2CT4MaskImE6expandEm: 392| 34.5M| static constexpr Mask expand(T v) { return ~Mask::is_zero(value_barrier(v)); } _ZNK5Botan2CT4MaskImE6selectEmm: 548| 221M| constexpr T select(T x, T y) const { return choose(value(), x, y); } _ZNK5Botan2CT4MaskImE16conditional_swapImEEvRT_S5_QlestTL0__stS4_: 587| 6.28k| { 588| 6.28k| const auto cnd = Mask(*this); 589| 6.28k| U t0 = cnd.select(y, x); 590| 6.28k| U t1 = cnd.select(x, y); 591| 6.28k| x = t0; 592| 6.28k| y = t1; 593| 6.28k| } _ZN5Botan2CT6poisonIhEEvPKT_m: 56| 1.32k|constexpr inline void poison(const T* p, size_t n) { 57| |#if defined(BOTAN_HAS_VALGRIND) 58| | if(!std::is_constant_evaluated()) { 59| | VALGRIND_MAKE_MEM_UNDEFINED(p, n * sizeof(T)); 60| | } 61| |#endif 62| | 63| 1.32k| BOTAN_UNUSED(p, n); ------------------ | | 151| 1.32k|#define BOTAN_UNUSED Botan::ignore_params ------------------ 64| 1.32k|} _ZN5Botan2CT8unpoisonItEEvPKT_m: 67| 234|constexpr inline void unpoison(const T* p, size_t n) { 68| |#if defined(BOTAN_HAS_VALGRIND) 69| | if(!std::is_constant_evaluated()) { 70| | VALGRIND_MAKE_MEM_DEFINED(p, n * sizeof(T)); 71| | } 72| |#endif 73| | 74| 234| BOTAN_UNUSED(p, n); ------------------ | | 151| 234|#define BOTAN_UNUSED Botan::ignore_params ------------------ 75| 234|} _ZN5Botan2CT4MaskIhE8is_equalEhh: 442| 5.12k| static constexpr Mask is_equal(T x, T y) { 443| 5.12k| const T diff = value_barrier(x) ^ value_barrier(y); 444| 5.12k| return Mask::is_zero(diff); 445| 5.12k| } _ZNK5Botan2CT4MaskIhE13if_set_returnEh: 538| 97.4k| constexpr T if_set_return(T x) const { return value() & x; } _ZN5Botan2CT4MaskImE14expand_top_bitEm: 415| 39.2M| static constexpr Mask expand_top_bit(T v) { return Mask(ct_expand_top_bit(v)); } _ZN5Botan2CT4MaskImEC2Em: 637| 153M| constexpr explicit Mask(T m) : m_mask(m) {} _ZN5Botan2CT4MaskImE5is_ltEmm: 450| 39.0M| static constexpr Mask is_lt(T x, T y) { 451| 39.0M| T u = x ^ ((x ^ y) | ((x - y) ^ x)); 452| 39.0M| return Mask::expand_top_bit(u); 453| 39.0M| } _ZNK5Botan2CT4MaskImE13if_set_returnEm: 538| 285M| constexpr T if_set_return(T x) const { return value() & x; } _ZN5Botan2CT4MaskImE8is_equalEmm: 442| 22.6M| static constexpr Mask is_equal(T x, T y) { 443| 22.6M| const T diff = value_barrier(x) ^ value_barrier(y); 444| 22.6M| return Mask::is_zero(diff); 445| 22.6M| } _ZN5Botan2CT8unpoisonITkNSt3__18integralEmEEvRKT_: 112| 2.58M|constexpr void unpoison(const T& p) { 113| 2.58M| unpoison(&p, 1); 114| 2.58M|} _ZN5Botan2CT8unpoisonImEEvPKT_m: 67| 2.85M|constexpr inline void unpoison(const T* p, size_t n) { 68| |#if defined(BOTAN_HAS_VALGRIND) 69| | if(!std::is_constant_evaluated()) { 70| | VALGRIND_MAKE_MEM_DEFINED(p, n * sizeof(T)); 71| | } 72| |#endif 73| | 74| 2.85M| BOTAN_UNUSED(p, n); ------------------ | | 151| 2.85M|#define BOTAN_UNUSED Botan::ignore_params ------------------ 75| 2.85M|} _ZN5Botan2CT4MaskImE5is_gtEmm: 458| 18.9M| static constexpr Mask is_gt(T x, T y) { return Mask::is_lt(y, x); } _ZN5Botan2CT4MaskImE6is_gteEmm: 468| 18.4M| static constexpr Mask is_gte(T x, T y) { return ~Mask::is_lt(x, y); } _ZNK5Botan2CT4MaskImE16unpoisoned_valueEv: 598| 2.31M| constexpr T unpoisoned_value() const { 599| 2.31M| T r = value(); 600| 2.31M| CT::unpoison(r); 601| 2.31M| return r; 602| 2.31M| } _ZNK5Botan2CT4MaskImE9as_choiceEv: 619| 1.68M| constexpr CT::Choice as_choice() const { 620| 1.68M| if constexpr(sizeof(T) >= sizeof(Choice::underlying_type)) { 621| 1.68M| return CT::Choice::from_mask(static_cast(unpoisoned_value())); 622| | } else { 623| | return CT::Choice::from_int(unpoisoned_value()); 624| | } 625| 1.68M| } _ZNK5Botan2CT4MaskImE7as_boolEv: 614| 620k| constexpr bool as_bool() const { return unpoisoned_value() != 0; } _ZNK5Botan2CT4MaskImE11select_maskES2_S2_: 559| 1.15M| Mask select_mask(Mask x, Mask y) const { return Mask(select(x.value(), y.value())); } _ZN5Botan2CT4MaskImEoRES2_: 510| 103k| Mask& operator|=(Mask o) { 511| 103k| m_mask |= o.value(); 512| 103k| return (*this); 513| 103k| } _ZN5Botan2CT4MaskImEaNES2_: 494| 1.55M| Mask& operator&=(Mask o) { 495| 1.55M| m_mask &= o.value(); 496| 1.55M| return (*this); 497| 1.55M| } _ZNK5Botan2CT4MaskImE8select_nEPmPKmS5_m: 565| 16.4M| constexpr void select_n(T output[], const T x[], const T y[], size_t len) const { 566| 16.4M| const T mask = value(); 567| 720M| for(size_t i = 0; i != len; ++i) { ------------------ | Branch (567:28): [True: 704M, False: 16.4M] ------------------ 568| 704M| output[i] = choose(mask, x[i], y[i]); 569| 704M| } 570| 16.4M| } _ZN5Botan2CT4MaskIhE11expand_boolEb: 397| 4.01k| static constexpr Mask expand_bool(bool v) { return Mask::expand(static_cast(v)); } _ZN5Botan2CT4MaskIhE6expandEh: 392| 4.65k| static constexpr Mask expand(T v) { return ~Mask::is_zero(value_barrier(v)); } _ZNK5Botan2CT4MaskIhEcoEv: 533| 4.65k| constexpr Mask operator~() const { return Mask(~value()); } _ZNK5Botan2CT4MaskIhE6selectEhh: 548| 7.58k| constexpr T select(T x, T y) const { return choose(value(), x, y); } _ZN5Botan2CT6poisonImEEvPKT_m: 56| 32.3k|constexpr inline void poison(const T* p, size_t n) { 57| |#if defined(BOTAN_HAS_VALGRIND) 58| | if(!std::is_constant_evaluated()) { 59| | VALGRIND_MAKE_MEM_UNDEFINED(p, n * sizeof(T)); 60| | } 61| |#endif 62| | 63| 32.3k| BOTAN_UNUSED(p, n); ------------------ | | 151| 32.3k|#define BOTAN_UNUSED Botan::ignore_params ------------------ 64| 32.3k|} _ZN5Botan2CTorENS0_4MaskImEES2_: 528| 699k| friend constexpr Mask operator|(Mask x, Mask y) { return Mask(x.value() | y.value()); } _ZN5Botan2CTanENS0_4MaskImEES2_: 518| 456k| friend constexpr Mask operator&(Mask x, Mask y) { return Mask(x.value() & y.value()); } _ZN5Botan2CT20conditional_copy_memImEENS0_4MaskIT_EES3_PS3_PKS3_S7_m: 738| 44.8k|constexpr inline Mask conditional_copy_mem(T cnd, T* dest, const T* if_set, const T* if_unset, size_t elems) { 739| 44.8k| const auto mask = CT::Mask::expand(cnd); 740| 44.8k| return CT::conditional_copy_mem(mask, dest, if_set, if_unset, elems); 741| 44.8k|} _ZN5Botan2CT20conditional_copy_memImEENS0_4MaskIT_EES4_PS3_PKS3_S7_m: 732| 44.8k|constexpr inline Mask conditional_copy_mem(Mask mask, T* dest, const T* if_set, const T* if_unset, size_t elems) { 733| 44.8k| mask.select_n(dest, if_set, if_unset, elems); 734| 44.8k| return mask; 735| 44.8k|} _ZN5Botan2CTeoENS0_4MaskImEES2_: 523| 17.3k| friend constexpr Mask operator^(Mask x, Mask y) { return Mask(x.value() ^ y.value()); } _ZN5Botan2CT8is_equalIhEENS0_4MaskIT_EENSt3__14spanIKS3_Lm18446744073709551615EEES8_: 825| 17.1k|constexpr inline CT::Mask is_equal(std::span x, std::span y) { 826| 17.1k| if(x.size() != y.size()) { ------------------ | Branch (826:7): [True: 3, False: 17.1k] ------------------ 827| 3| return CT::Mask::cleared(); 828| 3| } 829| | 830| 17.1k| return is_equal(x.data(), y.data(), x.size()); 831| 17.1k|} _ZN5Botan2CT4MaskIhE7clearedEv: 387| 3| static constexpr Mask cleared() { return Mask(0); } _ZN5Botan2CT6poisonITkNS_6ranges14spanable_rangeENSt3__14spanIKhLm32EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEnt17custom_poisonableISB_EEEvRKSB_: 121| 10|constexpr void poison(const R& r) { 122| 10| const std::span s{r}; 123| 10| poison(s.data(), s.size()); 124| 10|} _ZN5Botan2CT4MaskImE7clearedEv: 387| 4.43k| static constexpr Mask cleared() { return Mask(0); } _ZN5Botan2CT8unpoisonITkNS_6ranges14spanable_rangeENSt3__14spanIKhLm32EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEnt19custom_unpoisonableISB_EEEvRKSB_: 128| 10|constexpr void unpoison(const R& r) { 129| 10| const std::span s{r}; 130| 10| unpoison(s.data(), s.size()); 131| 10|} _ZN5Botan2CT8unpoisonITkNS_6ranges14spanable_rangeENSt3__14spanIhLm32EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEnt19custom_unpoisonableISA_EEEvRKSA_: 128| 10|constexpr void unpoison(const R& r) { 129| 10| const std::span s{r}; 130| 10| unpoison(s.data(), s.size()); 131| 10|} _ZN5Botan2CT8unpoisonITkNS_6ranges14spanable_rangeENSt3__15arrayIhLm56EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEnt19custom_unpoisonableISA_EEEvRKSA_: 128| 1|constexpr void unpoison(const R& r) { 129| 1| const std::span s{r}; 130| 1| unpoison(s.data(), s.size()); 131| 1|} _ZN5Botan2CT13scoped_poisonIJNSt3__16vectorIhNS_16secure_allocatorIhEEEEEQaaaagtsZT_Li0Efraa10poisonableIT_Efraa12unpoisonableIS7_EEEDaDpRKS7_: 222| 1|[[nodiscard]] constexpr auto scoped_poison(const Ts&... xs) { 223| 1| auto scope = scoped_cleanup([&] { unpoison_all(xs...); }); 224| 1| poison_all(xs...); 225| 1| return scope; 226| 1|} _ZN5Botan2CT10poison_allITpTkNS0_10poisonableEJNSt3__16vectorIhNS_16secure_allocatorIhEEEEEQgtsZT_Li0EEEvDpRKT_: 201| 1|constexpr void poison_all(const Ts&... ts) { 202| 1| (poison(ts), ...); 203| 1|} _ZN5Botan2CT6poisonITkNS_6ranges14spanable_rangeENSt3__16vectorIhNS_16secure_allocatorIhEEEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEnt17custom_poisonableISC_EEEvRKSC_: 121| 1|constexpr void poison(const R& r) { 122| 1| const std::span s{r}; 123| 1| poison(s.data(), s.size()); 124| 1|} _ZZN5Botan2CT13scoped_poisonIJNSt3__16vectorIhNS_16secure_allocatorIhEEEEEQaaaagtsZT_Li0Efraa10poisonableIT_Efraa12unpoisonableIS7_EEEDaDpRKS7_ENKUlvE_clEv: 223| 1| auto scope = scoped_cleanup([&] { unpoison_all(xs...); }); _ZN5Botan2CT12unpoison_allITpTkNS0_12unpoisonableEJNSt3__16vectorIhNS_16secure_allocatorIhEEEEEQgtsZT_Li0EEEvDpRKT_: 207| 1|constexpr void unpoison_all(const Ts&... ts) { 208| 1| (unpoison(ts), ...); 209| 1|} _ZN5Botan2CT8unpoisonITkNS_6ranges14spanable_rangeENSt3__16vectorIhNS_16secure_allocatorIhEEEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEnt19custom_unpoisonableISC_EEEvRKSC_: 128| 1|constexpr void unpoison(const R& r) { 129| 1| const std::span s{r}; 130| 1| unpoison(s.data(), s.size()); 131| 1|} _ZN5Botan2CT4MaskImEeOES2_: 502| 448| Mask& operator^=(Mask o) { 503| 448| m_mask ^= o.value(); 504| 448| return (*this); 505| 448| } _ZN5Botan2CT6poisonITkNS_6ranges14spanable_rangeENSt3__16vectorImNS_16secure_allocatorImEEEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEnt17custom_poisonableISC_EEEvRKSC_: 121| 21.8k|constexpr void poison(const R& r) { 122| 21.8k| const std::span s{r}; 123| 21.8k| poison(s.data(), s.size()); 124| 21.8k|} _ZN5Botan2CT8unpoisonITkNS_6ranges14spanable_rangeENSt3__16vectorImNS_16secure_allocatorImEEEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEnt19custom_unpoisonableISC_EEEvRKSC_: 128| 58.0k|constexpr void unpoison(const R& r) { 129| 58.0k| const std::span s{r}; 130| 58.0k| unpoison(s.data(), s.size()); 131| 58.0k|} _ZN5Botan2CT9all_zerosImEENS0_4MaskIT_EEPKS3_m: 785| 320k|constexpr inline CT::Mask all_zeros(const T elem[], size_t len) { 786| 320k| T sum = 0; 787| 2.38M| for(size_t i = 0; i != len; ++i) { ------------------ | Branch (787:22): [True: 2.06M, False: 320k] ------------------ 788| 2.06M| sum |= elem[i]; 789| 2.06M| } 790| 320k| return CT::Mask::is_zero(sum); 791| 320k|} _ZN5Botan2CT8unpoisonITkNS_6ranges14spanable_rangeENSt3__14spanIhLm18446744073709551615EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEnt19custom_unpoisonableISA_EEEvRKSA_: 128| 272|constexpr void unpoison(const R& r) { 129| 272| const std::span s{r}; 130| 272| unpoison(s.data(), s.size()); 131| 272|} _ZN5Botan2CT4MaskItEC2Et: 637| 82.0k| constexpr explicit Mask(T m) : m_mask(m) {} _ZN5Botan2CT4MaskItE14expand_top_bitEt: 415| 16.4k| static constexpr Mask expand_top_bit(T v) { return Mask(ct_expand_top_bit(v)); } _ZNK5Botan2CT4MaskItEcoEv: 533| 32.7k| constexpr Mask operator~() const { return Mask(~value()); } _ZNK5Botan2CT4MaskItE5valueEv: 630| 82.1k| constexpr T value() const { return value_barrier(m_mask); } _ZNK5Botan2CT4MaskItE7as_boolEv: 614| 78| constexpr bool as_bool() const { return unpoisoned_value() != 0; } _ZNK5Botan2CT4MaskItE16unpoisoned_valueEv: 598| 78| constexpr T unpoisoned_value() const { 599| 78| T r = value(); 600| 78| CT::unpoison(r); 601| 78| return r; 602| 78| } _ZN5Botan2CT8unpoisonITkNSt3__18integralEtEEvRKT_: 112| 234|constexpr void unpoison(const T& p) { 113| 234| unpoison(&p, 1); 114| 234|} _ZNK5Botan2CT6OptionImE8value_orEmQsr3stdE17unsigned_integralIT_E: 701| 272| { 702| 272| const auto mask = CT::Mask::from_choice(m_has_value); 703| 272| return mask.select(m_value, other); 704| 272| } _ZN5Botan2CT4MaskImE11from_choiceENS0_6ChoiceE: 402| 544| static constexpr Mask from_choice(Choice c) { 403| 544| if constexpr(sizeof(T) <= sizeof(Choice::underlying_type)) { 404| | // Take advantage of the fact that Choice's mask is always 405| | // either |0| or |1| 406| 544| return Mask(static_cast(c.value())); 407| | } else { 408| | return ~Mask::is_zero(c.value()); 409| | } 410| 544| } _ZN5Botan2CT4MaskIhEC2ImEENS1_IT_EE: 375| 3.56k| constexpr explicit Mask(Mask o) : m_mask(static_cast(o.value())) { 376| 3.56k| static_assert(sizeof(U) > sizeof(T), "sizes ok"); 377| 3.56k| } _ZN5Botan2CT4MaskIhEaNES2_: 494| 97.4k| Mask& operator&=(Mask o) { 495| 97.4k| m_mask &= o.value(); 496| 97.4k| return (*this); 497| 97.4k| } _ZN5Botan2CT4MaskImE6is_lteEmm: 463| 606| static constexpr Mask is_lte(T x, T y) { return ~Mask::is_gt(x, y); } _ZN5Botan2CT4MaskImE6expandIhEES2_NS1_IT_EE: 429| 334| static constexpr Mask expand(Mask m) { 430| 334| static_assert(sizeof(U) < sizeof(T), "sizes ok"); 431| 334| return ~Mask::is_zero(m.value()); 432| 334| } _ZN5Botan2CT6Choice8from_intIjQaasr3stdE17unsigned_integralIT_Entsr3stdE7same_asIbS3_EEES1_S3_: 268| 8.38k| constexpr static Choice from_int(T v) { 269| 8.38k| if constexpr(sizeof(T) <= sizeof(underlying_type)) { 270| 8.38k| return !Choice(ct_is_zero(v)); 271| | } else { 272| | // Mask of T that is either |0| or |1| 273| | const T v_is_0 = ct_is_zero(value_barrier(v)); 274| | 275| | // We want the mask to be set if v != 0 so we must check that 276| | // v_is_0 is itself zero. 277| | // 278| | // Also sizeof(T) may not equal sizeof(underlying_type) so we must 279| | // use ct_is_zero. It's ok to either truncate or 280| | // zero extend v_is_0 to 32 bits since we know it is |0| or |1| 281| | // so even just the low bit is sufficient. 282| | return Choice(ct_is_zero(static_cast(v_is_0))); 283| | } 284| 8.38k| } _ZN5Botan2CT6poisonITkNS_6ranges14spanable_rangeENSt3__14spanIKmLm18446744073709551615EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEnt17custom_poisonableISB_EEEvRKSB_: 121| 7.82k|constexpr void poison(const R& r) { 122| 7.82k| const std::span s{r}; 123| 7.82k| poison(s.data(), s.size()); 124| 7.82k|} _ZN5Botan2CT8unpoisonITkNS_6ranges14spanable_rangeENSt3__14spanIKmLm18446744073709551615EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEnt19custom_unpoisonableISB_EEEvRKSB_: 128| 7.82k|constexpr void unpoison(const R& r) { 129| 7.82k| const std::span s{r}; 130| 7.82k| unpoison(s.data(), s.size()); 131| 7.82k|} _ZN5Botan2CT4MaskImE3setEv: 382| 530| static constexpr Mask set() { return Mask(static_cast(~0)); } _ZN5Botan2CT4MaskImE15if_set_zero_outEPmm: 575| 5.49k| constexpr void if_set_zero_out(T buf[], size_t elems) { 576| 64.7k| for(size_t i = 0; i != elems; ++i) { ------------------ | Branch (576:28): [True: 59.2k, False: 5.49k] ------------------ 577| 59.2k| buf[i] = this->if_not_set_return(buf[i]); 578| 59.2k| } 579| 5.49k| } _ZNK5Botan2CT4MaskImE17if_not_set_returnEm: 543| 157k| constexpr T if_not_set_return(T x) const { return ~value() & x; } _ZN5Botan2CT22conditional_assign_memImEENS0_4MaskIT_EES3_PS3_PKS3_m: 749| 16.4M|constexpr inline Mask conditional_assign_mem(T cnd, T* dest, const T* src, size_t elems) { 750| 16.4M| const auto mask = CT::Mask::expand(cnd); 751| 16.4M| mask.select_n(dest, src, dest, elems); 752| 16.4M| return mask; 753| 16.4M|} _ZN5Botan2CT12poison_rangeITkNSt3__16ranges5rangeENS2_6vectorINS_14Montgomery_IntENS2_9allocatorIS5_EEEEQ10poisonableINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEEEvRKSC_: 181| 1.36k|constexpr void poison_range(const R& r) { 182| 21.8k| for(const auto& v : r) { ------------------ | Branch (182:22): [True: 21.8k, False: 1.36k] ------------------ 183| 21.8k| poison(v); 184| 21.8k| } 185| 1.36k|} _ZN5Botan2CT6poisonITkNS0_17custom_poisonableENS_14Montgomery_IntEEEvRKT_: 138| 21.8k|constexpr void poison(const T& x) { 139| 21.8k| x._const_time_poison(); 140| 21.8k|} _ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS_14Montgomery_IntEEEvRKT_: 143| 34.5k|constexpr void unpoison(const T& x) { 144| 34.5k| x._const_time_unpoison(); 145| 34.5k|} _ZN5Botan2CT16driveby_unpoisonITkNS0_12unpoisonableEmEEDcOT_Qsr3stdE21is_rvalue_reference_vIDtfp_EE: 245| 480|{ 246| 480| unpoison(v); 247| 480| return std::forward(v); 248| 480|} _ZN5Botan2CT8is_equalImEENS0_4MaskIT_EEPKS3_S6_m: 798| 596k|constexpr inline CT::Mask is_equal(const T x[], const T y[], size_t len) { 799| 596k| if(std::is_constant_evaluated()) { ------------------ | Branch (799:7): [Folded, False: 596k] ------------------ 800| 0| T difference = 0; 801| | 802| 0| for(size_t i = 0; i != len; ++i) { ------------------ | Branch (802:25): [True: 0, False: 0] ------------------ 803| 0| difference = difference | (x[i] ^ y[i]); 804| 0| } 805| | 806| 0| return CT::Mask::is_zero(difference); 807| 596k| } else { 808| 596k| volatile T difference = 0; 809| | 810| 26.3M| for(size_t i = 0; i != len; ++i) { ------------------ | Branch (810:25): [True: 25.7M, False: 596k] ------------------ 811| 25.7M| difference = difference | (x[i] ^ y[i]); 812| 25.7M| } 813| | 814| 596k| return CT::Mask::is_zero(difference); 815| 596k| } 816| 596k|} _ZNK5Botan2CT6Choice12into_bitmaskImQaasr3stdE17unsigned_integralIT_Entsr3stdE7same_asIbS3_EEES3_v: 291| 1.52M| constexpr T into_bitmask() const { 292| 1.52M| if constexpr(sizeof(T) <= sizeof(underlying_type)) { 293| | // The inner mask is already |0| or |1| so just truncate 294| 1.52M| return static_cast(value()); 295| | } else { 296| | return ~ct_is_zero(value()); 297| | } 298| 1.52M| } pcurves_brainpool256r1.cpp:_ZN5Botan2CT6poisonITkNS0_17custom_poisonableENS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES4_E11FieldParamsEEEEES9_EEEEvRKT_: 138| 90|constexpr void poison(const T& x) { 139| 90| x._const_time_poison(); 140| 90|} pcurves_brainpool256r1.cpp:_ZN5Botan2CT10poison_allITpTkNS0_10poisonableEJNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES3_E11FieldParamsEEEEESC_SC_EQgtsZT_Li0EEEvDpRKT_: 201| 90|constexpr void poison_all(const Ts&... ts) { 202| 90| (poison(ts), ...); 203| 90|} pcurves_brainpool256r1.cpp:_ZN5Botan2CT6poisonITkNS0_17custom_poisonableENS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES3_E11FieldParamsEEEEEEEvRKT_: 138| 270|constexpr void poison(const T& x) { 139| 270| x._const_time_poison(); 140| 270|} _ZN5Botan2CT6poisonITkNS_6ranges14spanable_rangeENSt3__15arrayImLm4EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEnt17custom_poisonableISA_EEEvRKSA_: 121| 573|constexpr void poison(const R& r) { 122| 573| const std::span s{r}; 123| 573| poison(s.data(), s.size()); 124| 573|} pcurves_brainpool256r1.cpp:_ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES4_E11FieldParamsEEEEES9_EEEEvRKT_: 143| 90|constexpr void unpoison(const T& x) { 144| 90| x._const_time_unpoison(); 145| 90|} pcurves_brainpool256r1.cpp:_ZN5Botan2CT12unpoison_allITpTkNS0_12unpoisonableEJNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES3_E11FieldParamsEEEEESC_SC_EQgtsZT_Li0EEEvDpRKT_: 207| 90|constexpr void unpoison_all(const Ts&... ts) { 208| 90| (unpoison(ts), ...); 209| 90|} pcurves_brainpool256r1.cpp:_ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES3_E11FieldParamsEEEEEEEvRKT_: 143| 270|constexpr void unpoison(const T& x) { 144| 270| x._const_time_unpoison(); 145| 270|} _ZN5Botan2CT8unpoisonITkNS_6ranges14spanable_rangeENSt3__15arrayImLm4EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEnt19custom_unpoisonableISA_EEEvRKSA_: 128| 573|constexpr void unpoison(const R& r) { 129| 573| const std::span s{r}; 130| 573| unpoison(s.data(), s.size()); 131| 573|} _ZN5Botan2CT6Choice8from_intIhQaasr3stdE17unsigned_integralIT_Entsr3stdE7same_asIbS3_EEES1_S3_: 268| 5.76k| constexpr static Choice from_int(T v) { 269| 5.76k| if constexpr(sizeof(T) <= sizeof(underlying_type)) { 270| 5.76k| return !Choice(ct_is_zero(v)); 271| | } else { 272| | // Mask of T that is either |0| or |1| 273| | const T v_is_0 = ct_is_zero(value_barrier(v)); 274| | 275| | // We want the mask to be set if v != 0 so we must check that 276| | // v_is_0 is itself zero. 277| | // 278| | // Also sizeof(T) may not equal sizeof(underlying_type) so we must 279| | // use ct_is_zero. It's ok to either truncate or 280| | // zero extend v_is_0 to 32 bits since we know it is |0| or |1| 281| | // so even just the low bit is sufficient. 282| | return Choice(ct_is_zero(static_cast(v_is_0))); 283| | } 284| 5.76k| } _ZNK5Botan2CT4MaskIhE9as_choiceEv: 619| 5.76k| constexpr CT::Choice as_choice() const { 620| | if constexpr(sizeof(T) >= sizeof(Choice::underlying_type)) { 621| | return CT::Choice::from_mask(static_cast(unpoisoned_value())); 622| 5.76k| } else { 623| 5.76k| return CT::Choice::from_int(unpoisoned_value()); 624| 5.76k| } 625| 5.76k| } pcurves_brainpool384r1.cpp:_ZN5Botan2CT6poisonITkNS0_17custom_poisonableENS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES4_E11FieldParamsEEEEES9_EEEEvRKT_: 138| 126|constexpr void poison(const T& x) { 139| 126| x._const_time_poison(); 140| 126|} pcurves_brainpool384r1.cpp:_ZN5Botan2CT10poison_allITpTkNS0_10poisonableEJNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES3_E11FieldParamsEEEEESC_SC_EQgtsZT_Li0EEEvDpRKT_: 201| 126|constexpr void poison_all(const Ts&... ts) { 202| 126| (poison(ts), ...); 203| 126|} pcurves_brainpool384r1.cpp:_ZN5Botan2CT6poisonITkNS0_17custom_poisonableENS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES3_E11FieldParamsEEEEEEEvRKT_: 138| 378|constexpr void poison(const T& x) { 139| 378| x._const_time_poison(); 140| 378|} _ZN5Botan2CT6poisonITkNS_6ranges14spanable_rangeENSt3__15arrayImLm6EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEnt17custom_poisonableISA_EEEvRKSA_: 121| 738|constexpr void poison(const R& r) { 122| 738| const std::span s{r}; 123| 738| poison(s.data(), s.size()); 124| 738|} pcurves_brainpool384r1.cpp:_ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES4_E11FieldParamsEEEEES9_EEEEvRKT_: 143| 126|constexpr void unpoison(const T& x) { 144| 126| x._const_time_unpoison(); 145| 126|} pcurves_brainpool384r1.cpp:_ZN5Botan2CT12unpoison_allITpTkNS0_12unpoisonableEJNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES3_E11FieldParamsEEEEESC_SC_EQgtsZT_Li0EEEvDpRKT_: 207| 126|constexpr void unpoison_all(const Ts&... ts) { 208| 126| (unpoison(ts), ...); 209| 126|} pcurves_brainpool384r1.cpp:_ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES3_E11FieldParamsEEEEEEEvRKT_: 143| 378|constexpr void unpoison(const T& x) { 144| 378| x._const_time_unpoison(); 145| 378|} _ZN5Botan2CT8unpoisonITkNS_6ranges14spanable_rangeENSt3__15arrayImLm6EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEnt19custom_unpoisonableISA_EEEvRKSA_: 128| 738|constexpr void unpoison(const R& r) { 129| 738| const std::span s{r}; 130| 738| unpoison(s.data(), s.size()); 131| 738|} pcurves_brainpool512r1.cpp:_ZN5Botan2CT6poisonITkNS0_17custom_poisonableENS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES4_E11FieldParamsEEEEES9_EEEEvRKT_: 138| 89|constexpr void poison(const T& x) { 139| 89| x._const_time_poison(); 140| 89|} pcurves_brainpool512r1.cpp:_ZN5Botan2CT10poison_allITpTkNS0_10poisonableEJNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES3_E11FieldParamsEEEEESC_SC_EQgtsZT_Li0EEEvDpRKT_: 201| 89|constexpr void poison_all(const Ts&... ts) { 202| 89| (poison(ts), ...); 203| 89|} pcurves_brainpool512r1.cpp:_ZN5Botan2CT6poisonITkNS0_17custom_poisonableENS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES3_E11FieldParamsEEEEEEEvRKT_: 138| 267|constexpr void poison(const T& x) { 139| 267| x._const_time_poison(); 140| 267|} _ZN5Botan2CT6poisonITkNS_6ranges14spanable_rangeENSt3__15arrayImLm8EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEnt17custom_poisonableISA_EEEvRKSA_: 121| 267|constexpr void poison(const R& r) { 122| 267| const std::span s{r}; 123| 267| poison(s.data(), s.size()); 124| 267|} pcurves_brainpool512r1.cpp:_ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES4_E11FieldParamsEEEEES9_EEEEvRKT_: 143| 89|constexpr void unpoison(const T& x) { 144| 89| x._const_time_unpoison(); 145| 89|} pcurves_brainpool512r1.cpp:_ZN5Botan2CT12unpoison_allITpTkNS0_12unpoisonableEJNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES3_E11FieldParamsEEEEESC_SC_EQgtsZT_Li0EEEvDpRKT_: 207| 89|constexpr void unpoison_all(const Ts&... ts) { 208| 89| (unpoison(ts), ...); 209| 89|} pcurves_brainpool512r1.cpp:_ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES3_E11FieldParamsEEEEEEEvRKT_: 143| 267|constexpr void unpoison(const T& x) { 144| 267| x._const_time_unpoison(); 145| 267|} _ZN5Botan2CT8unpoisonITkNS_6ranges14spanable_rangeENSt3__15arrayImLm8EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEnt19custom_unpoisonableISA_EEEvRKSA_: 128| 267|constexpr void unpoison(const R& r) { 129| 267| const std::span s{r}; 130| 267| unpoison(s.data(), s.size()); 131| 267|} _ZN5Botan2CT6poisonITkNS_6ranges14spanable_rangeENSt3__15arrayImLm9EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEnt17custom_poisonableISA_EEEvRKSA_: 121| 210|constexpr void poison(const R& r) { 122| 210| const std::span s{r}; 123| 210| poison(s.data(), s.size()); 124| 210|} _ZN5Botan2CT8unpoisonITkNS_6ranges14spanable_rangeENSt3__15arrayImLm9EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEnt19custom_unpoisonableISA_EEEvRKSA_: 128| 210|constexpr void unpoison(const R& r) { 129| 210| const std::span s{r}; 130| 210| unpoison(s.data(), s.size()); 131| 210|} pcurves_secp256r1.cpp:_ZN5Botan2CT6poisonITkNS0_17custom_poisonableENS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS5_9secp256r16ParamsES6_E11FieldParamsEEEEES9_EEEEvRKT_: 138| 101|constexpr void poison(const T& x) { 139| 101| x._const_time_poison(); 140| 101|} pcurves_secp256r1.cpp:_ZN5Botan2CT10poison_allITpTkNS0_10poisonableEJNS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS4_9secp256r16ParamsES5_E11FieldParamsEEEEESC_SC_EQgtsZT_Li0EEEvDpRKT_: 201| 101|constexpr void poison_all(const Ts&... ts) { 202| 101| (poison(ts), ...); 203| 101|} pcurves_secp256r1.cpp:_ZN5Botan2CT6poisonITkNS0_17custom_poisonableENS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS4_9secp256r16ParamsES5_E11FieldParamsEEEEEEEvRKT_: 138| 303|constexpr void poison(const T& x) { 139| 303| x._const_time_poison(); 140| 303|} pcurves_secp256r1.cpp:_ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS5_9secp256r16ParamsES6_E11FieldParamsEEEEES9_EEEEvRKT_: 143| 101|constexpr void unpoison(const T& x) { 144| 101| x._const_time_unpoison(); 145| 101|} pcurves_secp256r1.cpp:_ZN5Botan2CT12unpoison_allITpTkNS0_12unpoisonableEJNS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS4_9secp256r16ParamsES5_E11FieldParamsEEEEESC_SC_EQgtsZT_Li0EEEvDpRKT_: 207| 101|constexpr void unpoison_all(const Ts&... ts) { 208| 101| (unpoison(ts), ...); 209| 101|} pcurves_secp256r1.cpp:_ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS4_9secp256r16ParamsES5_E11FieldParamsEEEEEEEvRKT_: 143| 303|constexpr void unpoison(const T& x) { 144| 303| x._const_time_unpoison(); 145| 303|} pcurves_secp384r1.cpp:_ZN5Botan2CT6poisonITkNS0_17custom_poisonableENS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS5_9secp384r16ParamsES6_E11FieldParamsEEEEES9_EEEEvRKT_: 138| 120|constexpr void poison(const T& x) { 139| 120| x._const_time_poison(); 140| 120|} pcurves_secp384r1.cpp:_ZN5Botan2CT10poison_allITpTkNS0_10poisonableEJNS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS4_9secp384r16ParamsES5_E11FieldParamsEEEEESC_SC_EQgtsZT_Li0EEEvDpRKT_: 201| 120|constexpr void poison_all(const Ts&... ts) { 202| 120| (poison(ts), ...); 203| 120|} pcurves_secp384r1.cpp:_ZN5Botan2CT6poisonITkNS0_17custom_poisonableENS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS4_9secp384r16ParamsES5_E11FieldParamsEEEEEEEvRKT_: 138| 360|constexpr void poison(const T& x) { 139| 360| x._const_time_poison(); 140| 360|} pcurves_secp384r1.cpp:_ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS5_9secp384r16ParamsES6_E11FieldParamsEEEEES9_EEEEvRKT_: 143| 120|constexpr void unpoison(const T& x) { 144| 120| x._const_time_unpoison(); 145| 120|} pcurves_secp384r1.cpp:_ZN5Botan2CT12unpoison_allITpTkNS0_12unpoisonableEJNS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS4_9secp384r16ParamsES5_E11FieldParamsEEEEESC_SC_EQgtsZT_Li0EEEvDpRKT_: 207| 120|constexpr void unpoison_all(const Ts&... ts) { 208| 120| (unpoison(ts), ...); 209| 120|} pcurves_secp384r1.cpp:_ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS4_9secp384r16ParamsES5_E11FieldParamsEEEEEEEvRKT_: 143| 360|constexpr void unpoison(const T& x) { 144| 360| x._const_time_unpoison(); 145| 360|} pcurves_secp521r1.cpp:_ZN5Botan2CT6poisonITkNS0_17custom_poisonableENS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS6_6ParamsES7_E11FieldParamsEEEEES9_EEEEvRKT_: 138| 70|constexpr void poison(const T& x) { 139| 70| x._const_time_poison(); 140| 70|} pcurves_secp521r1.cpp:_ZN5Botan2CT10poison_allITpTkNS0_10poisonableEJNS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS5_6ParamsES6_E11FieldParamsEEEEESC_SC_EQgtsZT_Li0EEEvDpRKT_: 201| 70|constexpr void poison_all(const Ts&... ts) { 202| 70| (poison(ts), ...); 203| 70|} pcurves_secp521r1.cpp:_ZN5Botan2CT6poisonITkNS0_17custom_poisonableENS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS5_6ParamsES6_E11FieldParamsEEEEEEEvRKT_: 138| 210|constexpr void poison(const T& x) { 139| 210| x._const_time_poison(); 140| 210|} pcurves_secp521r1.cpp:_ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS6_6ParamsES7_E11FieldParamsEEEEES9_EEEEvRKT_: 143| 70|constexpr void unpoison(const T& x) { 144| 70| x._const_time_unpoison(); 145| 70|} pcurves_secp521r1.cpp:_ZN5Botan2CT12unpoison_allITpTkNS0_12unpoisonableEJNS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS5_6ParamsES6_E11FieldParamsEEEEESC_SC_EQgtsZT_Li0EEEvDpRKT_: 207| 70|constexpr void unpoison_all(const Ts&... ts) { 208| 70| (unpoison(ts), ...); 209| 70|} pcurves_secp521r1.cpp:_ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS5_6ParamsES6_E11FieldParamsEEEEEEEvRKT_: 143| 210|constexpr void unpoison(const T& x) { 144| 210| x._const_time_unpoison(); 145| 210|} _ZN5Botan2CT4MaskItE5is_ltEtt: 450| 16.4k| static constexpr Mask is_lt(T x, T y) { 451| 16.4k| T u = x ^ ((x ^ y) | ((x - y) ^ x)); 452| 16.4k| return Mask::expand_top_bit(u); 453| 16.4k| } _ZNK5Botan2CT4MaskItE13if_set_returnEt: 538| 156| constexpr T if_set_return(T x) const { return value() & x; } _ZN5Botan2CT4MaskIhE3setEv: 382| 272| static constexpr Mask set() { return Mask(static_cast(~0)); } _ZN5Botan2CT6poisonITkNSt3__18integralEmEEvRKT_: 107| 272|constexpr void poison(const T& p) { 108| 272| poison(&p, 1); 109| 272|} _ZN5Botan2CT12unpoison_allITpTkNS0_12unpoisonableEJNSt3__14spanIhLm18446744073709551615EEEmEQgtsZT_Li0EEEvDpRKT_: 207| 272|constexpr void unpoison_all(const Ts&... ts) { 208| 272| (unpoison(ts), ...); 209| 272|} _ZN5Botan2CT6OptionImEC2EmNS0_6ChoiceE: 653| 272| constexpr Option(T v, Choice valid) : m_has_value(valid), m_value(std::move(v)) {} _ZN5Botan2CT4MaskItE7is_zeroEt: 437| 16.4k| static constexpr Mask is_zero(T x) { return Mask(ct_is_zero(value_barrier(x))); } _ZN5Botan2CT4MaskItE5is_gtEtt: 458| 16.3k| static constexpr Mask is_gt(T x, T y) { return Mask::is_lt(y, x); } _ZN5Botan2CT4MaskItE6is_lteEtt: 463| 16.3k| static constexpr Mask is_lte(T x, T y) { return ~Mask::is_gt(x, y); } _ZN5Botan2CT4MaskItE8is_equalEtt: 442| 16.3k| static constexpr Mask is_equal(T x, T y) { 443| 16.3k| const T diff = value_barrier(x) ^ value_barrier(y); 444| 16.3k| return Mask::is_zero(diff); 445| 16.3k| } _ZN5Botan2CT4MaskItE6expandEt: 392| 78| static constexpr Mask expand(T v) { return ~Mask::is_zero(value_barrier(v)); } _ZN5Botan2CTanENS0_4MaskItEES2_: 518| 16.4k| friend constexpr Mask operator&(Mask x, Mask y) { return Mask(x.value() & y.value()); } _ZNK5Botan2CT4MaskItE17if_not_set_returnEt: 543| 78| constexpr T if_not_set_return(T x) const { return ~value() & x; } _ZN5Botan2CT4MaskItE6expandIhEES2_NS1_IT_EE: 429| 78| static constexpr Mask expand(Mask m) { 430| 78| static_assert(sizeof(U) < sizeof(T), "sizes ok"); 431| 78| return ~Mask::is_zero(m.value()); 432| 78| } _ZN5Botan2CT8unpoisonITkNS0_19custom_unpoisonableENS0_4MaskItEEEEvRKT_: 143| 78|constexpr void unpoison(const T& x) { 144| 78| x._const_time_unpoison(); 145| 78|} _ZNK5Botan2CT4MaskItE20_const_time_unpoisonEv: 634| 78| constexpr void _const_time_unpoison() const { CT::unpoison(m_mask); } _ZN5Botan2CT4MaskItEoRES2_: 510| 16.2k| Mask& operator|=(Mask o) { 511| 16.2k| m_mask |= o.value(); 512| 16.2k| return (*this); 513| 16.2k| } _ZN5Botan9Gf448Elem3oneEv: 64| 2| static Gf448Elem one() { return Gf448Elem(1); } _ZN5Botan9Gf448Elem4zeroEv: 59| 1| static Gf448Elem zero() { return Gf448Elem(0); } _ZN5Botan9Gf448Elem5wordsEv: 120| 2.24k| std::span words() { return m_x; } _ZNK5Botan9Gf448Elem5wordsEv: 128| 2.24k| std::span words() const { return m_x; } _ZNK5Botan9TripleDES4nameEv: 50| 150| std::string name() const override { return "TripleDES"; } _ZNK5Botan9TripleDES11parallelismEv: 54| 53| size_t parallelism() const override { return 32; } _ZNK5Botan13DL_PrivateKey11private_keyEv: 72| 816| const BigInt& private_key() const { return m_private_key; } _ZNK5Botan13DL_PrivateKey5groupEv: 67| 1.63k| const DL_Group& group() const { return m_group; } _ZN5Botan11carry_shiftEom: 139| 1.77k|inline uint64_t carry_shift(const uint128_t a, size_t shift) { 140| 1.77k| return static_cast(a >> shift); 141| 1.77k|} _ZNK5Botan13EC_Group_Data3oidEv: 166| 11.1k| const OID& oid() const { return m_oid; } _ZNK5Botan13EC_Group_Data1pEv: 170| 4.09k| const BigInt& p() const { return m_p; } _ZNK5Botan13EC_Group_Data1aEv: 172| 127| const BigInt& a() const { return m_a; } _ZNK5Botan13EC_Group_Data1bEv: 174| 127| const BigInt& b() const { return m_b; } _ZNK5Botan13EC_Group_Data5curveEv: 181| 600| const CurveGFp& curve() const { return m_curve; } _ZNK5Botan13EC_Group_Data5montyEv: 185| 52.7k| const Montgomery_Params& monty() const { return m_monty; } _ZNK5Botan13EC_Group_Data7monty_aEv: 187| 125| const BigInt& monty_a() const { return m_a_r; } _ZNK5Botan13EC_Group_Data7monty_bEv: 189| 125| const BigInt& monty_b() const { return m_b_r; } _ZNK5Botan13EC_Group_Data7p_wordsEv: 202| 4.66k| size_t p_words() const { return m_p_words; } _ZNK5Botan13EC_Group_Data7p_bytesEv: 206| 1.84k| size_t p_bytes() const { return (m_p_bits + 7) / 8; } _ZNK5Botan13EC_Group_Data11order_bytesEv: 210| 1.19k| size_t order_bytes() const { return m_order_bytes; } _ZNK5Botan13EC_Group_Data12a_is_minus_3Ev: 212| 486| bool a_is_minus_3() const { return m_a_is_minus_3; } _ZNK5Botan13EC_Group_Data9a_is_zeroEv: 214| 1.06k| bool a_is_zero() const { return m_a_is_zero; } _ZNK5Botan13EC_Group_Data6pcurveEv: 297| 2.99k| const PCurve::PrimeOrderCurve& pcurve() const { 298| 2.99k| BOTAN_ASSERT_NONNULL(m_pcurve); ------------------ | | 123| 2.99k| do { \ | | 124| 2.99k| if((ptr) == nullptr) { \ | | ------------------ | | | Branch (124:10): [True: 0, False: 2.99k] | | ------------------ | | 125| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 126| 0| Botan::assertion_failure(#ptr " is not null", "", __func__, __FILE__, __LINE__); \ | | 127| 0| } \ | | 128| 2.99k| } while(0) | | ------------------ | | | Branch (128:12): [Folded, False: 2.99k] | | ------------------ ------------------ 299| 2.99k| return *m_pcurve; 300| 2.99k| } _ZN5Botan19EC_AffinePoint_DataD2Ev: 74| 600| virtual ~EC_AffinePoint_Data() = default; _ZN5Botan14EC_Scalar_DataD2Ev: 39| 596| virtual ~EC_Scalar_Data() = default; _ZNK5Botan17EC_Scalar_Data_PC5valueEv: 53| 596| const auto& value() const { return m_v; } _ZN5Botan17EC_Scalar_Data_PCC2ENSt3__110shared_ptrIKNS_13EC_Group_DataEEENS_6PCurve15PrimeOrderCurve6ScalarE: 19| 596| m_group(std::move(group)), m_v(std::move(v)) {} _ZNK5Botan17EC_PublicKey_Data5groupEv: 30| 600| const EC_Group& group() const { return m_group; } _ZN5Botan20Ed25519_FieldElementC2Ev: 144| 34.0k| constexpr Ed25519_FieldElement() : m_val{} {} _ZN5Botan20Ed25519_FieldElement9from_wordEm: 154| 2| constexpr static Ed25519_FieldElement from_word(word x) { 155| 2| Ed25519_FieldElement r; 156| 2| r.m_val[0] = x; 157| 2| return r; 158| 2| } _ZNK5Botan20Ed25519_FieldElement3sqrEv: 242| 830| constexpr Ed25519_FieldElement sqr() const { 243| 830| std::array z; // NOLINT(*-member-init) 244| 830| comba_sqr(z.data(), m_val.data()); 245| 830| Ed25519_FieldElement r; 246| 830| r.reduce_wide(z); 247| 830| return r; 248| 830| } _ZN5Botan20Ed25519_FieldElement11reduce_wideERKNSt3__15arrayImLm8EEE: 88| 13.1k| constexpr void reduce_wide(const std::array& z) { 89| | // t = lo + 38 * hi < 39 * 2^256, so carry <= 38 90| 13.1k| W carry = 0; 91| 65.6k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (91:28): [True: 52.5k, False: 13.1k] ------------------ 92| 52.5k| m_val[i] = word_madd3(z[i + N], W(38), z[i], &carry); 93| 52.5k| } 94| 13.1k| BOTAN_DEBUG_ASSERT(carry <= 38); ------------------ | | 137| 13.1k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 13.1k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 13.1k] | | ------------------ ------------------ 95| | 96| | // Fold the bits at and above 2^255 back in by 19. The first fold 97| | // leaves at most 19*77 above 2^255, the second leaves none. 98| 39.3k| for(size_t fold = 0; fold != 2; ++fold) { ------------------ | Branch (98:31): [True: 26.2k, False: 13.1k] ------------------ 99| 26.2k| const W top = (carry << 1) | (m_val[N - 1] >> TOP_BIT); 100| 26.2k| m_val[N - 1] &= TOP_MASK; 101| 26.2k| carry = 0; 102| | 103| 26.2k| W c = 0; 104| 26.2k| m_val[0] = word_add(m_val[0], static_cast(top * 19), &c); 105| 105k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (105:31): [True: 78.7k, False: 26.2k] ------------------ 106| 78.7k| m_val[i] = word_add(m_val[i], static_cast(0), &c); 107| 78.7k| } 108| | // The top word was masked below 2^(bits-1) so this cannot carry out 109| 26.2k| BOTAN_DEBUG_ASSERT(c == 0); ------------------ | | 137| 26.2k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 26.2k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 26.2k] | | ------------------ ------------------ 110| 26.2k| } 111| | 112| 13.1k| BOTAN_DEBUG_ASSERT((m_val[N - 1] >> TOP_BIT) == 0); ------------------ | | 137| 13.1k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 13.1k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 13.1k] | | ------------------ ------------------ 113| 13.1k| } _ZN5Botan20Ed25519_FieldElement3oneEv: 148| 1.30k| constexpr static Ed25519_FieldElement one() { 149| 1.30k| Ed25519_FieldElement o; 150| 1.30k| o.m_val[0] = 1; 151| 1.30k| return o; 152| 1.30k| } _ZNK5Botan20Ed25519_FieldElement9pow_22523Ev: 340| 1|constexpr Ed25519_FieldElement Ed25519_FieldElement::pow_22523() const { 341| 1| auto t0 = this->sqr(); 342| 1| auto t1 = t0.sqr_iter(2); 343| 1| t1 = (*this) * t1; 344| 1| t0 = t0 * t1; 345| 1| t0 = t0.sqr(); 346| 1| t0 = t1 * t0; 347| 1| t1 = t0.sqr_iter(5); 348| 1| t0 = t1 * t0; 349| 1| t1 = t0.sqr_iter(10); 350| 1| t1 = t1 * t0; 351| 1| auto t2 = t1.sqr_iter(20); 352| 1| t1 = t2 * t1; 353| 1| t1 = t1.sqr_iter(10); 354| 1| t0 = t1 * t0; 355| 1| t1 = t0.sqr_iter(50); 356| 1| t1 = t1 * t0; 357| 1| t2 = t1.sqr_iter(100); 358| 1| t1 = t2 * t1; 359| 1| t1 = t1.sqr_iter(50); 360| 1| t0 = t1 * t0; 361| 1| t0 = t0.sqr_iter(2); 362| | 363| 1| t0 = t0 * (*this); 364| 1| return t0; 365| 1|} _ZNK5Botan20Ed25519_FieldElement8sqr_iterEm: 250| 117| constexpr Ed25519_FieldElement sqr_iter(size_t iter) const { 251| 117| auto r = *this; 252| 117| std::array z; // NOLINT(*-member-init) 253| 3.39k| for(size_t i = 0; i != iter; ++i) { ------------------ | Branch (253:28): [True: 3.27k, False: 117] ------------------ 254| 3.27k| comba_sqr(z.data(), r.m_val.data()); 255| 3.27k| r.reduce_wide(z); 256| 3.27k| } 257| 117| return r; 258| 117| } _ZNK5Botan20Ed25519_FieldElement11is_negativeEv: 210| 1| constexpr bool is_negative() const { return (canonical()[0] & 1) == 1; } _ZNK5Botan20Ed25519_FieldElement9canonicalEv: 118| 12| constexpr std::array canonical() const { 119| | // Fold the bit at 2^255, leaving a value below 2^255 + 19, then 120| | // conditionally subtract p once 121| 12| std::array t = m_val; 122| | 123| 12| const W top = t[N - 1] >> TOP_BIT; 124| 12| t[N - 1] &= TOP_MASK; 125| 12| W c = 0; 126| 12| t[0] = word_add(t[0], static_cast(top * 19), &c); 127| 48| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (127:28): [True: 36, False: 12] ------------------ 128| 36| t[i] = word_add(t[i], static_cast(0), &c); 129| 36| } 130| | 131| 12| std::array r{}; 132| 12| W borrow = 0; 133| 60| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (133:28): [True: 48, False: 12] ------------------ 134| 48| r[i] = word_sub(t[i], P[i], &borrow); 135| 48| } 136| 12| CT::conditional_assign_mem(borrow, r.data(), t.data(), N); 137| 12| return r; 138| 12| } _ZN5Botan20Ed25519_FieldElement4zeroEv: 146| 1.30k| constexpr static Ed25519_FieldElement zero() { return Ed25519_FieldElement(); } _ZN5Botan20Ed25519_FieldElement18conditional_assignENS_2CT6ChoiceERKS0_: 273| 16.0k| constexpr void conditional_assign(CT::Choice cond, const Ed25519_FieldElement& other) { 274| 16.0k| const W mask = cond.into_bitmask(); 275| 80.0k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (275:28): [True: 64.0k, False: 16.0k] ------------------ 276| 64.0k| m_val[i] = choose(mask, other.m_val[i], m_val[i]); 277| 64.0k| } 278| 16.0k| } _ZN5Botan20Ed25519_FieldElement16conditional_swapENS_2CT6ChoiceERS0_S3_: 283| 640| static constexpr void conditional_swap(CT::Choice cond, Ed25519_FieldElement& x, Ed25519_FieldElement& y) { 284| 640| const W mask = cond.into_bitmask(); 285| 3.20k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (285:28): [True: 2.56k, False: 640] ------------------ 286| 2.56k| const W nx = choose(mask, y.m_val[i], x.m_val[i]); 287| 2.56k| const W ny = choose(mask, x.m_val[i], y.m_val[i]); 288| 2.56k| x.m_val[i] = nx; 289| 2.56k| y.m_val[i] = ny; 290| 2.56k| } 291| 640| } _ZNK5Botan20Ed25519_FieldElement4sqr2Ev: 261| 200| constexpr Ed25519_FieldElement sqr2() const { 262| 200| const auto z = sqr(); 263| 200| return add(z, z); 264| 200| } _ZN5Botan20Ed25519_FieldElement3addERKS0_S2_: 212| 4.35k| static constexpr Ed25519_FieldElement add(const Ed25519_FieldElement& a, const Ed25519_FieldElement& b) { 213| 4.35k| Ed25519_FieldElement z; 214| 4.35k| W carry = 0; 215| 21.7k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (215:28): [True: 17.4k, False: 4.35k] ------------------ 216| 17.4k| z.m_val[i] = word_add(a.m_val[i], b.m_val[i], &carry); 217| 17.4k| } 218| 4.35k| z.fold_carry(carry); 219| 4.35k| return z; 220| 4.35k| } _ZN5Botan20Ed25519_FieldElement10fold_carryEm: 57| 4.35k| constexpr void fold_carry(W carry) { 58| 13.0k| for(size_t fold = 0; fold != 2; ++fold) { ------------------ | Branch (58:31): [True: 8.71k, False: 4.35k] ------------------ 59| 8.71k| W c = 0; 60| 8.71k| m_val[0] = word_add(m_val[0], carry * 38, &c); 61| 34.8k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (61:31): [True: 26.1k, False: 8.71k] ------------------ 62| 26.1k| m_val[i] = word_add(m_val[i], static_cast(0), &c); 63| 26.1k| } 64| 8.71k| carry = c; 65| 8.71k| } 66| 4.35k| } _ZN5BotanmlERKNS_20Ed25519_FieldElementES2_: 305| 9.02k|inline constexpr Ed25519_FieldElement operator*(const Ed25519_FieldElement& x, const Ed25519_FieldElement& y) { 306| 9.02k| return Ed25519_FieldElement::mul(x, y); 307| 9.02k|} _ZN5Botan20Ed25519_FieldElement3mulERKS0_S2_: 234| 9.02k| static constexpr Ed25519_FieldElement mul(const Ed25519_FieldElement& a, const Ed25519_FieldElement& b) { 235| 9.02k| std::array z; // NOLINT(*-member-init) 236| 9.02k| comba_mul(z.data(), a.m_val.data(), b.m_val.data()); 237| 9.02k| Ed25519_FieldElement r; 238| 9.02k| r.reduce_wide(z); 239| 9.02k| return r; 240| 9.02k| } _ZN5BotanplERKNS_20Ed25519_FieldElementES2_: 297| 4.15k|inline constexpr Ed25519_FieldElement operator+(const Ed25519_FieldElement& x, const Ed25519_FieldElement& y) { 298| 4.15k| return Ed25519_FieldElement::add(x, y); 299| 4.15k|} _ZN5BotanmiERKNS_20Ed25519_FieldElementES2_: 301| 3.49k|inline constexpr Ed25519_FieldElement operator-(const Ed25519_FieldElement& x, const Ed25519_FieldElement& y) { 302| 3.49k| return Ed25519_FieldElement::sub(x, y); 303| 3.49k|} _ZN5Botan20Ed25519_FieldElement3subERKS0_S2_: 222| 4.13k| static constexpr Ed25519_FieldElement sub(const Ed25519_FieldElement& a, const Ed25519_FieldElement& b) { 223| 4.13k| Ed25519_FieldElement z; 224| 4.13k| W borrow = 0; 225| 20.6k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (225:28): [True: 16.5k, False: 4.13k] ------------------ 226| 16.5k| z.m_val[i] = word_sub(a.m_val[i], b.m_val[i], &borrow); 227| 16.5k| } 228| 4.13k| z.fold_borrow(borrow); 229| 4.13k| return z; 230| 4.13k| } _ZN5Botan20Ed25519_FieldElement11fold_borrowEm: 71| 4.13k| constexpr void fold_borrow(W borrow) { 72| 12.3k| for(size_t fold = 0; fold != 2; ++fold) { ------------------ | Branch (72:31): [True: 8.26k, False: 4.13k] ------------------ 73| 8.26k| W b = 0; 74| 8.26k| m_val[0] = word_sub(m_val[0], borrow * 38, &b); 75| 33.0k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (75:31): [True: 24.7k, False: 8.26k] ------------------ 76| 24.7k| m_val[i] = word_sub(m_val[i], static_cast(0), &b); 77| 24.7k| } 78| 8.26k| borrow = b; 79| 8.26k| } 80| 4.13k| } _ZNK5Botan20Ed25519_FieldElement6invertEv: 313| 12|constexpr Ed25519_FieldElement Ed25519_FieldElement::invert() const { 314| 12| auto t0 = this->sqr(); 315| 12| auto t1 = t0.sqr_iter(2); 316| 12| t1 = *this * t1; 317| 12| t0 = t0 * t1; 318| 12| auto t2 = t0.sqr(); 319| 12| t1 = t1 * t2; 320| 12| t2 = t1.sqr_iter(5); 321| 12| t1 = t2 * t1; 322| 12| t2 = t1.sqr_iter(10); 323| 12| t2 = t2 * t1; 324| 12| auto t3 = t2.sqr_iter(20); 325| 12| t2 = t3 * t2; 326| 12| t2 = t2.sqr_iter(10); 327| 12| t1 = t2 * t1; 328| 12| t2 = t1.sqr_iter(50); 329| 12| t2 = t2 * t1; 330| 12| t3 = t2.sqr_iter(100); 331| 12| t2 = t3 * t2; 332| 12| t2 = t2.sqr_iter(50); 333| 12| t1 = t2 * t1; 334| 12| t1 = t1.sqr_iter(5); 335| | 336| 12| t0 = t1 * t0; 337| 12| return t0; 338| 12|} _ZNK5Botan20Ed25519_FieldElement12serialize_toENSt3__14spanIhLm32EEE: 186| 10| void serialize_to(std::span b) const { 187| 10| const auto w = canonical(); 188| 50| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (188:28): [True: 40, False: 10] ------------------ 189| 40| store_le(w[i], b.data() + sizeof(W) * i); 190| 40| } 191| 10| } _ZNK5Botan20Ed25519_FieldElement7is_zeroEv: 193| 1| constexpr bool is_zero() const { 194| 1| const auto w = canonical(); 195| 1| if(std::is_constant_evaluated()) { ------------------ | Branch (195:13): [Folded, False: 1] ------------------ 196| 0| for(const auto x : w) { ------------------ | Branch (196:30): [True: 0, False: 0] ------------------ 197| 0| if(x != 0) { ------------------ | Branch (197:19): [True: 0, False: 0] ------------------ 198| 0| return false; 199| 0| } 200| 0| } 201| 0| return true; 202| 0| } 203| 1| return CT::all_zeros(w.data(), w.size()).as_bool(); 204| 1| } _ZN5BotanngERKNS_20Ed25519_FieldElementE: 309| 641|inline constexpr Ed25519_FieldElement operator-(const Ed25519_FieldElement& x) { 310| 641| return Ed25519_FieldElement::negate(x); 311| 641|} _ZN5Botan20Ed25519_FieldElement6negateERKS0_: 232| 641| static constexpr Ed25519_FieldElement negate(const Ed25519_FieldElement& a) { return sub(zero(), a); } _ZNK5Botan14Ed25519_Scalar8to_bytesEv: 59| 10| std::array to_bytes() const { 60| 10| std::array b; // NOLINT(*-member-init) 61| 10| serialize_to(b); 62| 10| return b; 63| 10| } _ZN5Botan14Ed25519_ScalarC2ERKNSt3__15arrayImLm4EEE: 72| 10| explicit Ed25519_Scalar(const std::array& v) : m_val(v) {} _ZN5Botan3fmtIJNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEEEES7_NS1_17basic_string_viewIcS4_EEDpRKT_: 53| 1.72k|std::string fmt(std::string_view format, const T&... args) { 54| 1.72k| std::ostringstream oss; 55| 1.72k| oss.imbue(std::locale::classic()); 56| 1.72k| fmt_detail::do_fmt(oss, format, args...); 57| 1.72k| return oss.str(); 58| 1.72k|} _ZN5Botan10fmt_detail6do_fmtINSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEJEEEvRNS2_19basic_ostringstreamIcS5_S7_EENS2_17basic_string_viewIcS5_EERKT_DpRKT0_: 25| 1.72k|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 1.72k| size_t i = 0; 27| | 28| 61.8k| while(i < format.size()) { ------------------ | Branch (28:10): [True: 61.8k, False: 0] ------------------ 29| 61.8k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 1.72k, False: 60.1k] | Branch (29:30): [True: 1.72k, False: 0] | Branch (29:59): [True: 1.72k, False: 0] ------------------ 30| 1.72k| oss << val; 31| 1.72k| return do_fmt(oss, format.substr(i + 2), rest...); 32| 60.1k| } else { 33| 60.1k| oss << format[i]; 34| 60.1k| } 35| | 36| 60.1k| i += 1; 37| 60.1k| } 38| 1.72k|} _ZN5Botan10fmt_detail6do_fmtERNSt3__119basic_ostringstreamIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EE: 20| 21.7k|inline void do_fmt(std::ostringstream& oss, std::string_view format) { 21| 21.7k| oss << format; 22| 21.7k|} _ZN5Botan3fmtIJNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEEEENS1_12basic_stringIcS4_NS1_9allocatorIcEEEES5_DpRKT_: 53| 14.3k|std::string fmt(std::string_view format, const T&... args) { 54| 14.3k| std::ostringstream oss; 55| 14.3k| oss.imbue(std::locale::classic()); 56| 14.3k| fmt_detail::do_fmt(oss, format, args...); 57| 14.3k| return oss.str(); 58| 14.3k|} _ZN5Botan10fmt_detail6do_fmtINSt3__117basic_string_viewIcNS2_11char_traitsIcEEEEJEEEvRNS2_19basic_ostringstreamIcS5_NS2_9allocatorIcEEEES6_RKT_DpRKT0_: 25| 14.9k|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 14.9k| size_t i = 0; 27| | 28| 133k| while(i < format.size()) { ------------------ | Branch (28:10): [True: 133k, False: 0] ------------------ 29| 133k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 14.9k, False: 118k] | Branch (29:30): [True: 14.9k, False: 0] | Branch (29:59): [True: 14.9k, False: 0] ------------------ 30| 14.9k| oss << val; 31| 14.9k| return do_fmt(oss, format.substr(i + 2), rest...); 32| 118k| } else { 33| 118k| oss << format[i]; 34| 118k| } 35| | 36| 118k| i += 1; 37| 118k| } 38| 14.9k|} _ZN5Botan3fmtIJPKcS2_S2_EEENSt3__112basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEENS3_17basic_string_viewIcS6_EEDpRKT_: 53| 13|std::string fmt(std::string_view format, const T&... args) { 54| 13| std::ostringstream oss; 55| 13| oss.imbue(std::locale::classic()); 56| 13| fmt_detail::do_fmt(oss, format, args...); 57| 13| return oss.str(); 58| 13|} _ZN5Botan10fmt_detail6do_fmtIPKcJS3_S3_EEEvRNSt3__119basic_ostringstreamIcNS4_11char_traitsIcEENS4_9allocatorIcEEEENS4_17basic_string_viewIcS7_EERKT_DpRKT0_: 25| 13|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 13| size_t i = 0; 27| | 28| 13| while(i < format.size()) { ------------------ | Branch (28:10): [True: 13, False: 0] ------------------ 29| 13| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 13, False: 0] | Branch (29:30): [True: 13, False: 0] | Branch (29:59): [True: 13, False: 0] ------------------ 30| 13| oss << val; 31| 13| return do_fmt(oss, format.substr(i + 2), rest...); 32| 13| } else { 33| 0| oss << format[i]; 34| 0| } 35| | 36| 0| i += 1; 37| 0| } 38| 13|} _ZN5Botan10fmt_detail6do_fmtIPKcJS3_EEEvRNSt3__119basic_ostringstreamIcNS4_11char_traitsIcEENS4_9allocatorIcEEEENS4_17basic_string_viewIcS7_EERKT_DpRKT0_: 25| 13|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 13| size_t i = 0; 27| | 28| 65| while(i < format.size()) { ------------------ | Branch (28:10): [True: 65, False: 0] ------------------ 29| 65| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 13, False: 52] | Branch (29:30): [True: 13, False: 0] | Branch (29:59): [True: 13, False: 0] ------------------ 30| 13| oss << val; 31| 13| return do_fmt(oss, format.substr(i + 2), rest...); 32| 52| } else { 33| 52| oss << format[i]; 34| 52| } 35| | 36| 52| i += 1; 37| 52| } 38| 13|} _ZN5Botan10fmt_detail6do_fmtIPKcJEEEvRNSt3__119basic_ostringstreamIcNS4_11char_traitsIcEENS4_9allocatorIcEEEENS4_17basic_string_viewIcS7_EERKT_DpRKT0_: 25| 4.07k|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 4.07k| size_t i = 0; 27| | 28| 57.5k| while(i < format.size()) { ------------------ | Branch (28:10): [True: 57.5k, False: 0] ------------------ 29| 57.5k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 4.07k, False: 53.4k] | Branch (29:30): [True: 4.07k, False: 0] | Branch (29:59): [True: 4.07k, False: 0] ------------------ 30| 4.07k| oss << val; 31| 4.07k| return do_fmt(oss, format.substr(i + 2), rest...); 32| 53.4k| } else { 33| 53.4k| oss << format[i]; 34| 53.4k| } 35| | 36| 53.4k| i += 1; 37| 53.4k| } 38| 4.07k|} _ZN5Botan3fmtIJNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEPKcEEENS1_12basic_stringIcS4_NS1_9allocatorIcEEEES5_DpRKT_: 53| 4.00k|std::string fmt(std::string_view format, const T&... args) { 54| 4.00k| std::ostringstream oss; 55| 4.00k| oss.imbue(std::locale::classic()); 56| 4.00k| fmt_detail::do_fmt(oss, format, args...); 57| 4.00k| return oss.str(); 58| 4.00k|} _ZN5Botan10fmt_detail6do_fmtINSt3__117basic_string_viewIcNS2_11char_traitsIcEEEEJPKcEEEvRNS2_19basic_ostringstreamIcS5_NS2_9allocatorIcEEEES6_RKT_DpRKT0_: 25| 4.00k|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 4.00k| size_t i = 0; 27| | 28| 4.00k| while(i < format.size()) { ------------------ | Branch (28:10): [True: 4.00k, False: 0] ------------------ 29| 4.00k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 4.00k, False: 0] | Branch (29:30): [True: 4.00k, False: 0] | Branch (29:59): [True: 4.00k, False: 0] ------------------ 30| 4.00k| oss << val; 31| 4.00k| return do_fmt(oss, format.substr(i + 2), rest...); 32| 4.00k| } else { 33| 0| oss << format[i]; 34| 0| } 35| | 36| 0| i += 1; 37| 0| } 38| 4.00k|} _ZN5Botan3fmtIJPKcNSt3__117basic_string_viewIcNS3_11char_traitsIcEEEEEEENS3_12basic_stringIcS6_NS3_9allocatorIcEEEES7_DpRKT_: 53| 565|std::string fmt(std::string_view format, const T&... args) { 54| 565| std::ostringstream oss; 55| 565| oss.imbue(std::locale::classic()); 56| 565| fmt_detail::do_fmt(oss, format, args...); 57| 565| return oss.str(); 58| 565|} _ZN5Botan10fmt_detail6do_fmtIPKcJNSt3__117basic_string_viewIcNS4_11char_traitsIcEEEEEEEvRNS4_19basic_ostringstreamIcS7_NS4_9allocatorIcEEEES8_RKT_DpRKT0_: 25| 565|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 565| size_t i = 0; 27| | 28| 3.38k| while(i < format.size()) { ------------------ | Branch (28:10): [True: 3.38k, False: 0] ------------------ 29| 3.38k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 565, False: 2.82k] | Branch (29:30): [True: 565, False: 0] | Branch (29:59): [True: 565, False: 0] ------------------ 30| 565| oss << val; 31| 565| return do_fmt(oss, format.substr(i + 2), rest...); 32| 2.82k| } else { 33| 2.82k| oss << format[i]; 34| 2.82k| } 35| | 36| 2.82k| i += 1; 37| 2.82k| } 38| 565|} _ZN5Botan10fmt_detail6do_fmtImJEEEvRNSt3__119basic_ostringstreamIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_17basic_string_viewIcS5_EERKT_DpRKT0_: 25| 590|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 590| size_t i = 0; 27| | 28| 7.99k| while(i < format.size()) { ------------------ | Branch (28:10): [True: 7.99k, False: 0] ------------------ 29| 7.99k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 590, False: 7.40k] | Branch (29:30): [True: 590, False: 0] | Branch (29:59): [True: 590, False: 0] ------------------ 30| 590| oss << val; 31| 590| return do_fmt(oss, format.substr(i + 2), rest...); 32| 7.40k| } else { 33| 7.40k| oss << format[i]; 34| 7.40k| } 35| | 36| 7.40k| i += 1; 37| 7.40k| } 38| 590|} _ZN5Botan3fmtIJPKcEEENSt3__112basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEENS3_17basic_string_viewIcS6_EEDpRKT_: 53| 44|std::string fmt(std::string_view format, const T&... args) { 54| 44| std::ostringstream oss; 55| 44| oss.imbue(std::locale::classic()); 56| 44| fmt_detail::do_fmt(oss, format, args...); 57| 44| return oss.str(); 58| 44|} _ZN5Botan3fmtIJmEEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EEDpRKT_: 53| 5|std::string fmt(std::string_view format, const T&... args) { 54| 5| std::ostringstream oss; 55| 5| oss.imbue(std::locale::classic()); 56| 5| fmt_detail::do_fmt(oss, format, args...); 57| 5| return oss.str(); 58| 5|} _ZN5Botan3fmtIJmmEEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EEDpRKT_: 53| 293|std::string fmt(std::string_view format, const T&... args) { 54| 293| std::ostringstream oss; 55| 293| oss.imbue(std::locale::classic()); 56| 293| fmt_detail::do_fmt(oss, format, args...); 57| 293| return oss.str(); 58| 293|} _ZN5Botan10fmt_detail6do_fmtImJmEEEvRNSt3__119basic_ostringstreamIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_17basic_string_viewIcS5_EERKT_DpRKT0_: 25| 293|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 293| size_t i = 0; 27| | 28| 3.33k| while(i < format.size()) { ------------------ | Branch (28:10): [True: 3.33k, False: 0] ------------------ 29| 3.33k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 293, False: 3.04k] | Branch (29:30): [True: 293, False: 0] | Branch (29:59): [True: 293, False: 0] ------------------ 30| 293| oss << val; 31| 293| return do_fmt(oss, format.substr(i + 2), rest...); 32| 3.04k| } else { 33| 3.04k| oss << format[i]; 34| 3.04k| } 35| | 36| 3.04k| i += 1; 37| 3.04k| } 38| 293|} _ZN5Botan3fmtIJjEEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EEDpRKT_: 53| 265|std::string fmt(std::string_view format, const T&... args) { 54| 265| std::ostringstream oss; 55| 265| oss.imbue(std::locale::classic()); 56| 265| fmt_detail::do_fmt(oss, format, args...); 57| 265| return oss.str(); 58| 265|} _ZN5Botan10fmt_detail6do_fmtIjJEEEvRNSt3__119basic_ostringstreamIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_17basic_string_viewIcS5_EERKT_DpRKT0_: 25| 471|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 471| size_t i = 0; 27| | 28| 9.19k| while(i < format.size()) { ------------------ | Branch (28:10): [True: 9.19k, False: 0] ------------------ 29| 9.19k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 471, False: 8.72k] | Branch (29:30): [True: 471, False: 0] | Branch (29:59): [True: 471, False: 0] ------------------ 30| 471| oss << val; 31| 471| return do_fmt(oss, format.substr(i + 2), rest...); 32| 8.72k| } else { 33| 8.72k| oss << format[i]; 34| 8.72k| } 35| | 36| 8.72k| i += 1; 37| 8.72k| } 38| 471|} _ZN5Botan3fmtIJNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEjEEENS1_12basic_stringIcS4_NS1_9allocatorIcEEEES5_DpRKT_: 53| 103|std::string fmt(std::string_view format, const T&... args) { 54| 103| std::ostringstream oss; 55| 103| oss.imbue(std::locale::classic()); 56| 103| fmt_detail::do_fmt(oss, format, args...); 57| 103| return oss.str(); 58| 103|} _ZN5Botan10fmt_detail6do_fmtINSt3__117basic_string_viewIcNS2_11char_traitsIcEEEEJjEEEvRNS2_19basic_ostringstreamIcS5_NS2_9allocatorIcEEEES6_RKT_DpRKT0_: 25| 103|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 103| size_t i = 0; 27| | 28| 103| while(i < format.size()) { ------------------ | Branch (28:10): [True: 103, False: 0] ------------------ 29| 103| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 103, False: 0] | Branch (29:30): [True: 103, False: 0] | Branch (29:59): [True: 103, False: 0] ------------------ 30| 103| oss << val; 31| 103| return do_fmt(oss, format.substr(i + 2), rest...); 32| 103| } else { 33| 0| oss << format[i]; 34| 0| } 35| | 36| 0| i += 1; 37| 0| } 38| 103|} _ZN5Botan3fmtIJjjEEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EEDpRKT_: 53| 103|std::string fmt(std::string_view format, const T&... args) { 54| 103| std::ostringstream oss; 55| 103| oss.imbue(std::locale::classic()); 56| 103| fmt_detail::do_fmt(oss, format, args...); 57| 103| return oss.str(); 58| 103|} _ZN5Botan10fmt_detail6do_fmtIjJjEEEvRNSt3__119basic_ostringstreamIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_17basic_string_viewIcS5_EERKT_DpRKT0_: 25| 103|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 103| size_t i = 0; 27| | 28| 2.72k| while(i < format.size()) { ------------------ | Branch (28:10): [True: 2.72k, False: 0] ------------------ 29| 2.72k| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 103, False: 2.62k] | Branch (29:30): [True: 103, False: 0] | Branch (29:59): [True: 103, False: 0] ------------------ 30| 103| oss << val; 31| 103| return do_fmt(oss, format.substr(i + 2), rest...); 32| 2.62k| } else { 33| 2.62k| oss << format[i]; 34| 2.62k| } 35| | 36| 2.62k| i += 1; 37| 2.62k| } 38| 103|} _ZN5Botan3fmtIJtttEEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EEDpRKT_: 53| 1|std::string fmt(std::string_view format, const T&... args) { 54| 1| std::ostringstream oss; 55| 1| oss.imbue(std::locale::classic()); 56| 1| fmt_detail::do_fmt(oss, format, args...); 57| 1| return oss.str(); 58| 1|} _ZN5Botan10fmt_detail6do_fmtItJttEEEvRNSt3__119basic_ostringstreamIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_17basic_string_viewIcS5_EERKT_DpRKT0_: 25| 1|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 1| size_t i = 0; 27| | 28| 16| while(i < format.size()) { ------------------ | Branch (28:10): [True: 16, False: 0] ------------------ 29| 16| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 1, False: 15] | Branch (29:30): [True: 1, False: 0] | Branch (29:59): [True: 1, False: 0] ------------------ 30| 1| oss << val; 31| 1| return do_fmt(oss, format.substr(i + 2), rest...); 32| 15| } else { 33| 15| oss << format[i]; 34| 15| } 35| | 36| 15| i += 1; 37| 15| } 38| 1|} _ZN5Botan10fmt_detail6do_fmtItJtEEEvRNSt3__119basic_ostringstreamIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_17basic_string_viewIcS5_EERKT_DpRKT0_: 25| 1|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 1| size_t i = 0; 27| | 28| 19| while(i < format.size()) { ------------------ | Branch (28:10): [True: 19, False: 0] ------------------ 29| 19| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 1, False: 18] | Branch (29:30): [True: 1, False: 0] | Branch (29:59): [True: 1, False: 0] ------------------ 30| 1| oss << val; 31| 1| return do_fmt(oss, format.substr(i + 2), rest...); 32| 18| } else { 33| 18| oss << format[i]; 34| 18| } 35| | 36| 18| i += 1; 37| 18| } 38| 1|} _ZN5Botan10fmt_detail6do_fmtItJEEEvRNSt3__119basic_ostringstreamIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_17basic_string_viewIcS5_EERKT_DpRKT0_: 25| 1|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 1| size_t i = 0; 27| | 28| 5| while(i < format.size()) { ------------------ | Branch (28:10): [True: 5, False: 0] ------------------ 29| 5| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 1, False: 4] | Branch (29:30): [True: 1, False: 0] | Branch (29:59): [True: 1, False: 0] ------------------ 30| 1| oss << val; 31| 1| return do_fmt(oss, format.substr(i + 2), rest...); 32| 4| } else { 33| 4| oss << format[i]; 34| 4| } 35| | 36| 4| i += 1; 37| 4| } 38| 1|} _ZN5Botan3fmtIJmPKcEEENSt3__112basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEENS3_17basic_string_viewIcS6_EEDpRKT_: 53| 10|std::string fmt(std::string_view format, const T&... args) { 54| 10| std::ostringstream oss; 55| 10| oss.imbue(std::locale::classic()); 56| 10| fmt_detail::do_fmt(oss, format, args...); 57| 10| return oss.str(); 58| 10|} _ZN5Botan10fmt_detail6do_fmtImJPKcEEEvRNSt3__119basic_ostringstreamIcNS4_11char_traitsIcEENS4_9allocatorIcEEEENS4_17basic_string_viewIcS7_EERKT_DpRKT0_: 25| 10|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 10| size_t i = 0; 27| | 28| 140| while(i < format.size()) { ------------------ | Branch (28:10): [True: 140, False: 0] ------------------ 29| 140| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 10, False: 130] | Branch (29:30): [True: 10, False: 0] | Branch (29:59): [True: 10, False: 0] ------------------ 30| 10| oss << val; 31| 10| return do_fmt(oss, format.substr(i + 2), rest...); 32| 130| } else { 33| 130| oss << format[i]; 34| 130| } 35| | 36| 130| i += 1; 37| 130| } 38| 10|} _ZN5Botan3fmtIJNS_3OIDENSt3__117basic_string_viewIcNS2_11char_traitsIcEEEEEEENS2_12basic_stringIcS5_NS2_9allocatorIcEEEES6_DpRKT_: 53| 6|std::string fmt(std::string_view format, const T&... args) { 54| 6| std::ostringstream oss; 55| 6| oss.imbue(std::locale::classic()); 56| 6| fmt_detail::do_fmt(oss, format, args...); 57| 6| return oss.str(); 58| 6|} _ZN5Botan10fmt_detail6do_fmtINS_3OIDEJNSt3__117basic_string_viewIcNS3_11char_traitsIcEEEEEEEvRNS3_19basic_ostringstreamIcS6_NS3_9allocatorIcEEEES7_RKT_DpRKT0_: 25| 6|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 6| size_t i = 0; 27| | 28| 216| while(i < format.size()) { ------------------ | Branch (28:10): [True: 216, False: 0] ------------------ 29| 216| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 6, False: 210] | Branch (29:30): [True: 6, False: 0] | Branch (29:59): [True: 6, False: 0] ------------------ 30| 6| oss << val; 31| 6| return do_fmt(oss, format.substr(i + 2), rest...); 32| 210| } else { 33| 210| oss << format[i]; 34| 210| } 35| | 36| 210| i += 1; 37| 210| } 38| 6|} _ZN5Botan3fmtIJPKcmEEENSt3__112basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEENS3_17basic_string_viewIcS6_EEDpRKT_: 53| 292|std::string fmt(std::string_view format, const T&... args) { 54| 292| std::ostringstream oss; 55| 292| oss.imbue(std::locale::classic()); 56| 292| fmt_detail::do_fmt(oss, format, args...); 57| 292| return oss.str(); 58| 292|} _ZN5Botan10fmt_detail6do_fmtIPKcJmEEEvRNSt3__119basic_ostringstreamIcNS4_11char_traitsIcEENS4_9allocatorIcEEEENS4_17basic_string_viewIcS7_EERKT_DpRKT0_: 25| 292|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) { 26| 292| size_t i = 0; 27| | 28| 292| while(i < format.size()) { ------------------ | Branch (28:10): [True: 292, False: 0] ------------------ 29| 292| if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') { ------------------ | Branch (29:10): [True: 292, False: 0] | Branch (29:30): [True: 292, False: 0] | Branch (29:59): [True: 292, False: 0] ------------------ 30| 292| oss << val; 31| 292| return do_fmt(oss, format.substr(i + 2), rest...); 32| 292| } else { 33| 0| oss << format[i]; 34| 0| } 35| | 36| 0| i += 1; 37| 0| } 38| 292|} _ZN5Botan14GCM_EncryptionC2ENSt3__110unique_ptrINS_11BlockCipherENS1_14default_deleteIS3_EEEEm: 79| 383| GCM_Mode(std::move(cipher), tag_size) {} _ZN5Botan14GCM_DecryptionC2ENSt3__110unique_ptrINS_11BlockCipherENS1_14default_deleteIS3_EEEEm: 100| 93| GCM_Mode(std::move(cipher), tag_size) {} _ZNK5Botan8GCM_Mode8tag_sizeEv: 39| 2.00k| size_t tag_size() const final { return m_tag_size; } _ZNK5Botan14GCM_Decryption18minimum_final_sizeEv: 104| 80| size_t minimum_final_size() const override { return tag_size(); } _ZNK5Botan5GHASH8key_specEv: 42| 476| Key_Length_Specification key_spec() const override { return Key_Length_Specification(16); } _ZN5Botan7swar_ltITkNSt3__117unsigned_integralEtEET_S2_S2_: 121| 148k|constexpr T swar_lt(T a, T b) { 122| | // The constant 0x808080... as a T 123| 148k| constexpr T hi1 = (static_cast(-1) / 255) << 7; 124| | // The constant 0x7F7F7F... as a T 125| 148k| constexpr T lo7 = static_cast(~hi1); 126| 148k| T r = (lo7 - a + b) & hi1; 127| | // Currently the mask is 80 if lt, otherwise 00. Convert to FF/00 128| 148k| return (r << 1) - (r >> 7); 129| 148k|} _ZN5Botan12mul_or_throwITkNSt3__117unsigned_integralEmEET_S2_S2_NS1_17basic_string_viewIcNS1_11char_traitsIcEEEE: 81| 6.00k|constexpr T mul_or_throw(T a, T b, std::string_view msg) { 82| 6.00k| if(auto r = checked_mul(a, b)) { ------------------ | Branch (82:12): [True: 6.00k, False: 0] ------------------ 83| 6.00k| return r.value(); 84| 6.00k| } else { 85| 0| throw Invalid_Argument(msg); 86| 0| } 87| 6.00k|} _ZN5Botan11checked_mulITkNSt3__117unsigned_integralEmEENS1_8optionalIT_EES3_S3_: 46| 4.98M|constexpr inline std::optional checked_mul(T a, T b) { 47| | // Multiplication by 1U is a hack to work around C's insane 48| | // integer promotion rules. 49| | // https://stackoverflow.com/questions/24795651 50| 4.98M| const T r = (1U * a) * b; 51| | // If a == 0 then the multiply certainly did not overflow 52| | // Otherwise r / a == b unless overflow occurred 53| 4.98M| if(a != 0 && r / a != b) { ------------------ | Branch (53:7): [True: 4.98M, False: 0] | Branch (53:17): [True: 0, False: 4.98M] ------------------ 54| 0| return {}; 55| 0| } 56| 4.98M| return r; 57| 4.98M|} _ZN5Botan13swar_in_rangeITkNSt3__117unsigned_integralEmEET_S2_S2_S2_: 144| 192k|constexpr T swar_in_range(T v, T lower, T upper) { 145| | // The constant 0x808080... as a T 146| 192k| constexpr T hi1 = (static_cast(-1) / 255) << 7; 147| | // The constant 0x7F7F7F... as a T 148| 192k| constexpr T lo7 = ~hi1; 149| | 150| 192k| const T sub = ((v | hi1) - (lower & lo7)) ^ ((v ^ (~lower)) & hi1); 151| 192k| const T a_lo = sub & lo7; 152| 192k| const T a_hi = sub & hi1; 153| 192k| return (lo7 - a_lo + upper) & hi1 & ~a_hi; 154| 192k|} _ZN5Botan23index_of_first_set_byteITkNSt3__117unsigned_integralEmEEmT_: 160| 192k|constexpr size_t index_of_first_set_byte(T v) { 161| | // The constant 0x010101... as a T 162| 192k| constexpr T lo1 = (static_cast(-1) / 255); 163| | // The constant 0x808080... as a T 164| 192k| constexpr T hi1 = lo1 << 7; 165| | // How many bits to shift in order to get the top byte 166| 192k| constexpr size_t bits = (sizeof(T) * 8) - 8; 167| | 168| 192k| return static_cast((((((v & hi1) - 1) & lo1) * lo1) >> bits) - 1); 169| 192k|} _ZN5Botan15checked_cast_toItmQaasr3stdE8integralINS_6detail19wrapped_type_helperIu14__remove_cvrefIT_EE4typeEEsr3stdE8integralINS2_Iu14__remove_cvrefIT0_EE4typeEEEES3_S7_: 104| 10|constexpr RT checked_cast_to(AT i) { 105| 10| return checked_cast_to_or_throw(i, "Error during integer conversion"); 106| 10|} _ZN5Botan24checked_cast_to_or_throwItNS_14Internal_ErrorEmQaasr3stdE8integralINS_6detail19wrapped_type_helperIu14__remove_cvrefIT_EE4typeEEsr3stdE8integralINS3_Iu14__remove_cvrefIT1_EE4typeEEEES4_S8_NSt3__117basic_string_viewIcNSC_11char_traitsIcEEEE: 91| 10|constexpr RT checked_cast_to_or_throw(AT i, std::string_view error_msg_on_fail) { 92| 10| const auto unwrapped_input = unwrap_strong_type(i); 93| | 94| 10| const auto unwrapped_result = static_cast>(unwrapped_input); 95| 10| if(unwrapped_input != static_cast>(unwrapped_result)) [[unlikely]] { ------------------ | Branch (95:7): [True: 0, False: 10] ------------------ 96| 0| throw ExceptionType(error_msg_on_fail); 97| 0| } 98| | 99| 10| return wrap_strong_type(unwrapped_result); 100| 10|} _ZN5Botan11checked_addITkNSt3__117unsigned_integralEjEENS1_8optionalIT_EES3_S3_: 19| 18.3k|constexpr inline std::optional checked_add(T a, T b) { 20| 18.3k| const T r = a + b; 21| 18.3k| if(r < a || r < b) { ------------------ | Branch (21:7): [True: 0, False: 18.3k] | Branch (21:16): [True: 0, False: 18.3k] ------------------ 22| 0| return {}; 23| 0| } 24| 18.3k| return r; 25| 18.3k|} _ZN5Botan11checked_addITkNSt3__117unsigned_integralEmTpTkNS1_17unsigned_integralEJmmEQ10all_same_vIT_DpT0_EEENS1_8optionalIS2_EES2_S2_S4_: 37| 16.6k|constexpr inline std::optional checked_add(T a, T b, Ts... rest) { 38| 16.6k| if(auto r = checked_add(a, b)) { ------------------ | Branch (38:12): [True: 16.6k, False: 0] ------------------ 39| 16.6k| return checked_add(r.value(), rest...); 40| 16.6k| } else { 41| 0| return {}; 42| 0| } 43| 16.6k|} _ZN5Botan11checked_addITkNSt3__117unsigned_integralEmEENS1_8optionalIT_EES3_S3_: 19| 54.8k|constexpr inline std::optional checked_add(T a, T b) { 20| 54.8k| const T r = a + b; 21| 54.8k| if(r < a || r < b) { ------------------ | Branch (21:7): [True: 0, False: 54.8k] | Branch (21:16): [True: 0, False: 54.8k] ------------------ 22| 0| return {}; 23| 0| } 24| 54.8k| return r; 25| 54.8k|} _ZN5Botan11checked_addITkNSt3__117unsigned_integralEmTpTkNS1_17unsigned_integralEJmEQ10all_same_vIT_DpT0_EEENS1_8optionalIS2_EES2_S2_S4_: 37| 16.6k|constexpr inline std::optional checked_add(T a, T b, Ts... rest) { 38| 16.6k| if(auto r = checked_add(a, b)) { ------------------ | Branch (38:12): [True: 16.6k, False: 0] ------------------ 39| 16.6k| return checked_add(r.value(), rest...); 40| 16.6k| } else { 41| 0| return {}; 42| 0| } 43| 16.6k|} _ZN5Botan12add_or_throwITkNSt3__117unsigned_integralEmEET_S2_S2_NS1_17basic_string_viewIcNS1_11char_traitsIcEEEE: 66| 2.97k|constexpr T add_or_throw(T a, T b, std::string_view msg) { 67| 2.97k| if(auto r = checked_add(a, b)) { ------------------ | Branch (67:12): [True: 2.97k, False: 0] ------------------ 68| 2.97k| return r.value(); 69| 2.97k| } else { 70| 0| throw Invalid_Argument(msg); 71| 0| } 72| 2.97k|} _ZN5Botan11checked_addITkNSt3__117unsigned_integralEmTpTkNS1_17unsigned_integralEJmmmmmmEQ10all_same_vIT_DpT0_EEENS1_8optionalIS2_EES2_S2_S4_: 37| 457|constexpr inline std::optional checked_add(T a, T b, Ts... rest) { 38| 457| if(auto r = checked_add(a, b)) { ------------------ | Branch (38:12): [True: 457, False: 0] ------------------ 39| 457| return checked_add(r.value(), rest...); 40| 457| } else { 41| 0| return {}; 42| 0| } 43| 457|} _ZN5Botan11checked_addITkNSt3__117unsigned_integralEmTpTkNS1_17unsigned_integralEJmmmmmEQ10all_same_vIT_DpT0_EEENS1_8optionalIS2_EES2_S2_S4_: 37| 457|constexpr inline std::optional checked_add(T a, T b, Ts... rest) { 38| 457| if(auto r = checked_add(a, b)) { ------------------ | Branch (38:12): [True: 457, False: 0] ------------------ 39| 457| return checked_add(r.value(), rest...); 40| 457| } else { 41| 0| return {}; 42| 0| } 43| 457|} _ZN5Botan11checked_addITkNSt3__117unsigned_integralEmTpTkNS1_17unsigned_integralEJmmmmEQ10all_same_vIT_DpT0_EEENS1_8optionalIS2_EES2_S2_S4_: 37| 457|constexpr inline std::optional checked_add(T a, T b, Ts... rest) { 38| 457| if(auto r = checked_add(a, b)) { ------------------ | Branch (38:12): [True: 457, False: 0] ------------------ 39| 457| return checked_add(r.value(), rest...); 40| 457| } else { 41| 0| return {}; 42| 0| } 43| 457|} _ZN5Botan11checked_addITkNSt3__117unsigned_integralEmTpTkNS1_17unsigned_integralEJmmmEQ10all_same_vIT_DpT0_EEENS1_8optionalIS2_EES2_S2_S4_: 37| 457|constexpr inline std::optional checked_add(T a, T b, Ts... rest) { 38| 457| if(auto r = checked_add(a, b)) { ------------------ | Branch (38:12): [True: 457, False: 0] ------------------ 39| 457| return checked_add(r.value(), rest...); 40| 457| } else { 41| 0| return {}; 42| 0| } 43| 457|} _ZN5Botan11checked_subITkNSt3__117unsigned_integralEmEENS1_8optionalIT_EES3_S3_: 28| 36|constexpr std::optional checked_sub(T a, T b) { 29| 36| if(b > a) { ------------------ | Branch (29:7): [True: 0, False: 36] ------------------ 30| 0| return {}; 31| 0| } 32| 36| return a - b; 33| 36|} _ZN5Botan8get_byteILm0EtEEhT0_QltT_stS1_: 81| 401k|{ 82| 401k| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 401k| return static_cast((input >> shift) & 0xFF); 84| 401k|} _ZN5Botan8get_byteILm1EtEEhT0_QltT_stS1_: 81| 401k|{ 82| 401k| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 401k| return static_cast((input >> shift) & 0xFF); 84| 401k|} _ZN5Botan11make_uint16Ehh: 92| 82.5k|inline constexpr uint16_t make_uint16(uint8_t i0, uint8_t i1) { 93| 82.5k| return static_cast((static_cast(i0) << 8) | i1); 94| 82.5k|} _ZN5Botan11make_uint32Ehhhh: 104| 25.4k|inline constexpr uint32_t make_uint32(uint8_t i0, uint8_t i1, uint8_t i2, uint8_t i3) { 105| 25.4k| return ((static_cast(i0) << 24) | (static_cast(i1) << 16) | (static_cast(i2) << 8) | 106| 25.4k| (static_cast(i3))); 107| 25.4k|} _ZN5Botan8store_beINS_6detail10AutoDetectEJRKmPhEEEDaDpOT0_: 745| 100k|inline constexpr auto store_be(ParamTs&&... params) { 746| 100k| return detail::store_any(std::forward(params)...); 747| 100k|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS0_20unsigned_integralishEmQoosr3stdE7same_asIS4_T0_Esr3stdE7same_asIT1_S5_EEEvS6_Ph: 711| 102k|inline constexpr void store_any(T in, uint8_t out[]) { 712| | // asserts that *out points to enough bytes to write into 713| 102k| store_any(in, std::span(out, sizeof(T))); 714| 102k|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS0_20unsigned_integralishEmTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm8EEEQsr3stdE7same_asIS4_T0_EEEvT1_OT2_: 646| 102k|inline constexpr void store_any(T in, OutR&& out_range) { 647| 102k| store_any(in, std::forward(out_range)); 648| 102k|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEmTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm8EEEQnt15custom_storableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEEvS9_OT1_: 525| 179k|inline constexpr void store_any(WrappedInT wrapped_in, OutR&& out_range) { 526| 179k| const auto in = detail::unwrap_strong_type_or_enum(wrapped_in); 527| 179k| using InT = decltype(in); 528| 179k| ranges::assert_exact_byte_length(out_range); 529| 179k| const std::span out{out_range}; 530| | 531| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 532| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 533| | // in a `constexpr` context. 534| 179k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (534:7): [Folded, False: 179k] ------------------ 535| 0| return fallback_store_any(in, std::forward(out_range)); 536| 179k| } else { 537| | if constexpr(sizeof(InT) == 1) { 538| | out[0] = static_cast(in); 539| | } else if constexpr(endianness == std::endian::native) { 540| | typecast_copy(out, in); 541| 179k| } else { 542| 179k| static_assert(opposite(endianness) == std::endian::native); 543| 179k| typecast_copy(out, reverse_bytes(in)); 544| 179k| } 545| 179k| } 546| 179k|} _ZN5Botan6detail26unwrap_strong_type_or_enumITkNS0_20unsigned_integralishEmEEDaT_: 190| 179k|constexpr auto unwrap_strong_type_or_enum(InT t) { 191| | if constexpr(std::is_enum_v) { 192| | // TODO: C++23: use std::to_underlying(in) instead 193| | return static_cast>(t); 194| 179k| } else { 195| 179k| return Botan::unwrap_strong_type(t); 196| 179k| } 197| 179k|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEmEET0_PKhm: 454| 47.1k|inline constexpr OutT load_any(const uint8_t in[], size_t off) { 455| | // asserts that *in points to enough bytes to read at offset off 456| 47.1k| constexpr size_t out_size = sizeof(OutT); 457| 47.1k| return load_any(std::span(in + off * out_size, out_size)); 458| 47.1k|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEmTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm8EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_: 278| 356k|inline constexpr WrappedOutT load_any(InR&& in_range) { 279| 356k| using OutT = detail::wrapped_type; 280| 356k| ranges::assert_exact_byte_length(in_range); 281| | 282| 356k| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 356k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { 287| 356k| return fallback_load_any(std::forward(in_range)); 288| 356k| } else { 289| 356k| const std::span in{in_range}; 290| 356k| if constexpr(sizeof(OutT) == 1) { 291| 356k| return static_cast(in[0]); 292| 356k| } else if constexpr(endianness == std::endian::native) { 293| 356k| return typecast_copy(in); 294| 356k| } else { 295| 356k| static_assert(opposite(endianness) == std::endian::native); 296| 356k| return reverse_bytes(typecast_copy(in)); 297| 356k| } 298| 356k| } 299| 356k| }()); 300| 356k|} _ZN5Botan6detail24wrap_strong_type_or_enumITkNS0_20unsigned_integralishEmTkNSt3__117unsigned_integralEmEEDaT0_: 200| 370k|constexpr auto wrap_strong_type_or_enum(T t) { 201| | if constexpr(std::is_enum_v) { 202| | return static_cast(t); 203| 370k| } else { 204| 370k| return Botan::wrap_strong_type(t); 205| 370k| } 206| 370k|} _ZZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEmTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm8EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_ENKUlvE_clEv: 282| 356k| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 356k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (286:10): [Folded, False: 356k] ------------------ 287| 0| return fallback_load_any(std::forward(in_range)); 288| 356k| } else { 289| 356k| const std::span in{in_range}; 290| | if constexpr(sizeof(OutT) == 1) { 291| | return static_cast(in[0]); 292| | } else if constexpr(endianness == std::endian::native) { 293| | return typecast_copy(in); 294| 356k| } else { 295| 356k| static_assert(opposite(endianness) == std::endian::native); 296| 356k| return reverse_bytes(typecast_copy(in)); 297| 356k| } 298| 356k| } 299| 356k| }()); _ZN5Botan8get_byteILm7EmEEhT0_QltT_stS1_: 81| 402|{ 82| 402| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 402| return static_cast((input >> shift) & 0xFF); 84| 402|} _ZN5Botan8get_byteILm6EmEEhT0_QltT_stS1_: 81| 402|{ 82| 402| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 402| return static_cast((input >> shift) & 0xFF); 84| 402|} _ZN5Botan8get_byteILm5EmEEhT0_QltT_stS1_: 81| 402|{ 82| 402| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 402| return static_cast((input >> shift) & 0xFF); 84| 402|} _ZN5Botan8get_byteILm4EmEEhT0_QltT_stS1_: 81| 402|{ 82| 402| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 402| return static_cast((input >> shift) & 0xFF); 84| 402|} _ZN5Botan8get_byteILm3EmEEhT0_QltT_stS1_: 81| 402|{ 82| 402| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 402| return static_cast((input >> shift) & 0xFF); 84| 402|} _ZN5Botan8get_byteILm2EmEEhT0_QltT_stS1_: 81| 402|{ 82| 402| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 402| return static_cast((input >> shift) & 0xFF); 84| 402|} _ZN5Botan8get_byteILm1EmEEhT0_QltT_stS1_: 81| 402|{ 82| 402| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 402| return static_cast((input >> shift) & 0xFF); 84| 402|} _ZN5Botan8get_byteILm0EmEEhT0_QltT_stS1_: 81| 592|{ 82| 592| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 592| return static_cast((input >> shift) & 0xFF); 84| 592|} _ZN5Botan6detail24wrap_strong_type_or_enumITkNS0_20unsigned_integralishEtTkNSt3__117unsigned_integralEtEEDaT0_: 200| 1.48k|constexpr auto wrap_strong_type_or_enum(T t) { 201| | if constexpr(std::is_enum_v) { 202| | return static_cast(t); 203| 1.48k| } else { 204| 1.48k| return Botan::wrap_strong_type(t); 205| 1.48k| } 206| 1.48k|} _ZN5Botan7load_beItJPKhRmEEEDaDpOT0_: 504| 1.48k|inline constexpr auto load_be(ParamTs&&... params) { 505| 1.48k| return detail::load_any(std::forward(params)...); 506| 1.48k|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEtEET0_PKhm: 454| 1.48k|inline constexpr OutT load_any(const uint8_t in[], size_t off) { 455| | // asserts that *in points to enough bytes to read at offset off 456| 1.48k| constexpr size_t out_size = sizeof(OutT); 457| 1.48k| return load_any(std::span(in + off * out_size, out_size)); 458| 1.48k|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEtTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm2EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_: 278| 1.48k|inline constexpr WrappedOutT load_any(InR&& in_range) { 279| 1.48k| using OutT = detail::wrapped_type; 280| 1.48k| ranges::assert_exact_byte_length(in_range); 281| | 282| 1.48k| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 1.48k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { 287| 1.48k| return fallback_load_any(std::forward(in_range)); 288| 1.48k| } else { 289| 1.48k| const std::span in{in_range}; 290| 1.48k| if constexpr(sizeof(OutT) == 1) { 291| 1.48k| return static_cast(in[0]); 292| 1.48k| } else if constexpr(endianness == std::endian::native) { 293| 1.48k| return typecast_copy(in); 294| 1.48k| } else { 295| 1.48k| static_assert(opposite(endianness) == std::endian::native); 296| 1.48k| return reverse_bytes(typecast_copy(in)); 297| 1.48k| } 298| 1.48k| } 299| 1.48k| }()); 300| 1.48k|} _ZZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEtTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm2EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_ENKUlvE_clEv: 282| 1.48k| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 1.48k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (286:10): [Folded, False: 1.48k] ------------------ 287| 0| return fallback_load_any(std::forward(in_range)); 288| 1.48k| } else { 289| 1.48k| const std::span in{in_range}; 290| | if constexpr(sizeof(OutT) == 1) { 291| | return static_cast(in[0]); 292| | } else if constexpr(endianness == std::endian::native) { 293| | return typecast_copy(in); 294| 1.48k| } else { 295| 1.48k| static_assert(opposite(endianness) == std::endian::native); 296| 1.48k| return reverse_bytes(typecast_copy(in)); 297| 1.48k| } 298| 1.48k| } 299| 1.48k| }()); _ZN5Botan7load_beIjJPKhRmEEEDaDpOT0_: 504| 130|inline constexpr auto load_be(ParamTs&&... params) { 505| 130| return detail::load_any(std::forward(params)...); 506| 130|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEjEET0_PKhm: 454| 2.15k|inline constexpr OutT load_any(const uint8_t in[], size_t off) { 455| | // asserts that *in points to enough bytes to read at offset off 456| 2.15k| constexpr size_t out_size = sizeof(OutT); 457| 2.15k| return load_any(std::span(in + off * out_size, out_size)); 458| 2.15k|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEjTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm4EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_: 278| 2.15k|inline constexpr WrappedOutT load_any(InR&& in_range) { 279| 2.15k| using OutT = detail::wrapped_type; 280| 2.15k| ranges::assert_exact_byte_length(in_range); 281| | 282| 2.15k| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 2.15k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { 287| 2.15k| return fallback_load_any(std::forward(in_range)); 288| 2.15k| } else { 289| 2.15k| const std::span in{in_range}; 290| 2.15k| if constexpr(sizeof(OutT) == 1) { 291| 2.15k| return static_cast(in[0]); 292| 2.15k| } else if constexpr(endianness == std::endian::native) { 293| 2.15k| return typecast_copy(in); 294| 2.15k| } else { 295| 2.15k| static_assert(opposite(endianness) == std::endian::native); 296| 2.15k| return reverse_bytes(typecast_copy(in)); 297| 2.15k| } 298| 2.15k| } 299| 2.15k| }()); 300| 2.15k|} _ZN5Botan6detail24wrap_strong_type_or_enumITkNS0_20unsigned_integralishEjTkNSt3__117unsigned_integralEjEEDaT0_: 200| 2.51k|constexpr auto wrap_strong_type_or_enum(T t) { 201| | if constexpr(std::is_enum_v) { 202| | return static_cast(t); 203| 2.51k| } else { 204| 2.51k| return Botan::wrap_strong_type(t); 205| 2.51k| } 206| 2.51k|} _ZZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEjTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm4EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_ENKUlvE_clEv: 282| 2.15k| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 2.15k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (286:10): [Folded, False: 2.15k] ------------------ 287| 0| return fallback_load_any(std::forward(in_range)); 288| 2.15k| } else { 289| 2.15k| const std::span in{in_range}; 290| | if constexpr(sizeof(OutT) == 1) { 291| | return static_cast(in[0]); 292| | } else if constexpr(endianness == std::endian::native) { 293| | return typecast_copy(in); 294| 2.15k| } else { 295| 2.15k| static_assert(opposite(endianness) == std::endian::native); 296| 2.15k| return reverse_bytes(typecast_copy(in)); 297| 2.15k| } 298| 2.15k| } 299| 2.15k| }()); _ZN5Botan8get_byteILm0EjEEhT0_QltT_stS1_: 81| 576|{ 82| 576| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 576| return static_cast((input >> shift) & 0xFF); 84| 576|} _ZN5Botan8get_byteILm1EjEEhT0_QltT_stS1_: 81| 21.4k|{ 82| 21.4k| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 21.4k| return static_cast((input >> shift) & 0xFF); 84| 21.4k|} _ZN5Botan8get_byteILm2EjEEhT0_QltT_stS1_: 81| 21.4k|{ 82| 21.4k| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 21.4k| return static_cast((input >> shift) & 0xFF); 84| 21.4k|} _ZN5Botan8get_byteILm3EjEEhT0_QltT_stS1_: 81| 21.4k|{ 82| 21.4k| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 21.4k| return static_cast((input >> shift) & 0xFF); 84| 21.4k|} _ZN5Botan8store_leINS_6detail10AutoDetectEJmEEEDaDpOT0_: 736| 46.3k|inline constexpr auto store_le(ParamTs&&... params) { 737| 46.3k| return detail::store_any(std::forward(params)...); 738| 46.3k|} _ZN5Botan6detail9store_anyILNSt3__16endianE57005ENS0_10AutoDetectETpTkNS0_20unsigned_integralishEJmEQ10all_same_vIDpT1_EEEDaS6_: 696| 46.3k|inline constexpr auto store_any(Ts... ins) { 697| 46.3k| return store_any(std::array{ins...}); 698| 46.3k|} _ZN5Botan6detail9store_anyILNSt3__16endianE57005ENS0_10AutoDetectETkNS_6ranges14spanable_rangeENS2_5arrayImLm1EEEQoooosr3stdE7same_asIS4_T0_Eaasr6rangesE25statically_spanable_rangeIS8_Esr3stdE21default_initializableIS8_Esr8conceptsE21resizable_byte_bufferIS8_EEEDaOT1_: 663| 46.3k|inline constexpr auto store_any(InR&& in_range) { 664| 46.3k| auto out = []([[maybe_unused]] const auto& in) { 665| 46.3k| if constexpr(std::same_as) { 666| 46.3k| if constexpr(ranges::statically_spanable_range) { 667| 46.3k| constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| 46.3k| return std::array(); 669| 46.3k| } else { 670| 46.3k| static_assert( 671| 46.3k| !std::same_as, 672| 46.3k| "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| 46.3k| } 674| 46.3k| } else if constexpr(concepts::resizable_byte_buffer) { 675| 46.3k| return OutR(std::span{in}.size_bytes()); 676| 46.3k| } else { 677| 46.3k| return OutR{}; 678| 46.3k| } 679| 46.3k| }(in_range); 680| | 681| 46.3k| store_any>(out, std::forward(in_range)); 682| 46.3k| return out; 683| 46.3k|} _ZZN5Botan6detail9store_anyILNSt3__16endianE57005ENS0_10AutoDetectETkNS_6ranges14spanable_rangeENS2_5arrayImLm1EEEQoooosr3stdE7same_asIS4_T0_Eaasr6rangesE25statically_spanable_rangeIS8_Esr3stdE21default_initializableIS8_Esr8conceptsE21resizable_byte_bufferIS8_EEEDaOT1_ENKUlRKT_E_clIS7_EEDaSD_: 664| 46.3k| auto out = []([[maybe_unused]] const auto& in) { 665| 46.3k| if constexpr(std::same_as) { 666| 46.3k| if constexpr(ranges::statically_spanable_range) { 667| 46.3k| constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| 46.3k| return std::array(); 669| | } else { 670| | static_assert( 671| | !std::same_as, 672| | "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| | } 674| | } else if constexpr(concepts::resizable_byte_buffer) { 675| | return OutR(std::span{in}.size_bytes()); 676| | } else { 677| | return OutR{}; 678| | } 679| 46.3k| }(in_range); _ZN5Botan6detail9store_anyILNSt3__16endianE57005EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_5arrayIhLm8EEETkNS4_14spanable_rangeENS6_ImLm1EEEQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISB_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEEvOT1_RKSG_: 603| 46.3k|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 46.3k| ranges::assert_equal_byte_lengths(out, in); 605| 46.3k| using element_type = std::ranges::range_value_t; 606| | 607| 46.3k| const auto store_elementwise = [&] { 608| 46.3k| constexpr size_t bytes_per_element = sizeof(element_type); 609| 46.3k| std::span out_s(out); 610| 46.3k| for(const auto in_elem : in) { 611| 46.3k| store_any(out_s.template first(), in_elem); 612| 46.3k| out_s = out_s.subspan(bytes_per_element); 613| 46.3k| } 614| 46.3k| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 46.3k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 46.3k] ------------------ 620| 0| store_elementwise(); 621| 46.3k| } else { 622| 46.3k| if constexpr(endianness == std::endian::native && !custom_storable) { 623| 46.3k| typecast_copy(out, in); 624| | } else { 625| | store_elementwise(); 626| | } 627| 46.3k| } 628| 46.3k|} _ZN5Botan6detail9store_anyILNSt3__16endianE57005ETkNS0_20unsigned_integralishEmTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm8EEEQnt15custom_storableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEEvS9_OT1_: 525| 548|inline constexpr void store_any(WrappedInT wrapped_in, OutR&& out_range) { 526| 548| const auto in = detail::unwrap_strong_type_or_enum(wrapped_in); 527| 548| using InT = decltype(in); 528| 548| ranges::assert_exact_byte_length(out_range); 529| 548| const std::span out{out_range}; 530| | 531| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 532| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 533| | // in a `constexpr` context. 534| 548| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (534:7): [Folded, False: 548] ------------------ 535| 0| return fallback_store_any(in, std::forward(out_range)); 536| 548| } else { 537| | if constexpr(sizeof(InT) == 1) { 538| | out[0] = static_cast(in); 539| 548| } else if constexpr(endianness == std::endian::native) { 540| 548| typecast_copy(out, in); 541| | } else { 542| | static_assert(opposite(endianness) == std::endian::native); 543| | typecast_copy(out, reverse_bytes(in)); 544| | } 545| 548| } 546| 548|} _ZN5Botan12get_byte_varImEEhmT_: 69| 80.4k|inline constexpr uint8_t get_byte_var(size_t byte_num, T input) { 70| 80.4k| return static_cast(input >> (((~byte_num) & (sizeof(T) - 1)) << 3)); 71| 80.4k|} _ZN5Botan8store_beINS_6detail10AutoDetectEJRjRA4_hEEEDaDpOT0_: 745| 33|inline constexpr auto store_be(ParamTs&&... params) { 746| 33| return detail::store_any(std::forward(params)...); 747| 33|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS0_20unsigned_integralishEjQoosr3stdE7same_asIS4_T0_Esr3stdE7same_asIT1_S5_EEEvS6_Ph: 711| 28.2k|inline constexpr void store_any(T in, uint8_t out[]) { 712| | // asserts that *out points to enough bytes to write into 713| 28.2k| store_any(in, std::span(out, sizeof(T))); 714| 28.2k|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS0_20unsigned_integralishEjTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm4EEEQsr3stdE7same_asIS4_T0_EEEvT1_OT2_: 646| 28.2k|inline constexpr void store_any(T in, OutR&& out_range) { 647| 28.2k| store_any(in, std::forward(out_range)); 648| 28.2k|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEjTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm4EEEQnt15custom_storableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEEvS9_OT1_: 525| 303k|inline constexpr void store_any(WrappedInT wrapped_in, OutR&& out_range) { 526| 303k| const auto in = detail::unwrap_strong_type_or_enum(wrapped_in); 527| 303k| using InT = decltype(in); 528| 303k| ranges::assert_exact_byte_length(out_range); 529| 303k| const std::span out{out_range}; 530| | 531| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 532| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 533| | // in a `constexpr` context. 534| 303k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (534:7): [Folded, False: 303k] ------------------ 535| 0| return fallback_store_any(in, std::forward(out_range)); 536| 303k| } else { 537| | if constexpr(sizeof(InT) == 1) { 538| | out[0] = static_cast(in); 539| | } else if constexpr(endianness == std::endian::native) { 540| | typecast_copy(out, in); 541| 303k| } else { 542| 303k| static_assert(opposite(endianness) == std::endian::native); 543| 303k| typecast_copy(out, reverse_bytes(in)); 544| 303k| } 545| 303k| } 546| 303k|} _ZN5Botan6detail26unwrap_strong_type_or_enumITkNS0_20unsigned_integralishEjEEDaT_: 190| 303k|constexpr auto unwrap_strong_type_or_enum(InT t) { 191| | if constexpr(std::is_enum_v) { 192| | // TODO: C++23: use std::to_underlying(in) instead 193| | return static_cast>(t); 194| 303k| } else { 195| 303k| return Botan::unwrap_strong_type(t); 196| 303k| } 197| 303k|} _ZN5Botan8store_leINS_6detail10AutoDetectEJRmRA8_hEEEDaDpOT0_: 736| 234|inline constexpr auto store_le(ParamTs&&... params) { 737| 234| return detail::store_any(std::forward(params)...); 738| 234|} _ZN5Botan6detail9store_anyILNSt3__16endianE57005ENS0_10AutoDetectETkNS0_20unsigned_integralishEmQoosr3stdE7same_asIS4_T0_Esr3stdE7same_asIT1_S5_EEEvS6_Ph: 711| 314|inline constexpr void store_any(T in, uint8_t out[]) { 712| | // asserts that *out points to enough bytes to write into 713| 314| store_any(in, std::span(out, sizeof(T))); 714| 314|} _ZN5Botan6detail9store_anyILNSt3__16endianE57005ENS0_10AutoDetectETkNS0_20unsigned_integralishEmTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm8EEEQsr3stdE7same_asIS4_T0_EEEvT1_OT2_: 646| 314|inline constexpr void store_any(T in, OutR&& out_range) { 647| 314| store_any(in, std::forward(out_range)); 648| 314|} _ZN5Botan7load_beImJPKhiEEEDaDpOT0_: 504| 5.24k|inline constexpr auto load_be(ParamTs&&... params) { 505| 5.24k| return detail::load_any(std::forward(params)...); 506| 5.24k|} _ZN5Botan7load_beImJRA32_mRPKhRmEEEDaDpOT0_: 504| 1.04k|inline constexpr auto load_be(ParamTs&&... params) { 505| 1.04k| return detail::load_any(std::forward(params)...); 506| 1.04k|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206EmTkNS0_20unsigned_integralishEmQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asIT1_S5_EEEvPS6_PKhm: 483| 1.04k|inline constexpr void load_any(T out[], const uint8_t in[], size_t count) { 484| | // asserts that *in and *out point to the correct amount of memory 485| 1.04k| load_any(std::span(out, count), std::span(in, count * sizeof(T))); 486| 1.04k|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeENS2_4spanImLm18446744073709551615EEETkNS4_16contiguous_rangeIhEENS5_IKhLm18446744073709551615EEEQaa20unsigned_integralishINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT1_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISH_EESI_E4type10value_typeEEoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISP_SN_EEEvOSE_RKT2_: 355| 1.04k|inline constexpr void load_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 356| 1.04k| ranges::assert_equal_byte_lengths(out, in); 357| 1.04k| using element_type = std::ranges::range_value_t; 358| | 359| 1.04k| const auto load_elementwise = [&] { 360| 1.04k| constexpr size_t bytes_per_element = sizeof(element_type); 361| 1.04k| std::span in_s(in); 362| 1.04k| for(auto& out_elem : out) { 363| 1.04k| out_elem = load_any(in_s.template first()); 364| 1.04k| in_s = in_s.subspan(bytes_per_element); 365| 1.04k| } 366| 1.04k| }; 367| | 368| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 369| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 370| | // in a `constexpr` context. 371| 1.04k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (371:7): [Folded, False: 1.04k] ------------------ 372| 0| load_elementwise(); 373| 1.04k| } else { 374| | if constexpr(endianness == std::endian::native && !custom_loadable) { 375| | typecast_copy(out, in); 376| 1.04k| } else { 377| 1.04k| load_elementwise(); 378| 1.04k| } 379| 1.04k| } 380| 1.04k|} _ZZN5Botan6detail8load_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeENS2_4spanImLm18446744073709551615EEETkNS4_16contiguous_rangeIhEENS5_IKhLm18446744073709551615EEEQaa20unsigned_integralishINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT1_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISH_EESI_E4type10value_typeEEoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISP_SN_EEEvOSE_RKT2_ENKUlvE_clEv: 359| 1.04k| const auto load_elementwise = [&] { 360| 1.04k| constexpr size_t bytes_per_element = sizeof(element_type); 361| 1.04k| std::span in_s(in); 362| 9.69k| for(auto& out_elem : out) { ------------------ | Branch (362:26): [True: 9.69k, False: 1.04k] ------------------ 363| 9.69k| out_elem = load_any(in_s.template first()); 364| 9.69k| in_s = in_s.subspan(bytes_per_element); 365| 9.69k| } 366| 1.04k| }; _ZN5Botan8store_beINS_6detail10AutoDetectEJPhRmEEEDaDpOT0_: 745| 9.69k|inline constexpr auto store_be(ParamTs&&... params) { 746| 9.69k| return detail::store_any(std::forward(params)...); 747| 9.69k|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS0_20unsigned_integralishEmTpTkNS0_20unsigned_integralishEJEQaaoosr3stdE7same_asIS4_T0_Esr3stdE7same_asIT1_S5_E10all_same_vIS6_DpT2_EEEvPhS6_S8_: 723| 9.69k|inline constexpr void store_any(uint8_t out[], T0 in0, Ts... ins) { 724| 9.69k| constexpr auto bytes = sizeof(in0) + (sizeof(ins) + ... + 0); 725| | // asserts that *out points to the correct amount of memory 726| 9.69k| store_any(std::span(out, bytes), in0, ins...); 727| 9.69k|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm8EEETpTkNS0_20unsigned_integralishEJmEQaagtsZT2_Li0Eooaasr3stdE7same_asINS0_10AutoDetectET0_E10all_same_vIDpT2_Eaa20unsigned_integralishIS9_E10all_same_vIS9_SB_EEEvOT1_SB_: 582| 76.1k|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, Ts... ins) { 583| 76.1k| ranges::assert_exact_byte_length<(sizeof(Ts) + ...)>(out); 584| 76.1k| auto store_one = [off = 0](auto o, T i) mutable { 585| 76.1k| store_any(i, o.subspan(off).template first()); 586| 76.1k| off += sizeof(T); 587| 76.1k| }; 588| | 589| 76.1k| (store_one(std::span{out}, ins), ...); 590| 76.1k|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm8EEETpTkNS0_20unsigned_integralishEJmEQaagtsZT2_Li0Eooaasr3stdE7same_asINS0_10AutoDetectET0_E10all_same_vIDpT2_Eaa20unsigned_integralishIS9_E10all_same_vIS9_SB_EEEvOT1_SB_ENUlTyS9_T_E_clImS7_EEDaS9_SE_: 584| 76.1k| auto store_one = [off = 0](auto o, T i) mutable { 585| 76.1k| store_any(i, o.subspan(off).template first()); 586| 76.1k| off += sizeof(T); 587| 76.1k| }; _ZN5Botan7load_leIjJRPKhiEEEDaDpOT0_: 495| 351|inline constexpr auto load_le(ParamTs&&... params) { 496| 351| return detail::load_any(std::forward(params)...); 497| 351|} _ZN5Botan6detail8load_anyILNSt3__16endianE57005ETkNS0_20unsigned_integralishEjEET0_PKhm: 454| 351|inline constexpr OutT load_any(const uint8_t in[], size_t off) { 455| | // asserts that *in points to enough bytes to read at offset off 456| 351| constexpr size_t out_size = sizeof(OutT); 457| 351| return load_any(std::span(in + off * out_size, out_size)); 458| 351|} _ZN5Botan6detail8load_anyILNSt3__16endianE57005ETkNS0_20unsigned_integralishEjTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm4EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_: 278| 351|inline constexpr WrappedOutT load_any(InR&& in_range) { 279| 351| using OutT = detail::wrapped_type; 280| 351| ranges::assert_exact_byte_length(in_range); 281| | 282| 351| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 351| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { 287| 351| return fallback_load_any(std::forward(in_range)); 288| 351| } else { 289| 351| const std::span in{in_range}; 290| 351| if constexpr(sizeof(OutT) == 1) { 291| 351| return static_cast(in[0]); 292| 351| } else if constexpr(endianness == std::endian::native) { 293| 351| return typecast_copy(in); 294| 351| } else { 295| 351| static_assert(opposite(endianness) == std::endian::native); 296| 351| return reverse_bytes(typecast_copy(in)); 297| 351| } 298| 351| } 299| 351| }()); 300| 351|} _ZZN5Botan6detail8load_anyILNSt3__16endianE57005ETkNS0_20unsigned_integralishEjTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm4EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_ENKUlvE_clEv: 282| 351| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 351| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (286:10): [Folded, False: 351] ------------------ 287| 0| return fallback_load_any(std::forward(in_range)); 288| 351| } else { 289| 351| const std::span in{in_range}; 290| | if constexpr(sizeof(OutT) == 1) { 291| | return static_cast(in[0]); 292| 351| } else if constexpr(endianness == std::endian::native) { 293| 351| return typecast_copy(in); 294| | } else { 295| | static_assert(opposite(endianness) == std::endian::native); 296| | return reverse_bytes(typecast_copy(in)); 297| | } 298| 351| } 299| 351| }()); _ZN5Botan7load_leImJPKhiEEEDaDpOT0_: 495| 168|inline constexpr auto load_le(ParamTs&&... params) { 496| 168| return detail::load_any(std::forward(params)...); 497| 168|} _ZN5Botan6detail8load_anyILNSt3__16endianE57005ETkNS0_20unsigned_integralishEmEET0_PKhm: 454| 1.56k|inline constexpr OutT load_any(const uint8_t in[], size_t off) { 455| | // asserts that *in points to enough bytes to read at offset off 456| 1.56k| constexpr size_t out_size = sizeof(OutT); 457| 1.56k| return load_any(std::span(in + off * out_size, out_size)); 458| 1.56k|} _ZN5Botan6detail8load_anyILNSt3__16endianE57005ETkNS0_20unsigned_integralishEmTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm8EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_: 278| 1.56k|inline constexpr WrappedOutT load_any(InR&& in_range) { 279| 1.56k| using OutT = detail::wrapped_type; 280| 1.56k| ranges::assert_exact_byte_length(in_range); 281| | 282| 1.56k| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 1.56k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { 287| 1.56k| return fallback_load_any(std::forward(in_range)); 288| 1.56k| } else { 289| 1.56k| const std::span in{in_range}; 290| 1.56k| if constexpr(sizeof(OutT) == 1) { 291| 1.56k| return static_cast(in[0]); 292| 1.56k| } else if constexpr(endianness == std::endian::native) { 293| 1.56k| return typecast_copy(in); 294| 1.56k| } else { 295| 1.56k| static_assert(opposite(endianness) == std::endian::native); 296| 1.56k| return reverse_bytes(typecast_copy(in)); 297| 1.56k| } 298| 1.56k| } 299| 1.56k| }()); 300| 1.56k|} _ZZN5Botan6detail8load_anyILNSt3__16endianE57005ETkNS0_20unsigned_integralishEmTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm8EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_ENKUlvE_clEv: 282| 1.56k| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 1.56k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (286:10): [Folded, False: 1.56k] ------------------ 287| 0| return fallback_load_any(std::forward(in_range)); 288| 1.56k| } else { 289| 1.56k| const std::span in{in_range}; 290| | if constexpr(sizeof(OutT) == 1) { 291| | return static_cast(in[0]); 292| 1.56k| } else if constexpr(endianness == std::endian::native) { 293| 1.56k| return typecast_copy(in); 294| | } else { 295| | static_assert(opposite(endianness) == std::endian::native); 296| | return reverse_bytes(typecast_copy(in)); 297| | } 298| 1.56k| } 299| 1.56k| }()); _ZN5Botan7load_leImJRPKhiEEEDaDpOT0_: 495| 1.35k|inline constexpr auto load_le(ParamTs&&... params) { 496| 1.35k| return detail::load_any(std::forward(params)...); 497| 1.35k|} _ZN5Botan8store_leINS_6detail10AutoDetectEJRPhRmS5_EEEDaDpOT0_: 736| 117|inline constexpr auto store_le(ParamTs&&... params) { 737| 117| return detail::store_any(std::forward(params)...); 738| 117|} _ZN5Botan6detail9store_anyILNSt3__16endianE57005ENS0_10AutoDetectETkNS0_20unsigned_integralishEmTpTkNS0_20unsigned_integralishEJmEQaaoosr3stdE7same_asIS4_T0_Esr3stdE7same_asIT1_S5_E10all_same_vIS6_DpT2_EEEvPhS6_S8_: 723| 117|inline constexpr void store_any(uint8_t out[], T0 in0, Ts... ins) { 724| 117| constexpr auto bytes = sizeof(in0) + (sizeof(ins) + ... + 0); 725| | // asserts that *out points to the correct amount of memory 726| 117| store_any(std::span(out, bytes), in0, ins...); 727| 117|} _ZN5Botan6detail9store_anyILNSt3__16endianE57005EmTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm16EEETpTkNS0_20unsigned_integralishEJmmEQaagtsZT2_Li0Eooaasr3stdE7same_asINS0_10AutoDetectET0_E10all_same_vIDpT2_Eaa20unsigned_integralishIS9_E10all_same_vIS9_SB_EEEvOT1_SB_: 582| 117|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, Ts... ins) { 583| 117| ranges::assert_exact_byte_length<(sizeof(Ts) + ...)>(out); 584| 117| auto store_one = [off = 0](auto o, T i) mutable { 585| 117| store_any(i, o.subspan(off).template first()); 586| 117| off += sizeof(T); 587| 117| }; 588| | 589| 117| (store_one(std::span{out}, ins), ...); 590| 117|} _ZZN5Botan6detail9store_anyILNSt3__16endianE57005EmTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm16EEETpTkNS0_20unsigned_integralishEJmmEQaagtsZT2_Li0Eooaasr3stdE7same_asINS0_10AutoDetectET0_E10all_same_vIDpT2_Eaa20unsigned_integralishIS9_E10all_same_vIS9_SB_EEEvOT1_SB_ENUlTyS9_T_E_clImS7_EEDaS9_SE_: 584| 234| auto store_one = [off = 0](auto o, T i) mutable { 585| 234| store_any(i, o.subspan(off).template first()); 586| 234| off += sizeof(T); 587| 234| }; _ZN5Botan7load_beIjJPKhiEEEDaDpOT0_: 504| 459|inline constexpr auto load_be(ParamTs&&... params) { 505| 459| return detail::load_any(std::forward(params)...); 506| 459|} _ZN5Botan7load_leImJPKhRmEEEDaDpOT0_: 495| 40|inline constexpr auto load_le(ParamTs&&... params) { 496| 40| return detail::load_any(std::forward(params)...); 497| 40|} _ZN5Botan8store_leINS_6detail10AutoDetectEJRKmPhEEEDaDpOT0_: 736| 80|inline constexpr auto store_le(ParamTs&&... params) { 737| 80| return detail::store_any(std::forward(params)...); 738| 80|} _ZN5Botan11copy_out_beITkNS_6ranges14spanable_rangeENSt3__16vectorIjNS_16secure_allocatorIjEEEEEEvNS2_4spanIhLm18446744073709551615EEERKT_: 773| 38.9k|inline void copy_out_be(std::span out, const InR& in) { 774| 38.9k| using T = std::ranges::range_value_t; 775| 38.9k| std::span in_s{in}; 776| 38.9k| const auto remaining_bytes = detail::copy_out_any_word_aligned_portion(out, in_s); 777| | 778| | // copy remaining bytes as a partial word 779| 38.9k| for(size_t i = 0; i < remaining_bytes; ++i) { ------------------ | Branch (779:22): [True: 0, False: 38.9k] ------------------ 780| 0| out[i] = get_byte_var(i, in_s.front()); 781| 0| } 782| 38.9k|} _ZN5Botan6detail33copy_out_any_word_aligned_portionILNSt3__16endianE64206ETkNS0_20unsigned_integralishEjEEmRNS2_4spanIhLm18446744073709551615EEERNS4_IKT0_Lm18446744073709551615EEE: 752| 38.9k|inline size_t copy_out_any_word_aligned_portion(std::span& out, std::span& in) { 753| 38.9k| const size_t full_words = out.size() / sizeof(T); 754| 38.9k| const size_t full_word_bytes = full_words * sizeof(T); 755| 38.9k| const size_t remaining_bytes = out.size() - full_word_bytes; 756| 38.9k| BOTAN_ASSERT_NOMSG(in.size_bytes() >= full_word_bytes + remaining_bytes); ------------------ | | 84| 38.9k| do { \ | | 85| 38.9k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 38.9k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 38.9k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 38.9k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 38.9k] | | ------------------ ------------------ 757| | 758| | // copy full words 759| 38.9k| store_any(out.first(full_word_bytes), in.first(full_words)); 760| 38.9k| out = out.subspan(full_word_bytes); 761| 38.9k| in = in.subspan(full_words); 762| | 763| 38.9k| return remaining_bytes; 764| 38.9k|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206EjTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm18446744073709551615EEETkNS4_14spanable_rangeENS6_IKjLm18446744073709551615EEEQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISB_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEEvOT1_RKSG_: 603| 38.9k|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 38.9k| ranges::assert_equal_byte_lengths(out, in); 605| 38.9k| using element_type = std::ranges::range_value_t; 606| | 607| 38.9k| const auto store_elementwise = [&] { 608| 38.9k| constexpr size_t bytes_per_element = sizeof(element_type); 609| 38.9k| std::span out_s(out); 610| 38.9k| for(const auto in_elem : in) { 611| 38.9k| store_any(out_s.template first(), in_elem); 612| 38.9k| out_s = out_s.subspan(bytes_per_element); 613| 38.9k| } 614| 38.9k| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 38.9k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 38.9k] ------------------ 620| 0| store_elementwise(); 621| 38.9k| } else { 622| | if constexpr(endianness == std::endian::native && !custom_storable) { 623| | typecast_copy(out, in); 624| 38.9k| } else { 625| 38.9k| store_elementwise(); 626| 38.9k| } 627| 38.9k| } 628| 38.9k|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206EjTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm18446744073709551615EEETkNS4_14spanable_rangeENS6_IKjLm18446744073709551615EEEQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISB_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEEvOT1_RKSG_ENKUlvE_clEv: 607| 38.9k| const auto store_elementwise = [&] { 608| 38.9k| constexpr size_t bytes_per_element = sizeof(element_type); 609| 38.9k| std::span out_s(out); 610| 275k| for(const auto in_elem : in) { ------------------ | Branch (610:30): [True: 275k, False: 38.9k] ------------------ 611| 275k| store_any(out_s.template first(), in_elem); 612| 275k| out_s = out_s.subspan(bytes_per_element); 613| 275k| } 614| 38.9k| }; _ZN5Botan6detail9store_anyILNSt3__16endianE64206EjTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm4EEETpTkNS0_20unsigned_integralishEJjEQaagtsZT2_Li0Eooaasr3stdE7same_asINS0_10AutoDetectET0_E10all_same_vIDpT2_Eaa20unsigned_integralishIS9_E10all_same_vIS9_SB_EEEvOT1_SB_: 582| 275k|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, Ts... ins) { 583| 275k| ranges::assert_exact_byte_length<(sizeof(Ts) + ...)>(out); 584| 275k| auto store_one = [off = 0](auto o, T i) mutable { 585| 275k| store_any(i, o.subspan(off).template first()); 586| 275k| off += sizeof(T); 587| 275k| }; 588| | 589| 275k| (store_one(std::span{out}, ins), ...); 590| 275k|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206EjTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm4EEETpTkNS0_20unsigned_integralishEJjEQaagtsZT2_Li0Eooaasr3stdE7same_asINS0_10AutoDetectET0_E10all_same_vIDpT2_Eaa20unsigned_integralishIS9_E10all_same_vIS9_SB_EEEvOT1_SB_ENUlTyS9_T_E_clIjS7_EEDaS9_SE_: 584| 275k| auto store_one = [off = 0](auto o, T i) mutable { 585| 275k| store_any(i, o.subspan(off).template first()); 586| 275k| off += sizeof(T); 587| 275k| }; _ZN5Botan11copy_out_beITkNS_6ranges14spanable_rangeENSt3__16vectorImNS_16secure_allocatorImEEEEEEvNS2_4spanIhLm18446744073709551615EEERKT_: 773| 7.42k|inline void copy_out_be(std::span out, const InR& in) { 774| 7.42k| using T = std::ranges::range_value_t; 775| 7.42k| std::span in_s{in}; 776| 7.42k| const auto remaining_bytes = detail::copy_out_any_word_aligned_portion(out, in_s); 777| | 778| | // copy remaining bytes as a partial word 779| 7.42k| for(size_t i = 0; i < remaining_bytes; ++i) { ------------------ | Branch (779:22): [True: 0, False: 7.42k] ------------------ 780| 0| out[i] = get_byte_var(i, in_s.front()); 781| 0| } 782| 7.42k|} _ZN5Botan6detail33copy_out_any_word_aligned_portionILNSt3__16endianE64206ETkNS0_20unsigned_integralishEmEEmRNS2_4spanIhLm18446744073709551615EEERNS4_IKT0_Lm18446744073709551615EEE: 752| 8.27k|inline size_t copy_out_any_word_aligned_portion(std::span& out, std::span& in) { 753| 8.27k| const size_t full_words = out.size() / sizeof(T); 754| 8.27k| const size_t full_word_bytes = full_words * sizeof(T); 755| 8.27k| const size_t remaining_bytes = out.size() - full_word_bytes; 756| 8.27k| BOTAN_ASSERT_NOMSG(in.size_bytes() >= full_word_bytes + remaining_bytes); ------------------ | | 84| 8.27k| do { \ | | 85| 8.27k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 8.27k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 8.27k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 8.27k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 8.27k] | | ------------------ ------------------ 757| | 758| | // copy full words 759| 8.27k| store_any(out.first(full_word_bytes), in.first(full_words)); 760| 8.27k| out = out.subspan(full_word_bytes); 761| 8.27k| in = in.subspan(full_words); 762| | 763| 8.27k| return remaining_bytes; 764| 8.27k|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm18446744073709551615EEETkNS4_14spanable_rangeENS6_IKmLm18446744073709551615EEEQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISB_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEEvOT1_RKSG_: 603| 8.27k|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 8.27k| ranges::assert_equal_byte_lengths(out, in); 605| 8.27k| using element_type = std::ranges::range_value_t; 606| | 607| 8.27k| const auto store_elementwise = [&] { 608| 8.27k| constexpr size_t bytes_per_element = sizeof(element_type); 609| 8.27k| std::span out_s(out); 610| 8.27k| for(const auto in_elem : in) { 611| 8.27k| store_any(out_s.template first(), in_elem); 612| 8.27k| out_s = out_s.subspan(bytes_per_element); 613| 8.27k| } 614| 8.27k| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 8.27k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 8.27k] ------------------ 620| 0| store_elementwise(); 621| 8.27k| } else { 622| | if constexpr(endianness == std::endian::native && !custom_storable) { 623| | typecast_copy(out, in); 624| 8.27k| } else { 625| 8.27k| store_elementwise(); 626| 8.27k| } 627| 8.27k| } 628| 8.27k|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm18446744073709551615EEETkNS4_14spanable_rangeENS6_IKmLm18446744073709551615EEEQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISB_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEEvOT1_RKSG_ENKUlvE_clEv: 607| 8.27k| const auto store_elementwise = [&] { 608| 8.27k| constexpr size_t bytes_per_element = sizeof(element_type); 609| 8.27k| std::span out_s(out); 610| 47.3k| for(const auto in_elem : in) { ------------------ | Branch (610:30): [True: 47.3k, False: 8.27k] ------------------ 611| 47.3k| store_any(out_s.template first(), in_elem); 612| 47.3k| out_s = out_s.subspan(bytes_per_element); 613| 47.3k| } 614| 8.27k| }; _ZN5Botan6detail8load_anyILNSt3__16endianE57005ENS0_10AutoDetectETkNS0_20unsigned_integralishEmQoosr3stdE7same_asIS4_T0_Esr3stdE7same_asIT1_S5_EEEvPS6_PKhm: 483| 596|inline constexpr void load_any(T out[], const uint8_t in[], size_t count) { 484| | // asserts that *in and *out point to the correct amount of memory 485| 596| load_any(std::span(out, count), std::span(in, count * sizeof(T))); 486| 596|} _ZN5Botan6detail8load_anyILNSt3__16endianE57005ENS0_10AutoDetectETkNS_6ranges23contiguous_output_rangeENS2_4spanImLm18446744073709551615EEETkNS5_16contiguous_rangeIhEENS6_IKhLm18446744073709551615EEEQaa20unsigned_integralishINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT1_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISI_EESJ_E4type10value_typeEEoosr3stdE7same_asIS4_T0_Esr3stdE7same_asISP_SO_EEEvOSF_RKT2_: 355| 596|inline constexpr void load_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 356| 596| ranges::assert_equal_byte_lengths(out, in); 357| 596| using element_type = std::ranges::range_value_t; 358| | 359| 596| const auto load_elementwise = [&] { 360| 596| constexpr size_t bytes_per_element = sizeof(element_type); 361| 596| std::span in_s(in); 362| 596| for(auto& out_elem : out) { 363| 596| out_elem = load_any(in_s.template first()); 364| 596| in_s = in_s.subspan(bytes_per_element); 365| 596| } 366| 596| }; 367| | 368| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 369| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 370| | // in a `constexpr` context. 371| 596| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (371:7): [Folded, False: 596] ------------------ 372| 0| load_elementwise(); 373| 596| } else { 374| 596| if constexpr(endianness == std::endian::native && !custom_loadable) { 375| 596| typecast_copy(out, in); 376| | } else { 377| | load_elementwise(); 378| | } 379| 596| } 380| 596|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS0_20unsigned_integralishEmQoosr3stdE7same_asIS4_T0_Esr3stdE7same_asIT1_S5_EEEvPS6_PKhm: 483| 850|inline constexpr void load_any(T out[], const uint8_t in[], size_t count) { 484| | // asserts that *in and *out point to the correct amount of memory 485| 850| load_any(std::span(out, count), std::span(in, count * sizeof(T))); 486| 850|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges23contiguous_output_rangeENS2_4spanImLm18446744073709551615EEETkNS5_16contiguous_rangeIhEENS6_IKhLm18446744073709551615EEEQaa20unsigned_integralishINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT1_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISI_EESJ_E4type10value_typeEEoosr3stdE7same_asIS4_T0_Esr3stdE7same_asISP_SO_EEEvOSF_RKT2_: 355| 850|inline constexpr void load_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 356| 850| ranges::assert_equal_byte_lengths(out, in); 357| 850| using element_type = std::ranges::range_value_t; 358| | 359| 850| const auto load_elementwise = [&] { 360| 850| constexpr size_t bytes_per_element = sizeof(element_type); 361| 850| std::span in_s(in); 362| 850| for(auto& out_elem : out) { 363| 850| out_elem = load_any(in_s.template first()); 364| 850| in_s = in_s.subspan(bytes_per_element); 365| 850| } 366| 850| }; 367| | 368| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 369| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 370| | // in a `constexpr` context. 371| 850| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (371:7): [Folded, False: 850] ------------------ 372| 0| load_elementwise(); 373| 850| } else { 374| | if constexpr(endianness == std::endian::native && !custom_loadable) { 375| | typecast_copy(out, in); 376| 850| } else { 377| 850| load_elementwise(); 378| 850| } 379| 850| } 380| 850|} _ZZN5Botan6detail8load_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges23contiguous_output_rangeENS2_4spanImLm18446744073709551615EEETkNS5_16contiguous_rangeIhEENS6_IKhLm18446744073709551615EEEQaa20unsigned_integralishINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT1_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISI_EESJ_E4type10value_typeEEoosr3stdE7same_asIS4_T0_Esr3stdE7same_asISP_SO_EEEvOSF_RKT2_ENKUlvE_clEv: 359| 850| const auto load_elementwise = [&] { 360| 850| constexpr size_t bytes_per_element = sizeof(element_type); 361| 850| std::span in_s(in); 362| 1.70k| for(auto& out_elem : out) { ------------------ | Branch (362:26): [True: 1.70k, False: 850] ------------------ 363| 1.70k| out_elem = load_any(in_s.template first()); 364| 1.70k| in_s = in_s.subspan(bytes_per_element); 365| 1.70k| } 366| 850| }; _ZN5Botan7load_beImJNSt3__14spanIKhLm8EEEEEEDaDpOT0_: 504| 297k|inline constexpr auto load_be(ParamTs&&... params) { 505| 297k| return detail::load_any(std::forward(params)...); 506| 297k|} _ZN5Botan7load_beImJRNSt3__15arrayIhLm8EEEEEEDaDpOT0_: 504| 12.0k|inline constexpr auto load_be(ParamTs&&... params) { 505| 12.0k| return detail::load_any(std::forward(params)...); 506| 12.0k|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEmTkNS_6ranges16contiguous_rangeIhEERNS2_5arrayIhLm8EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_: 278| 12.0k|inline constexpr WrappedOutT load_any(InR&& in_range) { 279| 12.0k| using OutT = detail::wrapped_type; 280| 12.0k| ranges::assert_exact_byte_length(in_range); 281| | 282| 12.0k| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 12.0k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { 287| 12.0k| return fallback_load_any(std::forward(in_range)); 288| 12.0k| } else { 289| 12.0k| const std::span in{in_range}; 290| 12.0k| if constexpr(sizeof(OutT) == 1) { 291| 12.0k| return static_cast(in[0]); 292| 12.0k| } else if constexpr(endianness == std::endian::native) { 293| 12.0k| return typecast_copy(in); 294| 12.0k| } else { 295| 12.0k| static_assert(opposite(endianness) == std::endian::native); 296| 12.0k| return reverse_bytes(typecast_copy(in)); 297| 12.0k| } 298| 12.0k| } 299| 12.0k| }()); 300| 12.0k|} _ZZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEmTkNS_6ranges16contiguous_rangeIhEERNS2_5arrayIhLm8EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_ENKUlvE_clEv: 282| 12.0k| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 12.0k| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (286:10): [Folded, False: 12.0k] ------------------ 287| 0| return fallback_load_any(std::forward(in_range)); 288| 12.0k| } else { 289| 12.0k| const std::span in{in_range}; 290| | if constexpr(sizeof(OutT) == 1) { 291| | return static_cast(in[0]); 292| | } else if constexpr(endianness == std::endian::native) { 293| | return typecast_copy(in); 294| 12.0k| } else { 295| 12.0k| static_assert(opposite(endianness) == std::endian::native); 296| 12.0k| return reverse_bytes(typecast_copy(in)); 297| 12.0k| } 298| 12.0k| } 299| 12.0k| }()); _ZN5Botan8store_beINS_6detail10AutoDetectEJRmPhEEEDaDpOT0_: 745| 1.37k|inline constexpr auto store_be(ParamTs&&... params) { 746| 1.37k| return detail::store_any(std::forward(params)...); 747| 1.37k|} _ZN5Botan7load_leIjJPjPKhmEEEDaDpOT0_: 495| 84|inline constexpr auto load_le(ParamTs&&... params) { 496| 84| return detail::load_any(std::forward(params)...); 497| 84|} _ZN5Botan6detail8load_anyILNSt3__16endianE57005EjTkNS0_20unsigned_integralishEjQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asIT1_S5_EEEvPS6_PKhm: 483| 84|inline constexpr void load_any(T out[], const uint8_t in[], size_t count) { 484| | // asserts that *in and *out point to the correct amount of memory 485| 84| load_any(std::span(out, count), std::span(in, count * sizeof(T))); 486| 84|} _ZN5Botan6detail8load_anyILNSt3__16endianE57005EjTkNS_6ranges23contiguous_output_rangeENS2_4spanIjLm18446744073709551615EEETkNS4_16contiguous_rangeIhEENS5_IKhLm18446744073709551615EEEQaa20unsigned_integralishINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT1_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISH_EESI_E4type10value_typeEEoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISP_SN_EEEvOSE_RKT2_: 355| 84|inline constexpr void load_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 356| 84| ranges::assert_equal_byte_lengths(out, in); 357| 84| using element_type = std::ranges::range_value_t; 358| | 359| 84| const auto load_elementwise = [&] { 360| 84| constexpr size_t bytes_per_element = sizeof(element_type); 361| 84| std::span in_s(in); 362| 84| for(auto& out_elem : out) { 363| 84| out_elem = load_any(in_s.template first()); 364| 84| in_s = in_s.subspan(bytes_per_element); 365| 84| } 366| 84| }; 367| | 368| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 369| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 370| | // in a `constexpr` context. 371| 84| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (371:7): [Folded, False: 84] ------------------ 372| 0| load_elementwise(); 373| 84| } else { 374| 84| if constexpr(endianness == std::endian::native && !custom_loadable) { 375| 84| typecast_copy(out, in); 376| | } else { 377| | load_elementwise(); 378| | } 379| 84| } 380| 84|} _ZN5Botan7load_beIjJPhiEEEDaDpOT0_: 504| 1.56k|inline constexpr auto load_be(ParamTs&&... params) { 505| 1.56k| return detail::load_any(std::forward(params)...); 506| 1.56k|} _ZN5Botan8store_beINS_6detail10AutoDetectEJjPhEEEDaDpOT0_: 745| 728|inline constexpr auto store_be(ParamTs&&... params) { 746| 728| return detail::store_any(std::forward(params)...); 747| 728|} _ZN5Botan8store_beINS_6detail10AutoDetectEJRKjPhEEEDaDpOT0_: 745| 27.4k|inline constexpr auto store_be(ParamTs&&... params) { 746| 27.4k| return detail::store_any(std::forward(params)...); 747| 27.4k|} _ZN5Botan7load_beIhJPKhRmEEEDaDpOT0_: 504| 2.01M|inline constexpr auto load_be(ParamTs&&... params) { 505| 2.01M| return detail::load_any(std::forward(params)...); 506| 2.01M|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEhEET0_PKhm: 454| 2.01M|inline constexpr OutT load_any(const uint8_t in[], size_t off) { 455| | // asserts that *in points to enough bytes to read at offset off 456| 2.01M| constexpr size_t out_size = sizeof(OutT); 457| 2.01M| return load_any(std::span(in + off * out_size, out_size)); 458| 2.01M|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEhTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm1EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_: 278| 2.01M|inline constexpr WrappedOutT load_any(InR&& in_range) { 279| 2.01M| using OutT = detail::wrapped_type; 280| 2.01M| ranges::assert_exact_byte_length(in_range); 281| | 282| 2.01M| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 2.01M| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { 287| 2.01M| return fallback_load_any(std::forward(in_range)); 288| 2.01M| } else { 289| 2.01M| const std::span in{in_range}; 290| 2.01M| if constexpr(sizeof(OutT) == 1) { 291| 2.01M| return static_cast(in[0]); 292| 2.01M| } else if constexpr(endianness == std::endian::native) { 293| 2.01M| return typecast_copy(in); 294| 2.01M| } else { 295| 2.01M| static_assert(opposite(endianness) == std::endian::native); 296| 2.01M| return reverse_bytes(typecast_copy(in)); 297| 2.01M| } 298| 2.01M| } 299| 2.01M| }()); 300| 2.01M|} _ZN5Botan6detail24wrap_strong_type_or_enumITkNS0_20unsigned_integralishEhTkNSt3__117unsigned_integralEhEEDaT0_: 200| 2.01M|constexpr auto wrap_strong_type_or_enum(T t) { 201| | if constexpr(std::is_enum_v) { 202| | return static_cast(t); 203| 2.01M| } else { 204| 2.01M| return Botan::wrap_strong_type(t); 205| 2.01M| } 206| 2.01M|} _ZZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEhTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm1EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_ENKUlvE_clEv: 282| 2.01M| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 2.01M| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (286:10): [Folded, False: 2.01M] ------------------ 287| 0| return fallback_load_any(std::forward(in_range)); 288| 2.01M| } else { 289| 2.01M| const std::span in{in_range}; 290| 2.01M| if constexpr(sizeof(OutT) == 1) { 291| 2.01M| return static_cast(in[0]); 292| | } else if constexpr(endianness == std::endian::native) { 293| | return typecast_copy(in); 294| | } else { 295| | static_assert(opposite(endianness) == std::endian::native); 296| | return reverse_bytes(typecast_copy(in)); 297| | } 298| 2.01M| } 299| 2.01M| }()); _ZN5Botan12get_byte_varIhEEhmT_: 69| 131k|inline constexpr uint8_t get_byte_var(size_t byte_num, T input) { 70| 131k| return static_cast(input >> (((~byte_num) & (sizeof(T) - 1)) << 3)); 71| 131k|} _ZN5Botan12get_byte_varItEEhmT_: 69| 1.17M|inline constexpr uint8_t get_byte_var(size_t byte_num, T input) { 70| 1.17M| return static_cast(input >> (((~byte_num) & (sizeof(T) - 1)) << 3)); 71| 1.17M|} _ZN5Botan8get_byteILm0ENS_3TLS16Signature_Scheme4CodeEEEhT0_QltT_stS4_: 81| 78.9k|{ 82| 78.9k| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 78.9k| return static_cast((input >> shift) & 0xFF); 84| 78.9k|} _ZN5Botan8get_byteILm1ENS_3TLS16Signature_Scheme4CodeEEEhT0_QltT_stS4_: 81| 78.9k|{ 82| 78.9k| const size_t shift = ((~B) & (sizeof(T) - 1)) << 3; 83| 78.9k| return static_cast((input >> shift) & 0xFF); 84| 78.9k|} _ZN5Botan8store_beINS_6detail10AutoDetectEJmmEEEDaDpOT0_: 745| 561|inline constexpr auto store_be(ParamTs&&... params) { 746| 561| return detail::store_any(std::forward(params)...); 747| 561|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETpTkNS0_20unsigned_integralishEJmmEQ10all_same_vIDpT1_EEEDaS6_: 696| 561|inline constexpr auto store_any(Ts... ins) { 697| 561| return store_any(std::array{ins...}); 698| 561|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges14spanable_rangeENS2_5arrayImLm2EEEQoooosr3stdE7same_asIS4_T0_Eaasr6rangesE25statically_spanable_rangeIS8_Esr3stdE21default_initializableIS8_Esr8conceptsE21resizable_byte_bufferIS8_EEEDaOT1_: 663| 561|inline constexpr auto store_any(InR&& in_range) { 664| 561| auto out = []([[maybe_unused]] const auto& in) { 665| 561| if constexpr(std::same_as) { 666| 561| if constexpr(ranges::statically_spanable_range) { 667| 561| constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| 561| return std::array(); 669| 561| } else { 670| 561| static_assert( 671| 561| !std::same_as, 672| 561| "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| 561| } 674| 561| } else if constexpr(concepts::resizable_byte_buffer) { 675| 561| return OutR(std::span{in}.size_bytes()); 676| 561| } else { 677| 561| return OutR{}; 678| 561| } 679| 561| }(in_range); 680| | 681| 561| store_any>(out, std::forward(in_range)); 682| 561| return out; 683| 561|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges14spanable_rangeENS2_5arrayImLm2EEEQoooosr3stdE7same_asIS4_T0_Eaasr6rangesE25statically_spanable_rangeIS8_Esr3stdE21default_initializableIS8_Esr8conceptsE21resizable_byte_bufferIS8_EEEDaOT1_ENKUlRKT_E_clIS7_EEDaSD_: 664| 561| auto out = []([[maybe_unused]] const auto& in) { 665| 561| if constexpr(std::same_as) { 666| 561| if constexpr(ranges::statically_spanable_range) { 667| 561| constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| 561| return std::array(); 669| | } else { 670| | static_assert( 671| | !std::same_as, 672| | "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| | } 674| | } else if constexpr(concepts::resizable_byte_buffer) { 675| | return OutR(std::span{in}.size_bytes()); 676| | } else { 677| | return OutR{}; 678| | } 679| 561| }(in_range); _ZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_5arrayIhLm16EEETkNS4_14spanable_rangeENS6_ImLm2EEEQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISB_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEEvOT1_RKSG_: 603| 561|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 561| ranges::assert_equal_byte_lengths(out, in); 605| 561| using element_type = std::ranges::range_value_t; 606| | 607| 561| const auto store_elementwise = [&] { 608| 561| constexpr size_t bytes_per_element = sizeof(element_type); 609| 561| std::span out_s(out); 610| 561| for(const auto in_elem : in) { 611| 561| store_any(out_s.template first(), in_elem); 612| 561| out_s = out_s.subspan(bytes_per_element); 613| 561| } 614| 561| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 561| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 561] ------------------ 620| 0| store_elementwise(); 621| 561| } else { 622| | if constexpr(endianness == std::endian::native && !custom_storable) { 623| | typecast_copy(out, in); 624| 561| } else { 625| 561| store_elementwise(); 626| 561| } 627| 561| } 628| 561|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_5arrayIhLm16EEETkNS4_14spanable_rangeENS6_ImLm2EEEQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISB_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEEvOT1_RKSG_ENKUlvE_clEv: 607| 561| const auto store_elementwise = [&] { 608| 561| constexpr size_t bytes_per_element = sizeof(element_type); 609| 561| std::span out_s(out); 610| 1.12k| for(const auto in_elem : in) { ------------------ | Branch (610:30): [True: 1.12k, False: 561] ------------------ 611| 1.12k| store_any(out_s.template first(), in_elem); 612| 1.12k| out_s = out_s.subspan(bytes_per_element); 613| 1.12k| } 614| 561| }; _ZN5Botan7load_beIjJRNSt3__14spanIKhLm4EEEEEEDaDpOT0_: 504| 4|inline constexpr auto load_be(ParamTs&&... params) { 505| 4| return detail::load_any(std::forward(params)...); 506| 4|} _ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEjTkNS_6ranges16contiguous_rangeIhEERNS2_4spanIKhLm4EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESB_OT1_: 278| 4|inline constexpr WrappedOutT load_any(InR&& in_range) { 279| 4| using OutT = detail::wrapped_type; 280| 4| ranges::assert_exact_byte_length(in_range); 281| | 282| 4| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 4| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { 287| 4| return fallback_load_any(std::forward(in_range)); 288| 4| } else { 289| 4| const std::span in{in_range}; 290| 4| if constexpr(sizeof(OutT) == 1) { 291| 4| return static_cast(in[0]); 292| 4| } else if constexpr(endianness == std::endian::native) { 293| 4| return typecast_copy(in); 294| 4| } else { 295| 4| static_assert(opposite(endianness) == std::endian::native); 296| 4| return reverse_bytes(typecast_copy(in)); 297| 4| } 298| 4| } 299| 4| }()); 300| 4|} _ZZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEjTkNS_6ranges16contiguous_rangeIhEERNS2_4spanIKhLm4EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESB_OT1_ENKUlvE_clEv: 282| 4| return detail::wrap_strong_type_or_enum([&]() -> OutT { 283| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 284| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 285| | // in a `constexpr` context. 286| 4| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (286:10): [Folded, False: 4] ------------------ 287| 0| return fallback_load_any(std::forward(in_range)); 288| 4| } else { 289| 4| const std::span in{in_range}; 290| | if constexpr(sizeof(OutT) == 1) { 291| | return static_cast(in[0]); 292| | } else if constexpr(endianness == std::endian::native) { 293| | return typecast_copy(in); 294| 4| } else { 295| 4| static_assert(opposite(endianness) == std::endian::native); 296| 4| return reverse_bytes(typecast_copy(in)); 297| 4| } 298| 4| } 299| 4| }()); _ZN5Botan8store_beINS_6detail10AutoDetectEJRKjRNSt3__15arrayIhLm4EEEEEEDaDpOT0_: 745| 4|inline constexpr auto store_be(ParamTs&&... params) { 746| 4| return detail::store_any(std::forward(params)...); 747| 4|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS0_20unsigned_integralishEjTkNS_6ranges23contiguous_output_rangeIhEERNS2_5arrayIhLm4EEEQsr3stdE7same_asIS4_T0_EEEvT1_OT2_: 646| 4|inline constexpr void store_any(T in, OutR&& out_range) { 647| 4| store_any(in, std::forward(out_range)); 648| 4|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEjTkNS_6ranges23contiguous_output_rangeIhEERNS2_5arrayIhLm4EEEQnt15custom_storableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEEvSA_OT1_: 525| 4|inline constexpr void store_any(WrappedInT wrapped_in, OutR&& out_range) { 526| 4| const auto in = detail::unwrap_strong_type_or_enum(wrapped_in); 527| 4| using InT = decltype(in); 528| 4| ranges::assert_exact_byte_length(out_range); 529| 4| const std::span out{out_range}; 530| | 531| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 532| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 533| | // in a `constexpr` context. 534| 4| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (534:7): [Folded, False: 4] ------------------ 535| 0| return fallback_store_any(in, std::forward(out_range)); 536| 4| } else { 537| | if constexpr(sizeof(InT) == 1) { 538| | out[0] = static_cast(in); 539| | } else if constexpr(endianness == std::endian::native) { 540| | typecast_copy(out, in); 541| 4| } else { 542| 4| static_assert(opposite(endianness) == std::endian::native); 543| 4| typecast_copy(out, reverse_bytes(in)); 544| 4| } 545| 4| } 546| 4|} _ZN5Botan7load_beINS_6detail10AutoDetectEJRA2_mRPKhmEEEDaDpOT0_: 504| 850|inline constexpr auto load_be(ParamTs&&... params) { 505| 850| return detail::load_any(std::forward(params)...); 506| 850|} _ZN5Botan11copy_out_beITkNS_6ranges14spanable_rangeEA2_mEEvNSt3__14spanIhLm18446744073709551615EEERKT_: 773| 850|inline void copy_out_be(std::span out, const InR& in) { 774| 850| using T = std::ranges::range_value_t; 775| 850| std::span in_s{in}; 776| 850| const auto remaining_bytes = detail::copy_out_any_word_aligned_portion(out, in_s); 777| | 778| | // copy remaining bytes as a partial word 779| 850| for(size_t i = 0; i < remaining_bytes; ++i) { ------------------ | Branch (779:22): [True: 0, False: 850] ------------------ 780| 0| out[i] = get_byte_var(i, in_s.front()); 781| 0| } 782| 850|} _ZN5Botan7load_beImJPKhmEEEDaDpOT0_: 504| 41.8k|inline constexpr auto load_be(ParamTs&&... params) { 505| 41.8k| return detail::load_any(std::forward(params)...); 506| 41.8k|} _ZN5Botan7load_leINS_6detail10AutoDetectEJRA4_mPKhRKmEEEDaDpOT0_: 495| 191|inline constexpr auto load_le(ParamTs&&... params) { 496| 191| return detail::load_any(std::forward(params)...); 497| 191|} _ZN5Botan8store_beINSt3__16vectorIhNS1_9allocatorIhEEEEJRA8_mEEEDaDpOT0_: 745| 191|inline constexpr auto store_be(ParamTs&&... params) { 746| 191| return detail::store_any(std::forward(params)...); 747| 191|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS2_6vectorIhNS2_9allocatorIhEEEETkNS_6ranges14spanable_rangeERA8_mQoooosr3stdE7same_asINS0_10AutoDetectET0_Eaasr6rangesE25statically_spanable_rangeISC_Esr3stdE21default_initializableISC_Esr8conceptsE21resizable_byte_bufferISC_EEEDaOT1_: 663| 191|inline constexpr auto store_any(InR&& in_range) { 664| 191| auto out = []([[maybe_unused]] const auto& in) { 665| 191| if constexpr(std::same_as) { 666| 191| if constexpr(ranges::statically_spanable_range) { 667| 191| constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| 191| return std::array(); 669| 191| } else { 670| 191| static_assert( 671| 191| !std::same_as, 672| 191| "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| 191| } 674| 191| } else if constexpr(concepts::resizable_byte_buffer) { 675| 191| return OutR(std::span{in}.size_bytes()); 676| 191| } else { 677| 191| return OutR{}; 678| 191| } 679| 191| }(in_range); 680| | 681| 191| store_any>(out, std::forward(in_range)); 682| 191| return out; 683| 191|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206ENS2_6vectorIhNS2_9allocatorIhEEEETkNS_6ranges14spanable_rangeERA8_mQoooosr3stdE7same_asINS0_10AutoDetectET0_Eaasr6rangesE25statically_spanable_rangeISC_Esr3stdE21default_initializableISC_Esr8conceptsE21resizable_byte_bufferISC_EEEDaOT1_ENKUlRKT_E_clIS9_EEDaSH_: 664| 191| auto out = []([[maybe_unused]] const auto& in) { 665| | if constexpr(std::same_as) { 666| | if constexpr(ranges::statically_spanable_range) { 667| | constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| | return std::array(); 669| | } else { 670| | static_assert( 671| | !std::same_as, 672| | "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| | } 674| 191| } else if constexpr(concepts::resizable_byte_buffer) { 675| 191| return OutR(std::span{in}.size_bytes()); 676| | } else { 677| | return OutR{}; 678| | } 679| 191| }(in_range); _ZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_6vectorIhNS2_9allocatorIhEEEETkNS4_14spanable_rangeEA8_mQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISD_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISL_EESM_E4type10value_typeEEEEvOT1_RKSI_: 603| 191|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 191| ranges::assert_equal_byte_lengths(out, in); 605| 191| using element_type = std::ranges::range_value_t; 606| | 607| 191| const auto store_elementwise = [&] { 608| 191| constexpr size_t bytes_per_element = sizeof(element_type); 609| 191| std::span out_s(out); 610| 191| for(const auto in_elem : in) { 611| 191| store_any(out_s.template first(), in_elem); 612| 191| out_s = out_s.subspan(bytes_per_element); 613| 191| } 614| 191| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 191| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 191] ------------------ 620| 0| store_elementwise(); 621| 191| } else { 622| | if constexpr(endianness == std::endian::native && !custom_storable) { 623| | typecast_copy(out, in); 624| 191| } else { 625| 191| store_elementwise(); 626| 191| } 627| 191| } 628| 191|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_6vectorIhNS2_9allocatorIhEEEETkNS4_14spanable_rangeEA8_mQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISD_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISL_EESM_E4type10value_typeEEEEvOT1_RKSI_ENKUlvE_clEv: 607| 191| const auto store_elementwise = [&] { 608| 191| constexpr size_t bytes_per_element = sizeof(element_type); 609| 191| std::span out_s(out); 610| 1.52k| for(const auto in_elem : in) { ------------------ | Branch (610:30): [True: 1.52k, False: 191] ------------------ 611| 1.52k| store_any(out_s.template first(), in_elem); 612| 1.52k| out_s = out_s.subspan(bytes_per_element); 613| 1.52k| } 614| 191| }; _ZN5Botan8store_beINS_6detail10AutoDetectEJRNSt3__14spanIhLm32EEERNS3_5arrayImLm4EEEEEEDaDpOT0_: 745| 573|inline constexpr auto store_be(ParamTs&&... params) { 746| 573| return detail::store_any(std::forward(params)...); 747| 573|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges23contiguous_output_rangeIhEERNS2_4spanIhLm32EEETkNS5_14spanable_rangeENS2_5arrayImLm4EEEQoosr3stdE7same_asIS4_T0_Esr3stdE7same_asISC_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISK_EESL_E4type10value_typeEEEEvOT1_RKSH_: 603| 573|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 573| ranges::assert_equal_byte_lengths(out, in); 605| 573| using element_type = std::ranges::range_value_t; 606| | 607| 573| const auto store_elementwise = [&] { 608| 573| constexpr size_t bytes_per_element = sizeof(element_type); 609| 573| std::span out_s(out); 610| 573| for(const auto in_elem : in) { 611| 573| store_any(out_s.template first(), in_elem); 612| 573| out_s = out_s.subspan(bytes_per_element); 613| 573| } 614| 573| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 573| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 573] ------------------ 620| 0| store_elementwise(); 621| 573| } else { 622| | if constexpr(endianness == std::endian::native && !custom_storable) { 623| | typecast_copy(out, in); 624| 573| } else { 625| 573| store_elementwise(); 626| 573| } 627| 573| } 628| 573|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges23contiguous_output_rangeIhEERNS2_4spanIhLm32EEETkNS5_14spanable_rangeENS2_5arrayImLm4EEEQoosr3stdE7same_asIS4_T0_Esr3stdE7same_asISC_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISK_EESL_E4type10value_typeEEEEvOT1_RKSH_ENKUlvE_clEv: 607| 573| const auto store_elementwise = [&] { 608| 573| constexpr size_t bytes_per_element = sizeof(element_type); 609| 573| std::span out_s(out); 610| 2.29k| for(const auto in_elem : in) { ------------------ | Branch (610:30): [True: 2.29k, False: 573] ------------------ 611| 2.29k| store_any(out_s.template first(), in_elem); 612| 2.29k| out_s = out_s.subspan(bytes_per_element); 613| 2.29k| } 614| 573| }; _ZN5Botan7load_leINS_6detail10AutoDetectEJRA6_mPKhRKmEEEDaDpOT0_: 495| 246|inline constexpr auto load_le(ParamTs&&... params) { 496| 246| return detail::load_any(std::forward(params)...); 497| 246|} _ZN5Botan8store_beINSt3__16vectorIhNS1_9allocatorIhEEEEJRA12_mEEEDaDpOT0_: 745| 246|inline constexpr auto store_be(ParamTs&&... params) { 746| 246| return detail::store_any(std::forward(params)...); 747| 246|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS2_6vectorIhNS2_9allocatorIhEEEETkNS_6ranges14spanable_rangeERA12_mQoooosr3stdE7same_asINS0_10AutoDetectET0_Eaasr6rangesE25statically_spanable_rangeISC_Esr3stdE21default_initializableISC_Esr8conceptsE21resizable_byte_bufferISC_EEEDaOT1_: 663| 246|inline constexpr auto store_any(InR&& in_range) { 664| 246| auto out = []([[maybe_unused]] const auto& in) { 665| 246| if constexpr(std::same_as) { 666| 246| if constexpr(ranges::statically_spanable_range) { 667| 246| constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| 246| return std::array(); 669| 246| } else { 670| 246| static_assert( 671| 246| !std::same_as, 672| 246| "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| 246| } 674| 246| } else if constexpr(concepts::resizable_byte_buffer) { 675| 246| return OutR(std::span{in}.size_bytes()); 676| 246| } else { 677| 246| return OutR{}; 678| 246| } 679| 246| }(in_range); 680| | 681| 246| store_any>(out, std::forward(in_range)); 682| 246| return out; 683| 246|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206ENS2_6vectorIhNS2_9allocatorIhEEEETkNS_6ranges14spanable_rangeERA12_mQoooosr3stdE7same_asINS0_10AutoDetectET0_Eaasr6rangesE25statically_spanable_rangeISC_Esr3stdE21default_initializableISC_Esr8conceptsE21resizable_byte_bufferISC_EEEDaOT1_ENKUlRKT_E_clIS9_EEDaSH_: 664| 246| auto out = []([[maybe_unused]] const auto& in) { 665| | if constexpr(std::same_as) { 666| | if constexpr(ranges::statically_spanable_range) { 667| | constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| | return std::array(); 669| | } else { 670| | static_assert( 671| | !std::same_as, 672| | "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| | } 674| 246| } else if constexpr(concepts::resizable_byte_buffer) { 675| 246| return OutR(std::span{in}.size_bytes()); 676| | } else { 677| | return OutR{}; 678| | } 679| 246| }(in_range); _ZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_6vectorIhNS2_9allocatorIhEEEETkNS4_14spanable_rangeEA12_mQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISD_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISL_EESM_E4type10value_typeEEEEvOT1_RKSI_: 603| 246|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 246| ranges::assert_equal_byte_lengths(out, in); 605| 246| using element_type = std::ranges::range_value_t; 606| | 607| 246| const auto store_elementwise = [&] { 608| 246| constexpr size_t bytes_per_element = sizeof(element_type); 609| 246| std::span out_s(out); 610| 246| for(const auto in_elem : in) { 611| 246| store_any(out_s.template first(), in_elem); 612| 246| out_s = out_s.subspan(bytes_per_element); 613| 246| } 614| 246| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 246| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 246] ------------------ 620| 0| store_elementwise(); 621| 246| } else { 622| | if constexpr(endianness == std::endian::native && !custom_storable) { 623| | typecast_copy(out, in); 624| 246| } else { 625| 246| store_elementwise(); 626| 246| } 627| 246| } 628| 246|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_6vectorIhNS2_9allocatorIhEEEETkNS4_14spanable_rangeEA12_mQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISD_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISL_EESM_E4type10value_typeEEEEvOT1_RKSI_ENKUlvE_clEv: 607| 246| const auto store_elementwise = [&] { 608| 246| constexpr size_t bytes_per_element = sizeof(element_type); 609| 246| std::span out_s(out); 610| 2.95k| for(const auto in_elem : in) { ------------------ | Branch (610:30): [True: 2.95k, False: 246] ------------------ 611| 2.95k| store_any(out_s.template first(), in_elem); 612| 2.95k| out_s = out_s.subspan(bytes_per_element); 613| 2.95k| } 614| 246| }; _ZN5Botan8store_beINS_6detail10AutoDetectEJRNSt3__14spanIhLm48EEERNS3_5arrayImLm6EEEEEEDaDpOT0_: 745| 738|inline constexpr auto store_be(ParamTs&&... params) { 746| 738| return detail::store_any(std::forward(params)...); 747| 738|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges23contiguous_output_rangeIhEERNS2_4spanIhLm48EEETkNS5_14spanable_rangeENS2_5arrayImLm6EEEQoosr3stdE7same_asIS4_T0_Esr3stdE7same_asISC_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISK_EESL_E4type10value_typeEEEEvOT1_RKSH_: 603| 738|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 738| ranges::assert_equal_byte_lengths(out, in); 605| 738| using element_type = std::ranges::range_value_t; 606| | 607| 738| const auto store_elementwise = [&] { 608| 738| constexpr size_t bytes_per_element = sizeof(element_type); 609| 738| std::span out_s(out); 610| 738| for(const auto in_elem : in) { 611| 738| store_any(out_s.template first(), in_elem); 612| 738| out_s = out_s.subspan(bytes_per_element); 613| 738| } 614| 738| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 738| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 738] ------------------ 620| 0| store_elementwise(); 621| 738| } else { 622| | if constexpr(endianness == std::endian::native && !custom_storable) { 623| | typecast_copy(out, in); 624| 738| } else { 625| 738| store_elementwise(); 626| 738| } 627| 738| } 628| 738|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges23contiguous_output_rangeIhEERNS2_4spanIhLm48EEETkNS5_14spanable_rangeENS2_5arrayImLm6EEEQoosr3stdE7same_asIS4_T0_Esr3stdE7same_asISC_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISK_EESL_E4type10value_typeEEEEvOT1_RKSH_ENKUlvE_clEv: 607| 738| const auto store_elementwise = [&] { 608| 738| constexpr size_t bytes_per_element = sizeof(element_type); 609| 738| std::span out_s(out); 610| 4.42k| for(const auto in_elem : in) { ------------------ | Branch (610:30): [True: 4.42k, False: 738] ------------------ 611| 4.42k| store_any(out_s.template first(), in_elem); 612| 4.42k| out_s = out_s.subspan(bytes_per_element); 613| 4.42k| } 614| 738| }; _ZN5Botan7load_leINS_6detail10AutoDetectEJRA8_mPKhRKmEEEDaDpOT0_: 495| 89|inline constexpr auto load_le(ParamTs&&... params) { 496| 89| return detail::load_any(std::forward(params)...); 497| 89|} _ZN5Botan8store_beINSt3__16vectorIhNS1_9allocatorIhEEEEJRA16_mEEEDaDpOT0_: 745| 89|inline constexpr auto store_be(ParamTs&&... params) { 746| 89| return detail::store_any(std::forward(params)...); 747| 89|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS2_6vectorIhNS2_9allocatorIhEEEETkNS_6ranges14spanable_rangeERA16_mQoooosr3stdE7same_asINS0_10AutoDetectET0_Eaasr6rangesE25statically_spanable_rangeISC_Esr3stdE21default_initializableISC_Esr8conceptsE21resizable_byte_bufferISC_EEEDaOT1_: 663| 89|inline constexpr auto store_any(InR&& in_range) { 664| 89| auto out = []([[maybe_unused]] const auto& in) { 665| 89| if constexpr(std::same_as) { 666| 89| if constexpr(ranges::statically_spanable_range) { 667| 89| constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| 89| return std::array(); 669| 89| } else { 670| 89| static_assert( 671| 89| !std::same_as, 672| 89| "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| 89| } 674| 89| } else if constexpr(concepts::resizable_byte_buffer) { 675| 89| return OutR(std::span{in}.size_bytes()); 676| 89| } else { 677| 89| return OutR{}; 678| 89| } 679| 89| }(in_range); 680| | 681| 89| store_any>(out, std::forward(in_range)); 682| 89| return out; 683| 89|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206ENS2_6vectorIhNS2_9allocatorIhEEEETkNS_6ranges14spanable_rangeERA16_mQoooosr3stdE7same_asINS0_10AutoDetectET0_Eaasr6rangesE25statically_spanable_rangeISC_Esr3stdE21default_initializableISC_Esr8conceptsE21resizable_byte_bufferISC_EEEDaOT1_ENKUlRKT_E_clIS9_EEDaSH_: 664| 89| auto out = []([[maybe_unused]] const auto& in) { 665| | if constexpr(std::same_as) { 666| | if constexpr(ranges::statically_spanable_range) { 667| | constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| | return std::array(); 669| | } else { 670| | static_assert( 671| | !std::same_as, 672| | "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| | } 674| 89| } else if constexpr(concepts::resizable_byte_buffer) { 675| 89| return OutR(std::span{in}.size_bytes()); 676| | } else { 677| | return OutR{}; 678| | } 679| 89| }(in_range); _ZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_6vectorIhNS2_9allocatorIhEEEETkNS4_14spanable_rangeEA16_mQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISD_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISL_EESM_E4type10value_typeEEEEvOT1_RKSI_: 603| 89|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 89| ranges::assert_equal_byte_lengths(out, in); 605| 89| using element_type = std::ranges::range_value_t; 606| | 607| 89| const auto store_elementwise = [&] { 608| 89| constexpr size_t bytes_per_element = sizeof(element_type); 609| 89| std::span out_s(out); 610| 89| for(const auto in_elem : in) { 611| 89| store_any(out_s.template first(), in_elem); 612| 89| out_s = out_s.subspan(bytes_per_element); 613| 89| } 614| 89| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 89| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 89] ------------------ 620| 0| store_elementwise(); 621| 89| } else { 622| | if constexpr(endianness == std::endian::native && !custom_storable) { 623| | typecast_copy(out, in); 624| 89| } else { 625| 89| store_elementwise(); 626| 89| } 627| 89| } 628| 89|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_6vectorIhNS2_9allocatorIhEEEETkNS4_14spanable_rangeEA16_mQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISD_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISL_EESM_E4type10value_typeEEEEvOT1_RKSI_ENKUlvE_clEv: 607| 89| const auto store_elementwise = [&] { 608| 89| constexpr size_t bytes_per_element = sizeof(element_type); 609| 89| std::span out_s(out); 610| 1.42k| for(const auto in_elem : in) { ------------------ | Branch (610:30): [True: 1.42k, False: 89] ------------------ 611| 1.42k| store_any(out_s.template first(), in_elem); 612| 1.42k| out_s = out_s.subspan(bytes_per_element); 613| 1.42k| } 614| 89| }; _ZN5Botan8store_beINS_6detail10AutoDetectEJRNSt3__14spanIhLm64EEERNS3_5arrayImLm8EEEEEEDaDpOT0_: 745| 267|inline constexpr auto store_be(ParamTs&&... params) { 746| 267| return detail::store_any(std::forward(params)...); 747| 267|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges23contiguous_output_rangeIhEERNS2_4spanIhLm64EEETkNS5_14spanable_rangeENS2_5arrayImLm8EEEQoosr3stdE7same_asIS4_T0_Esr3stdE7same_asISC_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISK_EESL_E4type10value_typeEEEEvOT1_RKSH_: 603| 267|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 267| ranges::assert_equal_byte_lengths(out, in); 605| 267| using element_type = std::ranges::range_value_t; 606| | 607| 267| const auto store_elementwise = [&] { 608| 267| constexpr size_t bytes_per_element = sizeof(element_type); 609| 267| std::span out_s(out); 610| 267| for(const auto in_elem : in) { 611| 267| store_any(out_s.template first(), in_elem); 612| 267| out_s = out_s.subspan(bytes_per_element); 613| 267| } 614| 267| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 267| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 267] ------------------ 620| 0| store_elementwise(); 621| 267| } else { 622| | if constexpr(endianness == std::endian::native && !custom_storable) { 623| | typecast_copy(out, in); 624| 267| } else { 625| 267| store_elementwise(); 626| 267| } 627| 267| } 628| 267|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges23contiguous_output_rangeIhEERNS2_4spanIhLm64EEETkNS5_14spanable_rangeENS2_5arrayImLm8EEEQoosr3stdE7same_asIS4_T0_Esr3stdE7same_asISC_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISK_EESL_E4type10value_typeEEEEvOT1_RKSH_ENKUlvE_clEv: 607| 267| const auto store_elementwise = [&] { 608| 267| constexpr size_t bytes_per_element = sizeof(element_type); 609| 267| std::span out_s(out); 610| 2.13k| for(const auto in_elem : in) { ------------------ | Branch (610:30): [True: 2.13k, False: 267] ------------------ 611| 2.13k| store_any(out_s.template first(), in_elem); 612| 2.13k| out_s = out_s.subspan(bytes_per_element); 613| 2.13k| } 614| 267| }; _ZN5Botan8store_beINS_6detail10AutoDetectEJRNSt3__15arrayImLm9EEEEEEDaDpOT0_: 745| 210|inline constexpr auto store_be(ParamTs&&... params) { 746| 210| return detail::store_any(std::forward(params)...); 747| 210|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges14spanable_rangeERNS2_5arrayImLm9EEEQoooosr3stdE7same_asIS4_T0_Eaasr6rangesE25statically_spanable_rangeIS9_Esr3stdE21default_initializableIS9_Esr8conceptsE21resizable_byte_bufferIS9_EEEDaOT1_: 663| 210|inline constexpr auto store_any(InR&& in_range) { 664| 210| auto out = []([[maybe_unused]] const auto& in) { 665| 210| if constexpr(std::same_as) { 666| 210| if constexpr(ranges::statically_spanable_range) { 667| 210| constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| 210| return std::array(); 669| 210| } else { 670| 210| static_assert( 671| 210| !std::same_as, 672| 210| "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| 210| } 674| 210| } else if constexpr(concepts::resizable_byte_buffer) { 675| 210| return OutR(std::span{in}.size_bytes()); 676| 210| } else { 677| 210| return OutR{}; 678| 210| } 679| 210| }(in_range); 680| | 681| 210| store_any>(out, std::forward(in_range)); 682| 210| return out; 683| 210|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges14spanable_rangeERNS2_5arrayImLm9EEEQoooosr3stdE7same_asIS4_T0_Eaasr6rangesE25statically_spanable_rangeIS9_Esr3stdE21default_initializableIS9_Esr8conceptsE21resizable_byte_bufferIS9_EEEDaOT1_ENKUlRKT_E_clIS7_EEDaSE_: 664| 210| auto out = []([[maybe_unused]] const auto& in) { 665| 210| if constexpr(std::same_as) { 666| 210| if constexpr(ranges::statically_spanable_range) { 667| 210| constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| 210| return std::array(); 669| | } else { 670| | static_assert( 671| | !std::same_as, 672| | "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| | } 674| | } else if constexpr(concepts::resizable_byte_buffer) { 675| | return OutR(std::span{in}.size_bytes()); 676| | } else { 677| | return OutR{}; 678| | } 679| 210| }(in_range); _ZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_5arrayIhLm72EEETkNS4_14spanable_rangeENS6_ImLm9EEEQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISB_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEEvOT1_RKSG_: 603| 210|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 210| ranges::assert_equal_byte_lengths(out, in); 605| 210| using element_type = std::ranges::range_value_t; 606| | 607| 210| const auto store_elementwise = [&] { 608| 210| constexpr size_t bytes_per_element = sizeof(element_type); 609| 210| std::span out_s(out); 610| 210| for(const auto in_elem : in) { 611| 210| store_any(out_s.template first(), in_elem); 612| 210| out_s = out_s.subspan(bytes_per_element); 613| 210| } 614| 210| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 210| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 210] ------------------ 620| 0| store_elementwise(); 621| 210| } else { 622| | if constexpr(endianness == std::endian::native && !custom_storable) { 623| | typecast_copy(out, in); 624| 210| } else { 625| 210| store_elementwise(); 626| 210| } 627| 210| } 628| 210|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_5arrayIhLm72EEETkNS4_14spanable_rangeENS6_ImLm9EEEQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISB_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEEvOT1_RKSG_ENKUlvE_clEv: 607| 210| const auto store_elementwise = [&] { 608| 210| constexpr size_t bytes_per_element = sizeof(element_type); 609| 210| std::span out_s(out); 610| 1.89k| for(const auto in_elem : in) { ------------------ | Branch (610:30): [True: 1.89k, False: 210] ------------------ 611| 1.89k| store_any(out_s.template first(), in_elem); 612| 1.89k| out_s = out_s.subspan(bytes_per_element); 613| 1.89k| } 614| 210| }; _ZN5Botan8store_beINS_6detail10AutoDetectEJRNSt3__15arrayImLm4EEEEEEDaDpOT0_: 745| 8|inline constexpr auto store_be(ParamTs&&... params) { 746| 8| return detail::store_any(std::forward(params)...); 747| 8|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges14spanable_rangeERNS2_5arrayImLm4EEEQoooosr3stdE7same_asIS4_T0_Eaasr6rangesE25statically_spanable_rangeIS9_Esr3stdE21default_initializableIS9_Esr8conceptsE21resizable_byte_bufferIS9_EEEDaOT1_: 663| 8|inline constexpr auto store_any(InR&& in_range) { 664| 8| auto out = []([[maybe_unused]] const auto& in) { 665| 8| if constexpr(std::same_as) { 666| 8| if constexpr(ranges::statically_spanable_range) { 667| 8| constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| 8| return std::array(); 669| 8| } else { 670| 8| static_assert( 671| 8| !std::same_as, 672| 8| "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| 8| } 674| 8| } else if constexpr(concepts::resizable_byte_buffer) { 675| 8| return OutR(std::span{in}.size_bytes()); 676| 8| } else { 677| 8| return OutR{}; 678| 8| } 679| 8| }(in_range); 680| | 681| 8| store_any>(out, std::forward(in_range)); 682| 8| return out; 683| 8|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS_6ranges14spanable_rangeERNS2_5arrayImLm4EEEQoooosr3stdE7same_asIS4_T0_Eaasr6rangesE25statically_spanable_rangeIS9_Esr3stdE21default_initializableIS9_Esr8conceptsE21resizable_byte_bufferIS9_EEEDaOT1_ENKUlRKT_E_clIS7_EEDaSE_: 664| 8| auto out = []([[maybe_unused]] const auto& in) { 665| 8| if constexpr(std::same_as) { 666| 8| if constexpr(ranges::statically_spanable_range) { 667| 8| constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| 8| return std::array(); 669| | } else { 670| | static_assert( 671| | !std::same_as, 672| | "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| | } 674| | } else if constexpr(concepts::resizable_byte_buffer) { 675| | return OutR(std::span{in}.size_bytes()); 676| | } else { 677| | return OutR{}; 678| | } 679| 8| }(in_range); _ZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_5arrayIhLm32EEETkNS4_14spanable_rangeENS6_ImLm4EEEQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISB_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEEvOT1_RKSG_: 603| 8|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 8| ranges::assert_equal_byte_lengths(out, in); 605| 8| using element_type = std::ranges::range_value_t; 606| | 607| 8| const auto store_elementwise = [&] { 608| 8| constexpr size_t bytes_per_element = sizeof(element_type); 609| 8| std::span out_s(out); 610| 8| for(const auto in_elem : in) { 611| 8| store_any(out_s.template first(), in_elem); 612| 8| out_s = out_s.subspan(bytes_per_element); 613| 8| } 614| 8| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 8| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 8] ------------------ 620| 0| store_elementwise(); 621| 8| } else { 622| | if constexpr(endianness == std::endian::native && !custom_storable) { 623| | typecast_copy(out, in); 624| 8| } else { 625| 8| store_elementwise(); 626| 8| } 627| 8| } 628| 8|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_5arrayIhLm32EEETkNS4_14spanable_rangeENS6_ImLm4EEEQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISB_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEEvOT1_RKSG_ENKUlvE_clEv: 607| 8| const auto store_elementwise = [&] { 608| 8| constexpr size_t bytes_per_element = sizeof(element_type); 609| 8| std::span out_s(out); 610| 32| for(const auto in_elem : in) { ------------------ | Branch (610:30): [True: 32, False: 8] ------------------ 611| 32| store_any(out_s.template first(), in_elem); 612| 32| out_s = out_s.subspan(bytes_per_element); 613| 32| } 614| 8| }; _ZN5Botan7load_leINS_6detail10AutoDetectEJRA9_mPKhRKmEEEDaDpOT0_: 495| 70|inline constexpr auto load_le(ParamTs&&... params) { 496| 70| return detail::load_any(std::forward(params)...); 497| 70|} _ZN5Botan8store_beINSt3__16vectorIhNS1_9allocatorIhEEEEJRA18_mEEEDaDpOT0_: 745| 70|inline constexpr auto store_be(ParamTs&&... params) { 746| 70| return detail::store_any(std::forward(params)...); 747| 70|} _ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS2_6vectorIhNS2_9allocatorIhEEEETkNS_6ranges14spanable_rangeERA18_mQoooosr3stdE7same_asINS0_10AutoDetectET0_Eaasr6rangesE25statically_spanable_rangeISC_Esr3stdE21default_initializableISC_Esr8conceptsE21resizable_byte_bufferISC_EEEDaOT1_: 663| 70|inline constexpr auto store_any(InR&& in_range) { 664| 70| auto out = []([[maybe_unused]] const auto& in) { 665| 70| if constexpr(std::same_as) { 666| 70| if constexpr(ranges::statically_spanable_range) { 667| 70| constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| 70| return std::array(); 669| 70| } else { 670| 70| static_assert( 671| 70| !std::same_as, 672| 70| "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| 70| } 674| 70| } else if constexpr(concepts::resizable_byte_buffer) { 675| 70| return OutR(std::span{in}.size_bytes()); 676| 70| } else { 677| 70| return OutR{}; 678| 70| } 679| 70| }(in_range); 680| | 681| 70| store_any>(out, std::forward(in_range)); 682| 70| return out; 683| 70|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206ENS2_6vectorIhNS2_9allocatorIhEEEETkNS_6ranges14spanable_rangeERA18_mQoooosr3stdE7same_asINS0_10AutoDetectET0_Eaasr6rangesE25statically_spanable_rangeISC_Esr3stdE21default_initializableISC_Esr8conceptsE21resizable_byte_bufferISC_EEEDaOT1_ENKUlRKT_E_clIS9_EEDaSH_: 664| 70| auto out = []([[maybe_unused]] const auto& in) { 665| | if constexpr(std::same_as) { 666| | if constexpr(ranges::statically_spanable_range) { 667| | constexpr size_t bytes = decltype(std::span{in})::extent * sizeof(std::ranges::range_value_t); 668| | return std::array(); 669| | } else { 670| | static_assert( 671| | !std::same_as, 672| | "cannot infer a suitable result container type from the given parameters at compile time, please specify it explicitly"); 673| | } 674| 70| } else if constexpr(concepts::resizable_byte_buffer) { 675| 70| return OutR(std::span{in}.size_bytes()); 676| | } else { 677| | return OutR{}; 678| | } 679| 70| }(in_range); _ZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_6vectorIhNS2_9allocatorIhEEEETkNS4_14spanable_rangeEA18_mQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISD_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISL_EESM_E4type10value_typeEEEEvOT1_RKSI_: 603| 70|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 70| ranges::assert_equal_byte_lengths(out, in); 605| 70| using element_type = std::ranges::range_value_t; 606| | 607| 70| const auto store_elementwise = [&] { 608| 70| constexpr size_t bytes_per_element = sizeof(element_type); 609| 70| std::span out_s(out); 610| 70| for(const auto in_elem : in) { 611| 70| store_any(out_s.template first(), in_elem); 612| 70| out_s = out_s.subspan(bytes_per_element); 613| 70| } 614| 70| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 70| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 70] ------------------ 620| 0| store_elementwise(); 621| 70| } else { 622| | if constexpr(endianness == std::endian::native && !custom_storable) { 623| | typecast_copy(out, in); 624| 70| } else { 625| 70| store_elementwise(); 626| 70| } 627| 70| } 628| 70|} _ZZN5Botan6detail9store_anyILNSt3__16endianE64206EmTkNS_6ranges23contiguous_output_rangeIhEERNS2_6vectorIhNS2_9allocatorIhEEEETkNS4_14spanable_rangeEA18_mQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISD_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISL_EESM_E4type10value_typeEEEEvOT1_RKSI_ENKUlvE_clEv: 607| 70| const auto store_elementwise = [&] { 608| 70| constexpr size_t bytes_per_element = sizeof(element_type); 609| 70| std::span out_s(out); 610| 1.26k| for(const auto in_elem : in) { ------------------ | Branch (610:30): [True: 1.26k, False: 70] ------------------ 611| 1.26k| store_any(out_s.template first(), in_elem); 612| 1.26k| out_s = out_s.subspan(bytes_per_element); 613| 1.26k| } 614| 70| }; _ZN5Botan7load_leINS_6detail10AutoDetectEJRNSt3__15arrayImLm7EEERNS3_4spanIKhLm56EEEEEEDaDpOT0_: 495| 2|inline constexpr auto load_le(ParamTs&&... params) { 496| 2| return detail::load_any(std::forward(params)...); 497| 2|} _ZN5Botan6detail8load_anyILNSt3__16endianE57005ENS0_10AutoDetectETkNS_6ranges23contiguous_output_rangeERNS2_5arrayImLm7EEETkNS5_16contiguous_rangeIhEENS2_4spanIKhLm56EEEQaa20unsigned_integralishINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT1_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISK_EESL_E4type10value_typeEEoosr3stdE7same_asIS4_T0_Esr3stdE7same_asISR_SQ_EEEvOSH_RKT2_: 355| 2|inline constexpr void load_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 356| 2| ranges::assert_equal_byte_lengths(out, in); 357| 2| using element_type = std::ranges::range_value_t; 358| | 359| 2| const auto load_elementwise = [&] { 360| 2| constexpr size_t bytes_per_element = sizeof(element_type); 361| 2| std::span in_s(in); 362| 2| for(auto& out_elem : out) { 363| 2| out_elem = load_any(in_s.template first()); 364| 2| in_s = in_s.subspan(bytes_per_element); 365| 2| } 366| 2| }; 367| | 368| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 369| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 370| | // in a `constexpr` context. 371| 2| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (371:7): [Folded, False: 2] ------------------ 372| 0| load_elementwise(); 373| 2| } else { 374| 2| if constexpr(endianness == std::endian::native && !custom_loadable) { 375| 2| typecast_copy(out, in); 376| | } else { 377| | load_elementwise(); 378| | } 379| 2| } 380| 2|} _ZN5Botan8store_leINS_6detail10AutoDetectEJRNSt3__14spanIhLm56EEENS3_5arrayImLm7EEEEEEDaDpOT0_: 736| 1|inline constexpr auto store_le(ParamTs&&... params) { 737| 1| return detail::store_any(std::forward(params)...); 738| 1|} _ZN5Botan6detail9store_anyILNSt3__16endianE57005ENS0_10AutoDetectETkNS_6ranges23contiguous_output_rangeIhEERNS2_4spanIhLm56EEETkNS5_14spanable_rangeENS2_5arrayImLm7EEEQoosr3stdE7same_asIS4_T0_Esr3stdE7same_asISC_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISK_EESL_E4type10value_typeEEEEvOT1_RKSH_: 603| 1|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 604| 1| ranges::assert_equal_byte_lengths(out, in); 605| 1| using element_type = std::ranges::range_value_t; 606| | 607| 1| const auto store_elementwise = [&] { 608| 1| constexpr size_t bytes_per_element = sizeof(element_type); 609| 1| std::span out_s(out); 610| 1| for(const auto in_elem : in) { 611| 1| store_any(out_s.template first(), in_elem); 612| 1| out_s = out_s.subspan(bytes_per_element); 613| 1| } 614| 1| }; 615| | 616| | // At compile time we cannot use `typecast_copy` as it uses `std::memcpy` 617| | // internally to copy ranges on a byte-by-byte basis, which is not allowed 618| | // in a `constexpr` context. 619| 1| if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ { ------------------ | Branch (619:7): [Folded, False: 1] ------------------ 620| 0| store_elementwise(); 621| 1| } else { 622| 1| if constexpr(endianness == std::endian::native && !custom_storable) { 623| 1| typecast_copy(out, in); 624| | } else { 625| | store_elementwise(); 626| | } 627| 1| } 628| 1|} _ZN5Botan8store_beINS_6detail10AutoDetectEJRmNSt3__14spanIhLm8EEEEEEDaDpOT0_: 745| 847|inline constexpr auto store_be(ParamTs&&... params) { 746| 847| return detail::store_any(std::forward(params)...); 747| 847|} _ZN5Botan18MerkleDamgard_HashINS_5SHA_1EEC2Ev: 42| 3.03k| MerkleDamgard_Hash() { clear(); } _ZN5Botan18MerkleDamgard_HashINS_5SHA_1EE5clearEv: 70| 15.1k| void clear() { 71| 15.1k| MD::init(m_digest); 72| 15.1k| m_buffer.clear(); 73| 15.1k| m_count = 0; 74| 15.1k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_256EEC2Ev: 42| 10.9k| MerkleDamgard_Hash() { clear(); } _ZN5Botan18MerkleDamgard_HashINS_7SHA_256EE5clearEv: 70| 38.9k| void clear() { 71| 38.9k| MD::init(m_digest); 72| 38.9k| m_buffer.clear(); 73| 38.9k| m_count = 0; 74| 38.9k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_384EEC2Ev: 42| 1.46k| MerkleDamgard_Hash() { clear(); } _ZN5Botan18MerkleDamgard_HashINS_7SHA_384EE5clearEv: 70| 9.42k| void clear() { 71| 9.42k| MD::init(m_digest); 72| 9.42k| m_buffer.clear(); 73| 9.42k| m_count = 0; 74| 9.42k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_512EEC2Ev: 42| 1.09k| MerkleDamgard_Hash() { clear(); } _ZN5Botan18MerkleDamgard_HashINS_7SHA_512EE5clearEv: 70| 1.65k| void clear() { 71| 1.65k| MD::init(m_digest); 72| 1.65k| m_buffer.clear(); 73| 1.65k| m_count = 0; 74| 1.65k| } _ZN5Botan18MerkleDamgard_HashINS_5SHA_1EE6updateENSt3__14spanIKhLm18446744073709551615EEE: 44| 12.9k| void update(std::span input) { 45| 12.9k| BufferSlicer in(input); 46| | 47| 33.5k| while(!in.empty()) { ------------------ | Branch (47:16): [True: 20.5k, False: 12.9k] ------------------ 48| 20.5k| if(const auto one_block = m_buffer.handle_unaligned_data(in)) { ------------------ | Branch (48:27): [True: 40, False: 20.5k] ------------------ 49| 40| MD::compress_n(m_digest, one_block.value(), 1); 50| 40| } 51| | 52| 20.5k| if(m_buffer.in_alignment()) { ------------------ | Branch (52:16): [True: 8.29k, False: 12.2k] ------------------ 53| 8.29k| const auto [aligned_data, full_blocks] = m_buffer.aligned_data_to_process(in); 54| 8.29k| if(full_blocks > 0) { ------------------ | Branch (54:19): [True: 8.28k, False: 5] ------------------ 55| 8.28k| MD::compress_n(m_digest, aligned_data, full_blocks); 56| 8.28k| } 57| 8.29k| } 58| 20.5k| } 59| | 60| 12.9k| m_count += input.size(); 61| 12.9k| } _ZN5Botan18MerkleDamgard_HashINS_5SHA_1EE5finalENSt3__14spanIhLm18446744073709551615EEE: 63| 11.9k| void final(std::span output) { 64| 11.9k| append_padding_bit(); 65| 11.9k| append_counter_and_finalize(); 66| 11.9k| copy_output(output); 67| 11.9k| clear(); 68| 11.9k| } _ZN5Botan18MerkleDamgard_HashINS_5SHA_1EE18append_padding_bitEv: 77| 11.9k| void append_padding_bit() { 78| 11.9k| BOTAN_ASSERT_NOMSG(!m_buffer.ready_to_consume()); ------------------ | | 84| 11.9k| do { \ | | 85| 11.9k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 11.9k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 11.9k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 11.9k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 11.9k] | | ------------------ ------------------ 79| 11.9k| if constexpr(MD::bit_endianness == MD_Endian::Big) { 80| 11.9k| const uint8_t final_byte = 0x80; 81| 11.9k| m_buffer.append({&final_byte, 1}); 82| | } else { 83| | const uint8_t final_byte = 0x01; 84| | m_buffer.append({&final_byte, 1}); 85| | } 86| 11.9k| } _ZN5Botan18MerkleDamgard_HashINS_5SHA_1EE27append_counter_and_finalizeEv: 88| 11.9k| void append_counter_and_finalize() { 89| | // Compress the remaining data if the final data block does not provide 90| | // enough space for the counter bytes. 91| 11.9k| if(m_buffer.elements_until_alignment() < MD::ctr_bytes) { ------------------ | Branch (91:13): [True: 688, False: 11.2k] ------------------ 92| 688| m_buffer.fill_up_with_zeros(); 93| 688| MD::compress_n(m_digest, m_buffer.consume(), 1); 94| 688| } 95| | 96| | // Make sure that any remaining bytes in the very last block are zero. 97| 11.9k| BOTAN_ASSERT_NOMSG(m_buffer.elements_until_alignment() >= MD::ctr_bytes); ------------------ | | 84| 11.9k| do { \ | | 85| 11.9k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 11.9k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 11.9k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 11.9k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 11.9k] | | ------------------ ------------------ 98| 11.9k| m_buffer.fill_up_with_zeros(); 99| | 100| | // Replace a bunch of the right-most zero-padding with the counter bytes. 101| 11.9k| const uint64_t bit_count = m_count * 8; 102| 11.9k| const auto last_bytes = m_buffer.directly_modify_last(sizeof(bit_count)); 103| 11.9k| if constexpr(MD::byte_endianness == MD_Endian::Big) { 104| 11.9k| store_be(bit_count, last_bytes.data()); 105| | } else { 106| | store_le(bit_count, last_bytes.data()); 107| | } 108| | 109| | // Compress the very last block. 110| 11.9k| MD::compress_n(m_digest, m_buffer.consume(), 1); 111| 11.9k| } _ZN5Botan18MerkleDamgard_HashINS_5SHA_1EE11copy_outputENSt3__14spanIhLm18446744073709551615EEE: 113| 11.9k| void copy_output(std::span output) { 114| 11.9k| BOTAN_ASSERT_NOMSG(output.size() >= MD::output_bytes); ------------------ | | 84| 11.9k| do { \ | | 85| 11.9k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 11.9k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 11.9k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 11.9k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 11.9k] | | ------------------ ------------------ 115| | 116| 11.9k| if constexpr(MD::byte_endianness == MD_Endian::Big) { 117| 11.9k| copy_out_be(output.first(MD::output_bytes), m_digest); 118| | } else { 119| | copy_out_le(output.first(MD::output_bytes), m_digest); 120| | } 121| 11.9k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_256EE6updateENSt3__14spanIKhLm18446744073709551615EEE: 44| 40.5k| void update(std::span input) { 45| 40.5k| BufferSlicer in(input); 46| | 47| 91.6k| while(!in.empty()) { ------------------ | Branch (47:16): [True: 51.1k, False: 40.5k] ------------------ 48| 51.1k| if(const auto one_block = m_buffer.handle_unaligned_data(in)) { ------------------ | Branch (48:27): [True: 2.04k, False: 49.1k] ------------------ 49| 2.04k| MD::compress_n(m_digest, one_block.value(), 1); 50| 2.04k| } 51| | 52| 51.1k| if(m_buffer.in_alignment()) { ------------------ | Branch (52:16): [True: 20.0k, False: 31.1k] ------------------ 53| 20.0k| const auto [aligned_data, full_blocks] = m_buffer.aligned_data_to_process(in); 54| 20.0k| if(full_blocks > 0) { ------------------ | Branch (54:19): [True: 17.9k, False: 2.03k] ------------------ 55| 17.9k| MD::compress_n(m_digest, aligned_data, full_blocks); 56| 17.9k| } 57| 20.0k| } 58| 51.1k| } 59| | 60| 40.5k| m_count += input.size(); 61| 40.5k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_256EE5finalENSt3__14spanIhLm18446744073709551615EEE: 63| 26.9k| void final(std::span output) { 64| 26.9k| append_padding_bit(); 65| 26.9k| append_counter_and_finalize(); 66| 26.9k| copy_output(output); 67| 26.9k| clear(); 68| 26.9k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_256EE18append_padding_bitEv: 77| 26.9k| void append_padding_bit() { 78| 26.9k| BOTAN_ASSERT_NOMSG(!m_buffer.ready_to_consume()); ------------------ | | 84| 26.9k| do { \ | | 85| 26.9k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 26.9k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 26.9k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 26.9k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 26.9k] | | ------------------ ------------------ 79| 26.9k| if constexpr(MD::bit_endianness == MD_Endian::Big) { 80| 26.9k| const uint8_t final_byte = 0x80; 81| 26.9k| m_buffer.append({&final_byte, 1}); 82| | } else { 83| | const uint8_t final_byte = 0x01; 84| | m_buffer.append({&final_byte, 1}); 85| | } 86| 26.9k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_256EE27append_counter_and_finalizeEv: 88| 26.9k| void append_counter_and_finalize() { 89| | // Compress the remaining data if the final data block does not provide 90| | // enough space for the counter bytes. 91| 26.9k| if(m_buffer.elements_until_alignment() < MD::ctr_bytes) { ------------------ | Branch (91:13): [True: 690, False: 26.2k] ------------------ 92| 690| m_buffer.fill_up_with_zeros(); 93| 690| MD::compress_n(m_digest, m_buffer.consume(), 1); 94| 690| } 95| | 96| | // Make sure that any remaining bytes in the very last block are zero. 97| 26.9k| BOTAN_ASSERT_NOMSG(m_buffer.elements_until_alignment() >= MD::ctr_bytes); ------------------ | | 84| 26.9k| do { \ | | 85| 26.9k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 26.9k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 26.9k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 26.9k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 26.9k] | | ------------------ ------------------ 98| 26.9k| m_buffer.fill_up_with_zeros(); 99| | 100| | // Replace a bunch of the right-most zero-padding with the counter bytes. 101| 26.9k| const uint64_t bit_count = m_count * 8; 102| 26.9k| const auto last_bytes = m_buffer.directly_modify_last(sizeof(bit_count)); 103| 26.9k| if constexpr(MD::byte_endianness == MD_Endian::Big) { 104| 26.9k| store_be(bit_count, last_bytes.data()); 105| | } else { 106| | store_le(bit_count, last_bytes.data()); 107| | } 108| | 109| | // Compress the very last block. 110| 26.9k| MD::compress_n(m_digest, m_buffer.consume(), 1); 111| 26.9k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_256EE11copy_outputENSt3__14spanIhLm18446744073709551615EEE: 113| 26.9k| void copy_output(std::span output) { 114| 26.9k| BOTAN_ASSERT_NOMSG(output.size() >= MD::output_bytes); ------------------ | | 84| 26.9k| do { \ | | 85| 26.9k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 26.9k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 26.9k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 26.9k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 26.9k] | | ------------------ ------------------ 115| | 116| 26.9k| if constexpr(MD::byte_endianness == MD_Endian::Big) { 117| 26.9k| copy_out_be(output.first(MD::output_bytes), m_digest); 118| | } else { 119| | copy_out_le(output.first(MD::output_bytes), m_digest); 120| | } 121| 26.9k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_384EE6updateENSt3__14spanIKhLm18446744073709551615EEE: 44| 16.8k| void update(std::span input) { 45| 16.8k| BufferSlicer in(input); 46| | 47| 34.5k| while(!in.empty()) { ------------------ | Branch (47:16): [True: 17.7k, False: 16.8k] ------------------ 48| 17.7k| if(const auto one_block = m_buffer.handle_unaligned_data(in)) { ------------------ | Branch (48:27): [True: 14, False: 17.7k] ------------------ 49| 14| MD::compress_n(m_digest, one_block.value(), 1); 50| 14| } 51| | 52| 17.7k| if(m_buffer.in_alignment()) { ------------------ | Branch (52:16): [True: 7.96k, False: 9.76k] ------------------ 53| 7.96k| const auto [aligned_data, full_blocks] = m_buffer.aligned_data_to_process(in); 54| 7.96k| if(full_blocks > 0) { ------------------ | Branch (54:19): [True: 7.96k, False: 3] ------------------ 55| 7.96k| MD::compress_n(m_digest, aligned_data, full_blocks); 56| 7.96k| } 57| 7.96k| } 58| 17.7k| } 59| | 60| 16.8k| m_count += input.size(); 61| 16.8k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_512EE6updateENSt3__14spanIKhLm18446744073709551615EEE: 44| 569| void update(std::span input) { 45| 569| BufferSlicer in(input); 46| | 47| 1.68k| while(!in.empty()) { ------------------ | Branch (47:16): [True: 1.11k, False: 569] ------------------ 48| 1.11k| if(const auto one_block = m_buffer.handle_unaligned_data(in)) { ------------------ | Branch (48:27): [True: 1, False: 1.11k] ------------------ 49| 1| MD::compress_n(m_digest, one_block.value(), 1); 50| 1| } 51| | 52| 1.11k| if(m_buffer.in_alignment()) { ------------------ | Branch (52:16): [True: 549, False: 569] ------------------ 53| 549| const auto [aligned_data, full_blocks] = m_buffer.aligned_data_to_process(in); 54| 549| if(full_blocks > 0) { ------------------ | Branch (54:19): [True: 549, False: 0] ------------------ 55| 549| MD::compress_n(m_digest, aligned_data, full_blocks); 56| 549| } 57| 549| } 58| 1.11k| } 59| | 60| 569| m_count += input.size(); 61| 569| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_384EE5finalENSt3__14spanIhLm18446744073709551615EEE: 63| 6.86k| void final(std::span output) { 64| 6.86k| append_padding_bit(); 65| 6.86k| append_counter_and_finalize(); 66| 6.86k| copy_output(output); 67| 6.86k| clear(); 68| 6.86k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_384EE18append_padding_bitEv: 77| 6.86k| void append_padding_bit() { 78| 6.86k| BOTAN_ASSERT_NOMSG(!m_buffer.ready_to_consume()); ------------------ | | 84| 6.86k| do { \ | | 85| 6.86k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 6.86k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 6.86k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 6.86k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 6.86k] | | ------------------ ------------------ 79| 6.86k| if constexpr(MD::bit_endianness == MD_Endian::Big) { 80| 6.86k| const uint8_t final_byte = 0x80; 81| 6.86k| m_buffer.append({&final_byte, 1}); 82| | } else { 83| | const uint8_t final_byte = 0x01; 84| | m_buffer.append({&final_byte, 1}); 85| | } 86| 6.86k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_384EE27append_counter_and_finalizeEv: 88| 6.86k| void append_counter_and_finalize() { 89| | // Compress the remaining data if the final data block does not provide 90| | // enough space for the counter bytes. 91| 6.86k| if(m_buffer.elements_until_alignment() < MD::ctr_bytes) { ------------------ | Branch (91:13): [True: 1.11k, False: 5.75k] ------------------ 92| 1.11k| m_buffer.fill_up_with_zeros(); 93| 1.11k| MD::compress_n(m_digest, m_buffer.consume(), 1); 94| 1.11k| } 95| | 96| | // Make sure that any remaining bytes in the very last block are zero. 97| 6.86k| BOTAN_ASSERT_NOMSG(m_buffer.elements_until_alignment() >= MD::ctr_bytes); ------------------ | | 84| 6.86k| do { \ | | 85| 6.86k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 6.86k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 6.86k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 6.86k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 6.86k] | | ------------------ ------------------ 98| 6.86k| m_buffer.fill_up_with_zeros(); 99| | 100| | // Replace a bunch of the right-most zero-padding with the counter bytes. 101| 6.86k| const uint64_t bit_count = m_count * 8; 102| 6.86k| const auto last_bytes = m_buffer.directly_modify_last(sizeof(bit_count)); 103| 6.86k| if constexpr(MD::byte_endianness == MD_Endian::Big) { 104| 6.86k| store_be(bit_count, last_bytes.data()); 105| | } else { 106| | store_le(bit_count, last_bytes.data()); 107| | } 108| | 109| | // Compress the very last block. 110| 6.86k| MD::compress_n(m_digest, m_buffer.consume(), 1); 111| 6.86k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_384EE11copy_outputENSt3__14spanIhLm18446744073709551615EEE: 113| 6.86k| void copy_output(std::span output) { 114| 6.86k| BOTAN_ASSERT_NOMSG(output.size() >= MD::output_bytes); ------------------ | | 84| 6.86k| do { \ | | 85| 6.86k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 6.86k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 6.86k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 6.86k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 6.86k] | | ------------------ ------------------ 115| | 116| 6.86k| if constexpr(MD::byte_endianness == MD_Endian::Big) { 117| 6.86k| copy_out_be(output.first(MD::output_bytes), m_digest); 118| | } else { 119| | copy_out_le(output.first(MD::output_bytes), m_digest); 120| | } 121| 6.86k| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_512EE5finalENSt3__14spanIhLm18446744073709551615EEE: 63| 558| void final(std::span output) { 64| 558| append_padding_bit(); 65| 558| append_counter_and_finalize(); 66| 558| copy_output(output); 67| 558| clear(); 68| 558| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_512EE18append_padding_bitEv: 77| 558| void append_padding_bit() { 78| 558| BOTAN_ASSERT_NOMSG(!m_buffer.ready_to_consume()); ------------------ | | 84| 558| do { \ | | 85| 558| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 558| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 558] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 558| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 558] | | ------------------ ------------------ 79| 558| if constexpr(MD::bit_endianness == MD_Endian::Big) { 80| 558| const uint8_t final_byte = 0x80; 81| 558| m_buffer.append({&final_byte, 1}); 82| | } else { 83| | const uint8_t final_byte = 0x01; 84| | m_buffer.append({&final_byte, 1}); 85| | } 86| 558| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_512EE27append_counter_and_finalizeEv: 88| 558| void append_counter_and_finalize() { 89| | // Compress the remaining data if the final data block does not provide 90| | // enough space for the counter bytes. 91| 558| if(m_buffer.elements_until_alignment() < MD::ctr_bytes) { ------------------ | Branch (91:13): [True: 0, False: 558] ------------------ 92| 0| m_buffer.fill_up_with_zeros(); 93| 0| MD::compress_n(m_digest, m_buffer.consume(), 1); 94| 0| } 95| | 96| | // Make sure that any remaining bytes in the very last block are zero. 97| 558| BOTAN_ASSERT_NOMSG(m_buffer.elements_until_alignment() >= MD::ctr_bytes); ------------------ | | 84| 558| do { \ | | 85| 558| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 558| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 558] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 558| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 558] | | ------------------ ------------------ 98| 558| m_buffer.fill_up_with_zeros(); 99| | 100| | // Replace a bunch of the right-most zero-padding with the counter bytes. 101| 558| const uint64_t bit_count = m_count * 8; 102| 558| const auto last_bytes = m_buffer.directly_modify_last(sizeof(bit_count)); 103| 558| if constexpr(MD::byte_endianness == MD_Endian::Big) { 104| 558| store_be(bit_count, last_bytes.data()); 105| | } else { 106| | store_le(bit_count, last_bytes.data()); 107| | } 108| | 109| | // Compress the very last block. 110| 558| MD::compress_n(m_digest, m_buffer.consume(), 1); 111| 558| } _ZN5Botan18MerkleDamgard_HashINS_7SHA_512EE11copy_outputENSt3__14spanIhLm18446744073709551615EEE: 113| 558| void copy_output(std::span output) { 114| 558| BOTAN_ASSERT_NOMSG(output.size() >= MD::output_bytes); ------------------ | | 84| 558| do { \ | | 85| 558| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 558| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 558] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 558| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 558] | | ------------------ ------------------ 115| | 116| 558| if constexpr(MD::byte_endianness == MD_Endian::Big) { 117| 558| copy_out_be(output.first(MD::output_bytes), m_digest); 118| | } else { 119| | copy_out_le(output.first(MD::output_bytes), m_digest); 120| | } 121| 558| } _ZN5Botan16as_span_of_bytesENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEE: 68| 272|inline std::span as_span_of_bytes(std::string_view s) { 69| 272| return as_span_of_bytes(s.data(), s.size()); 70| 272|} _ZN5Botan16as_span_of_bytesEPKcm: 59| 7.87k|inline std::span as_span_of_bytes(const char* s, size_t len) { 60| 7.87k| const uint8_t* b = reinterpret_cast(s); 61| 7.87k| return std::span{b, len}; 62| 7.87k|} _ZN5Botan16as_span_of_bytesERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE: 64| 7.60k|inline std::span as_span_of_bytes(const std::string& s) { 65| 7.60k| return as_span_of_bytes(s.data(), s.size()); 66| 7.60k|} _ZN5Botan15bytes_to_stringENSt3__14spanIKhLm18446744073709551615EEE: 76| 29.7k|inline std::string bytes_to_string(std::span bytes) { 77| 29.7k| return std::string(reinterpret_cast(bytes.data()), bytes.size()); 78| 29.7k|} _ZN5Botan14zeroize_bufferITkNSt3__117unsigned_integralEhEEvPT_m: 37| 115k|inline void zeroize_buffer(T buf[], size_t n) { 38| 115k| if(n > 0) { ------------------ | Branch (38:7): [True: 115k, False: 0] ------------------ 39| 115k| std::memset(buf, 0, sizeof(T) * n); 40| 115k| } 41| 115k|} _ZN5Botan21unchecked_copy_memoryITkNSt3__117unsigned_integralEmEEvPT_PKS2_m: 44| 3.13M|inline void unchecked_copy_memory(T* out, const T* in, size_t n) { 45| 3.13M| if(in != nullptr && out != nullptr && n > 0) { ------------------ | Branch (45:7): [True: 3.13M, False: 0] | Branch (45:24): [True: 3.13M, False: 0] | Branch (45:42): [True: 3.13M, False: 0] ------------------ 46| 3.13M| std::memmove(out, in, sizeof(T) * n); 47| 3.13M| } 48| 3.13M|} _ZN5Botan14zeroize_bufferITkNSt3__117unsigned_integralEmEEvPT_m: 37| 3.42M|inline void zeroize_buffer(T buf[], size_t n) { 38| 3.42M| if(n > 0) { ------------------ | Branch (38:7): [True: 300k, False: 3.12M] ------------------ 39| 300k| std::memset(buf, 0, sizeof(T) * n); 40| 300k| } 41| 3.42M|} _ZNK5Botan12Null_Padding15valid_blocksizeEm: 170| 273| bool valid_blocksize(size_t /*block_size*/) const override { return true; } _ZN5Botan28BlockCipherModePaddingMethodD2Ev: 76| 273| virtual ~BlockCipherModePaddingMethod() = default; _ZNK5Botan17Montgomery_Params1pEv: 41| 17.5M| const BigInt& p() const { return m_data->p(); } _ZNK5Botan17Montgomery_Params2R1Ev: 43| 6.14k| const BigInt& R1() const { return m_data->r1(); } _ZNK5Botan17Montgomery_Params2R2Ev: 45| 5.63k| const BigInt& R2() const { return m_data->r2(); } _ZNK5Botan17Montgomery_Params2R3Ev: 47| 6| const BigInt& R3() const { return m_data->r3(); } _ZNK5Botan17Montgomery_Params6p_dashEv: 49| 10.3M| word p_dash() const { return m_data->p_dash(); } _ZNK5Botan17Montgomery_Params7p_wordsEv: 51| 13.2M| size_t p_words() const { return m_data->p_size(); } _ZNK5Botan17Montgomery_Params4Data1pEv: 76| 17.5M| const BigInt& p() const { return m_p; } _ZNK5Botan17Montgomery_Params4Data2r1Ev: 78| 6.14k| const BigInt& r1() const { return m_r1; } _ZNK5Botan17Montgomery_Params4Data2r2Ev: 80| 5.63k| const BigInt& r2() const { return m_r2; } _ZNK5Botan17Montgomery_Params4Data2r3Ev: 82| 6| const BigInt& r3() const { return m_r3; } _ZNK5Botan17Montgomery_Params4Data6p_dashEv: 84| 10.3M| word p_dash() const { return m_p_dash; } _ZNK5Botan17Montgomery_Params4Data6p_sizeEv: 86| 13.2M| size_t p_size() const { return m_p_words; } _ZNK5Botan14Montgomery_Int4reprEv: 143| 1.52M| const secure_vector& repr() const { return m_v; } _ZNK5Botan14Montgomery_Int18_const_time_poisonEv: 180| 21.8k| void _const_time_poison() const { CT::poison(m_v); } _ZNK5Botan14Montgomery_Int20_const_time_unpoisonEv: 182| 34.5k| void _const_time_unpoison() const { CT::unpoison(m_v); } _ZNK5Botan14Montgomery_Int7_paramsEv: 184| 4.12k| const Montgomery_Params& _params() const { return m_params; } _ZN5Botan9monty_expERKNS_17Montgomery_ParamsERKNS_6BigIntES5_m: 74| 544| size_t max_k_bits) { 75| 544| const auto precomputed = monty_precompute(params_p, g, 4, true); 76| 544| return monty_execute(*precomputed, k, max_k_bits); 77| 544|} _ZN5Botan31Montgomery_Exponentiation_StateC2Ev: 41| 4.12k| Montgomery_Exponentiation_State() = default; _ZN5Botan31Montgomery_Exponentiation_StateD2Ev: 22| 4.12k| virtual ~Montgomery_Exponentiation_State() = default; _ZN5Botan10word8_add3ITkNS_8WordTypeEmEET_PS1_PKS1_S4_S1_: 304| 27.3M|inline constexpr auto word8_add3(W z[8], const W x[8], const W y[8], W carry) -> W { 305| 27.3M|#if defined(BOTAN_MP_USE_X86_64_ASM) 306| 27.3M| if constexpr(std::same_as) { 307| 27.3M| if(!std::is_constant_evaluated()) { ------------------ | Branch (307:10): [True: 27.3M, Folded] ------------------ 308| 27.3M| asm volatile(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB3_OP, "adcq")) 309| 27.3M| : [carry] "=r"(carry) 310| 27.3M| : [x] "r"(x), [y] "r"(y), [z] "r"(z), "0"(carry) 311| 27.3M| : "cc", "memory"); 312| 27.3M| return carry; 313| 27.3M| } 314| 27.3M| } 315| 0|#endif 316| | 317| 0| z[0] = word_add(x[0], y[0], &carry); 318| 27.3M| z[1] = word_add(x[1], y[1], &carry); 319| 27.3M| z[2] = word_add(x[2], y[2], &carry); 320| 27.3M| z[3] = word_add(x[3], y[3], &carry); 321| 27.3M| z[4] = word_add(x[4], y[4], &carry); 322| 27.3M| z[5] = word_add(x[5], y[5], &carry); 323| 27.3M| z[6] = word_add(x[6], y[6], &carry); 324| 27.3M| z[7] = word_add(x[7], y[7], &carry); 325| 27.3M| return carry; 326| 27.3M|} _ZN5Botan8word_addITkNS_8WordTypeEmEET_S1_S1_PS1_: 239| 2.77G|inline constexpr auto word_add(W x, W y, W* carry) -> W { 240| 2.77G|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_addc) 241| 2.77G| if(!std::is_constant_evaluated()) { ------------------ | Branch (241:7): [True: 2.77G, Folded] ------------------ 242| | if constexpr(std::same_as) { 243| | return __builtin_addc(x, y, *carry & 1, carry); 244| 2.77G| } else if constexpr(std::same_as) { 245| 2.77G| return __builtin_addcl(x, y, *carry & 1, carry); 246| | } else if constexpr(std::same_as) { 247| | return __builtin_addcll(x, y, *carry & 1, carry); 248| | } 249| 2.77G| } 250| 0|#endif 251| | 252| | if constexpr(WordInfo::dword_is_native && use_dword_for_word_add) { 253| | /* 254| | TODO(Botan4) this is largely a performance hack for GCCs that don't 255| | support __builtin_addc, if we increase the minimum supported version of 256| | GCC to GCC 14 then we can remove this and not worry about it 257| | */ 258| | const W cb = *carry & 1; 259| | const auto s = typename WordInfo::dword(x) + y + cb; 260| | *carry = static_cast(s >> WordInfo::bits); 261| | return static_cast(s); 262| 2.77G| } else { 263| 2.77G| const W cb = *carry & 1; 264| 2.77G| W z = x + y; 265| 2.77G| W c1 = (z < x); 266| 2.77G| z += cb; 267| 2.77G| *carry = c1 | (z < cb); 268| 2.77G| return z; 269| 2.77G| } 270| 2.77G|} _ZN5Botan10word8_sub3ITkNS_8WordTypeEmEET_PS1_PKS1_S4_S1_: 385| 81.6M|inline constexpr auto word8_sub3(W z[8], const W x[8], const W y[8], W carry) -> W { 386| 81.6M|#if defined(BOTAN_MP_USE_X86_64_ASM) 387| 81.6M| if constexpr(std::same_as) { 388| 81.6M| if(!std::is_constant_evaluated()) { ------------------ | Branch (388:10): [True: 81.6M, Folded] ------------------ 389| 81.6M| asm volatile(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB3_OP, "sbbq")) 390| 81.6M| : [carry] "=r"(carry) 391| 81.6M| : [x] "r"(x), [y] "r"(y), [z] "r"(z), "0"(carry) 392| 81.6M| : "cc", "memory"); 393| 81.6M| return carry; 394| 81.6M| } 395| 81.6M| } 396| 18.4E|#endif 397| | 398| 18.4E| z[0] = word_sub(x[0], y[0], &carry); 399| 81.6M| z[1] = word_sub(x[1], y[1], &carry); 400| 81.6M| z[2] = word_sub(x[2], y[2], &carry); 401| 81.6M| z[3] = word_sub(x[3], y[3], &carry); 402| 81.6M| z[4] = word_sub(x[4], y[4], &carry); 403| 81.6M| z[5] = word_sub(x[5], y[5], &carry); 404| 81.6M| z[6] = word_sub(x[6], y[6], &carry); 405| 81.6M| z[7] = word_sub(x[7], y[7], &carry); 406| 81.6M| return carry; 407| 81.6M|} _ZN5Botan8word_subITkNS_8WordTypeEmEET_S1_S1_PS1_: 332| 213M|inline constexpr auto word_sub(W x, W y, W* carry) -> W { 333| 213M|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_subc) 334| 213M| if(!std::is_constant_evaluated()) { ------------------ | Branch (334:7): [True: 213M, Folded] ------------------ 335| | if constexpr(std::same_as) { 336| | return __builtin_subc(x, y, *carry & 1, carry); 337| 213M| } else if constexpr(std::same_as) { 338| 213M| return __builtin_subcl(x, y, *carry & 1, carry); 339| | } else if constexpr(std::same_as) { 340| | return __builtin_subcll(x, y, *carry & 1, carry); 341| | } 342| 213M| } 343| 0|#endif 344| | 345| 0| const W cb = *carry & 1; 346| 213M| W t0 = x - y; 347| 213M| W c1 = (t0 > x); 348| 213M| W z = t0 - cb; 349| 213M| *carry = c1 | (z > t0); 350| 213M| return z; 351| 213M|} _ZN5Botan13word8_linmul3ITkNS_8WordTypeEmEET_PS1_PKS1_S1_S1_: 413| 1.54k|inline constexpr auto word8_linmul3(W z[8], const W x[8], W y, W carry) -> W { 414| 1.54k|#if defined(BOTAN_MP_USE_X86_64_ASM) 415| 1.54k| if constexpr(std::same_as) { 416| 1.54k| if(!std::is_constant_evaluated()) { ------------------ | Branch (416:10): [True: 1.54k, Folded] ------------------ 417| 1.54k| asm volatile(DO_8_TIMES(LINMUL_OP, "z") 418| 1.54k| : [carry] "=r"(carry) 419| 1.54k| : [z] "r"(z), [x] "r"(x), [y] "rm"(y), "0"(carry) 420| 1.54k| : "cc", "%rax", "%rdx", "memory"); 421| 1.54k| return carry; 422| 1.54k| } 423| 1.54k| } 424| 0|#endif 425| | 426| 0| z[0] = word_madd2(x[0], y, &carry); 427| 1.54k| z[1] = word_madd2(x[1], y, &carry); 428| 1.54k| z[2] = word_madd2(x[2], y, &carry); 429| 1.54k| z[3] = word_madd2(x[3], y, &carry); 430| 1.54k| z[4] = word_madd2(x[4], y, &carry); 431| 1.54k| z[5] = word_madd2(x[5], y, &carry); 432| 1.54k| z[6] = word_madd2(x[6], y, &carry); 433| 1.54k| z[7] = word_madd2(x[7], y, &carry); 434| 1.54k| return carry; 435| 1.54k|} _ZN5Botan10word_madd2ITkNS_8WordTypeEmEET_S1_S1_PS1_: 90| 51.4M|inline constexpr auto word_madd2(W a, W b, W* c) -> W { 91| 51.4M|#if defined(BOTAN_MP_USE_X86_64_ASM) 92| 51.4M| if constexpr(std::same_as) { 93| 51.4M| if(!std::is_constant_evaluated()) { ------------------ | Branch (93:10): [True: 51.4M, Folded] ------------------ 94| 51.4M| asm(R"( 95| 51.4M| mulq %[b] 96| 51.4M| addq %[c],%[a] 97| 51.4M| adcq $0,%[carry] 98| 51.4M| )" 99| 51.4M| : [a] "=a"(a), [b] "=rm"(b), [carry] "=&d"(*c) 100| 51.4M| : "0"(a), "1"(b), [c] "g"(*c) 101| 51.4M| : "cc"); 102| | 103| 51.4M| return a; 104| 51.4M| } 105| 51.4M| } 106| |#elif defined(BOTAN_MP_USE_AARCH64_ASM) 107| | if constexpr(std::same_as) { 108| | if(!std::is_constant_evaluated()) { 109| | W lo = 0; 110| | W hi = 0; 111| | asm(R"( 112| | mul %[lo], %[a], %[b] 113| | umulh %[hi], %[a], %[b] 114| | adds %[lo], %[lo], %[c] 115| | adc %[hi], %[hi], xzr 116| | )" 117| | : [lo] "=&r"(lo), [hi] "=&r"(hi) 118| | : [a] "r"(a), [b] "r"(b), [c] "r"(*c) 119| | : "cc"); 120| | 121| | *c = hi; 122| | return lo; 123| | } 124| | } 125| |#endif 126| | 127| 18.4E| typedef typename WordInfo::dword dword; 128| 51.4M| const dword s = dword(a) * b + *c; 129| 51.4M| *c = static_cast(s >> WordInfo::bits); 130| 51.4M| return static_cast(s); 131| 51.4M|} _ZN5Botan11word8_madd3ITkNS_8WordTypeEmEET_PS1_PKS1_S1_S1_: 441| 2.87M|inline constexpr auto word8_madd3(W z[8], const W x[8], W y, W carry) -> W { 442| 2.87M|#if defined(BOTAN_MP_USE_X86_64_ASM) 443| 2.87M| if constexpr(std::same_as) { 444| 2.87M| if(!std::is_constant_evaluated()) { ------------------ | Branch (444:10): [True: 2.87M, Folded] ------------------ 445| 2.87M| asm volatile(DO_8_TIMES(MULADD_OP, "") 446| 2.87M| : [carry] "=r"(carry) 447| 2.87M| : [z] "r"(z), [x] "r"(x), [y] "rm"(y), "0"(carry) 448| 2.87M| : "cc", "%rax", "%rdx", "memory"); 449| 2.87M| return carry; 450| 2.87M| } 451| 2.87M| } 452| 0|#endif 453| | 454| 0| z[0] = word_madd3(x[0], y, z[0], &carry); 455| 2.87M| z[1] = word_madd3(x[1], y, z[1], &carry); 456| 2.87M| z[2] = word_madd3(x[2], y, z[2], &carry); 457| 2.87M| z[3] = word_madd3(x[3], y, z[3], &carry); 458| 2.87M| z[4] = word_madd3(x[4], y, z[4], &carry); 459| 2.87M| z[5] = word_madd3(x[5], y, z[5], &carry); 460| 2.87M| z[6] = word_madd3(x[6], y, z[6], &carry); 461| 2.87M| z[7] = word_madd3(x[7], y, z[7], &carry); 462| 2.87M| return carry; 463| 2.87M|} _ZN5Botan10word_madd3ITkNS_8WordTypeEmEET_S1_S1_S1_PS1_: 137| 640M|inline constexpr auto word_madd3(W a, W b, W c, W* d) -> W { 138| 640M|#if defined(BOTAN_MP_USE_X86_64_ASM) 139| 640M| if constexpr(std::same_as) { 140| 640M| if(!std::is_constant_evaluated()) { ------------------ | Branch (140:10): [True: 640M, Folded] ------------------ 141| 640M| asm(R"( 142| 640M| mulq %[b] 143| 640M| 144| 640M| addq %[c],%[a] 145| 640M| adcq $0,%[carry] 146| 640M| 147| 640M| addq %[d],%[a] 148| 640M| adcq $0,%[carry] 149| 640M| )" 150| 640M| : [a] "=a"(a), [b] "=rm"(b), [carry] "=&d"(*d) 151| 640M| : "0"(a), "1"(b), [c] "g"(c), [d] "g"(*d) 152| 640M| : "cc"); 153| | 154| 640M| return a; 155| 640M| } 156| 640M| } 157| |#elif defined(BOTAN_MP_USE_AARCH64_ASM) 158| | if constexpr(std::same_as) { 159| | if(!std::is_constant_evaluated()) { 160| | W lo = 0; 161| | W hi = 0; 162| | asm(R"( 163| | mul %[lo], %[a], %[b] 164| | umulh %[hi], %[a], %[b] 165| | adds %[lo], %[lo], %[c] 166| | adc %[hi], %[hi], xzr 167| | adds %[lo], %[lo], %[d] 168| | adc %[hi], %[hi], xzr 169| | )" 170| | : [lo] "=&r"(lo), [hi] "=&r"(hi) 171| | : [a] "r"(a), [b] "r"(b), [c] "r"(c), [d] "r"(*d) 172| | : "cc"); 173| | 174| | *d = hi; 175| | return lo; 176| | } 177| | } 178| |#endif 179| | 180| 18.4E| typedef typename WordInfo::dword dword; 181| 640M| const dword s = dword(a) * b + c + *d; 182| 640M| *d = static_cast(s >> WordInfo::bits); 183| 640M| return static_cast(s); 184| 640M|} _ZN5Botan10word8_add2ITkNS_8WordTypeEmEET_PS1_PKS1_S1_: 276| 92.7k|inline constexpr auto word8_add2(W x[8], const W y[8], W carry) -> W { 277| 92.7k|#if defined(BOTAN_MP_USE_X86_64_ASM) 278| 92.7k| if constexpr(std::same_as) { 279| 92.7k| if(!std::is_constant_evaluated()) { ------------------ | Branch (279:10): [True: 92.7k, Folded] ------------------ 280| 92.7k| asm volatile(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB2_OP, "adcq")) 281| 92.7k| : [carry] "=r"(carry) 282| 92.7k| : [x] "r"(x), [y] "r"(y), "0"(carry) 283| 92.7k| : "cc", "memory"); 284| 92.7k| return carry; 285| 92.7k| } 286| 92.7k| } 287| 0|#endif 288| | 289| 0| x[0] = word_add(x[0], y[0], &carry); 290| 92.7k| x[1] = word_add(x[1], y[1], &carry); 291| 92.7k| x[2] = word_add(x[2], y[2], &carry); 292| 92.7k| x[3] = word_add(x[3], y[3], &carry); 293| 92.7k| x[4] = word_add(x[4], y[4], &carry); 294| 92.7k| x[5] = word_add(x[5], y[5], &carry); 295| 92.7k| x[6] = word_add(x[6], y[6], &carry); 296| 92.7k| x[7] = word_add(x[7], y[7], &carry); 297| 92.7k| return carry; 298| 92.7k|} _ZN5Botan10word8_sub2ITkNS_8WordTypeEmEET_PS1_PKS1_S1_: 357| 3.05M|inline constexpr auto word8_sub2(W x[8], const W y[8], W carry) -> W { 358| 3.05M|#if defined(BOTAN_MP_USE_X86_64_ASM) 359| 3.05M| if constexpr(std::same_as) { 360| 3.05M| if(!std::is_constant_evaluated()) { ------------------ | Branch (360:10): [True: 3.05M, Folded] ------------------ 361| 3.05M| asm volatile(ADD_OR_SUBTRACT(DO_8_TIMES(ADDSUB2_OP, "sbbq")) 362| 3.05M| : [carry] "=r"(carry) 363| 3.05M| : [x] "r"(x), [y] "r"(y), "0"(carry) 364| 3.05M| : "cc", "memory"); 365| 3.05M| return carry; 366| 3.05M| } 367| 3.05M| } 368| 0|#endif 369| | 370| 0| x[0] = word_sub(x[0], y[0], &carry); 371| 3.05M| x[1] = word_sub(x[1], y[1], &carry); 372| 3.05M| x[2] = word_sub(x[2], y[2], &carry); 373| 3.05M| x[3] = word_sub(x[3], y[3], &carry); 374| 3.05M| x[4] = word_sub(x[4], y[4], &carry); 375| 3.05M| x[5] = word_sub(x[5], y[5], &carry); 376| 3.05M| x[6] = word_sub(x[6], y[6], &carry); 377| 3.05M| x[7] = word_sub(x[7], y[7], &carry); 378| 3.05M| return carry; 379| 3.05M|} _ZN5Botan5word3ImEC2Ev: 478| 658k| constexpr word3() : m_w(0) {} _ZN5Botan5word3ImE3mulEmm: 480| 88.8M| inline constexpr void mul(W x, W y) { m_w += static_cast(x) * y; } _ZN5Botan5word3ImE7extractEv: 486| 6.09M| inline constexpr W extract() { 487| 6.09M| W r = static_cast(m_w); 488| 6.09M| m_w >>= WordInfo::bits; 489| 6.09M| return r; 490| 6.09M| } _ZN5Botan5word3ImE6mul_x2Emm: 482| 555k| inline constexpr void mul_x2(W x, W y) { m_w += static_cast(x) * y * 2; } _ZN5Botan5word3ImE3addEm: 484| 10.1M| inline constexpr void add(W x) { m_w += x; } _ZN5Botan5word3ImE10monty_stepEmm: 492| 5.08M| inline constexpr W monty_step(W p0, W p_dash) { 493| 5.08M| const W w0 = static_cast(m_w); 494| 5.08M| const W r = w0 * p_dash; 495| 5.08M| mul(r, p0); 496| 5.08M| m_w >>= WordInfo::bits; 497| 5.08M| return r; 498| 5.08M| } _ZN5Botan11bigint_add3ITkNS_8WordTypeEmEET_PS1_PKS1_mS4_m: 123| 5.36M|inline constexpr auto bigint_add3(W z[], const W x[], size_t x_size, const W y[], size_t y_size) -> W { 124| 5.36M| if(x_size < y_size) { ------------------ | Branch (124:7): [True: 2.38k, False: 5.36M] ------------------ 125| 2.38k| return bigint_add3(z, y, y_size, x, x_size); 126| 2.38k| } 127| | 128| 5.36M| W carry = 0; 129| | 130| 5.36M| const size_t blocks = y_size - (y_size % 8); 131| | 132| 32.7M| for(size_t i = 0; i != blocks; i += 8) { ------------------ | Branch (132:22): [True: 27.3M, False: 5.36M] ------------------ 133| 27.3M| carry = word8_add3(z + i, x + i, y + i, carry); 134| 27.3M| } 135| | 136| 20.2M| for(size_t i = blocks; i != y_size; ++i) { ------------------ | Branch (136:27): [True: 14.8M, False: 5.36M] ------------------ 137| 14.8M| z[i] = word_add(x[i], y[i], &carry); 138| 14.8M| } 139| | 140| 5.48M| for(size_t i = y_size; i != x_size; ++i) { ------------------ | Branch (140:27): [True: 116k, False: 5.36M] ------------------ 141| 116k| z[i] = word_add(x[i], static_cast(0), &carry); 142| 116k| } 143| | 144| 5.36M| return carry; 145| 5.36M|} _ZN5Botan10bigint_cmpITkNS_8WordTypeEmEEiPKT_mS3_m: 462| 44.5k|inline constexpr int32_t bigint_cmp(const W x[], size_t x_size, const W y[], size_t y_size) { 463| 44.5k| static_assert(sizeof(W) >= sizeof(uint32_t), "Size assumption"); 464| | 465| 44.5k| const W LT = static_cast(-1); 466| 44.5k| const W EQ = 0; 467| 44.5k| const W GT = 1; 468| | 469| 44.5k| const size_t common_elems = std::min(x_size, y_size); 470| | 471| 44.5k| W result = EQ; // until found otherwise 472| | 473| 495k| for(size_t i = 0; i != common_elems; i++) { ------------------ | Branch (473:22): [True: 450k, False: 44.5k] ------------------ 474| 450k| const auto is_eq = CT::Mask::is_equal(x[i], y[i]); 475| 450k| const auto is_lt = CT::Mask::is_lt(x[i], y[i]); 476| | 477| 450k| result = is_eq.select(result, is_lt.select(LT, GT)); 478| 450k| } 479| | 480| 44.5k| if(x_size < y_size) { ------------------ | Branch (480:7): [True: 7.38k, False: 37.2k] ------------------ 481| 7.38k| W mask = 0; 482| 105k| for(size_t i = x_size; i != y_size; i++) { ------------------ | Branch (482:30): [True: 98.3k, False: 7.38k] ------------------ 483| 98.3k| mask |= y[i]; 484| 98.3k| } 485| | 486| | // If any bits were set in high part of y, then x < y 487| 7.38k| result = CT::Mask::is_zero(mask).select(result, LT); 488| 37.2k| } else if(y_size < x_size) { ------------------ | Branch (488:14): [True: 13.7k, False: 23.4k] ------------------ 489| 13.7k| W mask = 0; 490| 612k| for(size_t i = y_size; i != x_size; i++) { ------------------ | Branch (490:30): [True: 598k, False: 13.7k] ------------------ 491| 598k| mask |= x[i]; 492| 598k| } 493| | 494| | // If any bits were set in high part of x, then x > y 495| 13.7k| result = CT::Mask::is_zero(mask).select(result, GT); 496| 13.7k| } 497| | 498| 44.5k| CT::unpoison(result); 499| 44.5k| BOTAN_DEBUG_ASSERT(result == LT || result == GT || result == EQ); ------------------ | | 137| 44.5k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 44.5k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 44.5k] | | ------------------ ------------------ 500| 44.5k| return static_cast(result); 501| 44.5k|} _ZN5Botan11bigint_sub3ITkNS_8WordTypeEmEET_PS1_PKS1_mS4_m: 195| 56.0k|inline constexpr auto bigint_sub3(W z[], const W x[], size_t x_size, const W y[], size_t y_size) -> W { 196| 56.0k| W borrow = 0; 197| | 198| 56.0k| BOTAN_ASSERT(x_size >= y_size, "Expected sizes"); ------------------ | | 71| 56.0k| do { \ | | 72| 56.0k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 56.0k| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 56.0k] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 56.0k| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 56.0k] | | ------------------ ------------------ 199| | 200| 56.0k| const size_t blocks = y_size - (y_size % 8); 201| | 202| 136k| for(size_t i = 0; i != blocks; i += 8) { ------------------ | Branch (202:22): [True: 80.9k, False: 56.0k] ------------------ 203| 80.9k| borrow = word8_sub3(z + i, x + i, y + i, borrow); 204| 80.9k| } 205| | 206| 194k| for(size_t i = blocks; i != y_size; ++i) { ------------------ | Branch (206:27): [True: 138k, False: 56.0k] ------------------ 207| 138k| z[i] = word_sub(x[i], y[i], &borrow); 208| 138k| } 209| | 210| 290k| for(size_t i = y_size; i != x_size; ++i) { ------------------ | Branch (210:27): [True: 234k, False: 56.0k] ------------------ 211| 234k| z[i] = word_sub(x[i], static_cast(0), &borrow); 212| 234k| } 213| | 214| 56.0k| return borrow; 215| 56.0k|} _ZN5Botan14bigint_linmul3ITkNS_8WordTypeEmEEvPT_PKS1_mS1_: 419| 687|inline constexpr void bigint_linmul3(W z[], const W x[], size_t x_size, W y) { 420| 687| const size_t blocks = x_size - (x_size % 8); 421| | 422| 687| W carry = 0; 423| | 424| 2.23k| for(size_t i = 0; i != blocks; i += 8) { ------------------ | Branch (424:22): [True: 1.54k, False: 687] ------------------ 425| 1.54k| carry = word8_linmul3(z + i, x + i, y, carry); 426| 1.54k| } 427| | 428| 1.42k| for(size_t i = blocks; i != x_size; ++i) { ------------------ | Branch (428:27): [True: 742, False: 687] ------------------ 429| 742| z[i] = word_madd2(x[i], y, &carry); 430| 742| } 431| | 432| 687| z[x_size] = carry; 433| 687|} _ZN5Botan14divide_precompImE13setup_vartimeEm: 686| 1.87M| static constexpr divide_precomp setup_vartime(W divisor) { 687| 1.87M| const size_t shift = WordInfo::bits - high_bit(divisor); 688| 1.87M| const W norm_divisor = divisor << shift; 689| 1.87M| const W reciprocal = reciprocal_word(norm_divisor); 690| 1.87M| return divide_precomp(divisor, shift, norm_divisor, reciprocal); 691| 1.87M| } _ZN5Botan15reciprocal_wordITkNS_8WordTypeEmEET_S1_: 577| 1.87M|constexpr W reciprocal_word(W D) { 578| 1.87M| BOTAN_DEBUG_ASSERT((D & WordInfo::top_bit) != 0); ------------------ | | 137| 1.87M| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 1.87M| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 1.87M] | | ------------------ ------------------ 579| | 580| | /* 581| | * Subtracting 2^b*D from the numerator gives 582| | * v = floor(((~D)*2^b + (2^b - 1)) / D). Since D is normalized, ~D < D 583| | * and the quotient fits in a word. See the first part of Section III A 584| | * in the paper. 585| | */ 586| | if constexpr(sizeof(W) == 4) { 587| | const auto nD = ~D; // Work around spurious MSVC warning 588| | const typename WordInfo::dword n = 589| | (static_cast::dword>(nD) << WordInfo::bits) | WordInfo::max; 590| | return static_cast(n / D); 591| 1.87M| } else { 592| 1.87M| if(!std::is_constant_evaluated()) { ------------------ | Branch (592:10): [True: 1.87M, Folded] ------------------ 593| 1.87M|#if defined(BOTAN_MP_USE_X86_64_ASM) 594| 1.87M| W quotient = 0; 595| 1.87M| W remainder = 0; 596| | // NOLINTNEXTLINE(*-no-assembler) 597| 1.87M| asm("divq %[d]" 598| 1.87M| : "=a"(quotient), "=d"(remainder) 599| 1.87M| : [d] "r"(D), "a"(WordInfo::max), "d"(static_cast(~D)) 600| 1.87M| : "cc"); 601| 1.87M| return quotient; 602| |#elif !defined(BOTAN_BUILD_COMPILER_IS_CLANGCL) 603| | /* clang-cl has a bug where on encountering a 128/64 division it emits 604| | * a call to __udivti3() but then fails to link the relevant builtin into 605| | * the binary, causing a link failure. Work around this by simply omitting 606| | * such code for clang-cl 607| | * 608| | * See https://github.com/llvm/llvm-project/issues/25679 609| | */ 610| | if constexpr(WordInfo::dword_is_native) { 611| | typename WordInfo::dword n = 612| | (static_cast::dword>(~D) << WordInfo::bits) | WordInfo::max; 613| | return static_cast(n / D); 614| | } 615| |#endif 616| 1.87M| } 617| | 618| | // Algorithm 2 of Möller and Granlund 619| 0| const W d0 = D & 1; 620| 0| const W d9 = D >> 55; 621| 0| const W d40 = (D >> 24) + 1; 622| 0| const W d63 = (D >> 1) + d0; // ceil(D/2) 623| | 624| | // This division is done with a table lookup in the paper 625| 0| const W v0 = ((W(1) << 19) - (W(3) << 8)) / d9; 626| 0| const W v1 = (v0 << 11) - ((v0 * v0 * d40) >> 40) - 1; 627| 0| const W v2 = (v1 << 13) + ((v1 * ((W(1) << 60) - v1 * d40)) >> 47); 628| | 629| 0| const W e = W(0) - v2 * d63 + (v2 >> 1) * d0; 630| | 631| 0| W product_hi = 0; 632| 0| word_madd2(v2, e, &product_hi); 633| 0| const W v3 = (v2 << 31) + (product_hi >> 1); 634| | 635| | // Compute floor((v3 + 2^64 + 1) * D / 2^64) modulo 2^64 636| 0| product_hi = D; 637| 0| word_madd2(v3, D, &product_hi); 638| 0| return v3 - D - product_hi; 639| 1.87M| } 640| 1.87M|} _ZN5Botan14divide_precompImEC2Emmmm: 771| 1.87M| m_divisor(divisor), m_shift(shift), m_norm_divisor(norm_divisor), m_reciprocal(reciprocal) {} _ZNK5Botan14divide_precompImE8mod_2to1Emm: 767| 18.1M| inline constexpr W mod_2to1(W n1, W n0) const { return this->divmod_2to1_vartime(n1, n0).second; } _ZNK5Botan14divide_precompImE19divmod_2to1_vartimeEmm: 709| 18.1M| inline constexpr std::pair divmod_2to1_vartime(W n1, W n0) const { 710| 18.1M| if(m_divisor == WordInfo::max) { ------------------ | Branch (710:13): [True: 0, False: 18.1M] ------------------ 711| 0| const W q = div_2to1_max_d(n1, n0); 712| 0| const W r = static_cast(n0 + q); 713| 0| return std::make_pair(q, r); 714| 0| } 715| | 716| 18.1M| if(m_divisor == WordInfo::top_bit) { ------------------ | Branch (716:13): [True: 0, False: 18.1M] ------------------ 717| | // Simply a shift by N-1 bits 718| 0| const W q = (n1 << 1) | (n0 >> (WordInfo::bits - 1)); 719| 0| const W r = static_cast(n0 & (WordInfo::top_bit - 1)); 720| 0| return std::make_pair(q, r); 721| 0| } 722| | 723| 18.1M| return divmod_2to1_ct(n1, n0); 724| 18.1M| } _ZNK5Botan14divide_precompImE14divmod_2to1_ctEmm: 731| 18.2M| inline constexpr std::pair divmod_2to1_ct(W n1, W n0) const { 732| | /* 733| | * Scale the numerator to match the normalized divisor; the scaling cancels 734| | * in the quotient and is removed from the remainder by the final shift. 735| | */ 736| 18.2M| n1 <<= m_shift; 737| 18.2M| const size_t rshift = WordInfo::bits - m_shift; 738| | /* 739| | * We can't just `n0 >> rshift` because m_shift may be 0 (high bit divisor) 740| | * in which case rshift will be the maximum bit length, and >> by the maximum 741| | * bitlength is undefined behavior despite having an entirely obvious meaning. 742| | * 743| | * However we know m_shift is not equal to the bit length of the word, because 744| | * that would imply that the divisor is 0. Thus rshift must be >= 1. So split 745| | * the shift into two phases (first rshift-1, then 1) 746| | */ 747| 18.2M| n1 |= (n0 >> 1) >> (rshift - 1); 748| 18.2M| n0 <<= m_shift; 749| | 750| 18.2M| const auto [q, scaled_r] = div2by1_preinv(n1, n0, m_norm_divisor, m_reciprocal); 751| 18.2M| const W r = scaled_r >> m_shift; 752| 18.2M| return std::make_pair(q, r); 753| 18.2M| } _ZN5Botan14divide_precompImE14div2by1_preinvEmmmm: 782| 18.2M| static constexpr std::pair div2by1_preinv(W u1, W u0, W D, W v) { 783| | // Steps 1-3: = v*u1; += ; q1 += 1 784| 18.2M| W q1 = u0; 785| 18.2M| const W q0 = word_madd2(u1, v, &q1); // = u1*v + u0 786| 18.2M| q1 += u1 + 1; 787| | 788| | // Step 4 789| 18.2M| W r = u0 - q1 * D; 790| | 791| | // Steps 5-7: If r >= q0 { q1 -= 1; r += d; } 792| 18.2M| const auto fix_down = CT::Mask::is_gt(r, q0); 793| 18.2M| q1 -= fix_down.if_set_return(1); 794| 18.2M| r += fix_down.if_set_return(D); 795| | 796| | // Steps 8-10: if r >= D { q1 += 1; r -= D; } 797| 18.2M| const auto fix_up = CT::Mask::is_gte(r, D); 798| 18.2M| q1 += fix_up.if_set_return(1); 799| 18.2M| r -= fix_up.if_set_return(D); 800| | 801| | // Step 11 802| 18.2M| return std::make_pair(q1, r); 803| 18.2M| } _ZN5Botan11bigint_shr2ITkNS_8WordTypeEmEEvPT_mPKS1_mm: 381| 480|inline constexpr void bigint_shr2(W y[], size_t y_size, const W x[], size_t x_size, size_t shift) { 382| 480| const size_t word_shift = shift / WordInfo::bits; 383| 480| const size_t bit_shift = shift % WordInfo::bits; 384| 480| const size_t new_size = x_size < word_shift ? 0 : (x_size - word_shift); ------------------ | Branch (384:28): [True: 0, False: 480] ------------------ 385| | 386| 480| BOTAN_ASSERT_NOMSG(new_size <= y_size); ------------------ | | 84| 480| do { \ | | 85| 480| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 480| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 480] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 480| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 480] | | ------------------ ------------------ 387| | 388| 480| if(new_size > 0) { ------------------ | Branch (388:7): [True: 480, False: 0] ------------------ 389| 480| unchecked_copy_memory(y, x + word_shift, new_size); 390| 480| } 391| 480| zeroize_buffer(y + new_size, y_size - new_size); 392| | 393| 480| const auto carry_mask = CT::Mask::expand(bit_shift); 394| 480| const W carry_shift = carry_mask.if_set_return(WordInfo::bits - bit_shift); 395| | 396| 480| W carry = 0; 397| 20.7k| for(size_t i = new_size; i > 0; --i) { ------------------ | Branch (397:29): [True: 20.2k, False: 480] ------------------ 398| 20.2k| W w = y[i - 1]; 399| 20.2k| y[i - 1] = (w >> bit_shift) | carry; 400| 20.2k| carry = carry_mask.if_set_return(w << carry_shift); 401| 20.2k| } 402| 480|} _ZN5Botan17bigint_monty_redcEPmPKmS2_mmS0_m: 1077| 104k| word r[], const word z[], const word p[], size_t p_size, word p_dash, word ws[], size_t ws_size) { 1078| 104k| const size_t z_size = 2 * p_size; 1079| | 1080| 104k| BOTAN_ARG_CHECK(ws_size >= p_size, "Montgomery reduction workspace too small"); ------------------ | | 35| 104k| do { \ | | 36| 104k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 104k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 104k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 104k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 104k] | | ------------------ ------------------ 1081| | 1082| 104k| if(p_size == 4) { ------------------ | Branch (1082:7): [True: 16.6k, False: 87.9k] ------------------ 1083| 16.6k| bigint_monty_redc_4(r, z, p, p_dash, ws); 1084| 87.9k| } else if(p_size == 6) { ------------------ | Branch (1084:14): [True: 500, False: 87.4k] ------------------ 1085| 500| bigint_monty_redc_6(r, z, p, p_dash, ws); 1086| 87.4k| } else if(p_size == 8) { ------------------ | Branch (1086:14): [True: 182, False: 87.2k] ------------------ 1087| 182| bigint_monty_redc_8(r, z, p, p_dash, ws); 1088| 87.2k| } else if(p_size == 12) { ------------------ | Branch (1088:14): [True: 0, False: 87.2k] ------------------ 1089| 0| bigint_monty_redc_12(r, z, p, p_dash, ws); 1090| 87.2k| } else if(p_size == 16) { ------------------ | Branch (1090:14): [True: 0, False: 87.2k] ------------------ 1091| 0| bigint_monty_redc_16(r, z, p, p_dash, ws); 1092| 87.2k| } else if(p_size == 24) { ------------------ | Branch (1092:14): [True: 0, False: 87.2k] ------------------ 1093| 0| bigint_monty_redc_24(r, z, p, p_dash, ws); 1094| 87.2k| } else if(p_size == 32) { ------------------ | Branch (1094:14): [True: 11.1k, False: 76.0k] ------------------ 1095| 11.1k| bigint_monty_redc_32(r, z, p, p_dash, ws); 1096| 76.0k| } else { 1097| 76.0k| bigint_monty_redc_generic(r, z, z_size, p, p_size, p_dash, ws); 1098| 76.0k| } 1099| 104k|} _ZN5Botan25bigint_monty_redc_inplaceEPmPKmmmS0_m: 1101| 82.7k|inline void bigint_monty_redc_inplace(word z[], const word p[], size_t p_size, word p_dash, word ws[], size_t ws_size) { 1102| 82.7k| bigint_monty_redc(z, z, p, p_size, p_dash, ws, ws_size); 1103| 82.7k| zeroize_buffer(z + p_size, p_size); 1104| 82.7k|} _ZN5Botan12booth_recodeEmm: 1302| 42.7k|inline constexpr std::pair booth_recode(size_t x, size_t window_bits) { 1303| 42.7k| const auto sign = CT::Mask::expand(x >> window_bits); 1304| 42.7k| const size_t neg_x = (static_cast(1) << (window_bits + 1)) - x - 1; 1305| 42.7k| size_t digit = sign.select(neg_x, x); 1306| 42.7k| digit = (digit >> 1) + (digit & 1); 1307| 42.7k| return {digit, sign.as_choice()}; 1308| 42.7k|} _ZN5Botan15bigint_ct_is_eqITkNS_8WordTypeEmEENS_2CT4MaskIT_EEPKS3_mS6_m: 542| 647|inline constexpr auto bigint_ct_is_eq(const W x[], size_t x_size, const W y[], size_t y_size) -> CT::Mask { 543| 647| const size_t common_elems = std::min(x_size, y_size); 544| | 545| 647| W diff = 0; 546| | 547| 16.2k| for(size_t i = 0; i != common_elems; i++) { ------------------ | Branch (547:22): [True: 15.5k, False: 647] ------------------ 548| 15.5k| diff |= (x[i] ^ y[i]); 549| 15.5k| } 550| | 551| | // If any bits were set in high part of x/y, then they are not equal 552| 647| if(x_size < y_size) { ------------------ | Branch (552:7): [True: 163, False: 484] ------------------ 553| 1.10k| for(size_t i = x_size; i != y_size; i++) { ------------------ | Branch (553:30): [True: 940, False: 163] ------------------ 554| 940| diff |= y[i]; 555| 940| } 556| 484| } else if(y_size < x_size) { ------------------ | Branch (556:14): [True: 170, False: 314] ------------------ 557| 1.53k| for(size_t i = y_size; i != x_size; i++) { ------------------ | Branch (557:30): [True: 1.36k, False: 170] ------------------ 558| 1.36k| diff |= x[i]; 559| 1.36k| } 560| 170| } 561| | 562| 647| return CT::Mask::is_zero(diff); 563| 647|} _ZN5Botan15bigint_ct_is_ltITkNS_8WordTypeEmEENS_2CT4MaskIT_EEPKS3_mS6_mb: 510| 29.7k| -> CT::Mask { 511| 29.7k| const size_t common_elems = std::min(x_size, y_size); 512| | 513| 29.7k| auto is_lt = CT::Mask::expand(lt_or_equal); 514| | 515| 1.18M| for(size_t i = 0; i != common_elems; i++) { ------------------ | Branch (515:22): [True: 1.15M, False: 29.7k] ------------------ 516| 1.15M| const auto eq = CT::Mask::is_equal(x[i], y[i]); 517| 1.15M| const auto lt = CT::Mask::is_lt(x[i], y[i]); 518| 1.15M| is_lt = eq.select_mask(is_lt, lt); 519| 1.15M| } 520| | 521| 29.7k| if(x_size < y_size) { ------------------ | Branch (521:7): [True: 4.84k, False: 24.9k] ------------------ 522| 4.84k| W mask = 0; 523| 82.6k| for(size_t i = x_size; i != y_size; i++) { ------------------ | Branch (523:30): [True: 77.8k, False: 4.84k] ------------------ 524| 77.8k| mask |= y[i]; 525| 77.8k| } 526| | // If any bits were set in high part of y, then is_lt should be forced true 527| 4.84k| is_lt |= CT::Mask::expand(mask); 528| 24.9k| } else if(y_size < x_size) { ------------------ | Branch (528:14): [True: 17.0k, False: 7.86k] ------------------ 529| 17.0k| W mask = 0; 530| 707k| for(size_t i = y_size; i != x_size; i++) { ------------------ | Branch (530:30): [True: 690k, False: 17.0k] ------------------ 531| 690k| mask |= x[i]; 532| 690k| } 533| | 534| | // If any bits were set in high part of x, then is_lt should be false 535| 17.0k| is_lt &= CT::Mask::is_zero(mask); 536| 17.0k| } 537| | 538| 29.7k| return is_lt; 539| 29.7k|} _ZN5Botan15bigint_cnd_swapITkNS_8WordTypeEmEEvT_PS1_S2_m: 32| 1.55M|inline constexpr void bigint_cnd_swap(W cnd, W x[], W y[], size_t size) { 33| 1.55M| const auto mask = CT::Mask::expand(cnd); 34| | 35| 74.6M| for(size_t i = 0; i != size; ++i) { ------------------ | Branch (35:22): [True: 73.0M, False: 1.55M] ------------------ 36| 73.0M| const W a = x[i]; 37| 73.0M| const W b = y[i]; 38| 73.0M| x[i] = mask.select(b, a); 39| 73.0M| y[i] = mask.select(a, b); 40| 73.0M| } 41| 1.55M|} _ZN5Botan14divide_precompImE5setupEm: 694| 3.83k| static constexpr divide_precomp setup(W divisor) { 695| 3.83k| const size_t shift = WordInfo::bits - high_bit(divisor); 696| 3.83k| const W norm_divisor = divisor << shift; 697| 3.83k| const W reciprocal = reciprocal_word_ct(norm_divisor); 698| 3.83k| return divide_precomp(divisor, shift, norm_divisor, reciprocal); 699| 3.83k| } _ZN5Botan18reciprocal_word_ctITkNS_8WordTypeEmEET_S1_: 649| 3.83k|constexpr W reciprocal_word_ct(W D) { 650| 3.83k| BOTAN_DEBUG_ASSERT((D & WordInfo::top_bit) != 0); ------------------ | | 137| 3.83k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 3.83k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 3.83k] | | ------------------ ------------------ 651| | 652| | // Bit serial long division of ((~D) || (2^b - 1)) / D, with all of the 653| | // conditional logic computed via masks 654| 3.83k| W remainder = static_cast(~D); 655| 3.83k| W quotient = 0; 656| | 657| 249k| for(size_t i = 0; i != WordInfo::bits; ++i) { ------------------ | Branch (657:22): [True: 245k, False: 3.83k] ------------------ 658| 245k| const auto carry = CT::Mask::expand_top_bit(remainder); 659| 245k| remainder = static_cast((remainder << 1) | 1); 660| 245k| quotient <<= 1; 661| | 662| 245k| const auto sub = carry | CT::Mask::is_gte(remainder, D); 663| 245k| remainder -= sub.if_set_return(D); 664| 245k| quotient |= sub.if_set_return(1); 665| 245k| } 666| | 667| 3.83k| return quotient; 668| 3.83k|} _ZN5Botan13bigint_submulITkNS_8WordTypeEmEET_PS1_PKS1_mS1_: 442| 113k|inline constexpr auto bigint_submul(W z[], const W y[], size_t N, W q) -> W { 443| 113k| W mul_carry = 0; 444| 113k| W borrow = 0; 445| | 446| 4.33M| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (446:22): [True: 4.22M, False: 113k] ------------------ 447| 4.22M| const W t = word_madd2(y[i], q, &mul_carry); 448| 4.22M| z[i] = word_sub(z[i], t, &borrow); 449| 4.22M| } 450| | 451| | // Both mul_carry <= W_max - 1 and borrow <= 1, so this cannot overflow 452| 113k| return mul_carry + borrow; 453| 113k|} _ZN5Botan14bigint_cnd_addITkNS_8WordTypeEmEET_S1_PS1_PKS1_m: 48| 6.63M|inline constexpr W bigint_cnd_add(W cnd, W x[], const W y[], size_t size) { 49| 6.63M| const auto mask = CT::Mask::expand(cnd).value(); 50| | 51| 6.63M| W carry = 0; 52| | 53| 310M| for(size_t i = 0; i != size; ++i) { ------------------ | Branch (53:22): [True: 304M, False: 6.63M] ------------------ 54| 304M| x[i] = word_add(x[i], y[i] & mask, &carry); 55| 304M| } 56| | 57| 6.63M| return (mask & carry); 58| 6.63M|} _ZN5Botan14bigint_sub_absITkNS_8WordTypeEmEENS_2CT4MaskIT_EEPS3_PKS3_S7_mS5_: 282| 44.3k|inline constexpr auto bigint_sub_abs(W z[], const W x[], const W y[], size_t N, W ws[]) -> CT::Mask { 283| | // Subtract in both direction then conditional copy out the result 284| | 285| 44.3k| W* ws0 = ws; 286| 44.3k| W* ws1 = ws + N; 287| | 288| 44.3k| W borrow0 = 0; 289| 44.3k| W borrow1 = 0; 290| | 291| 44.3k| const size_t blocks = N - (N % 8); 292| | 293| 165k| for(size_t i = 0; i != blocks; i += 8) { ------------------ | Branch (293:22): [True: 121k, False: 44.3k] ------------------ 294| 121k| borrow0 = word8_sub3(ws0 + i, x + i, y + i, borrow0); 295| 121k| borrow1 = word8_sub3(ws1 + i, y + i, x + i, borrow1); 296| 121k| } 297| | 298| 128k| for(size_t i = blocks; i != N; ++i) { ------------------ | Branch (298:27): [True: 83.9k, False: 44.3k] ------------------ 299| 83.9k| ws0[i] = word_sub(x[i], y[i], &borrow0); 300| 83.9k| ws1[i] = word_sub(y[i], x[i], &borrow1); 301| 83.9k| } 302| | 303| 44.3k| return CT::conditional_copy_mem(borrow0, z, ws1, ws0, N); 304| 44.3k|} _ZN5Botan11bigint_add2ITkNS_8WordTypeEmEET_PS1_mPKS1_m: 97| 88.8k|inline constexpr auto bigint_add2(W x[], size_t x_size, const W y[], size_t y_size) -> W { 98| 88.8k| W carry = 0; 99| | 100| 88.8k| BOTAN_ASSERT(x_size >= y_size, "Expected sizes"); ------------------ | | 71| 88.8k| do { \ | | 72| 88.8k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 88.8k| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 88.8k] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 88.8k| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 88.8k] | | ------------------ ------------------ 101| | 102| 88.8k| const size_t blocks = y_size - (y_size % 8); 103| | 104| 181k| for(size_t i = 0; i != blocks; i += 8) { ------------------ | Branch (104:22): [True: 92.7k, False: 88.8k] ------------------ 105| 92.7k| carry = word8_add2(x + i, y + i, carry); 106| 92.7k| } 107| | 108| 236k| for(size_t i = blocks; i != y_size; ++i) { ------------------ | Branch (108:27): [True: 147k, False: 88.8k] ------------------ 109| 147k| x[i] = word_add(x[i], y[i], &carry); 110| 147k| } 111| | 112| 903k| for(size_t i = y_size; i != x_size; ++i) { ------------------ | Branch (112:27): [True: 814k, False: 88.8k] ------------------ 113| 814k| x[i] = word_add(x[i], static_cast(0), &carry); 114| 814k| } 115| | 116| 88.8k| return carry; 117| 88.8k|} _ZN5Botan14bigint_cnd_subITkNS_8WordTypeEmEET_S1_PS1_PKS1_m: 65| 3.13M|inline constexpr auto bigint_cnd_sub(W cnd, W x[], const W y[], size_t size) -> W { 66| 3.13M| const auto mask = CT::Mask::expand(cnd).value(); 67| | 68| 3.13M| W carry = 0; 69| | 70| 150M| for(size_t i = 0; i != size; ++i) { ------------------ | Branch (70:22): [True: 147M, False: 3.13M] ------------------ 71| 147M| x[i] = word_sub(x[i], y[i] & mask, &carry); 72| 147M| } 73| | 74| 3.13M| return (mask & carry); 75| 3.13M|} _ZN5Botan11bigint_sub2ITkNS_8WordTypeEmEET_PS1_mPKS1_m: 151| 593k|inline constexpr auto bigint_sub2(W x[], size_t x_size, const W y[], size_t y_size) -> W { 152| 593k| W borrow = 0; 153| | 154| 593k| BOTAN_ASSERT(x_size >= y_size, "Expected sizes"); ------------------ | | 71| 593k| do { \ | | 72| 593k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 593k| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 593k] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 593k| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 593k] | | ------------------ ------------------ 155| | 156| 593k| const size_t blocks = y_size - (y_size % 8); 157| | 158| 3.65M| for(size_t i = 0; i != blocks; i += 8) { ------------------ | Branch (158:22): [True: 3.05M, False: 593k] ------------------ 159| 3.05M| borrow = word8_sub2(x + i, y + i, borrow); 160| 3.05M| } 161| | 162| 2.44M| for(size_t i = blocks; i != y_size; ++i) { ------------------ | Branch (162:27): [True: 1.85M, False: 593k] ------------------ 163| 1.85M| x[i] = word_sub(x[i], y[i], &borrow); 164| 1.85M| } 165| | 166| 630k| for(size_t i = y_size; i != x_size; ++i) { ------------------ | Branch (166:27): [True: 37.3k, False: 593k] ------------------ 167| 37.3k| x[i] = word_sub(x[i], static_cast(0), &borrow); 168| 37.3k| } 169| | 170| 593k| return borrow; 171| 593k|} _ZN5Botan15bigint_sub2_revITkNS_8WordTypeEmEEvPT_PKS1_m: 177| 606|inline constexpr void bigint_sub2_rev(W x[], const W y[], size_t y_size) { 178| 606| W borrow = 0; 179| | 180| 1.21k| for(size_t i = 0; i != y_size; ++i) { ------------------ | Branch (180:22): [True: 606, False: 606] ------------------ 181| 606| x[i] = word_sub(y[i], x[i], &borrow); 182| 606| } 183| | 184| 606| BOTAN_ASSERT(borrow == 0, "y must be greater than x"); ------------------ | | 71| 606| do { \ | | 72| 606| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 606| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 606] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 606| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 606] | | ------------------ ------------------ 185| 606|} _ZN5Botan14bigint_linmul2ITkNS_8WordTypeEmEET_PS1_mS1_: 408| 4.27k|[[nodiscard]] inline constexpr auto bigint_linmul2(W x[], size_t x_size, W y) -> W { 409| 4.27k| W carry = 0; 410| | 411| 37.4k| for(size_t i = 0; i != x_size; ++i) { ------------------ | Branch (411:22): [True: 33.1k, False: 4.27k] ------------------ 412| 33.1k| x[i] = word_madd2(x[i], y, &carry); 413| 33.1k| } 414| | 415| 4.27k| return carry; 416| 4.27k|} _ZN5Botan11bigint_shr1ITkNS_8WordTypeEmEEvPT_mm: 334| 3.12M|inline constexpr void bigint_shr1(W x[], size_t x_size, size_t shift) { 335| 3.12M| const size_t word_shift = shift / WordInfo::bits; 336| 3.12M| const size_t bit_shift = shift % WordInfo::bits; 337| | 338| 3.12M| const size_t top = x_size >= word_shift ? (x_size - word_shift) : 0; ------------------ | Branch (338:23): [True: 3.12M, False: 0] ------------------ 339| | 340| 3.12M| if(top > 0) { ------------------ | Branch (340:7): [True: 3.12M, False: 0] ------------------ 341| 3.12M| unchecked_copy_memory(x, x + word_shift, top); 342| 3.12M| } 343| 3.12M| zeroize_buffer(x + top, std::min(word_shift, x_size)); 344| | 345| 3.12M| const auto carry_mask = CT::Mask::expand(bit_shift); 346| 3.12M| const W carry_shift = carry_mask.if_set_return(WordInfo::bits - bit_shift); 347| | 348| 3.12M| W carry = 0; 349| | 350| 149M| for(size_t i = 0; i != top; ++i) { ------------------ | Branch (350:22): [True: 146M, False: 3.12M] ------------------ 351| 146M| const W w = x[top - i - 1]; 352| 146M| x[top - i - 1] = (w >> bit_shift) | carry; 353| 146M| carry = carry_mask.if_set_return(w << carry_shift); 354| 146M| } 355| 3.12M|} _ZN5Botan14bigint_cnd_absITkNS_8WordTypeEmEEvT_PS1_m: 83| 1.55M|inline constexpr void bigint_cnd_abs(W cnd, W x[], size_t size) { 84| 1.55M| const auto mask = CT::Mask::expand(cnd); 85| | 86| 1.55M| W carry = mask.if_set_return(1); 87| 74.6M| for(size_t i = 0; i != size; ++i) { ------------------ | Branch (87:22): [True: 73.0M, False: 1.55M] ------------------ 88| 73.0M| const W z = word_add(~x[i], static_cast(0), &carry); 89| 73.0M| x[i] = mask.select(z, x[i]); 90| 73.0M| } 91| 1.55M|} _ZN5Botan13monty_inverseITkNS_8WordTypeEmEET_S1_: 856| 2.22k|inline constexpr auto monty_inverse(W a) -> W { 857| 2.22k| BOTAN_ARG_CHECK(a % 2 == 1, "Cannot compute Montgomery inverse of an even integer"); ------------------ | | 35| 2.22k| do { \ | | 36| 2.22k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 2.22k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 2.22k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 2.22k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 2.22k] | | ------------------ ------------------ 858| | 859| | // Newton's Method, following https://lemire.me/blog/2017/09/18/computing-the-inverse-of-odd-integers/ 860| | 861| 2.22k| constexpr size_t iter = WordInfo::bits == 64 ? 4 : 3; ------------------ | Branch (861:28): [True: 0, Folded] ------------------ 862| | 863| | // Initial guess provides 5 bits of accuracy 864| 2.22k| W r = (3 * a) ^ 2; 865| | 866| | // Each iteration doubles the accuracy 867| 11.1k| for(size_t i = 0; i != iter; ++i) { ------------------ | Branch (867:22): [True: 8.88k, False: 2.22k] ------------------ 868| 8.88k| r = r * (2 - r * a); 869| 8.88k| } 870| | 871| | // Now invert in addition space 872| 2.22k| r = (WordInfo::max - r) + 1; 873| | 874| 2.22k| return r; 875| 2.22k|} _ZN5Botan22bigint_monty_maybe_subITkNS_8WordTypeEmEEvmPT_S1_PKS1_S4_: 228| 15.6M|inline constexpr void bigint_monty_maybe_sub(size_t N, W z[], W x0, const W x[], const W p[]) { 229| 15.6M| W borrow = 0; 230| | 231| 15.6M| const size_t blocks = N - (N % 8); 232| | 233| 97.0M| for(size_t i = 0; i != blocks; i += 8) { ------------------ | Branch (233:22): [True: 81.3M, False: 15.6M] ------------------ 234| 81.3M| borrow = word8_sub3(z + i, x + i, p + i, borrow); 235| 81.3M| } 236| | 237| 63.5M| for(size_t i = blocks; i != N; ++i) { ------------------ | Branch (237:27): [True: 47.8M, False: 15.6M] ------------------ 238| 47.8M| z[i] = word_sub(x[i], p[i], &borrow); 239| 47.8M| } 240| | 241| 15.6M| borrow = (x0 - borrow) > x0; 242| | 243| 15.6M| CT::conditional_assign_mem(borrow, z, x, N); 244| 15.6M|} _ZN5Botan9comba_sqrILm4ETkNS_8WordTypeEmEEvPT0_PKS1_: 1007| 114k|constexpr inline void comba_sqr(W z[2 * N], const W x[N]) { 1008| 114k| if(!std::is_constant_evaluated()) { ------------------ | Branch (1008:7): [True: 114k, Folded] ------------------ 1009| 114k| if constexpr(std::same_as && N == 4) { 1010| 114k| return bigint_comba_sqr4(z, x); 1011| 114k| } 1012| | if constexpr(std::same_as && N == 6) { 1013| | return bigint_comba_sqr6(z, x); 1014| | } 1015| | if constexpr(std::same_as && N == 7) { 1016| | return bigint_comba_sqr7(z, x); 1017| | } 1018| | if constexpr(std::same_as && N == 8) { 1019| | return bigint_comba_sqr8(z, x); 1020| | } 1021| | if constexpr(std::same_as && N == 9) { 1022| | return bigint_comba_sqr9(z, x); 1023| | } 1024| | if constexpr(std::same_as && N == 16) { 1025| | return bigint_comba_sqr16(z, x); 1026| | } 1027| 114k| } 1028| | 1029| 0| word3 accum; 1030| | 1031| 114k| for(size_t i = 0; i != 2 * N; ++i) { ------------------ | Branch (1031:22): [True: 0, False: 114k] ------------------ 1032| 0| const size_t start = i + 1 < N ? 0 : i + 1 - N; ------------------ | Branch (1032:28): [True: 0, False: 0] ------------------ 1033| 0| const size_t end = std::min(N, i + 1); 1034| | 1035| 0| for(size_t j = start; j != end; ++j) { ------------------ | Branch (1035:29): [True: 0, False: 0] ------------------ 1036| 0| accum.mul(x[j], x[i - j]); 1037| 0| } 1038| 0| z[i] = accum.extract(); 1039| 0| } 1040| 114k|} _ZN5Botan22bigint_monty_maybe_subILm4ETkNS_8WordTypeEmEEvPT0_S1_PKS1_S4_: 257| 173k|inline constexpr void bigint_monty_maybe_sub(W z[N], W x0, const W x[N], const W y[N]) { 258| 173k| W borrow = 0; 259| | 260| 866k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (260:22): [True: 693k, False: 173k] ------------------ 261| 693k| z[i] = word_sub(x[i], y[i], &borrow); 262| 693k| } 263| | 264| 173k| borrow = (x0 - borrow) > x0; 265| | 266| 173k| CT::conditional_assign_mem(borrow, z, x, N); 267| 173k|} _ZN5Botan9comba_mulILm4ETkNS_8WordTypeEmEEvPT0_PKS1_S4_: 971| 177k|constexpr inline void comba_mul(W z[2 * N], const W x[N], const W y[N]) { 972| 177k| if(!std::is_constant_evaluated()) { ------------------ | Branch (972:7): [True: 177k, Folded] ------------------ 973| 177k| if constexpr(std::same_as && N == 4) { 974| 177k| return bigint_comba_mul4(z, x, y); 975| 177k| } 976| | if constexpr(std::same_as && N == 6) { 977| | return bigint_comba_mul6(z, x, y); 978| | } 979| | if constexpr(std::same_as && N == 7) { 980| | return bigint_comba_mul7(z, x, y); 981| | } 982| | if constexpr(std::same_as && N == 8) { 983| | return bigint_comba_mul8(z, x, y); 984| | } 985| | if constexpr(std::same_as && N == 9) { 986| | return bigint_comba_mul9(z, x, y); 987| | } 988| | if constexpr(std::same_as && N == 16) { 989| | return bigint_comba_mul16(z, x, y); 990| | } 991| 177k| } 992| | 993| 0| word3 accum; 994| | 995| 177k| for(size_t i = 0; i != 2 * N; ++i) { ------------------ | Branch (995:22): [True: 0, False: 177k] ------------------ 996| 0| const size_t start = i + 1 < N ? 0 : i + 1 - N; ------------------ | Branch (996:28): [True: 0, False: 0] ------------------ 997| 0| const size_t end = std::min(N, i + 1); 998| | 999| 0| for(size_t j = start; j != end; ++j) { ------------------ | Branch (999:29): [True: 0, False: 0] ------------------ 1000| 0| accum.mul(x[j], y[i - j]); 1001| 0| } 1002| 0| z[i] = accum.extract(); 1003| 0| } 1004| 177k|} _ZN5Botan10shift_leftILm1ETkNS_8WordTypeEmLm4EEET0_RNSt3__15arrayIS1_XT1_EEE: 878| 25.8k|inline constexpr W shift_left(std::array& x) { 879| 25.8k| static_assert(N >= 1, "Invalid input size"); 880| 25.8k| static_assert(S > 0, "Zero shift not supported"); 881| 25.8k| static_assert(S < WordInfo::bits, "Shift too large"); 882| | 883| 25.8k| const W carry = x[N - 1] >> (WordInfo::bits - S); 884| | 885| 103k| for(size_t i = N - 1; i != 0; --i) { ------------------ | Branch (885:26): [True: 77.5k, False: 25.8k] ------------------ 886| 77.5k| x[i] = (x[i] << S) | (x[i - 1] >> (WordInfo::bits - S)); 887| 77.5k| } 888| 25.8k| x[0] <<= S; 889| | 890| 25.8k| return carry; 891| 25.8k|} _ZN5Botan16read_window_bitsILm4EmLm4EEEmNSt3__14spanIKT0_XT1_EEEm: 1274| 5.76k|constexpr size_t read_window_bits(std::span words, size_t offset) { 1275| 5.76k| static_assert(WindowBits >= 1 && WindowBits <= 7); 1276| | 1277| 5.76k| constexpr uint8_t WindowMask = static_cast(1 << WindowBits) - 1; 1278| | 1279| 5.76k| constexpr size_t W_bits = sizeof(W) * 8; 1280| 5.76k| const auto bit_shift = offset % W_bits; 1281| 5.76k| const auto word_offset = words.size() - 1 - (offset / W_bits); 1282| | 1283| 5.76k| const bool single_byte_window = bit_shift <= (W_bits - WindowBits) || word_offset == 0; ------------------ | Branch (1283:36): [True: 5.76k, False: 0] | Branch (1283:74): [True: 0, False: 0] ------------------ 1284| | 1285| 5.76k| const auto w0 = words[word_offset]; 1286| | 1287| 5.76k| if(single_byte_window) { ------------------ | Branch (1287:7): [True: 5.76k, False: 0] ------------------ 1288| 5.76k| return (w0 >> bit_shift) & WindowMask; 1289| 5.76k| } else { 1290| | // Otherwise we must join two words and extract the result 1291| 0| const auto w1 = words[word_offset - 1]; 1292| 0| const auto combined = ((w0 >> bit_shift) | (w1 << (W_bits - bit_shift))); 1293| 0| return combined & WindowMask; 1294| 0| } 1295| 5.76k|} _ZN5Botan11shift_rightILm1ETkNS_8WordTypeEmLm4EEET0_RNSt3__15arrayIS1_XT1_EEE: 894| 2.86k|inline constexpr W shift_right(std::array& x) { 895| 2.86k| static_assert(N >= 1, "Invalid input size"); 896| 2.86k| static_assert(S > 0, "Zero shift not supported"); 897| 2.86k| static_assert(S < WordInfo::bits, "Shift too large"); 898| | 899| 2.86k| const W carry = x[0] << (WordInfo::bits - S); 900| | 901| 11.4k| for(size_t i = 0; i != N - 1; ++i) { ------------------ | Branch (901:22): [True: 8.59k, False: 2.86k] ------------------ 902| 8.59k| x[i] = (x[i] >> S) | (x[i + 1] << (WordInfo::bits - S)); 903| 8.59k| } 904| 2.86k| x[N - 1] >>= S; 905| | 906| 2.86k| return carry; 907| 2.86k|} _ZN5Botan14bytes_to_wordsITkNS_8WordTypeEmLm8ELm64EEEDaNSt3__14spanIKhXT1_EEE: 1245| 1.09k|inline constexpr auto bytes_to_words(std::span bytes) { 1246| 1.09k| static_assert(L <= WordInfo::bytes * N); 1247| | 1248| 1.09k| std::array r = {}; 1249| | 1250| 1.09k| constexpr size_t full_words = L / WordInfo::bytes; 1251| 1.09k| constexpr size_t extra_bytes = L % WordInfo::bytes; 1252| | 1253| 1.09k| static_assert(full_words + (extra_bytes ? 1 : 0) <= N); 1254| | 1255| 9.81k| for(size_t i = 0; i != full_words; ++i) { ------------------ | Branch (1255:22): [True: 8.72k, False: 1.09k] ------------------ 1256| 8.72k| r[i] = load_be(bytes.data(), full_words - 1 - i); 1257| 8.72k| } 1258| | 1259| | if constexpr(extra_bytes > 0) { 1260| | constexpr size_t shift = extra_bytes * 8; 1261| | shift_left(r); 1262| | 1263| | for(size_t i = 0; i != extra_bytes; ++i) { 1264| | const W b0 = bytes[WordInfo::bytes * full_words + i]; 1265| | r[0] |= (b0 << (8 * (extra_bytes - 1 - i))); 1266| | } 1267| | } 1268| | 1269| 1.09k| return r; 1270| 1.09k|} _ZN5Botan16read_window_bitsILm7EhLm18446744073709551615EEEmNSt3__14spanIKT0_XT1_EEEm: 1274| 42.7k|constexpr size_t read_window_bits(std::span words, size_t offset) { 1275| 42.7k| static_assert(WindowBits >= 1 && WindowBits <= 7); 1276| | 1277| 42.7k| constexpr uint8_t WindowMask = static_cast(1 << WindowBits) - 1; 1278| | 1279| 42.7k| constexpr size_t W_bits = sizeof(W) * 8; 1280| 42.7k| const auto bit_shift = offset % W_bits; 1281| 42.7k| const auto word_offset = words.size() - 1 - (offset / W_bits); 1282| | 1283| 42.7k| const bool single_byte_window = bit_shift <= (W_bits - WindowBits) || word_offset == 0; ------------------ | Branch (1283:36): [True: 11.1k, False: 31.6k] | Branch (1283:74): [True: 0, False: 31.6k] ------------------ 1284| | 1285| 42.7k| const auto w0 = words[word_offset]; 1286| | 1287| 42.7k| if(single_byte_window) { ------------------ | Branch (1287:7): [True: 11.1k, False: 31.6k] ------------------ 1288| 11.1k| return (w0 >> bit_shift) & WindowMask; 1289| 31.6k| } else { 1290| | // Otherwise we must join two words and extract the result 1291| 31.6k| const auto w1 = words[word_offset - 1]; 1292| 31.6k| const auto combined = ((w0 >> bit_shift) | (w1 << (W_bits - bit_shift))); 1293| 31.6k| return combined & WindowMask; 1294| 31.6k| } 1295| 42.7k|} _ZN5Botan12booth_recodeILm6ETkNSt3__117unsigned_integralEmEENS1_4pairImNS_2CT6ChoiceEEET0_: 1311| 42.7k|constexpr std::pair booth_recode(T x) { 1312| 42.7k| static_assert(WindowBits >= 1 && WindowBits <= 16); 1313| 42.7k| return booth_recode(static_cast(x), WindowBits); 1314| 42.7k|} _ZN5Botan14bytes_to_wordsITkNS_8WordTypeEmLm4ELm32EEEDaNSt3__14spanIKhXT1_EEE: 1245| 243|inline constexpr auto bytes_to_words(std::span bytes) { 1246| 243| static_assert(L <= WordInfo::bytes * N); 1247| | 1248| 243| std::array r = {}; 1249| | 1250| 243| constexpr size_t full_words = L / WordInfo::bytes; 1251| 243| constexpr size_t extra_bytes = L % WordInfo::bytes; 1252| | 1253| 243| static_assert(full_words + (extra_bytes ? 1 : 0) <= N); 1254| | 1255| 1.21k| for(size_t i = 0; i != full_words; ++i) { ------------------ | Branch (1255:22): [True: 972, False: 243] ------------------ 1256| 972| r[i] = load_be(bytes.data(), full_words - 1 - i); 1257| 972| } 1258| | 1259| | if constexpr(extra_bytes > 0) { 1260| | constexpr size_t shift = extra_bytes * 8; 1261| | shift_left(r); 1262| | 1263| | for(size_t i = 0; i != extra_bytes; ++i) { 1264| | const W b0 = bytes[WordInfo::bytes * full_words + i]; 1265| | r[0] |= (b0 << (8 * (extra_bytes - 1 - i))); 1266| | } 1267| | } 1268| | 1269| 243| return r; 1270| 243|} _ZN5Botan9comba_sqrILm6ETkNS_8WordTypeEmEEvPT0_PKS1_: 1007| 176k|constexpr inline void comba_sqr(W z[2 * N], const W x[N]) { 1008| 176k| if(!std::is_constant_evaluated()) { ------------------ | Branch (1008:7): [True: 176k, Folded] ------------------ 1009| | if constexpr(std::same_as && N == 4) { 1010| | return bigint_comba_sqr4(z, x); 1011| | } 1012| 176k| if constexpr(std::same_as && N == 6) { 1013| 176k| return bigint_comba_sqr6(z, x); 1014| 176k| } 1015| | if constexpr(std::same_as && N == 7) { 1016| | return bigint_comba_sqr7(z, x); 1017| | } 1018| | if constexpr(std::same_as && N == 8) { 1019| | return bigint_comba_sqr8(z, x); 1020| | } 1021| | if constexpr(std::same_as && N == 9) { 1022| | return bigint_comba_sqr9(z, x); 1023| | } 1024| | if constexpr(std::same_as && N == 16) { 1025| | return bigint_comba_sqr16(z, x); 1026| | } 1027| 176k| } 1028| | 1029| 0| word3 accum; 1030| | 1031| 176k| for(size_t i = 0; i != 2 * N; ++i) { ------------------ | Branch (1031:22): [True: 0, False: 176k] ------------------ 1032| 0| const size_t start = i + 1 < N ? 0 : i + 1 - N; ------------------ | Branch (1032:28): [True: 0, False: 0] ------------------ 1033| 0| const size_t end = std::min(N, i + 1); 1034| | 1035| 0| for(size_t j = start; j != end; ++j) { ------------------ | Branch (1035:29): [True: 0, False: 0] ------------------ 1036| 0| accum.mul(x[j], x[i - j]); 1037| 0| } 1038| 0| z[i] = accum.extract(); 1039| 0| } 1040| 176k|} _ZN5Botan22bigint_monty_maybe_subILm6ETkNS_8WordTypeEmEEvPT0_S1_PKS1_S4_: 257| 258k|inline constexpr void bigint_monty_maybe_sub(W z[N], W x0, const W x[N], const W y[N]) { 258| 258k| W borrow = 0; 259| | 260| 1.81M| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (260:22): [True: 1.55M, False: 258k] ------------------ 261| 1.55M| z[i] = word_sub(x[i], y[i], &borrow); 262| 1.55M| } 263| | 264| 258k| borrow = (x0 - borrow) > x0; 265| | 266| 258k| CT::conditional_assign_mem(borrow, z, x, N); 267| 258k|} _ZN5Botan9comba_mulILm6ETkNS_8WordTypeEmEEvPT0_PKS1_S4_: 971| 224k|constexpr inline void comba_mul(W z[2 * N], const W x[N], const W y[N]) { 972| 224k| if(!std::is_constant_evaluated()) { ------------------ | Branch (972:7): [True: 224k, Folded] ------------------ 973| | if constexpr(std::same_as && N == 4) { 974| | return bigint_comba_mul4(z, x, y); 975| | } 976| 224k| if constexpr(std::same_as && N == 6) { 977| 224k| return bigint_comba_mul6(z, x, y); 978| 224k| } 979| | if constexpr(std::same_as && N == 7) { 980| | return bigint_comba_mul7(z, x, y); 981| | } 982| | if constexpr(std::same_as && N == 8) { 983| | return bigint_comba_mul8(z, x, y); 984| | } 985| | if constexpr(std::same_as && N == 9) { 986| | return bigint_comba_mul9(z, x, y); 987| | } 988| | if constexpr(std::same_as && N == 16) { 989| | return bigint_comba_mul16(z, x, y); 990| | } 991| 224k| } 992| | 993| 0| word3 accum; 994| | 995| 224k| for(size_t i = 0; i != 2 * N; ++i) { ------------------ | Branch (995:22): [True: 0, False: 224k] ------------------ 996| 0| const size_t start = i + 1 < N ? 0 : i + 1 - N; ------------------ | Branch (996:28): [True: 0, False: 0] ------------------ 997| 0| const size_t end = std::min(N, i + 1); 998| | 999| 0| for(size_t j = start; j != end; ++j) { ------------------ | Branch (999:29): [True: 0, False: 0] ------------------ 1000| 0| accum.mul(x[j], y[i - j]); 1001| 0| } 1002| 0| z[i] = accum.extract(); 1003| 0| } 1004| 224k|} _ZN5Botan10shift_leftILm1ETkNS_8WordTypeEmLm6EEET0_RNSt3__15arrayIS1_XT1_EEE: 878| 19.8k|inline constexpr W shift_left(std::array& x) { 879| 19.8k| static_assert(N >= 1, "Invalid input size"); 880| 19.8k| static_assert(S > 0, "Zero shift not supported"); 881| 19.8k| static_assert(S < WordInfo::bits, "Shift too large"); 882| | 883| 19.8k| const W carry = x[N - 1] >> (WordInfo::bits - S); 884| | 885| 119k| for(size_t i = N - 1; i != 0; --i) { ------------------ | Branch (885:26): [True: 99.2k, False: 19.8k] ------------------ 886| 99.2k| x[i] = (x[i] << S) | (x[i - 1] >> (WordInfo::bits - S)); 887| 99.2k| } 888| 19.8k| x[0] <<= S; 889| | 890| 19.8k| return carry; 891| 19.8k|} _ZN5Botan16read_window_bitsILm5EmLm6EEEmNSt3__14spanIKT0_XT1_EEEm: 1274| 9.70k|constexpr size_t read_window_bits(std::span words, size_t offset) { 1275| 9.70k| static_assert(WindowBits >= 1 && WindowBits <= 7); 1276| | 1277| 9.70k| constexpr uint8_t WindowMask = static_cast(1 << WindowBits) - 1; 1278| | 1279| 9.70k| constexpr size_t W_bits = sizeof(W) * 8; 1280| 9.70k| const auto bit_shift = offset % W_bits; 1281| 9.70k| const auto word_offset = words.size() - 1 - (offset / W_bits); 1282| | 1283| 9.70k| const bool single_byte_window = bit_shift <= (W_bits - WindowBits) || word_offset == 0; ------------------ | Branch (1283:36): [True: 9.07k, False: 630] | Branch (1283:74): [True: 126, False: 504] ------------------ 1284| | 1285| 9.70k| const auto w0 = words[word_offset]; 1286| | 1287| 9.70k| if(single_byte_window) { ------------------ | Branch (1287:7): [True: 9.19k, False: 504] ------------------ 1288| 9.19k| return (w0 >> bit_shift) & WindowMask; 1289| 9.19k| } else { 1290| | // Otherwise we must join two words and extract the result 1291| 504| const auto w1 = words[word_offset - 1]; 1292| 504| const auto combined = ((w0 >> bit_shift) | (w1 << (W_bits - bit_shift))); 1293| 504| return combined & WindowMask; 1294| 504| } 1295| 9.70k|} _ZN5Botan11shift_rightILm1ETkNS_8WordTypeEmLm6EEET0_RNSt3__15arrayIS1_XT1_EEE: 894| 2.21k|inline constexpr W shift_right(std::array& x) { 895| 2.21k| static_assert(N >= 1, "Invalid input size"); 896| 2.21k| static_assert(S > 0, "Zero shift not supported"); 897| 2.21k| static_assert(S < WordInfo::bits, "Shift too large"); 898| | 899| 2.21k| const W carry = x[0] << (WordInfo::bits - S); 900| | 901| 13.2k| for(size_t i = 0; i != N - 1; ++i) { ------------------ | Branch (901:22): [True: 11.0k, False: 2.21k] ------------------ 902| 11.0k| x[i] = (x[i] >> S) | (x[i + 1] << (WordInfo::bits - S)); 903| 11.0k| } 904| 2.21k| x[N - 1] >>= S; 905| | 906| 2.21k| return carry; 907| 2.21k|} _ZN5Botan14bytes_to_wordsITkNS_8WordTypeEmLm12ELm96EEEDaNSt3__14spanIKhXT1_EEE: 1245| 1.23k|inline constexpr auto bytes_to_words(std::span bytes) { 1246| 1.23k| static_assert(L <= WordInfo::bytes * N); 1247| | 1248| 1.23k| std::array r = {}; 1249| | 1250| 1.23k| constexpr size_t full_words = L / WordInfo::bytes; 1251| 1.23k| constexpr size_t extra_bytes = L % WordInfo::bytes; 1252| | 1253| 1.23k| static_assert(full_words + (extra_bytes ? 1 : 0) <= N); 1254| | 1255| 15.9k| for(size_t i = 0; i != full_words; ++i) { ------------------ | Branch (1255:22): [True: 14.7k, False: 1.23k] ------------------ 1256| 14.7k| r[i] = load_be(bytes.data(), full_words - 1 - i); 1257| 14.7k| } 1258| | 1259| | if constexpr(extra_bytes > 0) { 1260| | constexpr size_t shift = extra_bytes * 8; 1261| | shift_left(r); 1262| | 1263| | for(size_t i = 0; i != extra_bytes; ++i) { 1264| | const W b0 = bytes[WordInfo::bytes * full_words + i]; 1265| | r[0] |= (b0 << (8 * (extra_bytes - 1 - i))); 1266| | } 1267| | } 1268| | 1269| 1.23k| return r; 1270| 1.23k|} _ZN5Botan14bytes_to_wordsITkNS_8WordTypeEmLm6ELm48EEEDaNSt3__14spanIKhXT1_EEE: 1245| 343|inline constexpr auto bytes_to_words(std::span bytes) { 1246| 343| static_assert(L <= WordInfo::bytes * N); 1247| | 1248| 343| std::array r = {}; 1249| | 1250| 343| constexpr size_t full_words = L / WordInfo::bytes; 1251| 343| constexpr size_t extra_bytes = L % WordInfo::bytes; 1252| | 1253| 343| static_assert(full_words + (extra_bytes ? 1 : 0) <= N); 1254| | 1255| 2.40k| for(size_t i = 0; i != full_words; ++i) { ------------------ | Branch (1255:22): [True: 2.05k, False: 343] ------------------ 1256| 2.05k| r[i] = load_be(bytes.data(), full_words - 1 - i); 1257| 2.05k| } 1258| | 1259| | if constexpr(extra_bytes > 0) { 1260| | constexpr size_t shift = extra_bytes * 8; 1261| | shift_left(r); 1262| | 1263| | for(size_t i = 0; i != extra_bytes; ++i) { 1264| | const W b0 = bytes[WordInfo::bytes * full_words + i]; 1265| | r[0] |= (b0 << (8 * (extra_bytes - 1 - i))); 1266| | } 1267| | } 1268| | 1269| 343| return r; 1270| 343|} _ZN5Botan9comba_sqrILm8ETkNS_8WordTypeEmEEvPT0_PKS1_: 1007| 91.7k|constexpr inline void comba_sqr(W z[2 * N], const W x[N]) { 1008| 91.7k| if(!std::is_constant_evaluated()) { ------------------ | Branch (1008:7): [True: 91.7k, Folded] ------------------ 1009| | if constexpr(std::same_as && N == 4) { 1010| | return bigint_comba_sqr4(z, x); 1011| | } 1012| | if constexpr(std::same_as && N == 6) { 1013| | return bigint_comba_sqr6(z, x); 1014| | } 1015| | if constexpr(std::same_as && N == 7) { 1016| | return bigint_comba_sqr7(z, x); 1017| | } 1018| 91.7k| if constexpr(std::same_as && N == 8) { 1019| 91.7k| return bigint_comba_sqr8(z, x); 1020| 91.7k| } 1021| | if constexpr(std::same_as && N == 9) { 1022| | return bigint_comba_sqr9(z, x); 1023| | } 1024| | if constexpr(std::same_as && N == 16) { 1025| | return bigint_comba_sqr16(z, x); 1026| | } 1027| 91.7k| } 1028| | 1029| 0| word3 accum; 1030| | 1031| 91.7k| for(size_t i = 0; i != 2 * N; ++i) { ------------------ | Branch (1031:22): [True: 0, False: 91.7k] ------------------ 1032| 0| const size_t start = i + 1 < N ? 0 : i + 1 - N; ------------------ | Branch (1032:28): [True: 0, False: 0] ------------------ 1033| 0| const size_t end = std::min(N, i + 1); 1034| | 1035| 0| for(size_t j = start; j != end; ++j) { ------------------ | Branch (1035:29): [True: 0, False: 0] ------------------ 1036| 0| accum.mul(x[j], x[i - j]); 1037| 0| } 1038| 0| z[i] = accum.extract(); 1039| 0| } 1040| 91.7k|} _ZN5Botan22bigint_monty_maybe_subILm8ETkNS_8WordTypeEmEEvPT0_S1_PKS1_S4_: 257| 243k|inline constexpr void bigint_monty_maybe_sub(W z[N], W x0, const W x[N], const W y[N]) { 258| 243k| W borrow = 0; 259| | 260| 2.19M| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (260:22): [True: 1.94M, False: 243k] ------------------ 261| 1.94M| z[i] = word_sub(x[i], y[i], &borrow); 262| 1.94M| } 263| | 264| 243k| borrow = (x0 - borrow) > x0; 265| | 266| 243k| CT::conditional_assign_mem(borrow, z, x, N); 267| 243k|} _ZN5Botan9comba_mulILm8ETkNS_8WordTypeEmEEvPT0_PKS1_S4_: 971| 123k|constexpr inline void comba_mul(W z[2 * N], const W x[N], const W y[N]) { 972| 123k| if(!std::is_constant_evaluated()) { ------------------ | Branch (972:7): [True: 123k, Folded] ------------------ 973| | if constexpr(std::same_as && N == 4) { 974| | return bigint_comba_mul4(z, x, y); 975| | } 976| | if constexpr(std::same_as && N == 6) { 977| | return bigint_comba_mul6(z, x, y); 978| | } 979| | if constexpr(std::same_as && N == 7) { 980| | return bigint_comba_mul7(z, x, y); 981| | } 982| 123k| if constexpr(std::same_as && N == 8) { 983| 123k| return bigint_comba_mul8(z, x, y); 984| 123k| } 985| | if constexpr(std::same_as && N == 9) { 986| | return bigint_comba_mul9(z, x, y); 987| | } 988| | if constexpr(std::same_as && N == 16) { 989| | return bigint_comba_mul16(z, x, y); 990| | } 991| 123k| } 992| | 993| 0| word3 accum; 994| | 995| 123k| for(size_t i = 0; i != 2 * N; ++i) { ------------------ | Branch (995:22): [True: 0, False: 123k] ------------------ 996| 0| const size_t start = i + 1 < N ? 0 : i + 1 - N; ------------------ | Branch (996:28): [True: 0, False: 0] ------------------ 997| 0| const size_t end = std::min(N, i + 1); 998| | 999| 0| for(size_t j = start; j != end; ++j) { ------------------ | Branch (999:29): [True: 0, False: 0] ------------------ 1000| 0| accum.mul(x[j], y[i - j]); 1001| 0| } 1002| 0| z[i] = accum.extract(); 1003| 0| } 1004| 123k|} _ZN5Botan10shift_leftILm1ETkNS_8WordTypeEmLm8EEET0_RNSt3__15arrayIS1_XT1_EEE: 878| 13.1k|inline constexpr W shift_left(std::array& x) { 879| 13.1k| static_assert(N >= 1, "Invalid input size"); 880| 13.1k| static_assert(S > 0, "Zero shift not supported"); 881| 13.1k| static_assert(S < WordInfo::bits, "Shift too large"); 882| | 883| 13.1k| const W carry = x[N - 1] >> (WordInfo::bits - S); 884| | 885| 105k| for(size_t i = N - 1; i != 0; --i) { ------------------ | Branch (885:26): [True: 92.3k, False: 13.1k] ------------------ 886| 92.3k| x[i] = (x[i] << S) | (x[i - 1] >> (WordInfo::bits - S)); 887| 92.3k| } 888| 13.1k| x[0] <<= S; 889| | 890| 13.1k| return carry; 891| 13.1k|} _ZN5Botan16read_window_bitsILm5EmLm8EEEmNSt3__14spanIKT0_XT1_EEEm: 1274| 9.16k|constexpr size_t read_window_bits(std::span words, size_t offset) { 1275| 9.16k| static_assert(WindowBits >= 1 && WindowBits <= 7); 1276| | 1277| 9.16k| constexpr uint8_t WindowMask = static_cast(1 << WindowBits) - 1; 1278| | 1279| 9.16k| constexpr size_t W_bits = sizeof(W) * 8; 1280| 9.16k| const auto bit_shift = offset % W_bits; 1281| 9.16k| const auto word_offset = words.size() - 1 - (offset / W_bits); 1282| | 1283| 9.16k| const bool single_byte_window = bit_shift <= (W_bits - WindowBits) || word_offset == 0; ------------------ | Branch (1283:36): [True: 8.54k, False: 623] | Branch (1283:74): [True: 89, False: 534] ------------------ 1284| | 1285| 9.16k| const auto w0 = words[word_offset]; 1286| | 1287| 9.16k| if(single_byte_window) { ------------------ | Branch (1287:7): [True: 8.63k, False: 534] ------------------ 1288| 8.63k| return (w0 >> bit_shift) & WindowMask; 1289| 8.63k| } else { 1290| | // Otherwise we must join two words and extract the result 1291| 534| const auto w1 = words[word_offset - 1]; 1292| 534| const auto combined = ((w0 >> bit_shift) | (w1 << (W_bits - bit_shift))); 1293| 534| return combined & WindowMask; 1294| 534| } 1295| 9.16k|} _ZN5Botan11shift_rightILm1ETkNS_8WordTypeEmLm8EEET0_RNSt3__15arrayIS1_XT1_EEE: 894| 1.42k|inline constexpr W shift_right(std::array& x) { 895| 1.42k| static_assert(N >= 1, "Invalid input size"); 896| 1.42k| static_assert(S > 0, "Zero shift not supported"); 897| 1.42k| static_assert(S < WordInfo::bits, "Shift too large"); 898| | 899| 1.42k| const W carry = x[0] << (WordInfo::bits - S); 900| | 901| 11.4k| for(size_t i = 0; i != N - 1; ++i) { ------------------ | Branch (901:22): [True: 9.98k, False: 1.42k] ------------------ 902| 9.98k| x[i] = (x[i] >> S) | (x[i + 1] << (WordInfo::bits - S)); 903| 9.98k| } 904| 1.42k| x[N - 1] >>= S; 905| | 906| 1.42k| return carry; 907| 1.42k|} _ZN5Botan14bytes_to_wordsITkNS_8WordTypeEmLm16ELm128EEEDaNSt3__14spanIKhXT1_EEE: 1245| 445|inline constexpr auto bytes_to_words(std::span bytes) { 1246| 445| static_assert(L <= WordInfo::bytes * N); 1247| | 1248| 445| std::array r = {}; 1249| | 1250| 445| constexpr size_t full_words = L / WordInfo::bytes; 1251| 445| constexpr size_t extra_bytes = L % WordInfo::bytes; 1252| | 1253| 445| static_assert(full_words + (extra_bytes ? 1 : 0) <= N); 1254| | 1255| 7.56k| for(size_t i = 0; i != full_words; ++i) { ------------------ | Branch (1255:22): [True: 7.12k, False: 445] ------------------ 1256| 7.12k| r[i] = load_be(bytes.data(), full_words - 1 - i); 1257| 7.12k| } 1258| | 1259| | if constexpr(extra_bytes > 0) { 1260| | constexpr size_t shift = extra_bytes * 8; 1261| | shift_left(r); 1262| | 1263| | for(size_t i = 0; i != extra_bytes; ++i) { 1264| | const W b0 = bytes[WordInfo::bytes * full_words + i]; 1265| | r[0] |= (b0 << (8 * (extra_bytes - 1 - i))); 1266| | } 1267| | } 1268| | 1269| 445| return r; 1270| 445|} _ZN5Botan10shift_leftILm1ETkNS_8WordTypeEmLm9EEET0_RNSt3__15arrayIS1_XT1_EEE: 878| 18.2k|inline constexpr W shift_left(std::array& x) { 879| 18.2k| static_assert(N >= 1, "Invalid input size"); 880| 18.2k| static_assert(S > 0, "Zero shift not supported"); 881| 18.2k| static_assert(S < WordInfo::bits, "Shift too large"); 882| | 883| 18.2k| const W carry = x[N - 1] >> (WordInfo::bits - S); 884| | 885| 164k| for(size_t i = N - 1; i != 0; --i) { ------------------ | Branch (885:26): [True: 145k, False: 18.2k] ------------------ 886| 145k| x[i] = (x[i] << S) | (x[i - 1] >> (WordInfo::bits - S)); 887| 145k| } 888| 18.2k| x[0] <<= S; 889| | 890| 18.2k| return carry; 891| 18.2k|} _ZN5Botan22bigint_monty_maybe_subILm9ETkNS_8WordTypeEmEEvPT0_S1_PKS1_S4_: 257| 30.5k|inline constexpr void bigint_monty_maybe_sub(W z[N], W x0, const W x[N], const W y[N]) { 258| 30.5k| W borrow = 0; 259| | 260| 305k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (260:22): [True: 275k, False: 30.5k] ------------------ 261| 275k| z[i] = word_sub(x[i], y[i], &borrow); 262| 275k| } 263| | 264| 30.5k| borrow = (x0 - borrow) > x0; 265| | 266| 30.5k| CT::conditional_assign_mem(borrow, z, x, N); 267| 30.5k|} _ZN5Botan16read_window_bitsILm4EmLm18446744073709551615EEEmNSt3__14spanIKT0_XT1_EEEm: 1274| 48|constexpr size_t read_window_bits(std::span words, size_t offset) { 1275| 48| static_assert(WindowBits >= 1 && WindowBits <= 7); 1276| | 1277| 48| constexpr uint8_t WindowMask = static_cast(1 << WindowBits) - 1; 1278| | 1279| 48| constexpr size_t W_bits = sizeof(W) * 8; 1280| 48| const auto bit_shift = offset % W_bits; 1281| 48| const auto word_offset = words.size() - 1 - (offset / W_bits); 1282| | 1283| 48| const bool single_byte_window = bit_shift <= (W_bits - WindowBits) || word_offset == 0; ------------------ | Branch (1283:36): [True: 48, False: 0] | Branch (1283:74): [True: 0, False: 0] ------------------ 1284| | 1285| 48| const auto w0 = words[word_offset]; 1286| | 1287| 48| if(single_byte_window) { ------------------ | Branch (1287:7): [True: 48, False: 0] ------------------ 1288| 48| return (w0 >> bit_shift) & WindowMask; 1289| 48| } else { 1290| | // Otherwise we must join two words and extract the result 1291| 0| const auto w1 = words[word_offset - 1]; 1292| 0| const auto combined = ((w0 >> bit_shift) | (w1 << (W_bits - bit_shift))); 1293| 0| return combined & WindowMask; 1294| 0| } 1295| 48|} _ZN5Botan11shift_rightILm1ETkNS_8WordTypeEmLm9EEET0_RNSt3__15arrayIS1_XT1_EEE: 894| 1.48k|inline constexpr W shift_right(std::array& x) { 895| 1.48k| static_assert(N >= 1, "Invalid input size"); 896| 1.48k| static_assert(S > 0, "Zero shift not supported"); 897| 1.48k| static_assert(S < WordInfo::bits, "Shift too large"); 898| | 899| 1.48k| const W carry = x[0] << (WordInfo::bits - S); 900| | 901| 13.3k| for(size_t i = 0; i != N - 1; ++i) { ------------------ | Branch (901:22): [True: 11.8k, False: 1.48k] ------------------ 902| 11.8k| x[i] = (x[i] >> S) | (x[i + 1] << (WordInfo::bits - S)); 903| 11.8k| } 904| 1.48k| x[N - 1] >>= S; 905| | 906| 1.48k| return carry; 907| 1.48k|} _ZN5Botan14bytes_to_wordsITkNS_8WordTypeEmLm4ELm28EEEDaNSt3__14spanIKhXT1_EEE: 1245| 150|inline constexpr auto bytes_to_words(std::span bytes) { 1246| 150| static_assert(L <= WordInfo::bytes * N); 1247| | 1248| 150| std::array r = {}; 1249| | 1250| 150| constexpr size_t full_words = L / WordInfo::bytes; 1251| 150| constexpr size_t extra_bytes = L % WordInfo::bytes; 1252| | 1253| 150| static_assert(full_words + (extra_bytes ? 1 : 0) <= N); 1254| | 1255| 600| for(size_t i = 0; i != full_words; ++i) { ------------------ | Branch (1255:22): [True: 450, False: 150] ------------------ 1256| 450| r[i] = load_be(bytes.data(), full_words - 1 - i); 1257| 450| } 1258| | 1259| 150| if constexpr(extra_bytes > 0) { 1260| 150| constexpr size_t shift = extra_bytes * 8; 1261| 150| shift_left(r); 1262| | 1263| 750| for(size_t i = 0; i != extra_bytes; ++i) { ------------------ | Branch (1263:25): [True: 600, False: 150] ------------------ 1264| 600| const W b0 = bytes[WordInfo::bytes * full_words + i]; 1265| 600| r[0] |= (b0 << (8 * (extra_bytes - 1 - i))); 1266| 600| } 1267| 150| } 1268| | 1269| 150| return r; 1270| 150|} _ZN5Botan10shift_leftILm32ETkNS_8WordTypeEmLm4EEET0_RNSt3__15arrayIS1_XT1_EEE: 878| 150|inline constexpr W shift_left(std::array& x) { 879| 150| static_assert(N >= 1, "Invalid input size"); 880| 150| static_assert(S > 0, "Zero shift not supported"); 881| 150| static_assert(S < WordInfo::bits, "Shift too large"); 882| | 883| 150| const W carry = x[N - 1] >> (WordInfo::bits - S); 884| | 885| 600| for(size_t i = N - 1; i != 0; --i) { ------------------ | Branch (885:26): [True: 450, False: 150] ------------------ 886| 450| x[i] = (x[i] << S) | (x[i - 1] >> (WordInfo::bits - S)); 887| 450| } 888| 150| x[0] <<= S; 889| | 890| 150| return carry; 891| 150|} _ZN5Botan13redc_crandallITkNS_8WordTypeEmLm4ETnT_Lm4294968273EEENSt3__15arrayIS1_XT0_EEENS2_4spanIKS1_XmlLi2ET0_EEE: 1167| 28.5k|constexpr std::array redc_crandall(std::span z) { 1168| 28.5k| static_assert(N >= 2); 1169| | 1170| 28.5k| std::array hi = {}; 1171| | 1172| | // hi = hi * c + lo 1173| | 1174| 28.5k| W carry = 0; 1175| 142k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (1175:22): [True: 114k, False: 28.5k] ------------------ 1176| 114k| hi[i] = word_madd3(z[i + N], C, z[i], &carry); 1177| 114k| } 1178| | 1179| | // hi += carry * C 1180| 28.5k| W carry_c[2] = {0}; 1181| 28.5k| carry_c[0] = word_madd2(carry, C, &carry_c[1]); 1182| | 1183| 28.5k| carry = bigint_add2(hi.data(), N, carry_c, 2); 1184| | 1185| 28.5k| constexpr W P0 = WordInfo::max - (C - 1); 1186| | 1187| 28.5k| std::array r = {}; 1188| | 1189| 28.5k| W borrow = 0; 1190| | 1191| | /* 1192| | * For undetermined reasons, on GCC (only) removing this asm block causes 1193| | * massive (up to 20%) performance regressions in secp256k1. 1194| | * 1195| | * The generated code without the asm seems quite reasonable, and timing 1196| | * repeated calls to redc_crandall with the cycle counter show that GCC 1197| | * computes it in about the same number of cycles with or without the asm. 1198| | * 1199| | * So the cause of the regression is unclear. But it is reproducible across 1200| | * machines and GCC versions. 1201| | */ 1202| |#if defined(BOTAN_MP_USE_X86_64_ASM) && defined(__GNUC__) && !defined(__clang__) 1203| | if constexpr(N == 4 && std::same_as) { 1204| | if(!std::is_constant_evaluated()) { 1205| | asm volatile(R"( 1206| | movq 0(%[x]), %[borrow] 1207| | subq %[p0], %[borrow] 1208| | movq %[borrow], 0(%[r]) 1209| | movq 8(%[x]), %[borrow] 1210| | sbbq $-1, %[borrow] 1211| | movq %[borrow], 8(%[r]) 1212| | movq 16(%[x]), %[borrow] 1213| | sbbq $-1, %[borrow] 1214| | movq %[borrow], 16(%[r]) 1215| | movq 24(%[x]), %[borrow] 1216| | sbbq $-1, %[borrow] 1217| | movq %[borrow], 24(%[r]) 1218| | sbbq %[borrow],%[borrow] 1219| | negq %[borrow] 1220| | )" 1221| | : [borrow] "=r"(borrow) 1222| | : [x] "r"(hi.data()), [p0] "r"(P0), [r] "r"(r.data()), "0"(borrow) 1223| | : "cc", "memory"); 1224| | 1225| | borrow = (carry - borrow) > carry; 1226| | CT::conditional_assign_mem(borrow, r.data(), hi.data(), N); 1227| | return r; 1228| | } 1229| | } 1230| |#endif 1231| | 1232| 28.5k| r[0] = word_sub(hi[0], P0, &borrow); 1233| 114k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (1233:22): [True: 85.6k, False: 28.5k] ------------------ 1234| 85.6k| r[i] = word_sub(hi[i], WordInfo::max, &borrow); 1235| 85.6k| } 1236| | 1237| 28.5k| borrow = (carry - borrow) > carry; 1238| | 1239| 28.5k| CT::conditional_assign_mem(borrow, r.data(), hi.data(), N); 1240| | 1241| 28.5k| return r; 1242| 28.5k|} _ZN5Botan9comba_sqrILm9ETkNS_8WordTypeEmEEvPT0_PKS1_: 1007| 72.7k|constexpr inline void comba_sqr(W z[2 * N], const W x[N]) { 1008| 72.7k| if(!std::is_constant_evaluated()) { ------------------ | Branch (1008:7): [True: 72.7k, Folded] ------------------ 1009| | if constexpr(std::same_as && N == 4) { 1010| | return bigint_comba_sqr4(z, x); 1011| | } 1012| | if constexpr(std::same_as && N == 6) { 1013| | return bigint_comba_sqr6(z, x); 1014| | } 1015| | if constexpr(std::same_as && N == 7) { 1016| | return bigint_comba_sqr7(z, x); 1017| | } 1018| | if constexpr(std::same_as && N == 8) { 1019| | return bigint_comba_sqr8(z, x); 1020| | } 1021| 72.7k| if constexpr(std::same_as && N == 9) { 1022| 72.7k| return bigint_comba_sqr9(z, x); 1023| 72.7k| } 1024| | if constexpr(std::same_as && N == 16) { 1025| | return bigint_comba_sqr16(z, x); 1026| | } 1027| 72.7k| } 1028| | 1029| 0| word3 accum; 1030| | 1031| 72.7k| for(size_t i = 0; i != 2 * N; ++i) { ------------------ | Branch (1031:22): [True: 0, False: 72.7k] ------------------ 1032| 0| const size_t start = i + 1 < N ? 0 : i + 1 - N; ------------------ | Branch (1032:28): [True: 0, False: 0] ------------------ 1033| 0| const size_t end = std::min(N, i + 1); 1034| | 1035| 0| for(size_t j = start; j != end; ++j) { ------------------ | Branch (1035:29): [True: 0, False: 0] ------------------ 1036| 0| accum.mul(x[j], x[i - j]); 1037| 0| } 1038| 0| z[i] = accum.extract(); 1039| 0| } 1040| 72.7k|} _ZN5Botan9comba_mulILm9ETkNS_8WordTypeEmEEvPT0_PKS1_S4_: 971| 98.9k|constexpr inline void comba_mul(W z[2 * N], const W x[N], const W y[N]) { 972| 98.9k| if(!std::is_constant_evaluated()) { ------------------ | Branch (972:7): [True: 98.9k, Folded] ------------------ 973| | if constexpr(std::same_as && N == 4) { 974| | return bigint_comba_mul4(z, x, y); 975| | } 976| | if constexpr(std::same_as && N == 6) { 977| | return bigint_comba_mul6(z, x, y); 978| | } 979| | if constexpr(std::same_as && N == 7) { 980| | return bigint_comba_mul7(z, x, y); 981| | } 982| | if constexpr(std::same_as && N == 8) { 983| | return bigint_comba_mul8(z, x, y); 984| | } 985| 98.9k| if constexpr(std::same_as && N == 9) { 986| 98.9k| return bigint_comba_mul9(z, x, y); 987| 98.9k| } 988| | if constexpr(std::same_as && N == 16) { 989| | return bigint_comba_mul16(z, x, y); 990| | } 991| 98.9k| } 992| | 993| 0| word3 accum; 994| | 995| 98.9k| for(size_t i = 0; i != 2 * N; ++i) { ------------------ | Branch (995:22): [True: 0, False: 98.9k] ------------------ 996| 0| const size_t start = i + 1 < N ? 0 : i + 1 - N; ------------------ | Branch (996:28): [True: 0, False: 0] ------------------ 997| 0| const size_t end = std::min(N, i + 1); 998| | 999| 0| for(size_t j = start; j != end; ++j) { ------------------ | Branch (999:29): [True: 0, False: 0] ------------------ 1000| 0| accum.mul(x[j], y[i - j]); 1001| 0| } 1002| 0| z[i] = accum.extract(); 1003| 0| } 1004| 98.9k|} _ZN5Botan14bytes_to_wordsITkNS_8WordTypeEmLm18ELm132EEEDaNSt3__14spanIKhXT1_EEE: 1245| 350|inline constexpr auto bytes_to_words(std::span bytes) { 1246| 350| static_assert(L <= WordInfo::bytes * N); 1247| | 1248| 350| std::array r = {}; 1249| | 1250| 350| constexpr size_t full_words = L / WordInfo::bytes; 1251| 350| constexpr size_t extra_bytes = L % WordInfo::bytes; 1252| | 1253| 350| static_assert(full_words + (extra_bytes ? 1 : 0) <= N); 1254| | 1255| 5.95k| for(size_t i = 0; i != full_words; ++i) { ------------------ | Branch (1255:22): [True: 5.60k, False: 350] ------------------ 1256| 5.60k| r[i] = load_be(bytes.data(), full_words - 1 - i); 1257| 5.60k| } 1258| | 1259| 350| if constexpr(extra_bytes > 0) { 1260| 350| constexpr size_t shift = extra_bytes * 8; 1261| 350| shift_left(r); 1262| | 1263| 1.75k| for(size_t i = 0; i != extra_bytes; ++i) { ------------------ | Branch (1263:25): [True: 1.40k, False: 350] ------------------ 1264| 1.40k| const W b0 = bytes[WordInfo::bytes * full_words + i]; 1265| 1.40k| r[0] |= (b0 << (8 * (extra_bytes - 1 - i))); 1266| 1.40k| } 1267| 350| } 1268| | 1269| 350| return r; 1270| 350|} _ZN5Botan10shift_leftILm32ETkNS_8WordTypeEmLm18EEET0_RNSt3__15arrayIS1_XT1_EEE: 878| 350|inline constexpr W shift_left(std::array& x) { 879| 350| static_assert(N >= 1, "Invalid input size"); 880| 350| static_assert(S > 0, "Zero shift not supported"); 881| 350| static_assert(S < WordInfo::bits, "Shift too large"); 882| | 883| 350| const W carry = x[N - 1] >> (WordInfo::bits - S); 884| | 885| 6.30k| for(size_t i = N - 1; i != 0; --i) { ------------------ | Branch (885:26): [True: 5.95k, False: 350] ------------------ 886| 5.95k| x[i] = (x[i] << S) | (x[i - 1] >> (WordInfo::bits - S)); 887| 5.95k| } 888| 350| x[0] <<= S; 889| | 890| 350| return carry; 891| 350|} _ZN5Botan14bytes_to_wordsITkNS_8WordTypeEmLm9ELm66EEEDaNSt3__14spanIKhXT1_EEE: 1245| 276|inline constexpr auto bytes_to_words(std::span bytes) { 1246| 276| static_assert(L <= WordInfo::bytes * N); 1247| | 1248| 276| std::array r = {}; 1249| | 1250| 276| constexpr size_t full_words = L / WordInfo::bytes; 1251| 276| constexpr size_t extra_bytes = L % WordInfo::bytes; 1252| | 1253| 276| static_assert(full_words + (extra_bytes ? 1 : 0) <= N); 1254| | 1255| 2.48k| for(size_t i = 0; i != full_words; ++i) { ------------------ | Branch (1255:22): [True: 2.20k, False: 276] ------------------ 1256| 2.20k| r[i] = load_be(bytes.data(), full_words - 1 - i); 1257| 2.20k| } 1258| | 1259| 276| if constexpr(extra_bytes > 0) { 1260| 276| constexpr size_t shift = extra_bytes * 8; 1261| 276| shift_left(r); 1262| | 1263| 828| for(size_t i = 0; i != extra_bytes; ++i) { ------------------ | Branch (1263:25): [True: 552, False: 276] ------------------ 1264| 552| const W b0 = bytes[WordInfo::bytes * full_words + i]; 1265| 552| r[0] |= (b0 << (8 * (extra_bytes - 1 - i))); 1266| 552| } 1267| 276| } 1268| | 1269| 276| return r; 1270| 276|} _ZN5Botan10shift_leftILm16ETkNS_8WordTypeEmLm9EEET0_RNSt3__15arrayIS1_XT1_EEE: 878| 276|inline constexpr W shift_left(std::array& x) { 879| 276| static_assert(N >= 1, "Invalid input size"); 880| 276| static_assert(S > 0, "Zero shift not supported"); 881| 276| static_assert(S < WordInfo::bits, "Shift too large"); 882| | 883| 276| const W carry = x[N - 1] >> (WordInfo::bits - S); 884| | 885| 2.48k| for(size_t i = N - 1; i != 0; --i) { ------------------ | Branch (885:26): [True: 2.20k, False: 276] ------------------ 886| 2.20k| x[i] = (x[i] << S) | (x[i - 1] >> (WordInfo::bits - S)); 887| 2.20k| } 888| 276| x[0] <<= S; 889| | 890| 276| return carry; 891| 276|} _ZN5Botan9comba_mulILm7ETkNS_8WordTypeEmEEvPT0_PKS1_S4_: 971| 2.25k|constexpr inline void comba_mul(W z[2 * N], const W x[N], const W y[N]) { 972| 2.25k| if(!std::is_constant_evaluated()) { ------------------ | Branch (972:7): [True: 2.25k, Folded] ------------------ 973| | if constexpr(std::same_as && N == 4) { 974| | return bigint_comba_mul4(z, x, y); 975| | } 976| | if constexpr(std::same_as && N == 6) { 977| | return bigint_comba_mul6(z, x, y); 978| | } 979| 2.25k| if constexpr(std::same_as && N == 7) { 980| 2.25k| return bigint_comba_mul7(z, x, y); 981| 2.25k| } 982| | if constexpr(std::same_as && N == 8) { 983| | return bigint_comba_mul8(z, x, y); 984| | } 985| | if constexpr(std::same_as && N == 9) { 986| | return bigint_comba_mul9(z, x, y); 987| | } 988| | if constexpr(std::same_as && N == 16) { 989| | return bigint_comba_mul16(z, x, y); 990| | } 991| 2.25k| } 992| | 993| 0| word3 accum; 994| | 995| 2.25k| for(size_t i = 0; i != 2 * N; ++i) { ------------------ | Branch (995:22): [True: 0, False: 2.25k] ------------------ 996| 0| const size_t start = i + 1 < N ? 0 : i + 1 - N; ------------------ | Branch (996:28): [True: 0, False: 0] ------------------ 997| 0| const size_t end = std::min(N, i + 1); 998| | 999| 0| for(size_t j = start; j != end; ++j) { ------------------ | Branch (999:29): [True: 0, False: 0] ------------------ 1000| 0| accum.mul(x[j], y[i - j]); 1001| 0| } 1002| 0| z[i] = accum.extract(); 1003| 0| } 1004| 2.25k|} _ZN5Botan9comba_sqrILm7ETkNS_8WordTypeEmEEvPT0_PKS1_: 1007| 2.23k|constexpr inline void comba_sqr(W z[2 * N], const W x[N]) { 1008| 2.23k| if(!std::is_constant_evaluated()) { ------------------ | Branch (1008:7): [True: 2.23k, Folded] ------------------ 1009| | if constexpr(std::same_as && N == 4) { 1010| | return bigint_comba_sqr4(z, x); 1011| | } 1012| | if constexpr(std::same_as && N == 6) { 1013| | return bigint_comba_sqr6(z, x); 1014| | } 1015| 2.23k| if constexpr(std::same_as && N == 7) { 1016| 2.23k| return bigint_comba_sqr7(z, x); 1017| 2.23k| } 1018| | if constexpr(std::same_as && N == 8) { 1019| | return bigint_comba_sqr8(z, x); 1020| | } 1021| | if constexpr(std::same_as && N == 9) { 1022| | return bigint_comba_sqr9(z, x); 1023| | } 1024| | if constexpr(std::same_as && N == 16) { 1025| | return bigint_comba_sqr16(z, x); 1026| | } 1027| 2.23k| } 1028| | 1029| 0| word3 accum; 1030| | 1031| 2.23k| for(size_t i = 0; i != 2 * N; ++i) { ------------------ | Branch (1031:22): [True: 0, False: 2.23k] ------------------ 1032| 0| const size_t start = i + 1 < N ? 0 : i + 1 - N; ------------------ | Branch (1032:28): [True: 0, False: 0] ------------------ 1033| 0| const size_t end = std::min(N, i + 1); 1034| | 1035| 0| for(size_t j = start; j != end; ++j) { ------------------ | Branch (1035:29): [True: 0, False: 0] ------------------ 1036| 0| accum.mul(x[j], x[i - j]); 1037| 0| } 1038| 0| z[i] = accum.extract(); 1039| 0| } 1040| 2.23k|} _ZN5Botan22bigint_monty_maybe_subILm32ETkNS_8WordTypeEmEEvPT0_S1_PKS1_S4_: 257| 11.1k|inline constexpr void bigint_monty_maybe_sub(W z[N], W x0, const W x[N], const W y[N]) { 258| 11.1k| W borrow = 0; 259| | 260| 369k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (260:22): [True: 357k, False: 11.1k] ------------------ 261| 357k| z[i] = word_sub(x[i], y[i], &borrow); 262| 357k| } 263| | 264| 11.1k| borrow = (x0 - borrow) > x0; 265| | 266| 11.1k| CT::conditional_assign_mem(borrow, z, x, N); 267| 11.1k|} _ZN5Botan14use_mulx_montyEm: 33| 10.2M|inline bool use_mulx_monty(size_t p_size) { 34| 10.2M| return p_size >= MulxMontyMinWords && CPUID::has(CPUID::Feature::BMI, CPUID::Feature::ADX); ------------------ | Branch (34:11): [True: 10.2M, False: 18.4E] | Branch (34:42): [True: 10.2M, False: 97] ------------------ 35| 10.2M|} _ZN5Botan14OCB_EncryptionC2ENSt3__110unique_ptrINS_11BlockCipherENS1_14default_deleteIS3_EEEEm: 101| 48| OCB_Mode(std::move(cipher), tag_size) {} _ZN5Botan14OCB_DecryptionC2ENSt3__110unique_ptrINS_11BlockCipherENS1_14default_deleteIS3_EEEEm: 120| 46| OCB_Mode(std::move(cipher), tag_size) {} _ZNK5Botan8OCB_Mode8tag_sizeEv: 46| 584| size_t tag_size() const final { return m_tag_size; } _ZNK5Botan8OCB_Mode10block_sizeEv: 63| 641| size_t block_size() const { return m_block_size; } _ZNK5Botan8OCB_Mode10par_blocksEv: 65| 255| size_t par_blocks() const { return m_par_blocks; } _ZNK5Botan14OCB_Decryption18minimum_final_sizeEv: 124| 44| size_t minimum_final_size() const override { return tag_size(); } _ZN5Botan6PCurve15PrimeOrderCurve6ScalarD2Ev: 73| 1.78k| ~Scalar() { _zeroize(); } _ZN5Botan6PCurve15PrimeOrderCurve11AffinePointD2Ev: 101| 1.80k| ~AffinePoint() = default; _ZN5Botan6PCurve15PrimeOrderCurve15ProjectivePointD2Ev: 135| 596| ~ProjectivePoint() = default; _ZN5Botan6PCurve15PrimeOrderCurve6ScalarC2EOS2_: 68| 1.19k| Scalar(Scalar&& other) = default; _ZN5Botan6PCurve15PrimeOrderCurve11AffinePointC2EOS2_: 98| 1.20k| AffinePoint(AffinePoint&& other) = default; _ZNK5Botan6PCurve15PrimeOrderCurve6Scalar6_curveEv: 77| 1.78k| const auto& _curve() const { return m_curve; } _ZNK5Botan6PCurve15PrimeOrderCurve6Scalar6_valueEv: 79| 1.78k| const auto& _value() const { return m_value; } _ZN5Botan6PCurve15PrimeOrderCurve6Scalar7_createENSt3__110shared_ptrIKS1_EENS3_5arrayImLm9EEE: 81| 596| static Scalar _create(CurvePtr curve, StorageUnit v) { return Scalar(std::move(curve), v); } _ZN5Botan6PCurve15PrimeOrderCurve6ScalarC2ENSt3__110shared_ptrIKS1_EENS3_5arrayImLm9EEE: 84| 596| Scalar(CurvePtr curve, StorageUnit v) : m_curve(std::move(curve)), m_value(v) {} _ZNK5Botan6PCurve15PrimeOrderCurve11AffinePoint6_curveEv: 105| 1.20k| const auto& _curve() const { return m_curve; } _ZNK5Botan6PCurve15PrimeOrderCurve11AffinePoint2_xEv: 107| 1.20k| const auto& _x() const { return m_x; } _ZNK5Botan6PCurve15PrimeOrderCurve11AffinePoint2_yEv: 109| 1.20k| const auto& _y() const { return m_y; } _ZN5Botan6PCurve15PrimeOrderCurve11AffinePoint7_createENSt3__110shared_ptrIKS1_EENS3_5arrayImLm9EEES8_: 111| 601| static AffinePoint _create(CurvePtr curve, StorageUnit x, StorageUnit y) { 112| 601| return AffinePoint(std::move(curve), x, y); 113| 601| } _ZN5Botan6PCurve15PrimeOrderCurve11AffinePointC2ENSt3__110shared_ptrIKS1_EENS3_5arrayImLm9EEES8_: 116| 601| AffinePoint(CurvePtr curve, StorageUnit x, StorageUnit y) : m_curve(std::move(curve)), m_x(x), m_y(y) {} _ZNK5Botan6PCurve15PrimeOrderCurve15ProjectivePoint6_curveEv: 137| 596| const auto& _curve() const { return m_curve; } _ZNK5Botan6PCurve15PrimeOrderCurve15ProjectivePoint2_xEv: 139| 596| const auto& _x() const { return m_x; } _ZNK5Botan6PCurve15PrimeOrderCurve15ProjectivePoint2_yEv: 141| 596| const auto& _y() const { return m_y; } _ZNK5Botan6PCurve15PrimeOrderCurve15ProjectivePoint2_zEv: 143| 596| const auto& _z() const { return m_z; } _ZN5Botan6PCurve15PrimeOrderCurve15ProjectivePoint7_createENSt3__110shared_ptrIKS1_EENS3_5arrayImLm9EEES8_S8_: 145| 596| static ProjectivePoint _create(CurvePtr curve, StorageUnit x, StorageUnit y, StorageUnit z) { 146| 596| return ProjectivePoint(std::move(curve), x, y, z); 147| 596| } _ZN5Botan6PCurve15PrimeOrderCurve15ProjectivePointC2ENSt3__110shared_ptrIKS1_EENS3_5arrayImLm9EEES8_S8_: 151| 596| m_curve(std::move(curve)), m_x(x), m_y(y), m_z(z) {} _ZN5Botan6PCurve15PrimeOrderCurveD2Ev: 164| 9| virtual ~PrimeOrderCurve() = default; pcurves_brainpool256r1.cpp:_ZN5Botan11dbl_genericINS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES3_E11FieldParamsEEEEES8_EESC_EET_RKSE_RKT0_: 419| 833|inline constexpr ProjectivePoint dbl_generic(const ProjectivePoint& pt, const FieldElement& A) { 420| | // Cost: 1M + 3S + 1A + 1*3 421| 833| const auto z2 = pt.z().square(); 422| 833| const auto m = pt.x().square().mul3() + A * z2.square(); 423| | 424| | // Remaining cost: 3M + 3S + 3A + 2*2 + 1*4 + 1*8 425| 833| const auto y2 = pt.y().square(); 426| 833| const auto s = pt.x().mul4() * y2; 427| 833| const auto nx = m.square() - s.mul2(); 428| 833| const auto ny = m * (s - nx) - y2.square().mul8(); 429| 833| const auto nz = pt.y().mul2() * pt.z(); 430| | 431| 833| return ProjectivePoint(nx, ny, nz); 432| 833|} pcurves_brainpool256r1.cpp:_ZN5Botan9point_addINS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES3_E11FieldParamsEEEEES8_EESC_EET_RKSE_SG_: 188| 735|inline constexpr ProjectivePoint point_add(const ProjectivePoint& a, const ProjectivePoint& b) { 189| 735| const auto a_is_identity = a.is_identity(); 190| 735| const auto b_is_identity = b.is_identity(); 191| | 192| 735| const auto Z1Z1 = a.z().square(); 193| 735| const auto Z2Z2 = b.z().square(); 194| 735| const auto U1 = a.x() * Z2Z2; 195| 735| const auto U2 = b.x() * Z1Z1; 196| 735| const auto S1 = a.y() * b.z() * Z2Z2; 197| 735| const auto S2 = b.y() * a.z() * Z1Z1; 198| 735| const auto H = U2 - U1; 199| 735| const auto r = S2 - S1; 200| | 201| | /* Risky conditional 202| | * 203| | * This implementation uses projective coordinates, which do not have an efficient complete 204| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 205| | * 206| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 207| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 208| | * in which case at the end we'll set z to a.z * b.z * H = 0, resulting in the correct 209| | * output (the identity element) 210| | */ 211| 735| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (211:7): [True: 0, False: 735] ------------------ 212| 0| return a.dbl(); 213| 0| } 214| | 215| 735| const auto HH = H.square(); 216| 735| const auto HHH = H * HH; 217| 735| const auto V = U1 * HH; 218| 735| const auto t2 = r.square(); 219| 735| const auto t3 = V + V; 220| 735| const auto t4 = t2 - HHH; 221| 735| auto X3 = t4 - t3; 222| 735| const auto t5 = V - X3; 223| 735| const auto t6 = S1 * HHH; 224| 735| const auto t7 = r * t5; 225| 735| auto Y3 = t7 - t6; 226| 735| const auto t8 = b.z() * H; 227| 735| auto Z3 = a.z() * t8; 228| | 229| | // if a is identity then return b 230| 735| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), b.y(), b.z()); 231| | 232| | // if b is identity then return a 233| 735| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 234| | 235| 735| return ProjectivePoint(X3, Y3, Z3); 236| 735|} pcurves_brainpool256r1.cpp:_ZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEE: 108| 1|auto to_affine_batch(std::span projective) { 109| 1| using AffinePoint = typename C::AffinePoint; 110| | 111| 1| const size_t N = projective.size(); 112| 1| std::vector affine; 113| 1| affine.reserve(N); 114| | 115| 1| CT::Choice any_identity = CT::Choice::no(); 116| | 117| 1.56k| for(const auto& pt : projective) { ------------------ | Branch (117:23): [True: 1.56k, False: 1] ------------------ 118| 1.56k| any_identity = any_identity || pt.is_identity(); 119| 1.56k| } 120| | 121| | // Conditional acceptable: N is public. State of points is not necessarily 122| | // public, but we don't leak which point was the identity. In practice with 123| | // the algorithms currently in use, the only time an identity can occur is 124| | // during mul2 where the two points g/h have a small relation (ie h = g*k for 125| | // some k < 16) 126| | 127| 1| if(N <= 2 || any_identity.as_bool()) { ------------------ | Branch (127:7): [True: 0, False: 1] | Branch (127:17): [True: 0, False: 1] ------------------ 128| | // If there are identity elements, using the batch inversion gets 129| | // tricky. It can be done, but this should be a rare situation so 130| | // just punt to the serial conversion if it occurs 131| 0| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (131:25): [True: 0, False: 0] ------------------ 132| 0| affine.push_back(to_affine(projective[i])); 133| 0| } 134| 1| } else { 135| 1| std::vector c; 136| 1| c.reserve(N); 137| | 138| | /* 139| | Batch projective->affine using Montgomery's trick 140| | 141| | See Algorithm 2.26 in "Guide to Elliptic Curve Cryptography" 142| | (Hankerson, Menezes, Vanstone) 143| | */ 144| | 145| 1| c.push_back(projective[0].z()); 146| 1.56k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (146:25): [True: 1.56k, False: 1] ------------------ 147| 1.56k| c.push_back(c[i - 1] * projective[i].z()); 148| 1.56k| } 149| | 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| 1| } else { 154| 1| return invert_field_element(c[N - 1]); 155| 1| } 156| 1| }(); 157| | 158| 1.56k| for(size_t i = N - 1; i > 0; --i) { ------------------ | Branch (158:29): [True: 1.56k, False: 1] ------------------ 159| 1.56k| const auto& p = projective[i]; 160| | 161| 1.56k| const auto z_inv = s_inv * c[i - 1]; 162| 1.56k| const auto z2_inv = z_inv.square(); 163| 1.56k| const auto z3_inv = z_inv * z2_inv; 164| | 165| 1.56k| s_inv = s_inv * p.z(); 166| | 167| 1.56k| affine.push_back(AffinePoint(p.x() * z2_inv, p.y() * z3_inv)); 168| 1.56k| } 169| | 170| 1| const auto z2_inv = s_inv.square(); 171| 1| const auto z3_inv = s_inv * z2_inv; 172| 1| affine.push_back(AffinePoint(projective[0].x() * z2_inv, projective[0].y() * z3_inv)); 173| 1| std::reverse(affine.begin(), affine.end()); 174| 1| return affine; 175| 1| } 176| | 177| 0| return affine; 178| 1|} pcurves_brainpool256r1.cpp:_ZN5Botan9to_affineINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveEEEDaRKNT_15ProjectivePointE: 77| 90|inline constexpr auto to_affine(const typename C::ProjectivePoint& pt) { 78| | // Not strictly required right? - default should work as long 79| | // as (0,0) is identity and invert returns 0 on 0 80| | 81| | if constexpr(curve_supports_fe_invert2) { 82| | const auto z2_inv = C::fe_invert2(pt.z()); 83| | const auto z3_inv = z2_inv.square() * pt.z(); 84| | return typename C::AffinePoint(pt.x() * z2_inv, pt.y() * z3_inv); 85| 90| } else { 86| 90| const auto z_inv = invert_field_element(pt.z()); 87| 90| const auto z2_inv = z_inv.square(); 88| 90| const auto z3_inv = z_inv * z2_inv; 89| 90| return typename C::AffinePoint(pt.x() * z2_inv, pt.y() * z3_inv); 90| 90| } 91| 90|} pcurves_brainpool256r1.cpp:_ZN5Botan20invert_field_elementINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveEEEDaRKNT_12FieldElementE: 36| 90|inline constexpr auto invert_field_element(const typename C::FieldElement& fe) { 37| | if constexpr(curve_supports_fe_invert2) { 38| | return C::fe_invert2(fe) * fe; 39| 90| } else { 40| 90| return fe.invert(); 41| 90| } 42| 90|} pcurves_brainpool256r1.cpp:_ZZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEEENKUlvE_clEv: 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| | } else { 154| | return invert_field_element(c[N - 1]); 155| | } 156| 1| }(); pcurves_brainpool256r1.cpp:_ZN5Botan22point_add_or_sub_mixedINS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES3_E11FieldParamsEEEEES8_EENS_16AffineCurvePointISC_EESC_EET_RKSG_RKT0_NS_2CT6ChoiceERKT1_SQ_: 318| 4.32k| const FieldElement& curve_a) { 319| 4.32k| const auto a_is_identity = a.is_identity(); 320| 4.32k| const auto b_is_identity = b.is_identity(); 321| | 322| | /* 323| | https://hyperelliptic.org/EFD/g1p/auto-shortw-jacobian-3.html#addition-add-1998-cmo-2 324| | 325| | Cost: 8M + 3S + 6add + 1*2 326| | */ 327| | 328| 4.32k| auto by = b.y(); 329| 4.32k| by.conditional_assign(sub, by.negate()); 330| | 331| 4.32k| const auto Z1Z1 = a.z().square(); 332| 4.32k| const auto U2 = b.x() * Z1Z1; 333| 4.32k| const auto S2 = by * a.z() * Z1Z1; 334| 4.32k| const auto H = U2 - a.x(); 335| 4.32k| const auto r = S2 - a.y(); 336| | 337| | /* Risky conditional 338| | * 339| | * This implementation uses projective coordinates, which do not have an efficient complete 340| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 341| | * 342| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 343| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 344| | * in which case at the end we'll set z to a.z * H = 0, resulting in the correct output 345| | * (the identity element) 346| | */ 347| 4.32k| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (347:7): [True: 0, False: 4.32k] ------------------ 348| 0| return a.dbl_iso(curve_a); 349| 0| } 350| | 351| 4.32k| const auto HH = H.square(); 352| 4.32k| const auto HHH = H * HH; 353| 4.32k| const auto V = a.x() * HH; 354| 4.32k| const auto t2 = r.square(); 355| 4.32k| const auto t3 = V + V; 356| 4.32k| const auto t4 = t2 - HHH; 357| 4.32k| auto X3 = t4 - t3; 358| 4.32k| const auto t5 = V - X3; 359| 4.32k| const auto t6 = a.y() * HHH; 360| 4.32k| const auto t7 = r * t5; 361| 4.32k| auto Y3 = t7 - t6; 362| 4.32k| auto Z3 = a.z() * H; 363| | 364| | // if a is identity then return b 365| 4.32k| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), by, one); 366| | 367| | // if b is identity then return a 368| 4.32k| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 369| | 370| 4.32k| return ProjectivePoint(X3, Y3, Z3); 371| 4.32k|} pcurves_brainpool384r1.cpp:_ZN5Botan11dbl_genericINS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES3_E11FieldParamsEEEEES8_EESC_EET_RKSE_RKT0_: 419| 1.24k|inline constexpr ProjectivePoint dbl_generic(const ProjectivePoint& pt, const FieldElement& A) { 420| | // Cost: 1M + 3S + 1A + 1*3 421| 1.24k| const auto z2 = pt.z().square(); 422| 1.24k| const auto m = pt.x().square().mul3() + A * z2.square(); 423| | 424| | // Remaining cost: 3M + 3S + 3A + 2*2 + 1*4 + 1*8 425| 1.24k| const auto y2 = pt.y().square(); 426| 1.24k| const auto s = pt.x().mul4() * y2; 427| 1.24k| const auto nx = m.square() - s.mul2(); 428| 1.24k| const auto ny = m * (s - nx) - y2.square().mul8(); 429| 1.24k| const auto nz = pt.y().mul2() * pt.z(); 430| | 431| 1.24k| return ProjectivePoint(nx, ny, nz); 432| 1.24k|} pcurves_brainpool384r1.cpp:_ZN5Botan9point_addINS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES3_E11FieldParamsEEEEES8_EESC_EET_RKSE_SG_: 188| 1.09k|inline constexpr ProjectivePoint point_add(const ProjectivePoint& a, const ProjectivePoint& b) { 189| 1.09k| const auto a_is_identity = a.is_identity(); 190| 1.09k| const auto b_is_identity = b.is_identity(); 191| | 192| 1.09k| const auto Z1Z1 = a.z().square(); 193| 1.09k| const auto Z2Z2 = b.z().square(); 194| 1.09k| const auto U1 = a.x() * Z2Z2; 195| 1.09k| const auto U2 = b.x() * Z1Z1; 196| 1.09k| const auto S1 = a.y() * b.z() * Z2Z2; 197| 1.09k| const auto S2 = b.y() * a.z() * Z1Z1; 198| 1.09k| const auto H = U2 - U1; 199| 1.09k| const auto r = S2 - S1; 200| | 201| | /* Risky conditional 202| | * 203| | * This implementation uses projective coordinates, which do not have an efficient complete 204| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 205| | * 206| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 207| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 208| | * in which case at the end we'll set z to a.z * b.z * H = 0, resulting in the correct 209| | * output (the identity element) 210| | */ 211| 1.09k| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (211:7): [True: 0, False: 1.09k] ------------------ 212| 0| return a.dbl(); 213| 0| } 214| | 215| 1.09k| const auto HH = H.square(); 216| 1.09k| const auto HHH = H * HH; 217| 1.09k| const auto V = U1 * HH; 218| 1.09k| const auto t2 = r.square(); 219| 1.09k| const auto t3 = V + V; 220| 1.09k| const auto t4 = t2 - HHH; 221| 1.09k| auto X3 = t4 - t3; 222| 1.09k| const auto t5 = V - X3; 223| 1.09k| const auto t6 = S1 * HHH; 224| 1.09k| const auto t7 = r * t5; 225| 1.09k| auto Y3 = t7 - t6; 226| 1.09k| const auto t8 = b.z() * H; 227| 1.09k| auto Z3 = a.z() * t8; 228| | 229| | // if a is identity then return b 230| 1.09k| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), b.y(), b.z()); 231| | 232| | // if b is identity then return a 233| 1.09k| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 234| | 235| 1.09k| return ProjectivePoint(X3, Y3, Z3); 236| 1.09k|} pcurves_brainpool384r1.cpp:_ZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEE: 108| 1|auto to_affine_batch(std::span projective) { 109| 1| using AffinePoint = typename C::AffinePoint; 110| | 111| 1| const size_t N = projective.size(); 112| 1| std::vector affine; 113| 1| affine.reserve(N); 114| | 115| 1| CT::Choice any_identity = CT::Choice::no(); 116| | 117| 2.33k| for(const auto& pt : projective) { ------------------ | Branch (117:23): [True: 2.33k, False: 1] ------------------ 118| 2.33k| any_identity = any_identity || pt.is_identity(); 119| 2.33k| } 120| | 121| | // Conditional acceptable: N is public. State of points is not necessarily 122| | // public, but we don't leak which point was the identity. In practice with 123| | // the algorithms currently in use, the only time an identity can occur is 124| | // during mul2 where the two points g/h have a small relation (ie h = g*k for 125| | // some k < 16) 126| | 127| 1| if(N <= 2 || any_identity.as_bool()) { ------------------ | Branch (127:7): [True: 0, False: 1] | Branch (127:17): [True: 0, False: 1] ------------------ 128| | // If there are identity elements, using the batch inversion gets 129| | // tricky. It can be done, but this should be a rare situation so 130| | // just punt to the serial conversion if it occurs 131| 0| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (131:25): [True: 0, False: 0] ------------------ 132| 0| affine.push_back(to_affine(projective[i])); 133| 0| } 134| 1| } else { 135| 1| std::vector c; 136| 1| c.reserve(N); 137| | 138| | /* 139| | Batch projective->affine using Montgomery's trick 140| | 141| | See Algorithm 2.26 in "Guide to Elliptic Curve Cryptography" 142| | (Hankerson, Menezes, Vanstone) 143| | */ 144| | 145| 1| c.push_back(projective[0].z()); 146| 2.33k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (146:25): [True: 2.33k, False: 1] ------------------ 147| 2.33k| c.push_back(c[i - 1] * projective[i].z()); 148| 2.33k| } 149| | 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| 1| } else { 154| 1| return invert_field_element(c[N - 1]); 155| 1| } 156| 1| }(); 157| | 158| 2.33k| for(size_t i = N - 1; i > 0; --i) { ------------------ | Branch (158:29): [True: 2.33k, False: 1] ------------------ 159| 2.33k| const auto& p = projective[i]; 160| | 161| 2.33k| const auto z_inv = s_inv * c[i - 1]; 162| 2.33k| const auto z2_inv = z_inv.square(); 163| 2.33k| const auto z3_inv = z_inv * z2_inv; 164| | 165| 2.33k| s_inv = s_inv * p.z(); 166| | 167| 2.33k| affine.push_back(AffinePoint(p.x() * z2_inv, p.y() * z3_inv)); 168| 2.33k| } 169| | 170| 1| const auto z2_inv = s_inv.square(); 171| 1| const auto z3_inv = s_inv * z2_inv; 172| 1| affine.push_back(AffinePoint(projective[0].x() * z2_inv, projective[0].y() * z3_inv)); 173| 1| std::reverse(affine.begin(), affine.end()); 174| 1| return affine; 175| 1| } 176| | 177| 0| return affine; 178| 1|} pcurves_brainpool384r1.cpp:_ZN5Botan9to_affineINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveEEEDaRKNT_15ProjectivePointE: 77| 126|inline constexpr auto to_affine(const typename C::ProjectivePoint& pt) { 78| | // Not strictly required right? - default should work as long 79| | // as (0,0) is identity and invert returns 0 on 0 80| | 81| | if constexpr(curve_supports_fe_invert2) { 82| | const auto z2_inv = C::fe_invert2(pt.z()); 83| | const auto z3_inv = z2_inv.square() * pt.z(); 84| | return typename C::AffinePoint(pt.x() * z2_inv, pt.y() * z3_inv); 85| 126| } else { 86| 126| const auto z_inv = invert_field_element(pt.z()); 87| 126| const auto z2_inv = z_inv.square(); 88| 126| const auto z3_inv = z_inv * z2_inv; 89| 126| return typename C::AffinePoint(pt.x() * z2_inv, pt.y() * z3_inv); 90| 126| } 91| 126|} pcurves_brainpool384r1.cpp:_ZN5Botan20invert_field_elementINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveEEEDaRKNT_12FieldElementE: 36| 126|inline constexpr auto invert_field_element(const typename C::FieldElement& fe) { 37| | if constexpr(curve_supports_fe_invert2) { 38| | return C::fe_invert2(fe) * fe; 39| 126| } else { 40| 126| return fe.invert(); 41| 126| } 42| 126|} pcurves_brainpool384r1.cpp:_ZZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEEENKUlvE_clEv: 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| | } else { 154| | return invert_field_element(c[N - 1]); 155| | } 156| 1| }(); pcurves_brainpool384r1.cpp:_ZN5Botan22point_add_or_sub_mixedINS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES3_E11FieldParamsEEEEES8_EENS_16AffineCurvePointISC_EESC_EET_RKSG_RKT0_NS_2CT6ChoiceERKT1_SQ_: 318| 9.07k| const FieldElement& curve_a) { 319| 9.07k| const auto a_is_identity = a.is_identity(); 320| 9.07k| const auto b_is_identity = b.is_identity(); 321| | 322| | /* 323| | https://hyperelliptic.org/EFD/g1p/auto-shortw-jacobian-3.html#addition-add-1998-cmo-2 324| | 325| | Cost: 8M + 3S + 6add + 1*2 326| | */ 327| | 328| 9.07k| auto by = b.y(); 329| 9.07k| by.conditional_assign(sub, by.negate()); 330| | 331| 9.07k| const auto Z1Z1 = a.z().square(); 332| 9.07k| const auto U2 = b.x() * Z1Z1; 333| 9.07k| const auto S2 = by * a.z() * Z1Z1; 334| 9.07k| const auto H = U2 - a.x(); 335| 9.07k| const auto r = S2 - a.y(); 336| | 337| | /* Risky conditional 338| | * 339| | * This implementation uses projective coordinates, which do not have an efficient complete 340| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 341| | * 342| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 343| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 344| | * in which case at the end we'll set z to a.z * H = 0, resulting in the correct output 345| | * (the identity element) 346| | */ 347| 9.07k| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (347:7): [True: 0, False: 9.07k] ------------------ 348| 0| return a.dbl_iso(curve_a); 349| 0| } 350| | 351| 9.07k| const auto HH = H.square(); 352| 9.07k| const auto HHH = H * HH; 353| 9.07k| const auto V = a.x() * HH; 354| 9.07k| const auto t2 = r.square(); 355| 9.07k| const auto t3 = V + V; 356| 9.07k| const auto t4 = t2 - HHH; 357| 9.07k| auto X3 = t4 - t3; 358| 9.07k| const auto t5 = V - X3; 359| 9.07k| const auto t6 = a.y() * HHH; 360| 9.07k| const auto t7 = r * t5; 361| 9.07k| auto Y3 = t7 - t6; 362| 9.07k| auto Z3 = a.z() * H; 363| | 364| | // if a is identity then return b 365| 9.07k| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), by, one); 366| | 367| | // if b is identity then return a 368| 9.07k| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 369| | 370| 9.07k| return ProjectivePoint(X3, Y3, Z3); 371| 9.07k|} pcurves_brainpool512r1.cpp:_ZN5Botan11dbl_genericINS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES3_E11FieldParamsEEEEES8_EESC_EET_RKSE_RKT0_: 419| 1.64k|inline constexpr ProjectivePoint dbl_generic(const ProjectivePoint& pt, const FieldElement& A) { 420| | // Cost: 1M + 3S + 1A + 1*3 421| 1.64k| const auto z2 = pt.z().square(); 422| 1.64k| const auto m = pt.x().square().mul3() + A * z2.square(); 423| | 424| | // Remaining cost: 3M + 3S + 3A + 2*2 + 1*4 + 1*8 425| 1.64k| const auto y2 = pt.y().square(); 426| 1.64k| const auto s = pt.x().mul4() * y2; 427| 1.64k| const auto nx = m.square() - s.mul2(); 428| 1.64k| const auto ny = m * (s - nx) - y2.square().mul8(); 429| 1.64k| const auto nz = pt.y().mul2() * pt.z(); 430| | 431| 1.64k| return ProjectivePoint(nx, ny, nz); 432| 1.64k|} pcurves_brainpool512r1.cpp:_ZN5Botan9point_addINS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES3_E11FieldParamsEEEEES8_EESC_EET_RKSE_SG_: 188| 1.45k|inline constexpr ProjectivePoint point_add(const ProjectivePoint& a, const ProjectivePoint& b) { 189| 1.45k| const auto a_is_identity = a.is_identity(); 190| 1.45k| const auto b_is_identity = b.is_identity(); 191| | 192| 1.45k| const auto Z1Z1 = a.z().square(); 193| 1.45k| const auto Z2Z2 = b.z().square(); 194| 1.45k| const auto U1 = a.x() * Z2Z2; 195| 1.45k| const auto U2 = b.x() * Z1Z1; 196| 1.45k| const auto S1 = a.y() * b.z() * Z2Z2; 197| 1.45k| const auto S2 = b.y() * a.z() * Z1Z1; 198| 1.45k| const auto H = U2 - U1; 199| 1.45k| const auto r = S2 - S1; 200| | 201| | /* Risky conditional 202| | * 203| | * This implementation uses projective coordinates, which do not have an efficient complete 204| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 205| | * 206| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 207| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 208| | * in which case at the end we'll set z to a.z * b.z * H = 0, resulting in the correct 209| | * output (the identity element) 210| | */ 211| 1.45k| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (211:7): [True: 0, False: 1.45k] ------------------ 212| 0| return a.dbl(); 213| 0| } 214| | 215| 1.45k| const auto HH = H.square(); 216| 1.45k| const auto HHH = H * HH; 217| 1.45k| const auto V = U1 * HH; 218| 1.45k| const auto t2 = r.square(); 219| 1.45k| const auto t3 = V + V; 220| 1.45k| const auto t4 = t2 - HHH; 221| 1.45k| auto X3 = t4 - t3; 222| 1.45k| const auto t5 = V - X3; 223| 1.45k| const auto t6 = S1 * HHH; 224| 1.45k| const auto t7 = r * t5; 225| 1.45k| auto Y3 = t7 - t6; 226| 1.45k| const auto t8 = b.z() * H; 227| 1.45k| auto Z3 = a.z() * t8; 228| | 229| | // if a is identity then return b 230| 1.45k| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), b.y(), b.z()); 231| | 232| | // if b is identity then return a 233| 1.45k| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 234| | 235| 1.45k| return ProjectivePoint(X3, Y3, Z3); 236| 1.45k|} pcurves_brainpool512r1.cpp:_ZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEE: 108| 1|auto to_affine_batch(std::span projective) { 109| 1| using AffinePoint = typename C::AffinePoint; 110| | 111| 1| const size_t N = projective.size(); 112| 1| std::vector affine; 113| 1| affine.reserve(N); 114| | 115| 1| CT::Choice any_identity = CT::Choice::no(); 116| | 117| 3.10k| for(const auto& pt : projective) { ------------------ | Branch (117:23): [True: 3.10k, False: 1] ------------------ 118| 3.10k| any_identity = any_identity || pt.is_identity(); 119| 3.10k| } 120| | 121| | // Conditional acceptable: N is public. State of points is not necessarily 122| | // public, but we don't leak which point was the identity. In practice with 123| | // the algorithms currently in use, the only time an identity can occur is 124| | // during mul2 where the two points g/h have a small relation (ie h = g*k for 125| | // some k < 16) 126| | 127| 1| if(N <= 2 || any_identity.as_bool()) { ------------------ | Branch (127:7): [True: 0, False: 1] | Branch (127:17): [True: 0, False: 1] ------------------ 128| | // If there are identity elements, using the batch inversion gets 129| | // tricky. It can be done, but this should be a rare situation so 130| | // just punt to the serial conversion if it occurs 131| 0| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (131:25): [True: 0, False: 0] ------------------ 132| 0| affine.push_back(to_affine(projective[i])); 133| 0| } 134| 1| } else { 135| 1| std::vector c; 136| 1| c.reserve(N); 137| | 138| | /* 139| | Batch projective->affine using Montgomery's trick 140| | 141| | See Algorithm 2.26 in "Guide to Elliptic Curve Cryptography" 142| | (Hankerson, Menezes, Vanstone) 143| | */ 144| | 145| 1| c.push_back(projective[0].z()); 146| 3.10k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (146:25): [True: 3.10k, False: 1] ------------------ 147| 3.10k| c.push_back(c[i - 1] * projective[i].z()); 148| 3.10k| } 149| | 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| 1| } else { 154| 1| return invert_field_element(c[N - 1]); 155| 1| } 156| 1| }(); 157| | 158| 3.10k| for(size_t i = N - 1; i > 0; --i) { ------------------ | Branch (158:29): [True: 3.10k, False: 1] ------------------ 159| 3.10k| const auto& p = projective[i]; 160| | 161| 3.10k| const auto z_inv = s_inv * c[i - 1]; 162| 3.10k| const auto z2_inv = z_inv.square(); 163| 3.10k| const auto z3_inv = z_inv * z2_inv; 164| | 165| 3.10k| s_inv = s_inv * p.z(); 166| | 167| 3.10k| affine.push_back(AffinePoint(p.x() * z2_inv, p.y() * z3_inv)); 168| 3.10k| } 169| | 170| 1| const auto z2_inv = s_inv.square(); 171| 1| const auto z3_inv = s_inv * z2_inv; 172| 1| affine.push_back(AffinePoint(projective[0].x() * z2_inv, projective[0].y() * z3_inv)); 173| 1| std::reverse(affine.begin(), affine.end()); 174| 1| return affine; 175| 1| } 176| | 177| 0| return affine; 178| 1|} pcurves_brainpool512r1.cpp:_ZN5Botan9to_affineINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveEEEDaRKNT_15ProjectivePointE: 77| 89|inline constexpr auto to_affine(const typename C::ProjectivePoint& pt) { 78| | // Not strictly required right? - default should work as long 79| | // as (0,0) is identity and invert returns 0 on 0 80| | 81| | if constexpr(curve_supports_fe_invert2) { 82| | const auto z2_inv = C::fe_invert2(pt.z()); 83| | const auto z3_inv = z2_inv.square() * pt.z(); 84| | return typename C::AffinePoint(pt.x() * z2_inv, pt.y() * z3_inv); 85| 89| } else { 86| 89| const auto z_inv = invert_field_element(pt.z()); 87| 89| const auto z2_inv = z_inv.square(); 88| 89| const auto z3_inv = z_inv * z2_inv; 89| 89| return typename C::AffinePoint(pt.x() * z2_inv, pt.y() * z3_inv); 90| 89| } 91| 89|} pcurves_brainpool512r1.cpp:_ZN5Botan20invert_field_elementINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveEEEDaRKNT_12FieldElementE: 36| 89|inline constexpr auto invert_field_element(const typename C::FieldElement& fe) { 37| | if constexpr(curve_supports_fe_invert2) { 38| | return C::fe_invert2(fe) * fe; 39| 89| } else { 40| 89| return fe.invert(); 41| 89| } 42| 89|} pcurves_brainpool512r1.cpp:_ZZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEEENKUlvE_clEv: 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| | } else { 154| | return invert_field_element(c[N - 1]); 155| | } 156| 1| }(); pcurves_brainpool512r1.cpp:_ZN5Botan22point_add_or_sub_mixedINS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES3_E11FieldParamsEEEEES8_EENS_16AffineCurvePointISC_EESC_EET_RKSG_RKT0_NS_2CT6ChoiceERKT1_SQ_: 318| 8.54k| const FieldElement& curve_a) { 319| 8.54k| const auto a_is_identity = a.is_identity(); 320| 8.54k| const auto b_is_identity = b.is_identity(); 321| | 322| | /* 323| | https://hyperelliptic.org/EFD/g1p/auto-shortw-jacobian-3.html#addition-add-1998-cmo-2 324| | 325| | Cost: 8M + 3S + 6add + 1*2 326| | */ 327| | 328| 8.54k| auto by = b.y(); 329| 8.54k| by.conditional_assign(sub, by.negate()); 330| | 331| 8.54k| const auto Z1Z1 = a.z().square(); 332| 8.54k| const auto U2 = b.x() * Z1Z1; 333| 8.54k| const auto S2 = by * a.z() * Z1Z1; 334| 8.54k| const auto H = U2 - a.x(); 335| 8.54k| const auto r = S2 - a.y(); 336| | 337| | /* Risky conditional 338| | * 339| | * This implementation uses projective coordinates, which do not have an efficient complete 340| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 341| | * 342| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 343| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 344| | * in which case at the end we'll set z to a.z * H = 0, resulting in the correct output 345| | * (the identity element) 346| | */ 347| 8.54k| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (347:7): [True: 0, False: 8.54k] ------------------ 348| 0| return a.dbl_iso(curve_a); 349| 0| } 350| | 351| 8.54k| const auto HH = H.square(); 352| 8.54k| const auto HHH = H * HH; 353| 8.54k| const auto V = a.x() * HH; 354| 8.54k| const auto t2 = r.square(); 355| 8.54k| const auto t3 = V + V; 356| 8.54k| const auto t4 = t2 - HHH; 357| 8.54k| auto X3 = t4 - t3; 358| 8.54k| const auto t5 = V - X3; 359| 8.54k| const auto t6 = a.y() * HHH; 360| 8.54k| const auto t7 = r * t5; 361| 8.54k| auto Y3 = t7 - t6; 362| 8.54k| auto Z3 = a.z() * H; 363| | 364| | // if a is identity then return b 365| 8.54k| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), by, one); 366| | 367| | // if b is identity then return a 368| 8.54k| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 369| | 370| 8.54k| return ProjectivePoint(X3, Y3, Z3); 371| 8.54k|} _ZN5Botan10dbl_a_zeroINS_6PCurve22GenericProjectivePointEEET_RKS3_: 403| 629|inline constexpr ProjectivePoint dbl_a_zero(const ProjectivePoint& pt) { 404| | // If a == 0 then 3*x^2 + a*z^4 == 3*x^2 405| | // Cost: 1S + 1*3 406| 629| const auto m = pt.x().square().mul3(); 407| | 408| | // Remaining cost: 3M + 3S + 3A + 2*2 + 1*4 + 1*8 409| 629| const auto y2 = pt.y().square(); 410| 629| const auto s = pt.x().mul4() * y2; 411| 629| const auto nx = m.square() - s.mul2(); 412| 629| const auto ny = m * (s - nx) - y2.square().mul8(); 413| 629| const auto nz = pt.y().mul2() * pt.z(); 414| | 415| 629| return ProjectivePoint(nx, ny, nz); 416| 629|} pcurves_generic.cpp:_ZN5Botan9point_addINS_6PCurve22GenericProjectivePointENS1_12_GLOBAL__N_112GenericFieldEEET_RKS5_S7_: 188| 555|inline constexpr ProjectivePoint point_add(const ProjectivePoint& a, const ProjectivePoint& b) { 189| 555| const auto a_is_identity = a.is_identity(); 190| 555| const auto b_is_identity = b.is_identity(); 191| | 192| 555| const auto Z1Z1 = a.z().square(); 193| 555| const auto Z2Z2 = b.z().square(); 194| 555| const auto U1 = a.x() * Z2Z2; 195| 555| const auto U2 = b.x() * Z1Z1; 196| 555| const auto S1 = a.y() * b.z() * Z2Z2; 197| 555| const auto S2 = b.y() * a.z() * Z1Z1; 198| 555| const auto H = U2 - U1; 199| 555| const auto r = S2 - S1; 200| | 201| | /* Risky conditional 202| | * 203| | * This implementation uses projective coordinates, which do not have an efficient complete 204| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 205| | * 206| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 207| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 208| | * in which case at the end we'll set z to a.z * b.z * H = 0, resulting in the correct 209| | * output (the identity element) 210| | */ 211| 555| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (211:7): [True: 0, False: 555] ------------------ 212| 0| return a.dbl(); 213| 0| } 214| | 215| 555| const auto HH = H.square(); 216| 555| const auto HHH = H * HH; 217| 555| const auto V = U1 * HH; 218| 555| const auto t2 = r.square(); 219| 555| const auto t3 = V + V; 220| 555| const auto t4 = t2 - HHH; 221| 555| auto X3 = t4 - t3; 222| 555| const auto t5 = V - X3; 223| 555| const auto t6 = S1 * HHH; 224| 555| const auto t7 = r * t5; 225| 555| auto Y3 = t7 - t6; 226| 555| const auto t8 = b.z() * H; 227| 555| auto Z3 = a.z() * t8; 228| | 229| | // if a is identity then return b 230| 555| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), b.y(), b.z()); 231| | 232| | // if b is identity then return a 233| 555| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 234| | 235| 555| return ProjectivePoint(X3, Y3, Z3); 236| 555|} pcurves_generic.cpp:_ZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_112GenericCurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEE: 108| 1|auto to_affine_batch(std::span projective) { 109| 1| using AffinePoint = typename C::AffinePoint; 110| | 111| 1| const size_t N = projective.size(); 112| 1| std::vector affine; 113| 1| affine.reserve(N); 114| | 115| 1| CT::Choice any_identity = CT::Choice::no(); 116| | 117| 1.18k| for(const auto& pt : projective) { ------------------ | Branch (117:23): [True: 1.18k, False: 1] ------------------ 118| 1.18k| any_identity = any_identity || pt.is_identity(); 119| 1.18k| } 120| | 121| | // Conditional acceptable: N is public. State of points is not necessarily 122| | // public, but we don't leak which point was the identity. In practice with 123| | // the algorithms currently in use, the only time an identity can occur is 124| | // during mul2 where the two points g/h have a small relation (ie h = g*k for 125| | // some k < 16) 126| | 127| 1| if(N <= 2 || any_identity.as_bool()) { ------------------ | Branch (127:7): [True: 0, False: 1] | Branch (127:17): [True: 0, False: 1] ------------------ 128| | // If there are identity elements, using the batch inversion gets 129| | // tricky. It can be done, but this should be a rare situation so 130| | // just punt to the serial conversion if it occurs 131| 0| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (131:25): [True: 0, False: 0] ------------------ 132| 0| affine.push_back(to_affine(projective[i])); 133| 0| } 134| 1| } else { 135| 1| std::vector c; 136| 1| c.reserve(N); 137| | 138| | /* 139| | Batch projective->affine using Montgomery's trick 140| | 141| | See Algorithm 2.26 in "Guide to Elliptic Curve Cryptography" 142| | (Hankerson, Menezes, Vanstone) 143| | */ 144| | 145| 1| c.push_back(projective[0].z()); 146| 1.18k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (146:25): [True: 1.18k, False: 1] ------------------ 147| 1.18k| c.push_back(c[i - 1] * projective[i].z()); 148| 1.18k| } 149| | 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| 1| } else { 154| 1| return invert_field_element(c[N - 1]); 155| 1| } 156| 1| }(); 157| | 158| 1.18k| for(size_t i = N - 1; i > 0; --i) { ------------------ | Branch (158:29): [True: 1.18k, False: 1] ------------------ 159| 1.18k| const auto& p = projective[i]; 160| | 161| 1.18k| const auto z_inv = s_inv * c[i - 1]; 162| 1.18k| const auto z2_inv = z_inv.square(); 163| 1.18k| const auto z3_inv = z_inv * z2_inv; 164| | 165| 1.18k| s_inv = s_inv * p.z(); 166| | 167| 1.18k| affine.push_back(AffinePoint(p.x() * z2_inv, p.y() * z3_inv)); 168| 1.18k| } 169| | 170| 1| const auto z2_inv = s_inv.square(); 171| 1| const auto z3_inv = s_inv * z2_inv; 172| 1| affine.push_back(AffinePoint(projective[0].x() * z2_inv, projective[0].y() * z3_inv)); 173| 1| std::reverse(affine.begin(), affine.end()); 174| 1| return affine; 175| 1| } 176| | 177| 0| return affine; 178| 1|} pcurves_generic.cpp:_ZZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_112GenericCurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEEENKUlvE_clEv: 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| | } else { 154| | return invert_field_element(c[N - 1]); 155| | } 156| 1| }(); pcurves_secp224r1.cpp:_ZN5Botan13dbl_a_minus_3INS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS5_6ParamsES6_E11FieldParamsEEEEES8_EEEET_RKSE_: 384| 731|inline constexpr ProjectivePoint dbl_a_minus_3(const ProjectivePoint& pt) { 385| | /* 386| | if a == -3 then 387| | 3*x^2 + a*z^4 == 3*x^2 - 3*z^4 == 3*(x^2-z^4) == 3*(x-z^2)*(x+z^2) 388| | */ 389| 731| const auto z2 = pt.z().square(); 390| 731| const auto m = (pt.x() - z2).mul3() * (pt.x() + z2); 391| | 392| | // Remaining cost: 3M + 3S + 3A + 2*2 + 1*4 + 1*8 393| 731| const auto y2 = pt.y().square(); 394| 731| const auto s = pt.x().mul4() * y2; 395| 731| const auto nx = m.square() - s.mul2(); 396| 731| const auto ny = m * (s - nx) - y2.square().mul8(); 397| 731| const auto nz = pt.y().mul2() * pt.z(); 398| | 399| 731| return ProjectivePoint(nx, ny, nz); 400| 731|} pcurves_secp224r1.cpp:_ZN5Botan9point_addINS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS5_6ParamsES6_E11FieldParamsEEEEES8_EESC_EET_RKSE_SG_: 188| 645|inline constexpr ProjectivePoint point_add(const ProjectivePoint& a, const ProjectivePoint& b) { 189| 645| const auto a_is_identity = a.is_identity(); 190| 645| const auto b_is_identity = b.is_identity(); 191| | 192| 645| const auto Z1Z1 = a.z().square(); 193| 645| const auto Z2Z2 = b.z().square(); 194| 645| const auto U1 = a.x() * Z2Z2; 195| 645| const auto U2 = b.x() * Z1Z1; 196| 645| const auto S1 = a.y() * b.z() * Z2Z2; 197| 645| const auto S2 = b.y() * a.z() * Z1Z1; 198| 645| const auto H = U2 - U1; 199| 645| const auto r = S2 - S1; 200| | 201| | /* Risky conditional 202| | * 203| | * This implementation uses projective coordinates, which do not have an efficient complete 204| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 205| | * 206| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 207| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 208| | * in which case at the end we'll set z to a.z * b.z * H = 0, resulting in the correct 209| | * output (the identity element) 210| | */ 211| 645| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (211:7): [True: 0, False: 645] ------------------ 212| 0| return a.dbl(); 213| 0| } 214| | 215| 645| const auto HH = H.square(); 216| 645| const auto HHH = H * HH; 217| 645| const auto V = U1 * HH; 218| 645| const auto t2 = r.square(); 219| 645| const auto t3 = V + V; 220| 645| const auto t4 = t2 - HHH; 221| 645| auto X3 = t4 - t3; 222| 645| const auto t5 = V - X3; 223| 645| const auto t6 = S1 * HHH; 224| 645| const auto t7 = r * t5; 225| 645| auto Y3 = t7 - t6; 226| 645| const auto t8 = b.z() * H; 227| 645| auto Z3 = a.z() * t8; 228| | 229| | // if a is identity then return b 230| 645| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), b.y(), b.z()); 231| | 232| | // if b is identity then return a 233| 645| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 234| | 235| 645| return ProjectivePoint(X3, Y3, Z3); 236| 645|} pcurves_secp224r1.cpp:_ZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_19secp224r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEE: 108| 1|auto to_affine_batch(std::span projective) { 109| 1| using AffinePoint = typename C::AffinePoint; 110| | 111| 1| const size_t N = projective.size(); 112| 1| std::vector affine; 113| 1| affine.reserve(N); 114| | 115| 1| CT::Choice any_identity = CT::Choice::no(); 116| | 117| 1.37k| for(const auto& pt : projective) { ------------------ | Branch (117:23): [True: 1.37k, False: 1] ------------------ 118| 1.37k| any_identity = any_identity || pt.is_identity(); 119| 1.37k| } 120| | 121| | // Conditional acceptable: N is public. State of points is not necessarily 122| | // public, but we don't leak which point was the identity. In practice with 123| | // the algorithms currently in use, the only time an identity can occur is 124| | // during mul2 where the two points g/h have a small relation (ie h = g*k for 125| | // some k < 16) 126| | 127| 1| if(N <= 2 || any_identity.as_bool()) { ------------------ | Branch (127:7): [True: 0, False: 1] | Branch (127:17): [True: 0, False: 1] ------------------ 128| | // If there are identity elements, using the batch inversion gets 129| | // tricky. It can be done, but this should be a rare situation so 130| | // just punt to the serial conversion if it occurs 131| 0| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (131:25): [True: 0, False: 0] ------------------ 132| 0| affine.push_back(to_affine(projective[i])); 133| 0| } 134| 1| } else { 135| 1| std::vector c; 136| 1| c.reserve(N); 137| | 138| | /* 139| | Batch projective->affine using Montgomery's trick 140| | 141| | See Algorithm 2.26 in "Guide to Elliptic Curve Cryptography" 142| | (Hankerson, Menezes, Vanstone) 143| | */ 144| | 145| 1| c.push_back(projective[0].z()); 146| 1.37k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (146:25): [True: 1.37k, False: 1] ------------------ 147| 1.37k| c.push_back(c[i - 1] * projective[i].z()); 148| 1.37k| } 149| | 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| 1| } else { 154| 1| return invert_field_element(c[N - 1]); 155| 1| } 156| 1| }(); 157| | 158| 1.37k| for(size_t i = N - 1; i > 0; --i) { ------------------ | Branch (158:29): [True: 1.37k, False: 1] ------------------ 159| 1.37k| const auto& p = projective[i]; 160| | 161| 1.37k| const auto z_inv = s_inv * c[i - 1]; 162| 1.37k| const auto z2_inv = z_inv.square(); 163| 1.37k| const auto z3_inv = z_inv * z2_inv; 164| | 165| 1.37k| s_inv = s_inv * p.z(); 166| | 167| 1.37k| affine.push_back(AffinePoint(p.x() * z2_inv, p.y() * z3_inv)); 168| 1.37k| } 169| | 170| 1| const auto z2_inv = s_inv.square(); 171| 1| const auto z3_inv = s_inv * z2_inv; 172| 1| affine.push_back(AffinePoint(projective[0].x() * z2_inv, projective[0].y() * z3_inv)); 173| 1| std::reverse(affine.begin(), affine.end()); 174| 1| return affine; 175| 1| } 176| | 177| 0| return affine; 178| 1|} pcurves_secp224r1.cpp:_ZZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_19secp224r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEEENKUlvE_clEv: 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| | } else { 154| | return invert_field_element(c[N - 1]); 155| | } 156| 1| }(); pcurves_secp256k1.cpp:_ZN5Botan10dbl_a_zeroINS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS5_6ParamsES6_E11FieldParamsEEEEES8_EEEET_RKSE_: 403| 833|inline constexpr ProjectivePoint dbl_a_zero(const ProjectivePoint& pt) { 404| | // If a == 0 then 3*x^2 + a*z^4 == 3*x^2 405| | // Cost: 1S + 1*3 406| 833| const auto m = pt.x().square().mul3(); 407| | 408| | // Remaining cost: 3M + 3S + 3A + 2*2 + 1*4 + 1*8 409| 833| const auto y2 = pt.y().square(); 410| 833| const auto s = pt.x().mul4() * y2; 411| 833| const auto nx = m.square() - s.mul2(); 412| 833| const auto ny = m * (s - nx) - y2.square().mul8(); 413| 833| const auto nz = pt.y().mul2() * pt.z(); 414| | 415| 833| return ProjectivePoint(nx, ny, nz); 416| 833|} pcurves_secp256k1.cpp:_ZN5Botan9point_addINS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS5_6ParamsES6_E11FieldParamsEEEEES8_EESC_EET_RKSE_SG_: 188| 735|inline constexpr ProjectivePoint point_add(const ProjectivePoint& a, const ProjectivePoint& b) { 189| 735| const auto a_is_identity = a.is_identity(); 190| 735| const auto b_is_identity = b.is_identity(); 191| | 192| 735| const auto Z1Z1 = a.z().square(); 193| 735| const auto Z2Z2 = b.z().square(); 194| 735| const auto U1 = a.x() * Z2Z2; 195| 735| const auto U2 = b.x() * Z1Z1; 196| 735| const auto S1 = a.y() * b.z() * Z2Z2; 197| 735| const auto S2 = b.y() * a.z() * Z1Z1; 198| 735| const auto H = U2 - U1; 199| 735| const auto r = S2 - S1; 200| | 201| | /* Risky conditional 202| | * 203| | * This implementation uses projective coordinates, which do not have an efficient complete 204| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 205| | * 206| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 207| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 208| | * in which case at the end we'll set z to a.z * b.z * H = 0, resulting in the correct 209| | * output (the identity element) 210| | */ 211| 735| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (211:7): [True: 0, False: 735] ------------------ 212| 0| return a.dbl(); 213| 0| } 214| | 215| 735| const auto HH = H.square(); 216| 735| const auto HHH = H * HH; 217| 735| const auto V = U1 * HH; 218| 735| const auto t2 = r.square(); 219| 735| const auto t3 = V + V; 220| 735| const auto t4 = t2 - HHH; 221| 735| auto X3 = t4 - t3; 222| 735| const auto t5 = V - X3; 223| 735| const auto t6 = S1 * HHH; 224| 735| const auto t7 = r * t5; 225| 735| auto Y3 = t7 - t6; 226| 735| const auto t8 = b.z() * H; 227| 735| auto Z3 = a.z() * t8; 228| | 229| | // if a is identity then return b 230| 735| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), b.y(), b.z()); 231| | 232| | // if b is identity then return a 233| 735| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 234| | 235| 735| return ProjectivePoint(X3, Y3, Z3); 236| 735|} pcurves_secp256k1.cpp:_ZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_19secp256k15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEE: 108| 1|auto to_affine_batch(std::span projective) { 109| 1| using AffinePoint = typename C::AffinePoint; 110| | 111| 1| const size_t N = projective.size(); 112| 1| std::vector affine; 113| 1| affine.reserve(N); 114| | 115| 1| CT::Choice any_identity = CT::Choice::no(); 116| | 117| 1.56k| for(const auto& pt : projective) { ------------------ | Branch (117:23): [True: 1.56k, False: 1] ------------------ 118| 1.56k| any_identity = any_identity || pt.is_identity(); 119| 1.56k| } 120| | 121| | // Conditional acceptable: N is public. State of points is not necessarily 122| | // public, but we don't leak which point was the identity. In practice with 123| | // the algorithms currently in use, the only time an identity can occur is 124| | // during mul2 where the two points g/h have a small relation (ie h = g*k for 125| | // some k < 16) 126| | 127| 1| if(N <= 2 || any_identity.as_bool()) { ------------------ | Branch (127:7): [True: 0, False: 1] | Branch (127:17): [True: 0, False: 1] ------------------ 128| | // If there are identity elements, using the batch inversion gets 129| | // tricky. It can be done, but this should be a rare situation so 130| | // just punt to the serial conversion if it occurs 131| 0| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (131:25): [True: 0, False: 0] ------------------ 132| 0| affine.push_back(to_affine(projective[i])); 133| 0| } 134| 1| } else { 135| 1| std::vector c; 136| 1| c.reserve(N); 137| | 138| | /* 139| | Batch projective->affine using Montgomery's trick 140| | 141| | See Algorithm 2.26 in "Guide to Elliptic Curve Cryptography" 142| | (Hankerson, Menezes, Vanstone) 143| | */ 144| | 145| 1| c.push_back(projective[0].z()); 146| 1.56k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (146:25): [True: 1.56k, False: 1] ------------------ 147| 1.56k| c.push_back(c[i - 1] * projective[i].z()); 148| 1.56k| } 149| | 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| 1| } else { 154| 1| return invert_field_element(c[N - 1]); 155| 1| } 156| 1| }(); 157| | 158| 1.56k| for(size_t i = N - 1; i > 0; --i) { ------------------ | Branch (158:29): [True: 1.56k, False: 1] ------------------ 159| 1.56k| const auto& p = projective[i]; 160| | 161| 1.56k| const auto z_inv = s_inv * c[i - 1]; 162| 1.56k| const auto z2_inv = z_inv.square(); 163| 1.56k| const auto z3_inv = z_inv * z2_inv; 164| | 165| 1.56k| s_inv = s_inv * p.z(); 166| | 167| 1.56k| affine.push_back(AffinePoint(p.x() * z2_inv, p.y() * z3_inv)); 168| 1.56k| } 169| | 170| 1| const auto z2_inv = s_inv.square(); 171| 1| const auto z3_inv = s_inv * z2_inv; 172| 1| affine.push_back(AffinePoint(projective[0].x() * z2_inv, projective[0].y() * z3_inv)); 173| 1| std::reverse(affine.begin(), affine.end()); 174| 1| return affine; 175| 1| } 176| | 177| 0| return affine; 178| 1|} pcurves_secp256k1.cpp:_ZZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_19secp256k15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEEENKUlvE_clEv: 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| | } else { 154| | return invert_field_element(c[N - 1]); 155| | } 156| 1| }(); pcurves_secp256r1.cpp:_ZN5Botan13dbl_a_minus_3INS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS4_9secp256r16ParamsES5_E11FieldParamsEEEEES8_EEEET_RKSE_: 384| 833|inline constexpr ProjectivePoint dbl_a_minus_3(const ProjectivePoint& pt) { 385| | /* 386| | if a == -3 then 387| | 3*x^2 + a*z^4 == 3*x^2 - 3*z^4 == 3*(x^2-z^4) == 3*(x-z^2)*(x+z^2) 388| | */ 389| 833| const auto z2 = pt.z().square(); 390| 833| const auto m = (pt.x() - z2).mul3() * (pt.x() + z2); 391| | 392| | // Remaining cost: 3M + 3S + 3A + 2*2 + 1*4 + 1*8 393| 833| const auto y2 = pt.y().square(); 394| 833| const auto s = pt.x().mul4() * y2; 395| 833| const auto nx = m.square() - s.mul2(); 396| 833| const auto ny = m * (s - nx) - y2.square().mul8(); 397| 833| const auto nz = pt.y().mul2() * pt.z(); 398| | 399| 833| return ProjectivePoint(nx, ny, nz); 400| 833|} pcurves_secp256r1.cpp:_ZN5Botan9point_addINS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS4_9secp256r16ParamsES5_E11FieldParamsEEEEES8_EESC_EET_RKSE_SG_: 188| 735|inline constexpr ProjectivePoint point_add(const ProjectivePoint& a, const ProjectivePoint& b) { 189| 735| const auto a_is_identity = a.is_identity(); 190| 735| const auto b_is_identity = b.is_identity(); 191| | 192| 735| const auto Z1Z1 = a.z().square(); 193| 735| const auto Z2Z2 = b.z().square(); 194| 735| const auto U1 = a.x() * Z2Z2; 195| 735| const auto U2 = b.x() * Z1Z1; 196| 735| const auto S1 = a.y() * b.z() * Z2Z2; 197| 735| const auto S2 = b.y() * a.z() * Z1Z1; 198| 735| const auto H = U2 - U1; 199| 735| const auto r = S2 - S1; 200| | 201| | /* Risky conditional 202| | * 203| | * This implementation uses projective coordinates, which do not have an efficient complete 204| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 205| | * 206| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 207| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 208| | * in which case at the end we'll set z to a.z * b.z * H = 0, resulting in the correct 209| | * output (the identity element) 210| | */ 211| 735| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (211:7): [True: 0, False: 735] ------------------ 212| 0| return a.dbl(); 213| 0| } 214| | 215| 735| const auto HH = H.square(); 216| 735| const auto HHH = H * HH; 217| 735| const auto V = U1 * HH; 218| 735| const auto t2 = r.square(); 219| 735| const auto t3 = V + V; 220| 735| const auto t4 = t2 - HHH; 221| 735| auto X3 = t4 - t3; 222| 735| const auto t5 = V - X3; 223| 735| const auto t6 = S1 * HHH; 224| 735| const auto t7 = r * t5; 225| 735| auto Y3 = t7 - t6; 226| 735| const auto t8 = b.z() * H; 227| 735| auto Z3 = a.z() * t8; 228| | 229| | // if a is identity then return b 230| 735| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), b.y(), b.z()); 231| | 232| | // if b is identity then return a 233| 735| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 234| | 235| 735| return ProjectivePoint(X3, Y3, Z3); 236| 735|} pcurves_secp256r1.cpp:_ZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_19secp256r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEE: 108| 1|auto to_affine_batch(std::span projective) { 109| 1| using AffinePoint = typename C::AffinePoint; 110| | 111| 1| const size_t N = projective.size(); 112| 1| std::vector affine; 113| 1| affine.reserve(N); 114| | 115| 1| CT::Choice any_identity = CT::Choice::no(); 116| | 117| 1.56k| for(const auto& pt : projective) { ------------------ | Branch (117:23): [True: 1.56k, False: 1] ------------------ 118| 1.56k| any_identity = any_identity || pt.is_identity(); 119| 1.56k| } 120| | 121| | // Conditional acceptable: N is public. State of points is not necessarily 122| | // public, but we don't leak which point was the identity. In practice with 123| | // the algorithms currently in use, the only time an identity can occur is 124| | // during mul2 where the two points g/h have a small relation (ie h = g*k for 125| | // some k < 16) 126| | 127| 1| if(N <= 2 || any_identity.as_bool()) { ------------------ | Branch (127:7): [True: 0, False: 1] | Branch (127:17): [True: 0, False: 1] ------------------ 128| | // If there are identity elements, using the batch inversion gets 129| | // tricky. It can be done, but this should be a rare situation so 130| | // just punt to the serial conversion if it occurs 131| 0| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (131:25): [True: 0, False: 0] ------------------ 132| 0| affine.push_back(to_affine(projective[i])); 133| 0| } 134| 1| } else { 135| 1| std::vector c; 136| 1| c.reserve(N); 137| | 138| | /* 139| | Batch projective->affine using Montgomery's trick 140| | 141| | See Algorithm 2.26 in "Guide to Elliptic Curve Cryptography" 142| | (Hankerson, Menezes, Vanstone) 143| | */ 144| | 145| 1| c.push_back(projective[0].z()); 146| 1.56k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (146:25): [True: 1.56k, False: 1] ------------------ 147| 1.56k| c.push_back(c[i - 1] * projective[i].z()); 148| 1.56k| } 149| | 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| 1| } else { 154| 1| return invert_field_element(c[N - 1]); 155| 1| } 156| 1| }(); 157| | 158| 1.56k| for(size_t i = N - 1; i > 0; --i) { ------------------ | Branch (158:29): [True: 1.56k, False: 1] ------------------ 159| 1.56k| const auto& p = projective[i]; 160| | 161| 1.56k| const auto z_inv = s_inv * c[i - 1]; 162| 1.56k| const auto z2_inv = z_inv.square(); 163| 1.56k| const auto z3_inv = z_inv * z2_inv; 164| | 165| 1.56k| s_inv = s_inv * p.z(); 166| | 167| 1.56k| affine.push_back(AffinePoint(p.x() * z2_inv, p.y() * z3_inv)); 168| 1.56k| } 169| | 170| 1| const auto z2_inv = s_inv.square(); 171| 1| const auto z3_inv = s_inv * z2_inv; 172| 1| affine.push_back(AffinePoint(projective[0].x() * z2_inv, projective[0].y() * z3_inv)); 173| 1| std::reverse(affine.begin(), affine.end()); 174| 1| return affine; 175| 1| } 176| | 177| 0| return affine; 178| 1|} pcurves_secp256r1.cpp:_ZN5Botan9to_affineINS_6PCurve12_GLOBAL__N_19secp256r15CurveEEEDaRKNT_15ProjectivePointE: 77| 101|inline constexpr auto to_affine(const typename C::ProjectivePoint& pt) { 78| | // Not strictly required right? - default should work as long 79| | // as (0,0) is identity and invert returns 0 on 0 80| | 81| 101| if constexpr(curve_supports_fe_invert2) { 82| 101| const auto z2_inv = C::fe_invert2(pt.z()); 83| 101| const auto z3_inv = z2_inv.square() * pt.z(); 84| 101| return typename C::AffinePoint(pt.x() * z2_inv, pt.y() * z3_inv); 85| | } else { 86| | const auto z_inv = invert_field_element(pt.z()); 87| | const auto z2_inv = z_inv.square(); 88| | const auto z3_inv = z_inv * z2_inv; 89| | return typename C::AffinePoint(pt.x() * z2_inv, pt.y() * z3_inv); 90| | } 91| 101|} pcurves_secp256r1.cpp:_ZZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_19secp256r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEEENKUlvE_clEv: 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| | } else { 154| | return invert_field_element(c[N - 1]); 155| | } 156| 1| }(); pcurves_secp256r1.cpp:_ZN5Botan22point_add_or_sub_mixedINS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS4_9secp256r16ParamsES5_E11FieldParamsEEEEES8_EENS_16AffineCurvePointISC_EESC_EET_RKSG_RKT0_NS_2CT6ChoiceERKT1_SQ_: 318| 4.84k| const FieldElement& curve_a) { 319| 4.84k| const auto a_is_identity = a.is_identity(); 320| 4.84k| const auto b_is_identity = b.is_identity(); 321| | 322| | /* 323| | https://hyperelliptic.org/EFD/g1p/auto-shortw-jacobian-3.html#addition-add-1998-cmo-2 324| | 325| | Cost: 8M + 3S + 6add + 1*2 326| | */ 327| | 328| 4.84k| auto by = b.y(); 329| 4.84k| by.conditional_assign(sub, by.negate()); 330| | 331| 4.84k| const auto Z1Z1 = a.z().square(); 332| 4.84k| const auto U2 = b.x() * Z1Z1; 333| 4.84k| const auto S2 = by * a.z() * Z1Z1; 334| 4.84k| const auto H = U2 - a.x(); 335| 4.84k| const auto r = S2 - a.y(); 336| | 337| | /* Risky conditional 338| | * 339| | * This implementation uses projective coordinates, which do not have an efficient complete 340| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 341| | * 342| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 343| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 344| | * in which case at the end we'll set z to a.z * H = 0, resulting in the correct output 345| | * (the identity element) 346| | */ 347| 4.84k| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (347:7): [True: 0, False: 4.84k] ------------------ 348| 0| return a.dbl_iso(curve_a); 349| 0| } 350| | 351| 4.84k| const auto HH = H.square(); 352| 4.84k| const auto HHH = H * HH; 353| 4.84k| const auto V = a.x() * HH; 354| 4.84k| const auto t2 = r.square(); 355| 4.84k| const auto t3 = V + V; 356| 4.84k| const auto t4 = t2 - HHH; 357| 4.84k| auto X3 = t4 - t3; 358| 4.84k| const auto t5 = V - X3; 359| 4.84k| const auto t6 = a.y() * HHH; 360| 4.84k| const auto t7 = r * t5; 361| 4.84k| auto Y3 = t7 - t6; 362| 4.84k| auto Z3 = a.z() * H; 363| | 364| | // if a is identity then return b 365| 4.84k| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), by, one); 366| | 367| | // if b is identity then return a 368| 4.84k| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 369| | 370| 4.84k| return ProjectivePoint(X3, Y3, Z3); 371| 4.84k|} pcurves_secp384r1.cpp:_ZN5Botan13dbl_a_minus_3INS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS4_9secp384r16ParamsES5_E11FieldParamsEEEEES8_EEEET_RKSE_: 384| 1.24k|inline constexpr ProjectivePoint dbl_a_minus_3(const ProjectivePoint& pt) { 385| | /* 386| | if a == -3 then 387| | 3*x^2 + a*z^4 == 3*x^2 - 3*z^4 == 3*(x^2-z^4) == 3*(x-z^2)*(x+z^2) 388| | */ 389| 1.24k| const auto z2 = pt.z().square(); 390| 1.24k| const auto m = (pt.x() - z2).mul3() * (pt.x() + z2); 391| | 392| | // Remaining cost: 3M + 3S + 3A + 2*2 + 1*4 + 1*8 393| 1.24k| const auto y2 = pt.y().square(); 394| 1.24k| const auto s = pt.x().mul4() * y2; 395| 1.24k| const auto nx = m.square() - s.mul2(); 396| 1.24k| const auto ny = m * (s - nx) - y2.square().mul8(); 397| 1.24k| const auto nz = pt.y().mul2() * pt.z(); 398| | 399| 1.24k| return ProjectivePoint(nx, ny, nz); 400| 1.24k|} pcurves_secp384r1.cpp:_ZN5Botan9point_addINS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS4_9secp384r16ParamsES5_E11FieldParamsEEEEES8_EESC_EET_RKSE_SG_: 188| 1.09k|inline constexpr ProjectivePoint point_add(const ProjectivePoint& a, const ProjectivePoint& b) { 189| 1.09k| const auto a_is_identity = a.is_identity(); 190| 1.09k| const auto b_is_identity = b.is_identity(); 191| | 192| 1.09k| const auto Z1Z1 = a.z().square(); 193| 1.09k| const auto Z2Z2 = b.z().square(); 194| 1.09k| const auto U1 = a.x() * Z2Z2; 195| 1.09k| const auto U2 = b.x() * Z1Z1; 196| 1.09k| const auto S1 = a.y() * b.z() * Z2Z2; 197| 1.09k| const auto S2 = b.y() * a.z() * Z1Z1; 198| 1.09k| const auto H = U2 - U1; 199| 1.09k| const auto r = S2 - S1; 200| | 201| | /* Risky conditional 202| | * 203| | * This implementation uses projective coordinates, which do not have an efficient complete 204| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 205| | * 206| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 207| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 208| | * in which case at the end we'll set z to a.z * b.z * H = 0, resulting in the correct 209| | * output (the identity element) 210| | */ 211| 1.09k| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (211:7): [True: 0, False: 1.09k] ------------------ 212| 0| return a.dbl(); 213| 0| } 214| | 215| 1.09k| const auto HH = H.square(); 216| 1.09k| const auto HHH = H * HH; 217| 1.09k| const auto V = U1 * HH; 218| 1.09k| const auto t2 = r.square(); 219| 1.09k| const auto t3 = V + V; 220| 1.09k| const auto t4 = t2 - HHH; 221| 1.09k| auto X3 = t4 - t3; 222| 1.09k| const auto t5 = V - X3; 223| 1.09k| const auto t6 = S1 * HHH; 224| 1.09k| const auto t7 = r * t5; 225| 1.09k| auto Y3 = t7 - t6; 226| 1.09k| const auto t8 = b.z() * H; 227| 1.09k| auto Z3 = a.z() * t8; 228| | 229| | // if a is identity then return b 230| 1.09k| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), b.y(), b.z()); 231| | 232| | // if b is identity then return a 233| 1.09k| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 234| | 235| 1.09k| return ProjectivePoint(X3, Y3, Z3); 236| 1.09k|} pcurves_secp384r1.cpp:_ZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_19secp384r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEE: 108| 1|auto to_affine_batch(std::span projective) { 109| 1| using AffinePoint = typename C::AffinePoint; 110| | 111| 1| const size_t N = projective.size(); 112| 1| std::vector affine; 113| 1| affine.reserve(N); 114| | 115| 1| CT::Choice any_identity = CT::Choice::no(); 116| | 117| 2.33k| for(const auto& pt : projective) { ------------------ | Branch (117:23): [True: 2.33k, False: 1] ------------------ 118| 2.33k| any_identity = any_identity || pt.is_identity(); 119| 2.33k| } 120| | 121| | // Conditional acceptable: N is public. State of points is not necessarily 122| | // public, but we don't leak which point was the identity. In practice with 123| | // the algorithms currently in use, the only time an identity can occur is 124| | // during mul2 where the two points g/h have a small relation (ie h = g*k for 125| | // some k < 16) 126| | 127| 1| if(N <= 2 || any_identity.as_bool()) { ------------------ | Branch (127:7): [True: 0, False: 1] | Branch (127:17): [True: 0, False: 1] ------------------ 128| | // If there are identity elements, using the batch inversion gets 129| | // tricky. It can be done, but this should be a rare situation so 130| | // just punt to the serial conversion if it occurs 131| 0| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (131:25): [True: 0, False: 0] ------------------ 132| 0| affine.push_back(to_affine(projective[i])); 133| 0| } 134| 1| } else { 135| 1| std::vector c; 136| 1| c.reserve(N); 137| | 138| | /* 139| | Batch projective->affine using Montgomery's trick 140| | 141| | See Algorithm 2.26 in "Guide to Elliptic Curve Cryptography" 142| | (Hankerson, Menezes, Vanstone) 143| | */ 144| | 145| 1| c.push_back(projective[0].z()); 146| 2.33k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (146:25): [True: 2.33k, False: 1] ------------------ 147| 2.33k| c.push_back(c[i - 1] * projective[i].z()); 148| 2.33k| } 149| | 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| 1| } else { 154| 1| return invert_field_element(c[N - 1]); 155| 1| } 156| 1| }(); 157| | 158| 2.33k| for(size_t i = N - 1; i > 0; --i) { ------------------ | Branch (158:29): [True: 2.33k, False: 1] ------------------ 159| 2.33k| const auto& p = projective[i]; 160| | 161| 2.33k| const auto z_inv = s_inv * c[i - 1]; 162| 2.33k| const auto z2_inv = z_inv.square(); 163| 2.33k| const auto z3_inv = z_inv * z2_inv; 164| | 165| 2.33k| s_inv = s_inv * p.z(); 166| | 167| 2.33k| affine.push_back(AffinePoint(p.x() * z2_inv, p.y() * z3_inv)); 168| 2.33k| } 169| | 170| 1| const auto z2_inv = s_inv.square(); 171| 1| const auto z3_inv = s_inv * z2_inv; 172| 1| affine.push_back(AffinePoint(projective[0].x() * z2_inv, projective[0].y() * z3_inv)); 173| 1| std::reverse(affine.begin(), affine.end()); 174| 1| return affine; 175| 1| } 176| | 177| 0| return affine; 178| 1|} pcurves_secp384r1.cpp:_ZN5Botan9to_affineINS_6PCurve12_GLOBAL__N_19secp384r15CurveEEEDaRKNT_15ProjectivePointE: 77| 120|inline constexpr auto to_affine(const typename C::ProjectivePoint& pt) { 78| | // Not strictly required right? - default should work as long 79| | // as (0,0) is identity and invert returns 0 on 0 80| | 81| 120| if constexpr(curve_supports_fe_invert2) { 82| 120| const auto z2_inv = C::fe_invert2(pt.z()); 83| 120| const auto z3_inv = z2_inv.square() * pt.z(); 84| 120| return typename C::AffinePoint(pt.x() * z2_inv, pt.y() * z3_inv); 85| | } else { 86| | const auto z_inv = invert_field_element(pt.z()); 87| | const auto z2_inv = z_inv.square(); 88| | const auto z3_inv = z_inv * z2_inv; 89| | return typename C::AffinePoint(pt.x() * z2_inv, pt.y() * z3_inv); 90| | } 91| 120|} pcurves_secp384r1.cpp:_ZZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_19secp384r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEEENKUlvE_clEv: 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| | } else { 154| | return invert_field_element(c[N - 1]); 155| | } 156| 1| }(); pcurves_secp384r1.cpp:_ZN5Botan22point_add_or_sub_mixedINS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS4_9secp384r16ParamsES5_E11FieldParamsEEEEES8_EENS_16AffineCurvePointISC_EESC_EET_RKSG_RKT0_NS_2CT6ChoiceERKT1_SQ_: 318| 8.64k| const FieldElement& curve_a) { 319| 8.64k| const auto a_is_identity = a.is_identity(); 320| 8.64k| const auto b_is_identity = b.is_identity(); 321| | 322| | /* 323| | https://hyperelliptic.org/EFD/g1p/auto-shortw-jacobian-3.html#addition-add-1998-cmo-2 324| | 325| | Cost: 8M + 3S + 6add + 1*2 326| | */ 327| | 328| 8.64k| auto by = b.y(); 329| 8.64k| by.conditional_assign(sub, by.negate()); 330| | 331| 8.64k| const auto Z1Z1 = a.z().square(); 332| 8.64k| const auto U2 = b.x() * Z1Z1; 333| 8.64k| const auto S2 = by * a.z() * Z1Z1; 334| 8.64k| const auto H = U2 - a.x(); 335| 8.64k| const auto r = S2 - a.y(); 336| | 337| | /* Risky conditional 338| | * 339| | * This implementation uses projective coordinates, which do not have an efficient complete 340| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 341| | * 342| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 343| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 344| | * in which case at the end we'll set z to a.z * H = 0, resulting in the correct output 345| | * (the identity element) 346| | */ 347| 8.64k| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (347:7): [True: 0, False: 8.64k] ------------------ 348| 0| return a.dbl_iso(curve_a); 349| 0| } 350| | 351| 8.64k| const auto HH = H.square(); 352| 8.64k| const auto HHH = H * HH; 353| 8.64k| const auto V = a.x() * HH; 354| 8.64k| const auto t2 = r.square(); 355| 8.64k| const auto t3 = V + V; 356| 8.64k| const auto t4 = t2 - HHH; 357| 8.64k| auto X3 = t4 - t3; 358| 8.64k| const auto t5 = V - X3; 359| 8.64k| const auto t6 = a.y() * HHH; 360| 8.64k| const auto t7 = r * t5; 361| 8.64k| auto Y3 = t7 - t6; 362| 8.64k| auto Z3 = a.z() * H; 363| | 364| | // if a is identity then return b 365| 8.64k| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), by, one); 366| | 367| | // if b is identity then return a 368| 8.64k| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 369| | 370| 8.64k| return ProjectivePoint(X3, Y3, Z3); 371| 8.64k|} pcurves_secp521r1.cpp:_ZN5Botan13dbl_a_minus_3INS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS5_6ParamsES6_E11FieldParamsEEEEES8_EEEET_RKSE_: 384| 1.64k|inline constexpr ProjectivePoint dbl_a_minus_3(const ProjectivePoint& pt) { 385| | /* 386| | if a == -3 then 387| | 3*x^2 + a*z^4 == 3*x^2 - 3*z^4 == 3*(x^2-z^4) == 3*(x-z^2)*(x+z^2) 388| | */ 389| 1.64k| const auto z2 = pt.z().square(); 390| 1.64k| const auto m = (pt.x() - z2).mul3() * (pt.x() + z2); 391| | 392| | // Remaining cost: 3M + 3S + 3A + 2*2 + 1*4 + 1*8 393| 1.64k| const auto y2 = pt.y().square(); 394| 1.64k| const auto s = pt.x().mul4() * y2; 395| 1.64k| const auto nx = m.square() - s.mul2(); 396| 1.64k| const auto ny = m * (s - nx) - y2.square().mul8(); 397| 1.64k| const auto nz = pt.y().mul2() * pt.z(); 398| | 399| 1.64k| return ProjectivePoint(nx, ny, nz); 400| 1.64k|} pcurves_secp521r1.cpp:_ZN5Botan9point_addINS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS5_6ParamsES6_E11FieldParamsEEEEES8_EESC_EET_RKSE_SG_: 188| 1.45k|inline constexpr ProjectivePoint point_add(const ProjectivePoint& a, const ProjectivePoint& b) { 189| 1.45k| const auto a_is_identity = a.is_identity(); 190| 1.45k| const auto b_is_identity = b.is_identity(); 191| | 192| 1.45k| const auto Z1Z1 = a.z().square(); 193| 1.45k| const auto Z2Z2 = b.z().square(); 194| 1.45k| const auto U1 = a.x() * Z2Z2; 195| 1.45k| const auto U2 = b.x() * Z1Z1; 196| 1.45k| const auto S1 = a.y() * b.z() * Z2Z2; 197| 1.45k| const auto S2 = b.y() * a.z() * Z1Z1; 198| 1.45k| const auto H = U2 - U1; 199| 1.45k| const auto r = S2 - S1; 200| | 201| | /* Risky conditional 202| | * 203| | * This implementation uses projective coordinates, which do not have an efficient complete 204| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 205| | * 206| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 207| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 208| | * in which case at the end we'll set z to a.z * b.z * H = 0, resulting in the correct 209| | * output (the identity element) 210| | */ 211| 1.45k| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (211:7): [True: 0, False: 1.45k] ------------------ 212| 0| return a.dbl(); 213| 0| } 214| | 215| 1.45k| const auto HH = H.square(); 216| 1.45k| const auto HHH = H * HH; 217| 1.45k| const auto V = U1 * HH; 218| 1.45k| const auto t2 = r.square(); 219| 1.45k| const auto t3 = V + V; 220| 1.45k| const auto t4 = t2 - HHH; 221| 1.45k| auto X3 = t4 - t3; 222| 1.45k| const auto t5 = V - X3; 223| 1.45k| const auto t6 = S1 * HHH; 224| 1.45k| const auto t7 = r * t5; 225| 1.45k| auto Y3 = t7 - t6; 226| 1.45k| const auto t8 = b.z() * H; 227| 1.45k| auto Z3 = a.z() * t8; 228| | 229| | // if a is identity then return b 230| 1.45k| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), b.y(), b.z()); 231| | 232| | // if b is identity then return a 233| 1.45k| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 234| | 235| 1.45k| return ProjectivePoint(X3, Y3, Z3); 236| 1.45k|} pcurves_secp521r1.cpp:_ZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_19secp521r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEE: 108| 1|auto to_affine_batch(std::span projective) { 109| 1| using AffinePoint = typename C::AffinePoint; 110| | 111| 1| const size_t N = projective.size(); 112| 1| std::vector affine; 113| 1| affine.reserve(N); 114| | 115| 1| CT::Choice any_identity = CT::Choice::no(); 116| | 117| 3.10k| for(const auto& pt : projective) { ------------------ | Branch (117:23): [True: 3.10k, False: 1] ------------------ 118| 3.10k| any_identity = any_identity || pt.is_identity(); 119| 3.10k| } 120| | 121| | // Conditional acceptable: N is public. State of points is not necessarily 122| | // public, but we don't leak which point was the identity. In practice with 123| | // the algorithms currently in use, the only time an identity can occur is 124| | // during mul2 where the two points g/h have a small relation (ie h = g*k for 125| | // some k < 16) 126| | 127| 1| if(N <= 2 || any_identity.as_bool()) { ------------------ | Branch (127:7): [True: 0, False: 1] | Branch (127:17): [True: 0, False: 1] ------------------ 128| | // If there are identity elements, using the batch inversion gets 129| | // tricky. It can be done, but this should be a rare situation so 130| | // just punt to the serial conversion if it occurs 131| 0| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (131:25): [True: 0, False: 0] ------------------ 132| 0| affine.push_back(to_affine(projective[i])); 133| 0| } 134| 1| } else { 135| 1| std::vector c; 136| 1| c.reserve(N); 137| | 138| | /* 139| | Batch projective->affine using Montgomery's trick 140| | 141| | See Algorithm 2.26 in "Guide to Elliptic Curve Cryptography" 142| | (Hankerson, Menezes, Vanstone) 143| | */ 144| | 145| 1| c.push_back(projective[0].z()); 146| 3.10k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (146:25): [True: 3.10k, False: 1] ------------------ 147| 3.10k| c.push_back(c[i - 1] * projective[i].z()); 148| 3.10k| } 149| | 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| 1| } else { 154| 1| return invert_field_element(c[N - 1]); 155| 1| } 156| 1| }(); 157| | 158| 3.10k| for(size_t i = N - 1; i > 0; --i) { ------------------ | Branch (158:29): [True: 3.10k, False: 1] ------------------ 159| 3.10k| const auto& p = projective[i]; 160| | 161| 3.10k| const auto z_inv = s_inv * c[i - 1]; 162| 3.10k| const auto z2_inv = z_inv.square(); 163| 3.10k| const auto z3_inv = z_inv * z2_inv; 164| | 165| 3.10k| s_inv = s_inv * p.z(); 166| | 167| 3.10k| affine.push_back(AffinePoint(p.x() * z2_inv, p.y() * z3_inv)); 168| 3.10k| } 169| | 170| 1| const auto z2_inv = s_inv.square(); 171| 1| const auto z3_inv = s_inv * z2_inv; 172| 1| affine.push_back(AffinePoint(projective[0].x() * z2_inv, projective[0].y() * z3_inv)); 173| 1| std::reverse(affine.begin(), affine.end()); 174| 1| return affine; 175| 1| } 176| | 177| 0| return affine; 178| 1|} pcurves_secp521r1.cpp:_ZN5Botan9to_affineINS_6PCurve12_GLOBAL__N_19secp521r15CurveEEEDaRKNT_15ProjectivePointE: 77| 70|inline constexpr auto to_affine(const typename C::ProjectivePoint& pt) { 78| | // Not strictly required right? - default should work as long 79| | // as (0,0) is identity and invert returns 0 on 0 80| | 81| 70| if constexpr(curve_supports_fe_invert2) { 82| 70| const auto z2_inv = C::fe_invert2(pt.z()); 83| 70| const auto z3_inv = z2_inv.square() * pt.z(); 84| 70| return typename C::AffinePoint(pt.x() * z2_inv, pt.y() * z3_inv); 85| | } else { 86| | const auto z_inv = invert_field_element(pt.z()); 87| | const auto z2_inv = z_inv.square(); 88| | const auto z3_inv = z_inv * z2_inv; 89| | return typename C::AffinePoint(pt.x() * z2_inv, pt.y() * z3_inv); 90| | } 91| 70|} pcurves_secp521r1.cpp:_ZZN5Botan15to_affine_batchINS_6PCurve12_GLOBAL__N_19secp521r15CurveELb1EEEDaNSt3__14spanIKNT_15ProjectivePointELm18446744073709551615EEEENKUlvE_clEv: 150| 1| auto s_inv = [&]() { 151| 1| if constexpr(VariableTime) { 152| 1| return c[N - 1].invert_vartime(); 153| | } else { 154| | return invert_field_element(c[N - 1]); 155| | } 156| 1| }(); pcurves_secp521r1.cpp:_ZN5Botan22point_add_or_sub_mixedINS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS5_6ParamsES6_E11FieldParamsEEEEES8_EENS_16AffineCurvePointISC_EESC_EET_RKSG_RKT0_NS_2CT6ChoiceERKT1_SQ_: 318| 6.72k| const FieldElement& curve_a) { 319| 6.72k| const auto a_is_identity = a.is_identity(); 320| 6.72k| const auto b_is_identity = b.is_identity(); 321| | 322| | /* 323| | https://hyperelliptic.org/EFD/g1p/auto-shortw-jacobian-3.html#addition-add-1998-cmo-2 324| | 325| | Cost: 8M + 3S + 6add + 1*2 326| | */ 327| | 328| 6.72k| auto by = b.y(); 329| 6.72k| by.conditional_assign(sub, by.negate()); 330| | 331| 6.72k| const auto Z1Z1 = a.z().square(); 332| 6.72k| const auto U2 = b.x() * Z1Z1; 333| 6.72k| const auto S2 = by * a.z() * Z1Z1; 334| 6.72k| const auto H = U2 - a.x(); 335| 6.72k| const auto r = S2 - a.y(); 336| | 337| | /* Risky conditional 338| | * 339| | * This implementation uses projective coordinates, which do not have an efficient complete 340| | * addition formula. We rely on the design of the multiplication algorithms to avoid doublings. 341| | * 342| | * This conditional only comes into play for the actual doubling case, not x + (-x) which 343| | * is another exceptional case in some circumstances. Here if a == -b then H == 0 && r != 0, 344| | * in which case at the end we'll set z to a.z * H = 0, resulting in the correct output 345| | * (the identity element) 346| | */ 347| 6.72k| if((r.is_zero() && H.is_zero() && !(a_is_identity && b_is_identity)).as_bool()) { ------------------ | Branch (347:7): [True: 0, False: 6.72k] ------------------ 348| 0| return a.dbl_iso(curve_a); 349| 0| } 350| | 351| 6.72k| const auto HH = H.square(); 352| 6.72k| const auto HHH = H * HH; 353| 6.72k| const auto V = a.x() * HH; 354| 6.72k| const auto t2 = r.square(); 355| 6.72k| const auto t3 = V + V; 356| 6.72k| const auto t4 = t2 - HHH; 357| 6.72k| auto X3 = t4 - t3; 358| 6.72k| const auto t5 = V - X3; 359| 6.72k| const auto t6 = a.y() * HHH; 360| 6.72k| const auto t7 = r * t5; 361| 6.72k| auto Y3 = t7 - t6; 362| 6.72k| auto Z3 = a.z() * H; 363| | 364| | // if a is identity then return b 365| 6.72k| FieldElement::conditional_assign(X3, Y3, Z3, a_is_identity, b.x(), by, one); 366| | 367| | // if b is identity then return a 368| 6.72k| FieldElement::conditional_assign(X3, Y3, Z3, b_is_identity, a.x(), a.y(), a.z()); 369| | 370| 6.72k| return ProjectivePoint(X3, Y3, Z3); 371| 6.72k|} _ZNK5Botan6PCurve22GenericPrimeOrderCurve7_paramsEv: 119| 114k| const GenericCurveParams& _params() const { return *m_params; } pcurves_brainpool256r1.cpp:_ZN5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELm6EEC2ERKNS_16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 1630| 1| m_table(basemul_booth_setup(p, BlindedScalar::Bits + 1)) {} pcurves_brainpool256r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_E11from_affineERKNS_16AffineCurvePointISB_EE: 1027| 91| static constexpr Self from_affine(const AffinePoint& pt) { 1028| | /* 1029| | * If the point is the identity element (x=0, y=0) then instead of 1030| | * creating (x, y, 1) = (0, 0, 1) we want our projective identity 1031| | * encoding of (0, 1, 0) 1032| | * 1033| | * Which we can achieve by a conditional swap of y and z if the 1034| | * affine point is the identity. 1035| | */ 1036| | 1037| 91| const auto x = pt.x(); 1038| 91| auto y = pt.y(); 1039| 91| auto z = FieldElement::one(); 1040| | 1041| 91| FieldElement::conditional_swap(pt.is_identity(), y, z); 1042| | 1043| 91| return ProjectiveCurvePoint(x, y, z); 1044| 91| } pcurves_brainpool256r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEEE1xEv: 982| 154k| constexpr const FieldElement& x() const { return m_x; } pcurves_brainpool256r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEEE1yEv: 987| 150k| constexpr const FieldElement& y() const { return m_y; } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE3oneEv: 202| 4.68k| static constexpr Self one() { return Self(Rep::one()); } pcurves_brainpool256r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES0_E11FieldParamsEE3oneEv: 101| 4.68k| constexpr static std::array one() { return R1; } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEEC2ENSt3__15arrayImLm4EEE: 908| 146k| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE16conditional_swapENS_2CT6ChoiceERSA_SD_: 412| 91| static constexpr void conditional_swap(CT::Choice cond, Self& x, Self& y) { 413| 91| const W mask = cond.into_bitmask(); 414| | 415| 455| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (415:28): [True: 364, False: 91] ------------------ 416| 364| const auto nx = Botan::choose(mask, y.m_val[i], x.m_val[i]); 417| 364| const auto ny = Botan::choose(mask, x.m_val[i], y.m_val[i]); 418| 364| x.m_val[i] = nx; 419| 364| y.m_val[i] = ny; 420| 364| } 421| 91| } pcurves_brainpool256r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEEE11is_identityEv: 939| 4.68k| constexpr CT::Choice is_identity() const { return x().is_zero() && y().is_zero(); } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE7is_zeroEv: 227| 26.9k| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_brainpool256r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_EC2ERKSB_SE_SE_: 1067| 6.15k| m_x(x), m_y(y), m_z(z) {} pcurves_brainpool256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_E3dblEv: 1181| 833| constexpr Self dbl() const { 1182| | if constexpr(Self::A_is_minus_3) { 1183| | return dbl_a_minus_3(*this); 1184| | } else if constexpr(Self::A_is_zero) { 1185| | return dbl_a_zero(*this); 1186| 833| } else { 1187| 833| return dbl_generic(*this, A); 1188| 833| } 1189| 833| } pcurves_brainpool256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_E1zEv: 1224| 35.6k| constexpr const FieldElement& z() const { return m_z; } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE6squareEv: 428| 23.7k| constexpr BOTAN_FORCE_INLINE Self square() const { 429| 23.7k| std::array z; // NOLINT(*-member-init) 430| 23.7k| comba_sqr(z.data(), this->data()); 431| 23.7k| return Self(Rep::redc(z)); 432| 23.7k| } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE4dataEv: 898| 179k| constexpr const W* data() const { return m_val.data(); } pcurves_brainpool256r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES0_E11FieldParamsEE4redcERKNSt3__15arrayImLm8EEE: 106| 111k| constexpr static std::array redc(const std::array& z) { 107| | if constexpr(P_dash == 1) { 108| | return monty_redc_pdash1(z, P); 109| 111k| } else { 110| 111k| return monty_redc(z, P, P_dash); 111| 111k| } 112| 111k| } pcurves_brainpool256r1.cpp:_ZN5BotanplERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEEESC_: 267| 7.07k| friend constexpr BOTAN_FORCE_INLINE Self operator+(const Self& a, const Self& b) { 268| 7.07k| std::array t; // NOLINT(*-member-init) 269| | 270| 7.07k| W carry = 0; 271| 35.3k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (271:28): [True: 28.3k, False: 7.07k] ------------------ 272| 28.3k| t[i] = word_add(a.m_val[i], b.m_val[i], &carry); 273| 28.3k| } 274| | 275| 7.07k| std::array r; // NOLINT(*-member-init) 276| 7.07k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 277| 7.07k| return Self(r); 278| 7.07k| } pcurves_brainpool256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_E1xEv: 1214| 19.4k| constexpr const FieldElement& x() const { return m_x; } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE4mul3Ev: 337| 833| constexpr inline Self mul3() const { return mul2() + (*this); } pcurves_brainpool256r1.cpp:_ZN5BotanmlERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEEESC_: 348| 57.4k| friend constexpr BOTAN_FORCE_INLINE Self operator*(const Self& a, const Self& b) { 349| 57.4k| std::array z; // NOLINT(*-member-init) 350| 57.4k| comba_mul(z.data(), a.data(), b.data()); 351| 57.4k| return Self(Rep::redc(z)); 352| 57.4k| } pcurves_brainpool256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_E1yEv: 1219| 19.4k| constexpr const FieldElement& y() const { return m_y; } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE4mul4Ev: 340| 833| constexpr inline Self mul4() const { return mul2().mul2(); } pcurves_brainpool256r1.cpp:_ZN5BotanmiERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEEESC_: 283| 32.8k| friend constexpr BOTAN_FORCE_INLINE Self operator-(const Self& a, const Self& b) { 284| 32.8k| std::array r; // NOLINT(*-member-init) 285| 32.8k| W carry = 0; 286| 164k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (286:28): [True: 131k, False: 32.8k] ------------------ 287| 131k| r[i] = word_sub(a.m_val[i], b.m_val[i], &carry); 288| 131k| } 289| | 290| 32.8k| const auto mask = CT::Mask::expand(carry).value(); 291| | 292| 32.8k| carry = 0; 293| | 294| 164k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (294:28): [True: 131k, False: 32.8k] ------------------ 295| 131k| r[i] = word_add(r[i], P[i] & mask, &carry); 296| 131k| } 297| | 298| 32.8k| return Self(r); 299| 32.8k| } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE4mul2Ev: 327| 6.66k| constexpr BOTAN_FORCE_INLINE Self mul2() const { 328| 6.66k| std::array t = value(); 329| 6.66k| const W carry = shift_left<1>(t); 330| | 331| 6.66k| std::array r; // NOLINT(*-member-init) 332| 6.66k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 333| 6.66k| return Self(r); 334| 6.66k| } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE5valueEv: 896| 6.66k| constexpr const std::array& value() const { return m_val; } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE4mul8Ev: 343| 833| constexpr inline Self mul8() const { return mul2().mul2().mul2(); } pcurves_brainpool256r1.cpp:_ZN5BotanplERKNS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_EESE_: 1075| 735| friend constexpr Self operator+(const Self& a, const Self& b) { return Self::add(a, b); } pcurves_brainpool256r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_E3addERKSC_SE_: 1138| 735| constexpr static Self add(const Self& a, const Self& b) { return point_add(a, b); } pcurves_brainpool256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_E11is_identityEv: 1093| 7.35k| constexpr CT::Choice is_identity() const { return z().is_zero(); } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE18conditional_assignERSA_SB_SB_NS_2CT6ChoiceERKSA_SF_SF_: 397| 10.2k| Self& x, Self& y, Self& z, CT::Choice cond, const Self& nx, const Self& ny, const Self& nz) { 398| 10.2k| const W mask = cond.into_bitmask(); 399| | 400| 51.0k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (400:28): [True: 40.8k, False: 10.2k] ------------------ 401| 40.8k| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 402| 40.8k| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 403| 40.8k| z.m_val[i] = Botan::choose(mask, nz.m_val[i], z.m_val[i]); 404| 40.8k| } 405| 10.2k| } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE6invertEv: 540| 90| constexpr Self invert() const { return pow_vartime(Self::P_MINUS_2); } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE11pow_vartimeERKNSt3__15arrayImLm4EEE: 479| 90| constexpr Self pow_vartime(const std::array& exp) const { 480| 90| constexpr size_t WindowBits = (Self::BITS <= 256) ? 4 : 5; ------------------ | Branch (480:40): [True: 0, Folded] ------------------ 481| 90| constexpr size_t WindowElements = (1 << WindowBits) - 1; 482| | 483| 90| constexpr size_t Windows = (Self::BITS + WindowBits - 1) / WindowBits; 484| | 485| | /* 486| | A simple fixed width window modular multiplication. 487| | 488| | TODO: investigate using sliding window here 489| | */ 490| | 491| 90| std::array tbl; 492| | 493| 90| tbl[0] = (*this); 494| | 495| 1.35k| for(size_t i = 1; i != WindowElements; ++i) { ------------------ | Branch (495:28): [True: 1.26k, False: 90] ------------------ 496| | // Conditional ok: table indexes are public here 497| 1.26k| if(i % 2 == 1) { ------------------ | Branch (497:16): [True: 630, False: 630] ------------------ 498| 630| tbl[i] = tbl[i / 2].square(); 499| 630| } else { 500| 630| tbl[i] = tbl[i - 1] * tbl[0]; 501| 630| } 502| 1.26k| } 503| | 504| 90| auto r = Self::one(); 505| | 506| 90| const size_t w0 = read_window_bits(std::span{exp}, (Windows - 1) * WindowBits); 507| | 508| | // Conditional ok: this function is variable time 509| 90| if(w0 > 0) { ------------------ | Branch (509:13): [True: 90, False: 0] ------------------ 510| 90| r = tbl[w0 - 1]; 511| 90| } 512| | 513| 5.76k| for(size_t i = 1; i != Windows; ++i) { ------------------ | Branch (513:28): [True: 5.67k, False: 90] ------------------ 514| 5.67k| r.square_n(WindowBits); 515| | 516| 5.67k| const size_t w = read_window_bits(std::span{exp}, (Windows - i - 1) * WindowBits); 517| | 518| | // Conditional ok: this function is variable time 519| 5.67k| if(w > 0) { ------------------ | Branch (519:16): [True: 5.31k, False: 360] ------------------ 520| 5.31k| r *= tbl[w - 1]; 521| 5.31k| } 522| 5.67k| } 523| | 524| 90| return r; 525| 90| } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEEC2Ev: 182| 1.71k| constexpr IntMod() : m_val({}) {} pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE8square_nEm: 441| 5.67k| constexpr void square_n(size_t n) { 442| 5.67k| std::array z; // NOLINT(*-member-init) 443| 28.3k| for(size_t i = 0; i != n; ++i) { ------------------ | Branch (443:28): [True: 22.6k, False: 5.67k] ------------------ 444| 22.6k| comba_sqr(z.data(), this->data()); 445| 22.6k| m_val = Rep::redc(z); 446| 22.6k| } 447| 5.67k| } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEEmLERKSA_: 357| 6.39k| constexpr BOTAN_FORCE_INLINE Self& operator*=(const Self& other) { 358| 6.39k| std::array z; // NOLINT(*-member-init) 359| 6.39k| comba_mul(z.data(), data(), other.data()); 360| 6.39k| m_val = Rep::redc(z); 361| 6.39k| return (*this); 362| 6.39k| } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE14invert_vartimeEv: 600| 1| constexpr Self invert_vartime() const { 601| | // Conditional ok: this function is variable time 602| 1| if(this->is_zero().as_bool()) { ------------------ | Branch (602:13): [True: 0, False: 1] ------------------ 603| 0| return Self::zero(); 604| 0| } 605| | 606| 1| auto x = Self(std::array{1}); // 1 in standard domain 607| 1| auto b = Self(this->to_words()); // *this in standard domain 608| | 609| | // First loop iteration 610| 1| Self::_invert_vartime_div2_helper(b, x); 611| | 612| 1| auto a = b.negate(); 613| | // y += x but y is zero at the outset 614| 1| auto y = x; 615| | 616| | // First half of second loop iteration 617| 1| Self::_invert_vartime_div2_helper(a, y); 618| | 619| 177| for(;;) { 620| | // Conditional ok: this function is variable time 621| 177| if(a.m_val == b.m_val) { ------------------ | Branch (621:16): [True: 1, False: 176] ------------------ 622| | // At this point it should be that a == b == 1 623| 1| auto r = y.negate(); 624| | 625| | // Convert back to Montgomery if required 626| 1| r.m_val = Rep::to_rep(r.m_val); 627| 1| return r; 628| 1| } 629| | 630| 176| const auto nx = x + y; 631| | 632| | /* 633| | * Otherwise either b > a or a > b 634| | * 635| | * If b > a we want to set b to b - a 636| | * Otherwise we want to set a to a - b 637| | * 638| | * Compute r = b - a and check if it underflowed 639| | * If it did not then we are in the b > a path 640| | */ 641| 176| std::array r; // NOLINT(*-member-init) 642| 176| const word carry = bigint_sub3(r.data(), b.data(), N, a.data(), N); 643| | 644| | // Conditional ok: this function is variable time 645| 176| if(carry == 0) { ------------------ | Branch (645:16): [True: 94, False: 82] ------------------ 646| | // b > a 647| 94| b.m_val = r; 648| 94| x = nx; 649| 94| Self::_invert_vartime_div2_helper(b, x); 650| 94| } else { 651| | // We know this can't underflow because a > b 652| 82| bigint_sub3(r.data(), a.data(), N, b.data(), N); 653| 82| a.m_val = r; 654| 82| y = nx; 655| 82| Self::_invert_vartime_div2_helper(a, y); 656| 82| } 657| 176| } 658| 1| } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE4zeroEv: 197| 8.82k| static constexpr Self zero() { return Self(std::array{0}); } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE8to_wordsEv: 736| 1| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_brainpool256r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES0_E11FieldParamsEE8from_repERKNSt3__15arrayImLm4EEE: 139| 181| constexpr static std::array from_rep(const std::array& z) { 140| 181| std::array ze = {}; 141| 181| copy_mem(std::span{ze}.template first(), z); 142| 181| return Self::redc(ze); 143| 181| } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE27_invert_vartime_div2_helperERSA_SB_: 549| 178| static constexpr void _invert_vartime_div2_helper(Self& a, Self& x) { 550| 178| constexpr auto INV_2 = p_div_2_plus_1(Rep::P); 551| | 552| | // Conditional ok: this function is variable time 553| 553| while((a.m_val[0] & 1) != 1) { ------------------ | Branch (553:16): [True: 375, False: 178] ------------------ 554| 375| shift_right<1>(a.m_val); 555| | 556| 375| const W borrow = shift_right<1>(x.m_val); 557| | 558| | // Conditional ok: this function is variable time 559| 375| if(borrow) { ------------------ | Branch (559:16): [True: 193, False: 182] ------------------ 560| 193| bigint_add2(x.m_val.data(), N, INV_2.data(), N); 561| 193| } 562| 375| } 563| 178| } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE6negateEv: 454| 4.41k| constexpr Self negate() const { 455| 4.41k| const W x_is_zero = ~CT::all_zeros(this->data(), N).value(); 456| | 457| 4.41k| std::array r; // NOLINT(*-member-init) 458| 4.41k| W carry = 0; 459| 22.0k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (459:28): [True: 17.6k, False: 4.41k] ------------------ 460| 17.6k| r[i] = word_sub(P[i] & x_is_zero, m_val[i], &carry); 461| 17.6k| } 462| | 463| 4.41k| return Self(r); 464| 4.41k| } pcurves_brainpool256r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES0_E11FieldParamsEE6to_repERKNSt3__15arrayImLm4EEE: 117| 1| constexpr static std::array to_rep(const std::array& x) { 118| 1| std::array z; // NOLINT(*-member-init) 119| 1| comba_mul(z.data(), x.data(), R2.data()); 120| 1| return Self::redc(z); 121| 1| } pcurves_brainpool256r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEEEC2ERKSB_SE_: 928| 6.24k| constexpr AffineCurvePoint(const FieldElement& x, const FieldElement& y) : m_x(x), m_y(y) {} pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE11stash_valueILm9EEENSt3__15arrayImXT_EEEv: 761| 450| std::array stash_value() const { 762| 450| static_assert(L >= N); 763| 450| std::array stash = {}; 764| 2.25k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (764:28): [True: 1.80k, False: 450] ------------------ 765| 1.80k| stash[i] = m_val[i]; 766| 1.80k| } 767| 450| return stash; 768| 450| } pcurves_brainpool256r1.cpp:_ZNK5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELm6EE3mulERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES7_E12ScalarParamsEEEEERNS_21RandomNumberGeneratorE: 1632| 90| ProjectivePoint mul(const Scalar& s, RandomNumberGenerator& rng) const { 1633| 90| const BlindingRandomness blinding(rng); 1634| 90| const BlindedScalar scalar(s, blinding); 1635| 90| return basemul_booth_exec(m_table, scalar, blinding); 1636| 90| } pcurves_brainpool256r1.cpp:_ZN5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELm7EEELm1EEC2ERNS_21RandomNumberGeneratorE: 1455| 90| explicit BlindingRandomness(RandomNumberGenerator& rng) : m_seeded(rng.is_seeded()) { 1456| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1457| 90| if(m_seeded) { ------------------ | Branch (1457:13): [True: 90, False: 0] ------------------ 1458| 90| std::array buf{}; 1459| 90| rng.randomize(buf); 1460| | 1461| 90| const std::span bytes(buf); 1462| | 1463| 90| copy_mem(m_masks, bytes.first()); 1464| | 1465| 450| for(size_t i = 0; i != Rerandomizations; ++i) { ------------------ | Branch (1465:31): [True: 360, False: 90] ------------------ 1466| 360| const auto wide = bytes.subspan(Scalars * MaskBytes + i * WideBytes).first(); 1467| 360| m_rerandomizers[i] = FieldElement::from_wide_bytes(wide); 1468| 360| } 1469| | 1470| 90| const auto iso = bytes.subspan(Scalars * MaskBytes + Rerandomizations * WideBytes).first(); 1471| 90| m_isomorphism = FieldElement::from_wide_bytes(iso); 1472| 90| m_isomorphism.conditional_assign(m_isomorphism.is_zero(), FieldElement::one()); 1473| 90| } 1474| 90| } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE15from_wide_bytesILm40EEESA_NSt3__14spanIKhXT_EEE: 818| 450| static constexpr Self from_wide_bytes(std::span bytes) { 819| 450| static_assert(8 * L <= 2 * Self::BITS); 820| 450| std::array padded_bytes = {}; 821| 450| copy_mem(std::span{padded_bytes}.template last(), bytes); 822| 450| return Self(Rep::wide_to_rep(bytes_to_words(std::span{padded_bytes}))); 823| 450| } pcurves_brainpool256r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES0_E11FieldParamsEE11wide_to_repERKNSt3__15arrayImLm8EEE: 129| 450| constexpr static std::array wide_to_rep(const std::array& x) { 130| 450| auto redc_x = Self::redc(x); 131| 450| std::array z; // NOLINT(*-member-init) 132| 450| comba_mul(z.data(), redc_x.data(), R3.data()); 133| 450| return Self::redc(z); 134| 450| } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE18conditional_assignENS_2CT6ChoiceERKSA_: 369| 4.41k| constexpr void conditional_assign(CT::Choice cond, const Self& nx) { 370| 4.41k| const W mask = cond.into_bitmask(); 371| | 372| 22.0k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (372:28): [True: 17.6k, False: 4.41k] ------------------ 373| 17.6k| m_val[i] = Botan::choose(mask, nx.m_val[i], m_val[i]); 374| 17.6k| } 375| 4.41k| } pcurves_brainpool256r1.cpp:_ZN5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELm7EEC2INS_18BlindingRandomnessIS5_Lm1EEEEERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsESA_E12ScalarParamsEEEEERKT_m: 1368| 90| BlindedScalarBits(const typename C::Scalar& scalar, const Randomness& randomness, size_t idx = 0) { 1369| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1370| 90| if(BlindingBits > 0 && randomness.seeded()) { ------------------ | Branch (1370:13): [True: 90, Folded] | Branch (1370:33): [True: 90, False: 0] ------------------ 1371| 90| constexpr size_t n_words = C::Words; 1372| | 1373| 90| W mask[n_words] = {0}; 1374| 90| load_le(mask, randomness.mask(idx).data(), MaskWords); 1375| | 1376| | // Mask to exactly BlindingBits 1377| 90| constexpr size_t ExcessBits = MaskWords * WordInfo::bits - BlindingBits; 1378| 90| if constexpr(ExcessBits > 0) { 1379| 90| constexpr W ExcessMask = (static_cast(1) << (WordInfo::bits - ExcessBits)) - 1; 1380| 90| mask[MaskWords - 1] &= ExcessMask; 1381| 90| } 1382| | 1383| | // Set top and bottom bits of mask 1384| 90| constexpr size_t TopMaskBit = (BlindingBits - 1) % WordInfo::bits; 1385| 90| mask[(BlindingBits - 1) / WordInfo::bits] |= static_cast(1) << TopMaskBit; 1386| 90| mask[0] |= 1; 1387| | 1388| 90| W mask_n[2 * n_words] = {0}; 1389| | 1390| 90| const auto sw = scalar.to_words(); 1391| | 1392| | // Compute masked scalar s + k*n 1393| 90| comba_mul(mask_n, mask, C::NW.data()); 1394| 90| bigint_add2(mask_n, 2 * n_words, sw.data(), sw.size()); 1395| | 1396| 90| std::reverse(mask_n, mask_n + 2 * n_words); 1397| 90| m_bytes = store_be>(mask_n); 1398| 90| m_bits = C::Scalar::BITS + BlindingBits; 1399| 90| } else { 1400| | // No RNG available, skip blinding 1401| 0| m_bytes.resize(C::Scalar::BYTES); 1402| 0| scalar.serialize_to(std::span{m_bytes}.template first()); 1403| 0| m_bits = C::Scalar::BITS; 1404| 0| } 1405| | 1406| 90| CT::poison(m_bytes.data(), m_bytes.size()); 1407| 90| } pcurves_brainpool256r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELm7EEELm1EE6seededEv: 1476| 90| bool seeded() const { return m_seeded; } pcurves_brainpool256r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELm7EEELm1EE4maskEm: 1478| 90| std::span mask(size_t idx) const { 1479| 90| BOTAN_ASSERT_NOMSG(idx < Scalars); ------------------ | | 84| 90| do { \ | | 85| 90| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 90| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 90] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 90| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 90] | | ------------------ ------------------ 1480| 90| return std::span{m_masks}.subspan(idx * MaskBytes).template first(); 1481| 90| } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E12ScalarParamsEEEE8to_wordsEv: 736| 90| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_brainpool256r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES0_E12ScalarParamsEE8from_repERKNSt3__15arrayImLm4EEE: 139| 180| constexpr static std::array from_rep(const std::array& z) { 140| 180| std::array ze = {}; 141| 180| copy_mem(std::span{ze}.template first(), z); 142| 180| return Self::redc(ze); 143| 180| } pcurves_brainpool256r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES0_E12ScalarParamsEE4redcERKNSt3__15arrayImLm8EEE: 106| 270| constexpr static std::array redc(const std::array& z) { 107| | if constexpr(P_dash == 1) { 108| | return monty_redc_pdash1(z, P); 109| 270| } else { 110| 270| return monty_redc(z, P, P_dash); 111| 270| } 112| 270| } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E12ScalarParamsEEEE12serialize_toENSt3__14spanIhLm32EEE: 741| 90| constexpr void serialize_to(std::span bytes) const { 742| 90| auto v = Rep::from_rep(m_val); 743| 90| std::reverse(v.begin(), v.end()); 744| | 745| 90| if constexpr(Self::BYTES == N * WordInfo::bytes) { 746| 90| store_be(bytes, v); 747| | } else { 748| | // Remove leading zero bytes 749| | const auto padded_bytes = store_be(v); 750| | constexpr size_t extra = N * WordInfo::bytes - Self::BYTES; 751| | copy_mem(bytes, std::span{padded_bytes}.template subspan()); 752| | } 753| 90| } pcurves_brainpool256r1.cpp:_ZNK5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELm7EE4bitsEv: 1362| 90| size_t bits() const { return m_bits; } pcurves_brainpool256r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_E18conditional_assignENS_2CT6ChoiceERKSC_: 1095| 90| constexpr void conditional_assign(CT::Choice cond, const Self& pt) { 1096| 90| FieldElement::conditional_assign(m_x, m_y, m_z, cond, pt.x(), pt.y(), pt.z()); 1097| 90| } pcurves_brainpool256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_E6negateEv: 1194| 90| constexpr Self negate() const { return Self(x(), y().negate(), z()); } pcurves_brainpool256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_E18_const_time_poisonEv: 1226| 90| constexpr void _const_time_poison() const { CT::poison_all(m_x, m_y, m_z); } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE18_const_time_poisonEv: 891| 270| constexpr void _const_time_poison() const { CT::poison(m_val); } pcurves_brainpool256r1.cpp:_ZNK5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELm7EE10get_windowEm: 1409| 4.41k| size_t get_window(size_t offset) const { 1410| | // Extract a WindowBits sized window out of s, depending on offset. 1411| 4.41k| return read_window_bits(std::span{m_bytes}, offset); 1412| 4.41k| } pcurves_brainpool256r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_E10add_or_subERKSC_RKNS_16AffineCurvePointISB_EENS_2CT6ChoiceE: 1121| 4.32k| constexpr static Self add_or_sub(const Self& a, const AffinePoint& b, CT::Choice sub) { 1122| 4.32k| return point_add_or_sub_mixed(a, b, sub, FieldElement::one(), A); 1123| 4.32k| } pcurves_brainpool256r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEEE9ct_selectENSt3__14spanIKSC_Lm18446744073709551615EEEm: 966| 4.41k| static constexpr auto ct_select(std::span pts, size_t idx) { 967| 4.41k| auto result = Self::identity(pts[0]); 968| | 969| | // Intentionally wrapping; set to maximum size_t if idx == 0 970| 4.41k| const size_t idx1 = idx - 1; 971| 145k| for(size_t i = 0; i != pts.size(); ++i) { ------------------ | Branch (971:28): [True: 141k, False: 4.41k] ------------------ 972| 141k| const auto found = CT::Mask::is_equal(idx1, i).as_choice(); 973| 141k| result.conditional_assign(found, pts[i]); 974| 141k| } 975| | 976| 4.41k| return result; 977| 4.41k| } pcurves_brainpool256r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEEE8identityERKSC_: 935| 4.41k| static constexpr Self identity(const Self& /*unused*/) { 936| 4.41k| return Self(FieldElement::zero(), FieldElement::zero()); 937| 4.41k| } pcurves_brainpool256r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEEE18conditional_assignENS_2CT6ChoiceERKSC_: 992| 141k| constexpr void conditional_assign(CT::Choice cond, const Self& pt) { 993| 141k| FieldElement::conditional_assign(m_x, m_y, cond, pt.x(), pt.y()); 994| 141k| } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE18conditional_assignERSA_SB_NS_2CT6ChoiceERKSA_SF_: 382| 141k| static constexpr void conditional_assign(Self& x, Self& y, CT::Choice cond, const Self& nx, const Self& ny) { 383| 141k| const W mask = cond.into_bitmask(); 384| | 385| 705k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (385:28): [True: 564k, False: 141k] ------------------ 386| 564k| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 387| 564k| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 388| 564k| } 389| 141k| } pcurves_brainpool256r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELm7EEELm1EE13randomize_repERNS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS4_6ParamsESA_E11FieldParamsEEEEESC_EEm: 1486| 360| void randomize_rep(typename C::ProjectivePoint& pt, size_t idx) const { 1487| 360| BOTAN_ASSERT_NOMSG(idx < Rerandomizations); ------------------ | | 84| 360| do { \ | | 85| 360| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 360| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 360] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 360| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 360] | | ------------------ ------------------ 1488| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1489| 360| if(m_seeded) { ------------------ | Branch (1489:13): [True: 360, False: 0] ------------------ 1490| 360| pt.randomize_rep(m_rerandomizers[idx]); 1491| 360| } 1492| 360| } pcurves_brainpool256r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_E13randomize_repERKSB_: 1202| 360| void randomize_rep(const FieldElement& r) { 1203| 360| const auto r2 = r.square(); 1204| 360| const auto r3 = r2 * r; 1205| | 1206| 360| m_x *= r2; 1207| 360| m_y *= r3; 1208| 360| m_z *= r; 1209| 360| } pcurves_brainpool256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEES7_E20_const_time_unpoisonEv: 1228| 90| constexpr void _const_time_unpoison() const { CT::unpoison_all(m_x, m_y, m_z); } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE20_const_time_unpoisonEv: 893| 270| constexpr void _const_time_unpoison() const { CT::unpoison(m_val); } pcurves_brainpool256r1.cpp:_ZN5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELm7EED2Ev: 1414| 90| ~BlindedScalarBits() { 1415| 90| secure_zeroize_buffer(m_bytes.data(), m_bytes.size()); 1416| 90| CT::unpoison(m_bytes.data(), m_bytes.size()); 1417| 90| } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E12ScalarParamsEEEE10from_stashILm9EEESA_RKNSt3__15arrayImXT_EEE: 776| 270| static Self from_stash(const std::array& stash) { 777| 270| static_assert(L >= N); 778| 270| std::array val = {}; 779| 1.35k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (779:28): [True: 1.08k, False: 270] ------------------ 780| 1.08k| val[i] = stash[i]; 781| 1.08k| } 782| 270| return Self(val); 783| 270| } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E12ScalarParamsEEEEC2ENSt3__15arrayImLm4EEE: 908| 360| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE12serialize_toENSt3__14spanIhLm32EEE: 741| 180| constexpr void serialize_to(std::span bytes) const { 742| 180| auto v = Rep::from_rep(m_val); 743| 180| std::reverse(v.begin(), v.end()); 744| | 745| 180| if constexpr(Self::BYTES == N * WordInfo::bytes) { 746| 180| store_be(bytes, v); 747| | } else { 748| | // Remove leading zero bytes 749| | const auto padded_bytes = store_be(v); 750| | constexpr size_t extra = N * WordInfo::bytes - Self::BYTES; 751| | copy_mem(bytes, std::span{padded_bytes}.template subspan()); 752| | } 753| 180| } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E12ScalarParamsEEEE11stash_valueILm9EEENSt3__15arrayImXT_EEEv: 761| 90| std::array stash_value() const { 762| 90| static_assert(L >= N); 763| 90| std::array stash = {}; 764| 450| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (764:28): [True: 360, False: 90] ------------------ 765| 360| stash[i] = m_val[i]; 766| 360| } 767| 90| return stash; 768| 90| } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEE10from_stashILm9EEESA_RKNSt3__15arrayImXT_EEE: 776| 630| static Self from_stash(const std::array& stash) { 777| 630| static_assert(L >= N); 778| 630| std::array val = {}; 779| 3.15k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (779:28): [True: 2.52k, False: 630] ------------------ 780| 2.52k| val[i] = stash[i]; 781| 2.52k| } 782| 630| return Self(val); 783| 630| } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E12ScalarParamsEEEE7is_zeroEv: 227| 180| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E11FieldParamsEEEEeqERKSA_: 724| 90| constexpr CT::Choice operator==(const Self& other) const { 725| 90| return CT::is_equal(this->data(), other.data(), N).as_choice(); 726| 90| } pcurves_brainpool256r1.cpp:_ZN5Botan13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsENS_13MontgomeryRepEE7x3_ax_bERKNS_6IntModINS5_INS6_11FieldParamsEEEEE: 1327| 90| static constexpr FieldElement x3_ax_b(const FieldElement& x) { return (x.square() + A) * x + B; } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E12ScalarParamsEEEE11deserializeENSt3__14spanIKhLm18446744073709551615EEE: 794| 142| static std::optional deserialize(std::span bytes) { 795| | // Conditional ok: input length is public 796| 142| if(bytes.size() != Self::BYTES) { ------------------ | Branch (796:13): [True: 0, False: 142] ------------------ 797| 0| return {}; 798| 0| } 799| | 800| 142| const auto words = bytes_to_words(bytes.first()); 801| | 802| | // Conditional acceptable: std::optional is implicitly not constant time 803| 142| if(!bigint_ct_is_lt(words.data(), N, P.data(), N).as_bool()) { ------------------ | Branch (803:13): [True: 52, False: 90] ------------------ 804| 52| return {}; 805| 52| } 806| | 807| | // Safe because we checked above that words is an integer < P 808| 90| return Self::from_words(words); 809| 142| } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E12ScalarParamsEEEE10from_wordsILm4EEESA_NSt3__15arrayImXT_EEE: 213| 90| static constexpr Self from_words(std::array w) { 214| 90| if constexpr(L == N) { 215| 90| return Self(Rep::to_rep(w)); 216| | } else { 217| | static_assert(L < N); 218| | std::array ew = {}; 219| | copy_mem(std::span{ew}.template first(), w); 220| | return Self(Rep::to_rep(ew)); 221| | } 222| 90| } pcurves_brainpool256r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES0_E12ScalarParamsEE6to_repERKNSt3__15arrayImLm4EEE: 117| 90| constexpr static std::array to_rep(const std::array& x) { 118| 90| std::array z; // NOLINT(*-member-init) 119| 90| comba_mul(z.data(), x.data(), R2.data()); 120| 90| return Self::redc(z); 121| 90| } pcurves_brainpool256r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES2_E11FieldParamsEEEEEE12serialize_toENSt3__14spanIhLm65EEE: 952| 90| constexpr void serialize_to(std::span bytes) const { 953| 90| BOTAN_STATE_CHECK(this->is_identity().as_bool() == false); ------------------ | | 51| 90| do { \ | | 52| 90| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 90| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 90] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 90| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 90] | | ------------------ ------------------ 954| 90| BufferStuffer pack(bytes); 955| 90| pack.append(0x04); 956| 90| x().serialize_to(pack.next()); 957| 90| y().serialize_to(pack.next()); 958| 90| BOTAN_DEBUG_ASSERT(pack.full()); ------------------ | | 137| 90| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 90| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 90] | | ------------------ ------------------ 959| 90| } pcurves_brainpool256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E12ScalarParamsEEEE6randomERNS_21RandomNumberGeneratorE: 853| 90| static Self random(RandomNumberGenerator& rng) { 854| 90| constexpr size_t MAX_ATTEMPTS = 1000; 855| | 856| 90| std::array buf{}; 857| | 858| 142| for(size_t i = 0; i != MAX_ATTEMPTS; ++i) { ------------------ | Branch (858:28): [True: 142, False: 0] ------------------ 859| 142| rng.randomize(buf); 860| | 861| | // Zero off high bits that if set would certainly cause us 862| | // to be out of range 863| | if constexpr(Self::BITS % 8 != 0) { 864| | constexpr uint8_t mask = 0xFF >> (8 - (Self::BITS % 8)); 865| | buf[0] &= mask; 866| | } 867| | 868| | // Conditionals ok: rejection sampling reveals only values we didn't use 869| 142| if(auto s = Self::deserialize(buf)) { ------------------ | Branch (869:21): [True: 90, False: 52] ------------------ 870| 90| if(s.value().is_nonzero().as_bool()) { ------------------ | Branch (870:19): [True: 90, False: 0] ------------------ 871| 90| return s.value(); 872| 90| } 873| 90| } 874| 142| } 875| | 876| 0| throw Internal_Error("Failed to generate random Scalar within bounded number of attempts"); 877| 90| } pcurves_brainpool256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool256r16ParamsES1_E12ScalarParamsEEEE10is_nonzeroEv: 232| 90| constexpr CT::Choice is_nonzero() const { return !is_zero(); } pcurves_brainpool384r1.cpp:_ZN5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELm6EEC2ERKNS_16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 1630| 1| m_table(basemul_booth_setup(p, BlindedScalar::Bits + 1)) {} pcurves_brainpool384r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_E11from_affineERKNS_16AffineCurvePointISB_EE: 1027| 127| static constexpr Self from_affine(const AffinePoint& pt) { 1028| | /* 1029| | * If the point is the identity element (x=0, y=0) then instead of 1030| | * creating (x, y, 1) = (0, 0, 1) we want our projective identity 1031| | * encoding of (0, 1, 0) 1032| | * 1033| | * Which we can achieve by a conditional swap of y and z if the 1034| | * affine point is the identity. 1035| | */ 1036| | 1037| 127| const auto x = pt.x(); 1038| 127| auto y = pt.y(); 1039| 127| auto z = FieldElement::one(); 1040| | 1041| 127| FieldElement::conditional_swap(pt.is_identity(), y, z); 1042| | 1043| 127| return ProjectiveCurvePoint(x, y, z); 1044| 127| } pcurves_brainpool384r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEEE1xEv: 982| 322k| constexpr const FieldElement& x() const { return m_x; } pcurves_brainpool384r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEEE1yEv: 987| 313k| constexpr const FieldElement& y() const { return m_y; } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE3oneEv: 202| 9.57k| static constexpr Self one() { return Self(Rep::one()); } pcurves_brainpool384r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES0_E11FieldParamsEE3oneEv: 101| 9.57k| constexpr static std::array one() { return R1; } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEEC2ENSt3__15arrayImLm6EEE: 908| 278k| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE16conditional_swapENS_2CT6ChoiceERSA_SD_: 412| 127| static constexpr void conditional_swap(CT::Choice cond, Self& x, Self& y) { 413| 127| const W mask = cond.into_bitmask(); 414| | 415| 889| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (415:28): [True: 762, False: 127] ------------------ 416| 762| const auto nx = Botan::choose(mask, y.m_val[i], x.m_val[i]); 417| 762| const auto ny = Botan::choose(mask, x.m_val[i], y.m_val[i]); 418| 762| x.m_val[i] = nx; 419| 762| y.m_val[i] = ny; 420| 762| } 421| 127| } pcurves_brainpool384r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEEE11is_identityEv: 939| 9.57k| constexpr CT::Choice is_identity() const { return x().is_zero() && y().is_zero(); } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE7is_zeroEv: 227| 53.2k| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_brainpool384r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_EC2ERKSB_SE_SE_: 1067| 11.7k| m_x(x), m_y(y), m_z(z) {} pcurves_brainpool384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_E3dblEv: 1181| 1.24k| constexpr Self dbl() const { 1182| | if constexpr(Self::A_is_minus_3) { 1183| | return dbl_a_minus_3(*this); 1184| | } else if constexpr(Self::A_is_zero) { 1185| | return dbl_a_zero(*this); 1186| 1.24k| } else { 1187| 1.24k| return dbl_generic(*this, A); 1188| 1.24k| } 1189| 1.24k| } pcurves_brainpool384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_E1zEv: 1224| 66.3k| constexpr const FieldElement& z() const { return m_z; } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE6squareEv: 428| 44.1k| constexpr BOTAN_FORCE_INLINE Self square() const { 429| 44.1k| std::array z; // NOLINT(*-member-init) 430| 44.1k| comba_sqr(z.data(), this->data()); 431| 44.1k| return Self(Rep::redc(z)); 432| 44.1k| } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE4dataEv: 898| 338k| constexpr const W* data() const { return m_val.data(); } pcurves_brainpool384r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES0_E11FieldParamsEE4redcERKNSt3__15arrayImLm12EEE: 106| 211k| constexpr static std::array redc(const std::array& z) { 107| | if constexpr(P_dash == 1) { 108| | return monty_redc_pdash1(z, P); 109| 211k| } else { 110| 211k| return monty_redc(z, P, P_dash); 111| 211k| } 112| 211k| } pcurves_brainpool384r1.cpp:_ZN5BotanplERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEEESC_: 267| 13.1k| friend constexpr BOTAN_FORCE_INLINE Self operator+(const Self& a, const Self& b) { 268| 13.1k| std::array t; // NOLINT(*-member-init) 269| | 270| 13.1k| W carry = 0; 271| 92.1k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (271:28): [True: 78.9k, False: 13.1k] ------------------ 272| 78.9k| t[i] = word_add(a.m_val[i], b.m_val[i], &carry); 273| 78.9k| } 274| | 275| 13.1k| std::array r; // NOLINT(*-member-init) 276| 13.1k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 277| 13.1k| return Self(r); 278| 13.1k| } pcurves_brainpool384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_E1xEv: 1214| 36.9k| constexpr const FieldElement& x() const { return m_x; } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE4mul3Ev: 337| 1.24k| constexpr inline Self mul3() const { return mul2() + (*this); } pcurves_brainpool384r1.cpp:_ZN5BotanmlERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEEESC_: 348| 107k| friend constexpr BOTAN_FORCE_INLINE Self operator*(const Self& a, const Self& b) { 349| 107k| std::array z; // NOLINT(*-member-init) 350| 107k| comba_mul(z.data(), a.data(), b.data()); 351| 107k| return Self(Rep::redc(z)); 352| 107k| } pcurves_brainpool384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_E1yEv: 1219| 36.9k| constexpr const FieldElement& y() const { return m_y; } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE4mul4Ev: 340| 1.24k| constexpr inline Self mul4() const { return mul2().mul2(); } pcurves_brainpool384r1.cpp:_ZN5BotanmiERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEEESC_: 283| 64.7k| friend constexpr BOTAN_FORCE_INLINE Self operator-(const Self& a, const Self& b) { 284| 64.7k| std::array r; // NOLINT(*-member-init) 285| 64.7k| W carry = 0; 286| 453k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (286:28): [True: 388k, False: 64.7k] ------------------ 287| 388k| r[i] = word_sub(a.m_val[i], b.m_val[i], &carry); 288| 388k| } 289| | 290| 64.7k| const auto mask = CT::Mask::expand(carry).value(); 291| | 292| 64.7k| carry = 0; 293| | 294| 453k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (294:28): [True: 388k, False: 64.7k] ------------------ 295| 388k| r[i] = word_add(r[i], P[i] & mask, &carry); 296| 388k| } 297| | 298| 64.7k| return Self(r); 299| 64.7k| } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE4mul2Ev: 327| 9.92k| constexpr BOTAN_FORCE_INLINE Self mul2() const { 328| 9.92k| std::array t = value(); 329| 9.92k| const W carry = shift_left<1>(t); 330| | 331| 9.92k| std::array r; // NOLINT(*-member-init) 332| 9.92k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 333| 9.92k| return Self(r); 334| 9.92k| } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE5valueEv: 896| 9.92k| constexpr const std::array& value() const { return m_val; } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE4mul8Ev: 343| 1.24k| constexpr inline Self mul8() const { return mul2().mul2().mul2(); } pcurves_brainpool384r1.cpp:_ZN5BotanplERKNS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_EESE_: 1075| 1.09k| friend constexpr Self operator+(const Self& a, const Self& b) { return Self::add(a, b); } pcurves_brainpool384r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_E3addERKSC_SE_: 1138| 1.09k| constexpr static Self add(const Self& a, const Self& b) { return point_add(a, b); } pcurves_brainpool384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_E11is_identityEv: 1093| 13.5k| constexpr CT::Choice is_identity() const { return z().is_zero(); } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE18conditional_assignERSA_SB_SB_NS_2CT6ChoiceERKSA_SF_SF_: 397| 20.4k| Self& x, Self& y, Self& z, CT::Choice cond, const Self& nx, const Self& ny, const Self& nz) { 398| 20.4k| const W mask = cond.into_bitmask(); 399| | 400| 143k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (400:28): [True: 122k, False: 20.4k] ------------------ 401| 122k| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 402| 122k| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 403| 122k| z.m_val[i] = Botan::choose(mask, nz.m_val[i], z.m_val[i]); 404| 122k| } 405| 20.4k| } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE6invertEv: 540| 126| constexpr Self invert() const { return pow_vartime(Self::P_MINUS_2); } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE11pow_vartimeERKNSt3__15arrayImLm6EEE: 479| 126| constexpr Self pow_vartime(const std::array& exp) const { 480| 126| constexpr size_t WindowBits = (Self::BITS <= 256) ? 4 : 5; ------------------ | Branch (480:40): [Folded, False: 126] ------------------ 481| 126| constexpr size_t WindowElements = (1 << WindowBits) - 1; 482| | 483| 126| constexpr size_t Windows = (Self::BITS + WindowBits - 1) / WindowBits; 484| | 485| | /* 486| | A simple fixed width window modular multiplication. 487| | 488| | TODO: investigate using sliding window here 489| | */ 490| | 491| 126| std::array tbl; 492| | 493| 126| tbl[0] = (*this); 494| | 495| 3.90k| for(size_t i = 1; i != WindowElements; ++i) { ------------------ | Branch (495:28): [True: 3.78k, False: 126] ------------------ 496| | // Conditional ok: table indexes are public here 497| 3.78k| if(i % 2 == 1) { ------------------ | Branch (497:16): [True: 1.89k, False: 1.89k] ------------------ 498| 1.89k| tbl[i] = tbl[i / 2].square(); 499| 1.89k| } else { 500| 1.89k| tbl[i] = tbl[i - 1] * tbl[0]; 501| 1.89k| } 502| 3.78k| } 503| | 504| 126| auto r = Self::one(); 505| | 506| 126| const size_t w0 = read_window_bits(std::span{exp}, (Windows - 1) * WindowBits); 507| | 508| | // Conditional ok: this function is variable time 509| 126| if(w0 > 0) { ------------------ | Branch (509:13): [True: 126, False: 0] ------------------ 510| 126| r = tbl[w0 - 1]; 511| 126| } 512| | 513| 9.70k| for(size_t i = 1; i != Windows; ++i) { ------------------ | Branch (513:28): [True: 9.57k, False: 126] ------------------ 514| 9.57k| r.square_n(WindowBits); 515| | 516| 9.57k| const size_t w = read_window_bits(std::span{exp}, (Windows - i - 1) * WindowBits); 517| | 518| | // Conditional ok: this function is variable time 519| 9.57k| if(w > 0) { ------------------ | Branch (519:16): [True: 9.19k, False: 378] ------------------ 520| 9.19k| r *= tbl[w - 1]; 521| 9.19k| } 522| 9.57k| } 523| | 524| 126| return r; 525| 126| } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEEC2Ev: 182| 4.41k| constexpr IntMod() : m_val({}) {} pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE8square_nEm: 441| 9.57k| constexpr void square_n(size_t n) { 442| 9.57k| std::array z; // NOLINT(*-member-init) 443| 57.4k| for(size_t i = 0; i != n; ++i) { ------------------ | Branch (443:28): [True: 47.8k, False: 9.57k] ------------------ 444| 47.8k| comba_sqr(z.data(), this->data()); 445| 47.8k| m_val = Rep::redc(z); 446| 47.8k| } 447| 9.57k| } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEEmLERKSA_: 357| 10.7k| constexpr BOTAN_FORCE_INLINE Self& operator*=(const Self& other) { 358| 10.7k| std::array z; // NOLINT(*-member-init) 359| 10.7k| comba_mul(z.data(), data(), other.data()); 360| 10.7k| m_val = Rep::redc(z); 361| 10.7k| return (*this); 362| 10.7k| } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE14invert_vartimeEv: 600| 1| constexpr Self invert_vartime() const { 601| | // Conditional ok: this function is variable time 602| 1| if(this->is_zero().as_bool()) { ------------------ | Branch (602:13): [True: 0, False: 1] ------------------ 603| 0| return Self::zero(); 604| 0| } 605| | 606| 1| auto x = Self(std::array{1}); // 1 in standard domain 607| 1| auto b = Self(this->to_words()); // *this in standard domain 608| | 609| | // First loop iteration 610| 1| Self::_invert_vartime_div2_helper(b, x); 611| | 612| 1| auto a = b.negate(); 613| | // y += x but y is zero at the outset 614| 1| auto y = x; 615| | 616| | // First half of second loop iteration 617| 1| Self::_invert_vartime_div2_helper(a, y); 618| | 619| 262| for(;;) { 620| | // Conditional ok: this function is variable time 621| 262| if(a.m_val == b.m_val) { ------------------ | Branch (621:16): [True: 1, False: 261] ------------------ 622| | // At this point it should be that a == b == 1 623| 1| auto r = y.negate(); 624| | 625| | // Convert back to Montgomery if required 626| 1| r.m_val = Rep::to_rep(r.m_val); 627| 1| return r; 628| 1| } 629| | 630| 261| const auto nx = x + y; 631| | 632| | /* 633| | * Otherwise either b > a or a > b 634| | * 635| | * If b > a we want to set b to b - a 636| | * Otherwise we want to set a to a - b 637| | * 638| | * Compute r = b - a and check if it underflowed 639| | * If it did not then we are in the b > a path 640| | */ 641| 261| std::array r; // NOLINT(*-member-init) 642| 261| const word carry = bigint_sub3(r.data(), b.data(), N, a.data(), N); 643| | 644| | // Conditional ok: this function is variable time 645| 261| if(carry == 0) { ------------------ | Branch (645:16): [True: 128, False: 133] ------------------ 646| | // b > a 647| 128| b.m_val = r; 648| 128| x = nx; 649| 128| Self::_invert_vartime_div2_helper(b, x); 650| 133| } else { 651| | // We know this can't underflow because a > b 652| 133| bigint_sub3(r.data(), a.data(), N, b.data(), N); 653| 133| a.m_val = r; 654| 133| y = nx; 655| 133| Self::_invert_vartime_div2_helper(a, y); 656| 133| } 657| 261| } 658| 1| } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE4zeroEv: 197| 18.3k| static constexpr Self zero() { return Self(std::array{0}); } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE8to_wordsEv: 736| 1| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_brainpool384r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES0_E11FieldParamsEE8from_repERKNSt3__15arrayImLm6EEE: 139| 253| constexpr static std::array from_rep(const std::array& z) { 140| 253| std::array ze = {}; 141| 253| copy_mem(std::span{ze}.template first(), z); 142| 253| return Self::redc(ze); 143| 253| } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE27_invert_vartime_div2_helperERSA_SB_: 549| 263| static constexpr void _invert_vartime_div2_helper(Self& a, Self& x) { 550| 263| constexpr auto INV_2 = p_div_2_plus_1(Rep::P); 551| | 552| | // Conditional ok: this function is variable time 553| 814| while((a.m_val[0] & 1) != 1) { ------------------ | Branch (553:16): [True: 551, False: 263] ------------------ 554| 551| shift_right<1>(a.m_val); 555| | 556| 551| const W borrow = shift_right<1>(x.m_val); 557| | 558| | // Conditional ok: this function is variable time 559| 551| if(borrow) { ------------------ | Branch (559:16): [True: 291, False: 260] ------------------ 560| 291| bigint_add2(x.m_val.data(), N, INV_2.data(), N); 561| 291| } 562| 551| } 563| 263| } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE6negateEv: 454| 9.20k| constexpr Self negate() const { 455| 9.20k| const W x_is_zero = ~CT::all_zeros(this->data(), N).value(); 456| | 457| 9.20k| std::array r; // NOLINT(*-member-init) 458| 9.20k| W carry = 0; 459| 64.4k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (459:28): [True: 55.2k, False: 9.20k] ------------------ 460| 55.2k| r[i] = word_sub(P[i] & x_is_zero, m_val[i], &carry); 461| 55.2k| } 462| | 463| 9.20k| return Self(r); 464| 9.20k| } pcurves_brainpool384r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES0_E11FieldParamsEE6to_repERKNSt3__15arrayImLm6EEE: 117| 1| constexpr static std::array to_rep(const std::array& x) { 118| 1| std::array z; // NOLINT(*-member-init) 119| 1| comba_mul(z.data(), x.data(), R2.data()); 120| 1| return Self::redc(z); 121| 1| } pcurves_brainpool384r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEEEC2ERKSB_SE_: 928| 11.9k| constexpr AffineCurvePoint(const FieldElement& x, const FieldElement& y) : m_x(x), m_y(y) {} pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE11stash_valueILm9EEENSt3__15arrayImXT_EEEv: 761| 630| std::array stash_value() const { 762| 630| static_assert(L >= N); 763| 630| std::array stash = {}; 764| 4.41k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (764:28): [True: 3.78k, False: 630] ------------------ 765| 3.78k| stash[i] = m_val[i]; 766| 3.78k| } 767| 630| return stash; 768| 630| } pcurves_brainpool384r1.cpp:_ZNK5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELm6EE3mulERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES7_E12ScalarParamsEEEEERNS_21RandomNumberGeneratorE: 1632| 126| ProjectivePoint mul(const Scalar& s, RandomNumberGenerator& rng) const { 1633| 126| const BlindingRandomness blinding(rng); 1634| 126| const BlindedScalar scalar(s, blinding); 1635| 126| return basemul_booth_exec(m_table, scalar, blinding); 1636| 126| } pcurves_brainpool384r1.cpp:_ZN5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELm7EEELm1EEC2ERNS_21RandomNumberGeneratorE: 1455| 126| explicit BlindingRandomness(RandomNumberGenerator& rng) : m_seeded(rng.is_seeded()) { 1456| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1457| 126| if(m_seeded) { ------------------ | Branch (1457:13): [True: 126, False: 0] ------------------ 1458| 126| std::array buf{}; 1459| 126| rng.randomize(buf); 1460| | 1461| 126| const std::span bytes(buf); 1462| | 1463| 126| copy_mem(m_masks, bytes.first()); 1464| | 1465| 630| for(size_t i = 0; i != Rerandomizations; ++i) { ------------------ | Branch (1465:31): [True: 504, False: 126] ------------------ 1466| 504| const auto wide = bytes.subspan(Scalars * MaskBytes + i * WideBytes).first(); 1467| 504| m_rerandomizers[i] = FieldElement::from_wide_bytes(wide); 1468| 504| } 1469| | 1470| 126| const auto iso = bytes.subspan(Scalars * MaskBytes + Rerandomizations * WideBytes).first(); 1471| 126| m_isomorphism = FieldElement::from_wide_bytes(iso); 1472| 126| m_isomorphism.conditional_assign(m_isomorphism.is_zero(), FieldElement::one()); 1473| 126| } 1474| 126| } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE15from_wide_bytesILm56EEESA_NSt3__14spanIKhXT_EEE: 818| 630| static constexpr Self from_wide_bytes(std::span bytes) { 819| 630| static_assert(8 * L <= 2 * Self::BITS); 820| 630| std::array padded_bytes = {}; 821| 630| copy_mem(std::span{padded_bytes}.template last(), bytes); 822| 630| return Self(Rep::wide_to_rep(bytes_to_words(std::span{padded_bytes}))); 823| 630| } pcurves_brainpool384r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES0_E11FieldParamsEE11wide_to_repERKNSt3__15arrayImLm12EEE: 129| 630| constexpr static std::array wide_to_rep(const std::array& x) { 130| 630| auto redc_x = Self::redc(x); 131| 630| std::array z; // NOLINT(*-member-init) 132| 630| comba_mul(z.data(), redc_x.data(), R3.data()); 133| 630| return Self::redc(z); 134| 630| } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE18conditional_assignENS_2CT6ChoiceERKSA_: 369| 9.19k| constexpr void conditional_assign(CT::Choice cond, const Self& nx) { 370| 9.19k| const W mask = cond.into_bitmask(); 371| | 372| 64.3k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (372:28): [True: 55.1k, False: 9.19k] ------------------ 373| 55.1k| m_val[i] = Botan::choose(mask, nx.m_val[i], m_val[i]); 374| 55.1k| } 375| 9.19k| } pcurves_brainpool384r1.cpp:_ZN5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELm7EEC2INS_18BlindingRandomnessIS5_Lm1EEEEERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsESA_E12ScalarParamsEEEEERKT_m: 1368| 126| BlindedScalarBits(const typename C::Scalar& scalar, const Randomness& randomness, size_t idx = 0) { 1369| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1370| 126| if(BlindingBits > 0 && randomness.seeded()) { ------------------ | Branch (1370:13): [True: 126, Folded] | Branch (1370:33): [True: 126, False: 0] ------------------ 1371| 126| constexpr size_t n_words = C::Words; 1372| | 1373| 126| W mask[n_words] = {0}; 1374| 126| load_le(mask, randomness.mask(idx).data(), MaskWords); 1375| | 1376| | // Mask to exactly BlindingBits 1377| 126| constexpr size_t ExcessBits = MaskWords * WordInfo::bits - BlindingBits; 1378| 126| if constexpr(ExcessBits > 0) { 1379| 126| constexpr W ExcessMask = (static_cast(1) << (WordInfo::bits - ExcessBits)) - 1; 1380| 126| mask[MaskWords - 1] &= ExcessMask; 1381| 126| } 1382| | 1383| | // Set top and bottom bits of mask 1384| 126| constexpr size_t TopMaskBit = (BlindingBits - 1) % WordInfo::bits; 1385| 126| mask[(BlindingBits - 1) / WordInfo::bits] |= static_cast(1) << TopMaskBit; 1386| 126| mask[0] |= 1; 1387| | 1388| 126| W mask_n[2 * n_words] = {0}; 1389| | 1390| 126| const auto sw = scalar.to_words(); 1391| | 1392| | // Compute masked scalar s + k*n 1393| 126| comba_mul(mask_n, mask, C::NW.data()); 1394| 126| bigint_add2(mask_n, 2 * n_words, sw.data(), sw.size()); 1395| | 1396| 126| std::reverse(mask_n, mask_n + 2 * n_words); 1397| 126| m_bytes = store_be>(mask_n); 1398| 126| m_bits = C::Scalar::BITS + BlindingBits; 1399| 126| } else { 1400| | // No RNG available, skip blinding 1401| 0| m_bytes.resize(C::Scalar::BYTES); 1402| 0| scalar.serialize_to(std::span{m_bytes}.template first()); 1403| 0| m_bits = C::Scalar::BITS; 1404| 0| } 1405| | 1406| 126| CT::poison(m_bytes.data(), m_bytes.size()); 1407| 126| } pcurves_brainpool384r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELm7EEELm1EE6seededEv: 1476| 126| bool seeded() const { return m_seeded; } pcurves_brainpool384r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELm7EEELm1EE4maskEm: 1478| 126| std::span mask(size_t idx) const { 1479| 126| BOTAN_ASSERT_NOMSG(idx < Scalars); ------------------ | | 84| 126| do { \ | | 85| 126| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 126| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 126] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 126| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 126] | | ------------------ ------------------ 1480| 126| return std::span{m_masks}.subspan(idx * MaskBytes).template first(); 1481| 126| } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E12ScalarParamsEEEE8to_wordsEv: 736| 126| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_brainpool384r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES0_E12ScalarParamsEE8from_repERKNSt3__15arrayImLm6EEE: 139| 252| constexpr static std::array from_rep(const std::array& z) { 140| 252| std::array ze = {}; 141| 252| copy_mem(std::span{ze}.template first(), z); 142| 252| return Self::redc(ze); 143| 252| } pcurves_brainpool384r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES0_E12ScalarParamsEE4redcERKNSt3__15arrayImLm12EEE: 106| 378| constexpr static std::array redc(const std::array& z) { 107| | if constexpr(P_dash == 1) { 108| | return monty_redc_pdash1(z, P); 109| 378| } else { 110| 378| return monty_redc(z, P, P_dash); 111| 378| } 112| 378| } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E12ScalarParamsEEEE12serialize_toENSt3__14spanIhLm48EEE: 741| 126| constexpr void serialize_to(std::span bytes) const { 742| 126| auto v = Rep::from_rep(m_val); 743| 126| std::reverse(v.begin(), v.end()); 744| | 745| 126| if constexpr(Self::BYTES == N * WordInfo::bytes) { 746| 126| store_be(bytes, v); 747| | } else { 748| | // Remove leading zero bytes 749| | const auto padded_bytes = store_be(v); 750| | constexpr size_t extra = N * WordInfo::bytes - Self::BYTES; 751| | copy_mem(bytes, std::span{padded_bytes}.template subspan()); 752| | } 753| 126| } pcurves_brainpool384r1.cpp:_ZNK5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELm7EE4bitsEv: 1362| 126| size_t bits() const { return m_bits; } pcurves_brainpool384r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_E18conditional_assignENS_2CT6ChoiceERKSC_: 1095| 126| constexpr void conditional_assign(CT::Choice cond, const Self& pt) { 1096| 126| FieldElement::conditional_assign(m_x, m_y, m_z, cond, pt.x(), pt.y(), pt.z()); 1097| 126| } pcurves_brainpool384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_E6negateEv: 1194| 126| constexpr Self negate() const { return Self(x(), y().negate(), z()); } pcurves_brainpool384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_E18_const_time_poisonEv: 1226| 126| constexpr void _const_time_poison() const { CT::poison_all(m_x, m_y, m_z); } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE18_const_time_poisonEv: 891| 378| constexpr void _const_time_poison() const { CT::poison(m_val); } pcurves_brainpool384r1.cpp:_ZNK5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELm7EE10get_windowEm: 1409| 9.19k| size_t get_window(size_t offset) const { 1410| | // Extract a WindowBits sized window out of s, depending on offset. 1411| 9.19k| return read_window_bits(std::span{m_bytes}, offset); 1412| 9.19k| } pcurves_brainpool384r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_E10add_or_subERKSC_RKNS_16AffineCurvePointISB_EENS_2CT6ChoiceE: 1121| 9.07k| constexpr static Self add_or_sub(const Self& a, const AffinePoint& b, CT::Choice sub) { 1122| 9.07k| return point_add_or_sub_mixed(a, b, sub, FieldElement::one(), A); 1123| 9.07k| } pcurves_brainpool384r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEEE9ct_selectENSt3__14spanIKSC_Lm18446744073709551615EEEm: 966| 9.19k| static constexpr auto ct_select(std::span pts, size_t idx) { 967| 9.19k| auto result = Self::identity(pts[0]); 968| | 969| | // Intentionally wrapping; set to maximum size_t if idx == 0 970| 9.19k| const size_t idx1 = idx - 1; 971| 303k| for(size_t i = 0; i != pts.size(); ++i) { ------------------ | Branch (971:28): [True: 294k, False: 9.19k] ------------------ 972| 294k| const auto found = CT::Mask::is_equal(idx1, i).as_choice(); 973| 294k| result.conditional_assign(found, pts[i]); 974| 294k| } 975| | 976| 9.19k| return result; 977| 9.19k| } pcurves_brainpool384r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEEE8identityERKSC_: 935| 9.19k| static constexpr Self identity(const Self& /*unused*/) { 936| 9.19k| return Self(FieldElement::zero(), FieldElement::zero()); 937| 9.19k| } pcurves_brainpool384r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEEE18conditional_assignENS_2CT6ChoiceERKSC_: 992| 294k| constexpr void conditional_assign(CT::Choice cond, const Self& pt) { 993| 294k| FieldElement::conditional_assign(m_x, m_y, cond, pt.x(), pt.y()); 994| 294k| } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE18conditional_assignERSA_SB_NS_2CT6ChoiceERKSA_SF_: 382| 294k| static constexpr void conditional_assign(Self& x, Self& y, CT::Choice cond, const Self& nx, const Self& ny) { 383| 294k| const W mask = cond.into_bitmask(); 384| | 385| 2.06M| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (385:28): [True: 1.76M, False: 294k] ------------------ 386| 1.76M| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 387| 1.76M| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 388| 1.76M| } 389| 294k| } pcurves_brainpool384r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELm7EEELm1EE13randomize_repERNS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS4_6ParamsESA_E11FieldParamsEEEEESC_EEm: 1486| 504| void randomize_rep(typename C::ProjectivePoint& pt, size_t idx) const { 1487| 504| BOTAN_ASSERT_NOMSG(idx < Rerandomizations); ------------------ | | 84| 504| do { \ | | 85| 504| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 504| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 504] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 504| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 504] | | ------------------ ------------------ 1488| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1489| 504| if(m_seeded) { ------------------ | Branch (1489:13): [True: 504, False: 0] ------------------ 1490| 504| pt.randomize_rep(m_rerandomizers[idx]); 1491| 504| } 1492| 504| } pcurves_brainpool384r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_E13randomize_repERKSB_: 1202| 504| void randomize_rep(const FieldElement& r) { 1203| 504| const auto r2 = r.square(); 1204| 504| const auto r3 = r2 * r; 1205| | 1206| 504| m_x *= r2; 1207| 504| m_y *= r3; 1208| 504| m_z *= r; 1209| 504| } pcurves_brainpool384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEES7_E20_const_time_unpoisonEv: 1228| 126| constexpr void _const_time_unpoison() const { CT::unpoison_all(m_x, m_y, m_z); } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE20_const_time_unpoisonEv: 893| 378| constexpr void _const_time_unpoison() const { CT::unpoison(m_val); } pcurves_brainpool384r1.cpp:_ZN5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELm7EED2Ev: 1414| 126| ~BlindedScalarBits() { 1415| 126| secure_zeroize_buffer(m_bytes.data(), m_bytes.size()); 1416| 126| CT::unpoison(m_bytes.data(), m_bytes.size()); 1417| 126| } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E12ScalarParamsEEEE10from_stashILm9EEESA_RKNSt3__15arrayImXT_EEE: 776| 378| static Self from_stash(const std::array& stash) { 777| 378| static_assert(L >= N); 778| 378| std::array val = {}; 779| 2.64k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (779:28): [True: 2.26k, False: 378] ------------------ 780| 2.26k| val[i] = stash[i]; 781| 2.26k| } 782| 378| return Self(val); 783| 378| } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E12ScalarParamsEEEEC2ENSt3__15arrayImLm6EEE: 908| 504| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE12serialize_toENSt3__14spanIhLm48EEE: 741| 252| constexpr void serialize_to(std::span bytes) const { 742| 252| auto v = Rep::from_rep(m_val); 743| 252| std::reverse(v.begin(), v.end()); 744| | 745| 252| if constexpr(Self::BYTES == N * WordInfo::bytes) { 746| 252| store_be(bytes, v); 747| | } else { 748| | // Remove leading zero bytes 749| | const auto padded_bytes = store_be(v); 750| | constexpr size_t extra = N * WordInfo::bytes - Self::BYTES; 751| | copy_mem(bytes, std::span{padded_bytes}.template subspan()); 752| | } 753| 252| } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E12ScalarParamsEEEE11stash_valueILm9EEENSt3__15arrayImXT_EEEv: 761| 126| std::array stash_value() const { 762| 126| static_assert(L >= N); 763| 126| std::array stash = {}; 764| 882| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (764:28): [True: 756, False: 126] ------------------ 765| 756| stash[i] = m_val[i]; 766| 756| } 767| 126| return stash; 768| 126| } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEE10from_stashILm9EEESA_RKNSt3__15arrayImXT_EEE: 776| 882| static Self from_stash(const std::array& stash) { 777| 882| static_assert(L >= N); 778| 882| std::array val = {}; 779| 6.17k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (779:28): [True: 5.29k, False: 882] ------------------ 780| 5.29k| val[i] = stash[i]; 781| 5.29k| } 782| 882| return Self(val); 783| 882| } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E12ScalarParamsEEEE7is_zeroEv: 227| 252| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E11FieldParamsEEEEeqERKSA_: 724| 126| constexpr CT::Choice operator==(const Self& other) const { 725| 126| return CT::is_equal(this->data(), other.data(), N).as_choice(); 726| 126| } pcurves_brainpool384r1.cpp:_ZN5Botan13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsENS_13MontgomeryRepEE7x3_ax_bERKNS_6IntModINS5_INS6_11FieldParamsEEEEE: 1327| 126| static constexpr FieldElement x3_ax_b(const FieldElement& x) { return (x.square() + A) * x + B; } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E12ScalarParamsEEEE11deserializeENSt3__14spanIKhLm18446744073709551615EEE: 794| 223| static std::optional deserialize(std::span bytes) { 795| | // Conditional ok: input length is public 796| 223| if(bytes.size() != Self::BYTES) { ------------------ | Branch (796:13): [True: 0, False: 223] ------------------ 797| 0| return {}; 798| 0| } 799| | 800| 223| const auto words = bytes_to_words(bytes.first()); 801| | 802| | // Conditional acceptable: std::optional is implicitly not constant time 803| 223| if(!bigint_ct_is_lt(words.data(), N, P.data(), N).as_bool()) { ------------------ | Branch (803:13): [True: 97, False: 126] ------------------ 804| 97| return {}; 805| 97| } 806| | 807| | // Safe because we checked above that words is an integer < P 808| 126| return Self::from_words(words); 809| 223| } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E12ScalarParamsEEEE10from_wordsILm6EEESA_NSt3__15arrayImXT_EEE: 213| 126| static constexpr Self from_words(std::array w) { 214| 126| if constexpr(L == N) { 215| 126| return Self(Rep::to_rep(w)); 216| | } else { 217| | static_assert(L < N); 218| | std::array ew = {}; 219| | copy_mem(std::span{ew}.template first(), w); 220| | return Self(Rep::to_rep(ew)); 221| | } 222| 126| } pcurves_brainpool384r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES0_E12ScalarParamsEE6to_repERKNSt3__15arrayImLm6EEE: 117| 126| constexpr static std::array to_rep(const std::array& x) { 118| 126| std::array z; // NOLINT(*-member-init) 119| 126| comba_mul(z.data(), x.data(), R2.data()); 120| 126| return Self::redc(z); 121| 126| } pcurves_brainpool384r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES2_E11FieldParamsEEEEEE12serialize_toENSt3__14spanIhLm97EEE: 952| 126| constexpr void serialize_to(std::span bytes) const { 953| 126| BOTAN_STATE_CHECK(this->is_identity().as_bool() == false); ------------------ | | 51| 126| do { \ | | 52| 126| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 126| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 126] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 126| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 126] | | ------------------ ------------------ 954| 126| BufferStuffer pack(bytes); 955| 126| pack.append(0x04); 956| 126| x().serialize_to(pack.next()); 957| 126| y().serialize_to(pack.next()); 958| 126| BOTAN_DEBUG_ASSERT(pack.full()); ------------------ | | 137| 126| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 126| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 126] | | ------------------ ------------------ 959| 126| } pcurves_brainpool384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E12ScalarParamsEEEE6randomERNS_21RandomNumberGeneratorE: 853| 126| static Self random(RandomNumberGenerator& rng) { 854| 126| constexpr size_t MAX_ATTEMPTS = 1000; 855| | 856| 126| std::array buf{}; 857| | 858| 223| for(size_t i = 0; i != MAX_ATTEMPTS; ++i) { ------------------ | Branch (858:28): [True: 223, False: 0] ------------------ 859| 223| rng.randomize(buf); 860| | 861| | // Zero off high bits that if set would certainly cause us 862| | // to be out of range 863| | if constexpr(Self::BITS % 8 != 0) { 864| | constexpr uint8_t mask = 0xFF >> (8 - (Self::BITS % 8)); 865| | buf[0] &= mask; 866| | } 867| | 868| | // Conditionals ok: rejection sampling reveals only values we didn't use 869| 223| if(auto s = Self::deserialize(buf)) { ------------------ | Branch (869:21): [True: 126, False: 97] ------------------ 870| 126| if(s.value().is_nonzero().as_bool()) { ------------------ | Branch (870:19): [True: 126, False: 0] ------------------ 871| 126| return s.value(); 872| 126| } 873| 126| } 874| 223| } 875| | 876| 0| throw Internal_Error("Failed to generate random Scalar within bounded number of attempts"); 877| 126| } pcurves_brainpool384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool384r16ParamsES1_E12ScalarParamsEEEE10is_nonzeroEv: 232| 126| constexpr CT::Choice is_nonzero() const { return !is_zero(); } pcurves_brainpool512r1.cpp:_ZN5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELm6EEC2ERKNS_16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 1630| 1| m_table(basemul_booth_setup(p, BlindedScalar::Bits + 1)) {} pcurves_brainpool512r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_E11from_affineERKNS_16AffineCurvePointISB_EE: 1027| 90| static constexpr Self from_affine(const AffinePoint& pt) { 1028| | /* 1029| | * If the point is the identity element (x=0, y=0) then instead of 1030| | * creating (x, y, 1) = (0, 0, 1) we want our projective identity 1031| | * encoding of (0, 1, 0) 1032| | * 1033| | * Which we can achieve by a conditional swap of y and z if the 1034| | * affine point is the identity. 1035| | */ 1036| | 1037| 90| const auto x = pt.x(); 1038| 90| auto y = pt.y(); 1039| 90| auto z = FieldElement::one(); 1040| | 1041| 90| FieldElement::conditional_swap(pt.is_identity(), y, z); 1042| | 1043| 90| return ProjectiveCurvePoint(x, y, z); 1044| 90| } pcurves_brainpool512r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEEE1xEv: 982| 302k| constexpr const FieldElement& x() const { return m_x; } pcurves_brainpool512r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEEE1yEv: 987| 294k| constexpr const FieldElement& y() const { return m_y; } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE3oneEv: 202| 8.90k| static constexpr Self one() { return Self(Rep::one()); } pcurves_brainpool512r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES0_E11FieldParamsEE3oneEv: 101| 8.90k| constexpr static std::array one() { return R1; } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEEC2ENSt3__15arrayImLm8EEE: 908| 287k| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE16conditional_swapENS_2CT6ChoiceERSA_SD_: 412| 90| static constexpr void conditional_swap(CT::Choice cond, Self& x, Self& y) { 413| 90| const W mask = cond.into_bitmask(); 414| | 415| 810| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (415:28): [True: 720, False: 90] ------------------ 416| 720| const auto nx = Botan::choose(mask, y.m_val[i], x.m_val[i]); 417| 720| const auto ny = Botan::choose(mask, x.m_val[i], y.m_val[i]); 418| 720| x.m_val[i] = nx; 419| 720| y.m_val[i] = ny; 420| 720| } 421| 90| } pcurves_brainpool512r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEEE11is_identityEv: 939| 8.90k| constexpr CT::Choice is_identity() const { return x().is_zero() && y().is_zero(); } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE7is_zeroEv: 227| 52.4k| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_brainpool512r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_EC2ERKSB_SE_SE_: 1067| 11.9k| m_x(x), m_y(y), m_z(z) {} pcurves_brainpool512r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_E3dblEv: 1181| 1.64k| constexpr Self dbl() const { 1182| | if constexpr(Self::A_is_minus_3) { 1183| | return dbl_a_minus_3(*this); 1184| | } else if constexpr(Self::A_is_zero) { 1185| | return dbl_a_zero(*this); 1186| 1.64k| } else { 1187| 1.64k| return dbl_generic(*this, A); 1188| 1.64k| } 1189| 1.64k| } pcurves_brainpool512r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_E1zEv: 1224| 70.2k| constexpr const FieldElement& z() const { return m_z; } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE6squareEv: 428| 46.4k| constexpr BOTAN_FORCE_INLINE Self square() const { 429| 46.4k| std::array z; // NOLINT(*-member-init) 430| 46.4k| comba_sqr(z.data(), this->data()); 431| 46.4k| return Self(Rep::redc(z)); 432| 46.4k| } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE4dataEv: 898| 347k| constexpr const W* data() const { return m_val.data(); } pcurves_brainpool512r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES0_E11FieldParamsEE4redcERKNSt3__15arrayImLm16EEE: 106| 215k| constexpr static std::array redc(const std::array& z) { 107| | if constexpr(P_dash == 1) { 108| | return monty_redc_pdash1(z, P); 109| 215k| } else { 110| 215k| return monty_redc(z, P, P_dash); 111| 215k| } 112| 215k| } pcurves_brainpool512r1.cpp:_ZN5BotanplERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEEESC_: 267| 13.8k| friend constexpr BOTAN_FORCE_INLINE Self operator+(const Self& a, const Self& b) { 268| 13.8k| std::array t; // NOLINT(*-member-init) 269| | 270| 13.8k| W carry = 0; 271| 124k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (271:28): [True: 110k, False: 13.8k] ------------------ 272| 110k| t[i] = word_add(a.m_val[i], b.m_val[i], &carry); 273| 110k| } 274| | 275| 13.8k| std::array r; // NOLINT(*-member-init) 276| 13.8k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 277| 13.8k| return Self(r); 278| 13.8k| } pcurves_brainpool512r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_E1xEv: 1214| 38.2k| constexpr const FieldElement& x() const { return m_x; } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE4mul3Ev: 337| 1.64k| constexpr inline Self mul3() const { return mul2() + (*this); } pcurves_brainpool512r1.cpp:_ZN5BotanmlERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEEESC_: 348| 113k| friend constexpr BOTAN_FORCE_INLINE Self operator*(const Self& a, const Self& b) { 349| 113k| std::array z; // NOLINT(*-member-init) 350| 113k| comba_mul(z.data(), a.data(), b.data()); 351| 113k| return Self(Rep::redc(z)); 352| 113k| } pcurves_brainpool512r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_E1yEv: 1219| 38.2k| constexpr const FieldElement& y() const { return m_y; } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE4mul4Ev: 340| 1.64k| constexpr inline Self mul4() const { return mul2().mul2(); } pcurves_brainpool512r1.cpp:_ZN5BotanmiERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEEESC_: 283| 64.9k| friend constexpr BOTAN_FORCE_INLINE Self operator-(const Self& a, const Self& b) { 284| 64.9k| std::array r; // NOLINT(*-member-init) 285| 64.9k| W carry = 0; 286| 584k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (286:28): [True: 519k, False: 64.9k] ------------------ 287| 519k| r[i] = word_sub(a.m_val[i], b.m_val[i], &carry); 288| 519k| } 289| | 290| 64.9k| const auto mask = CT::Mask::expand(carry).value(); 291| | 292| 64.9k| carry = 0; 293| | 294| 584k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (294:28): [True: 519k, False: 64.9k] ------------------ 295| 519k| r[i] = word_add(r[i], P[i] & mask, &carry); 296| 519k| } 297| | 298| 64.9k| return Self(r); 299| 64.9k| } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE4mul2Ev: 327| 13.1k| constexpr BOTAN_FORCE_INLINE Self mul2() const { 328| 13.1k| std::array t = value(); 329| 13.1k| const W carry = shift_left<1>(t); 330| | 331| 13.1k| std::array r; // NOLINT(*-member-init) 332| 13.1k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 333| 13.1k| return Self(r); 334| 13.1k| } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE5valueEv: 896| 13.1k| constexpr const std::array& value() const { return m_val; } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE4mul8Ev: 343| 1.64k| constexpr inline Self mul8() const { return mul2().mul2().mul2(); } pcurves_brainpool512r1.cpp:_ZN5BotanplERKNS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_EESE_: 1075| 1.45k| friend constexpr Self operator+(const Self& a, const Self& b) { return Self::add(a, b); } pcurves_brainpool512r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_E3addERKSC_SE_: 1138| 1.45k| constexpr static Self add(const Self& a, const Self& b) { return point_add(a, b); } pcurves_brainpool512r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_E11is_identityEv: 1093| 14.5k| constexpr CT::Choice is_identity() const { return z().is_zero(); } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE18conditional_assignERSA_SB_SB_NS_2CT6ChoiceERKSA_SF_SF_: 397| 20.0k| Self& x, Self& y, Self& z, CT::Choice cond, const Self& nx, const Self& ny, const Self& nz) { 398| 20.0k| const W mask = cond.into_bitmask(); 399| | 400| 180k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (400:28): [True: 160k, False: 20.0k] ------------------ 401| 160k| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 402| 160k| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 403| 160k| z.m_val[i] = Botan::choose(mask, nz.m_val[i], z.m_val[i]); 404| 160k| } 405| 20.0k| } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE6invertEv: 540| 89| constexpr Self invert() const { return pow_vartime(Self::P_MINUS_2); } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE11pow_vartimeERKNSt3__15arrayImLm8EEE: 479| 89| constexpr Self pow_vartime(const std::array& exp) const { 480| 89| constexpr size_t WindowBits = (Self::BITS <= 256) ? 4 : 5; ------------------ | Branch (480:40): [Folded, False: 89] ------------------ 481| 89| constexpr size_t WindowElements = (1 << WindowBits) - 1; 482| | 483| 89| constexpr size_t Windows = (Self::BITS + WindowBits - 1) / WindowBits; 484| | 485| | /* 486| | A simple fixed width window modular multiplication. 487| | 488| | TODO: investigate using sliding window here 489| | */ 490| | 491| 89| std::array tbl; 492| | 493| 89| tbl[0] = (*this); 494| | 495| 2.75k| for(size_t i = 1; i != WindowElements; ++i) { ------------------ | Branch (495:28): [True: 2.67k, False: 89] ------------------ 496| | // Conditional ok: table indexes are public here 497| 2.67k| if(i % 2 == 1) { ------------------ | Branch (497:16): [True: 1.33k, False: 1.33k] ------------------ 498| 1.33k| tbl[i] = tbl[i / 2].square(); 499| 1.33k| } else { 500| 1.33k| tbl[i] = tbl[i - 1] * tbl[0]; 501| 1.33k| } 502| 2.67k| } 503| | 504| 89| auto r = Self::one(); 505| | 506| 89| const size_t w0 = read_window_bits(std::span{exp}, (Windows - 1) * WindowBits); 507| | 508| | // Conditional ok: this function is variable time 509| 89| if(w0 > 0) { ------------------ | Branch (509:13): [True: 89, False: 0] ------------------ 510| 89| r = tbl[w0 - 1]; 511| 89| } 512| | 513| 9.16k| for(size_t i = 1; i != Windows; ++i) { ------------------ | Branch (513:28): [True: 9.07k, False: 89] ------------------ 514| 9.07k| r.square_n(WindowBits); 515| | 516| 9.07k| const size_t w = read_window_bits(std::span{exp}, (Windows - i - 1) * WindowBits); 517| | 518| | // Conditional ok: this function is variable time 519| 9.07k| if(w > 0) { ------------------ | Branch (519:16): [True: 8.90k, False: 178] ------------------ 520| 8.90k| r *= tbl[w - 1]; 521| 8.90k| } 522| 9.07k| } 523| | 524| 89| return r; 525| 89| } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEEC2Ev: 182| 3.11k| constexpr IntMod() : m_val({}) {} pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE8square_nEm: 441| 9.07k| constexpr void square_n(size_t n) { 442| 9.07k| std::array z; // NOLINT(*-member-init) 443| 54.4k| for(size_t i = 0; i != n; ++i) { ------------------ | Branch (443:28): [True: 45.3k, False: 9.07k] ------------------ 444| 45.3k| comba_sqr(z.data(), this->data()); 445| 45.3k| m_val = Rep::redc(z); 446| 45.3k| } 447| 9.07k| } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEEmLERKSA_: 357| 9.96k| constexpr BOTAN_FORCE_INLINE Self& operator*=(const Self& other) { 358| 9.96k| std::array z; // NOLINT(*-member-init) 359| 9.96k| comba_mul(z.data(), data(), other.data()); 360| 9.96k| m_val = Rep::redc(z); 361| 9.96k| return (*this); 362| 9.96k| } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE14invert_vartimeEv: 600| 1| constexpr Self invert_vartime() const { 601| | // Conditional ok: this function is variable time 602| 1| if(this->is_zero().as_bool()) { ------------------ | Branch (602:13): [True: 0, False: 1] ------------------ 603| 0| return Self::zero(); 604| 0| } 605| | 606| 1| auto x = Self(std::array{1}); // 1 in standard domain 607| 1| auto b = Self(this->to_words()); // *this in standard domain 608| | 609| | // First loop iteration 610| 1| Self::_invert_vartime_div2_helper(b, x); 611| | 612| 1| auto a = b.negate(); 613| | // y += x but y is zero at the outset 614| 1| auto y = x; 615| | 616| | // First half of second loop iteration 617| 1| Self::_invert_vartime_div2_helper(a, y); 618| | 619| 366| for(;;) { 620| | // Conditional ok: this function is variable time 621| 366| if(a.m_val == b.m_val) { ------------------ | Branch (621:16): [True: 1, False: 365] ------------------ 622| | // At this point it should be that a == b == 1 623| 1| auto r = y.negate(); 624| | 625| | // Convert back to Montgomery if required 626| 1| r.m_val = Rep::to_rep(r.m_val); 627| 1| return r; 628| 1| } 629| | 630| 365| const auto nx = x + y; 631| | 632| | /* 633| | * Otherwise either b > a or a > b 634| | * 635| | * If b > a we want to set b to b - a 636| | * Otherwise we want to set a to a - b 637| | * 638| | * Compute r = b - a and check if it underflowed 639| | * If it did not then we are in the b > a path 640| | */ 641| 365| std::array r; // NOLINT(*-member-init) 642| 365| const word carry = bigint_sub3(r.data(), b.data(), N, a.data(), N); 643| | 644| | // Conditional ok: this function is variable time 645| 365| if(carry == 0) { ------------------ | Branch (645:16): [True: 175, False: 190] ------------------ 646| | // b > a 647| 175| b.m_val = r; 648| 175| x = nx; 649| 175| Self::_invert_vartime_div2_helper(b, x); 650| 190| } else { 651| | // We know this can't underflow because a > b 652| 190| bigint_sub3(r.data(), a.data(), N, b.data(), N); 653| 190| a.m_val = r; 654| 190| y = nx; 655| 190| Self::_invert_vartime_div2_helper(a, y); 656| 190| } 657| 365| } 658| 1| } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE4zeroEv: 197| 17.2k| static constexpr Self zero() { return Self(std::array{0}); } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE8to_wordsEv: 736| 1| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_brainpool512r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES0_E11FieldParamsEE8from_repERKNSt3__15arrayImLm8EEE: 139| 179| constexpr static std::array from_rep(const std::array& z) { 140| 179| std::array ze = {}; 141| 179| copy_mem(std::span{ze}.template first(), z); 142| 179| return Self::redc(ze); 143| 179| } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE27_invert_vartime_div2_helperERSA_SB_: 549| 367| static constexpr void _invert_vartime_div2_helper(Self& a, Self& x) { 550| 367| constexpr auto INV_2 = p_div_2_plus_1(Rep::P); 551| | 552| | // Conditional ok: this function is variable time 553| 1.08k| while((a.m_val[0] & 1) != 1) { ------------------ | Branch (553:16): [True: 713, False: 367] ------------------ 554| 713| shift_right<1>(a.m_val); 555| | 556| 713| const W borrow = shift_right<1>(x.m_val); 557| | 558| | // Conditional ok: this function is variable time 559| 713| if(borrow) { ------------------ | Branch (559:16): [True: 362, False: 351] ------------------ 560| 362| bigint_add2(x.m_val.data(), N, INV_2.data(), N); 561| 362| } 562| 713| } 563| 367| } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE6negateEv: 454| 8.63k| constexpr Self negate() const { 455| 8.63k| const W x_is_zero = ~CT::all_zeros(this->data(), N).value(); 456| | 457| 8.63k| std::array r; // NOLINT(*-member-init) 458| 8.63k| W carry = 0; 459| 77.7k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (459:28): [True: 69.0k, False: 8.63k] ------------------ 460| 69.0k| r[i] = word_sub(P[i] & x_is_zero, m_val[i], &carry); 461| 69.0k| } 462| | 463| 8.63k| return Self(r); 464| 8.63k| } pcurves_brainpool512r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES0_E11FieldParamsEE6to_repERKNSt3__15arrayImLm8EEE: 117| 1| constexpr static std::array to_rep(const std::array& x) { 118| 1| std::array z; // NOLINT(*-member-init) 119| 1| comba_mul(z.data(), x.data(), R2.data()); 120| 1| return Self::redc(z); 121| 1| } pcurves_brainpool512r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEEEC2ERKSB_SE_: 928| 12.0k| constexpr AffineCurvePoint(const FieldElement& x, const FieldElement& y) : m_x(x), m_y(y) {} pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE11stash_valueILm9EEENSt3__15arrayImXT_EEEv: 761| 445| std::array stash_value() const { 762| 445| static_assert(L >= N); 763| 445| std::array stash = {}; 764| 4.00k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (764:28): [True: 3.56k, False: 445] ------------------ 765| 3.56k| stash[i] = m_val[i]; 766| 3.56k| } 767| 445| return stash; 768| 445| } pcurves_brainpool512r1.cpp:_ZNK5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELm6EE3mulERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES7_E12ScalarParamsEEEEERNS_21RandomNumberGeneratorE: 1632| 89| ProjectivePoint mul(const Scalar& s, RandomNumberGenerator& rng) const { 1633| 89| const BlindingRandomness blinding(rng); 1634| 89| const BlindedScalar scalar(s, blinding); 1635| 89| return basemul_booth_exec(m_table, scalar, blinding); 1636| 89| } pcurves_brainpool512r1.cpp:_ZN5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELm7EEELm1EEC2ERNS_21RandomNumberGeneratorE: 1455| 89| explicit BlindingRandomness(RandomNumberGenerator& rng) : m_seeded(rng.is_seeded()) { 1456| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1457| 89| if(m_seeded) { ------------------ | Branch (1457:13): [True: 89, False: 0] ------------------ 1458| 89| std::array buf{}; 1459| 89| rng.randomize(buf); 1460| | 1461| 89| const std::span bytes(buf); 1462| | 1463| 89| copy_mem(m_masks, bytes.first()); 1464| | 1465| 445| for(size_t i = 0; i != Rerandomizations; ++i) { ------------------ | Branch (1465:31): [True: 356, False: 89] ------------------ 1466| 356| const auto wide = bytes.subspan(Scalars * MaskBytes + i * WideBytes).first(); 1467| 356| m_rerandomizers[i] = FieldElement::from_wide_bytes(wide); 1468| 356| } 1469| | 1470| 89| const auto iso = bytes.subspan(Scalars * MaskBytes + Rerandomizations * WideBytes).first(); 1471| 89| m_isomorphism = FieldElement::from_wide_bytes(iso); 1472| 89| m_isomorphism.conditional_assign(m_isomorphism.is_zero(), FieldElement::one()); 1473| 89| } 1474| 89| } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE15from_wide_bytesILm72EEESA_NSt3__14spanIKhXT_EEE: 818| 445| static constexpr Self from_wide_bytes(std::span bytes) { 819| 445| static_assert(8 * L <= 2 * Self::BITS); 820| 445| std::array padded_bytes = {}; 821| 445| copy_mem(std::span{padded_bytes}.template last(), bytes); 822| 445| return Self(Rep::wide_to_rep(bytes_to_words(std::span{padded_bytes}))); 823| 445| } pcurves_brainpool512r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES0_E11FieldParamsEE11wide_to_repERKNSt3__15arrayImLm16EEE: 129| 445| constexpr static std::array wide_to_rep(const std::array& x) { 130| 445| auto redc_x = Self::redc(x); 131| 445| std::array z; // NOLINT(*-member-init) 132| 445| comba_mul(z.data(), redc_x.data(), R3.data()); 133| 445| return Self::redc(z); 134| 445| } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE18conditional_assignENS_2CT6ChoiceERKSA_: 369| 8.63k| constexpr void conditional_assign(CT::Choice cond, const Self& nx) { 370| 8.63k| const W mask = cond.into_bitmask(); 371| | 372| 77.6k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (372:28): [True: 69.0k, False: 8.63k] ------------------ 373| 69.0k| m_val[i] = Botan::choose(mask, nx.m_val[i], m_val[i]); 374| 69.0k| } 375| 8.63k| } pcurves_brainpool512r1.cpp:_ZN5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELm7EEC2INS_18BlindingRandomnessIS5_Lm1EEEEERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsESA_E12ScalarParamsEEEEERKT_m: 1368| 89| BlindedScalarBits(const typename C::Scalar& scalar, const Randomness& randomness, size_t idx = 0) { 1369| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1370| 89| if(BlindingBits > 0 && randomness.seeded()) { ------------------ | Branch (1370:13): [True: 89, Folded] | Branch (1370:33): [True: 89, False: 0] ------------------ 1371| 89| constexpr size_t n_words = C::Words; 1372| | 1373| 89| W mask[n_words] = {0}; 1374| 89| load_le(mask, randomness.mask(idx).data(), MaskWords); 1375| | 1376| | // Mask to exactly BlindingBits 1377| 89| constexpr size_t ExcessBits = MaskWords * WordInfo::bits - BlindingBits; 1378| | if constexpr(ExcessBits > 0) { 1379| | constexpr W ExcessMask = (static_cast(1) << (WordInfo::bits - ExcessBits)) - 1; 1380| | mask[MaskWords - 1] &= ExcessMask; 1381| | } 1382| | 1383| | // Set top and bottom bits of mask 1384| 89| constexpr size_t TopMaskBit = (BlindingBits - 1) % WordInfo::bits; 1385| 89| mask[(BlindingBits - 1) / WordInfo::bits] |= static_cast(1) << TopMaskBit; 1386| 89| mask[0] |= 1; 1387| | 1388| 89| W mask_n[2 * n_words] = {0}; 1389| | 1390| 89| const auto sw = scalar.to_words(); 1391| | 1392| | // Compute masked scalar s + k*n 1393| 89| comba_mul(mask_n, mask, C::NW.data()); 1394| 89| bigint_add2(mask_n, 2 * n_words, sw.data(), sw.size()); 1395| | 1396| 89| std::reverse(mask_n, mask_n + 2 * n_words); 1397| 89| m_bytes = store_be>(mask_n); 1398| 89| m_bits = C::Scalar::BITS + BlindingBits; 1399| 89| } else { 1400| | // No RNG available, skip blinding 1401| 0| m_bytes.resize(C::Scalar::BYTES); 1402| 0| scalar.serialize_to(std::span{m_bytes}.template first()); 1403| 0| m_bits = C::Scalar::BITS; 1404| 0| } 1405| | 1406| 89| CT::poison(m_bytes.data(), m_bytes.size()); 1407| 89| } pcurves_brainpool512r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELm7EEELm1EE6seededEv: 1476| 89| bool seeded() const { return m_seeded; } pcurves_brainpool512r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELm7EEELm1EE4maskEm: 1478| 89| std::span mask(size_t idx) const { 1479| 89| BOTAN_ASSERT_NOMSG(idx < Scalars); ------------------ | | 84| 89| do { \ | | 85| 89| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 89| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 89] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 89| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 89] | | ------------------ ------------------ 1480| 89| return std::span{m_masks}.subspan(idx * MaskBytes).template first(); 1481| 89| } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E12ScalarParamsEEEE8to_wordsEv: 736| 89| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_brainpool512r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES0_E12ScalarParamsEE8from_repERKNSt3__15arrayImLm8EEE: 139| 178| constexpr static std::array from_rep(const std::array& z) { 140| 178| std::array ze = {}; 141| 178| copy_mem(std::span{ze}.template first(), z); 142| 178| return Self::redc(ze); 143| 178| } pcurves_brainpool512r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES0_E12ScalarParamsEE4redcERKNSt3__15arrayImLm16EEE: 106| 267| constexpr static std::array redc(const std::array& z) { 107| | if constexpr(P_dash == 1) { 108| | return monty_redc_pdash1(z, P); 109| 267| } else { 110| 267| return monty_redc(z, P, P_dash); 111| 267| } 112| 267| } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E12ScalarParamsEEEE12serialize_toENSt3__14spanIhLm64EEE: 741| 89| constexpr void serialize_to(std::span bytes) const { 742| 89| auto v = Rep::from_rep(m_val); 743| 89| std::reverse(v.begin(), v.end()); 744| | 745| 89| if constexpr(Self::BYTES == N * WordInfo::bytes) { 746| 89| store_be(bytes, v); 747| | } else { 748| | // Remove leading zero bytes 749| | const auto padded_bytes = store_be(v); 750| | constexpr size_t extra = N * WordInfo::bytes - Self::BYTES; 751| | copy_mem(bytes, std::span{padded_bytes}.template subspan()); 752| | } 753| 89| } pcurves_brainpool512r1.cpp:_ZNK5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELm7EE4bitsEv: 1362| 89| size_t bits() const { return m_bits; } pcurves_brainpool512r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_E18conditional_assignENS_2CT6ChoiceERKSC_: 1095| 89| constexpr void conditional_assign(CT::Choice cond, const Self& pt) { 1096| 89| FieldElement::conditional_assign(m_x, m_y, m_z, cond, pt.x(), pt.y(), pt.z()); 1097| 89| } pcurves_brainpool512r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_E6negateEv: 1194| 89| constexpr Self negate() const { return Self(x(), y().negate(), z()); } pcurves_brainpool512r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_E18_const_time_poisonEv: 1226| 89| constexpr void _const_time_poison() const { CT::poison_all(m_x, m_y, m_z); } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE18_const_time_poisonEv: 891| 267| constexpr void _const_time_poison() const { CT::poison(m_val); } pcurves_brainpool512r1.cpp:_ZNK5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELm7EE10get_windowEm: 1409| 8.63k| size_t get_window(size_t offset) const { 1410| | // Extract a WindowBits sized window out of s, depending on offset. 1411| 8.63k| return read_window_bits(std::span{m_bytes}, offset); 1412| 8.63k| } pcurves_brainpool512r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_E10add_or_subERKSC_RKNS_16AffineCurvePointISB_EENS_2CT6ChoiceE: 1121| 8.54k| constexpr static Self add_or_sub(const Self& a, const AffinePoint& b, CT::Choice sub) { 1122| 8.54k| return point_add_or_sub_mixed(a, b, sub, FieldElement::one(), A); 1123| 8.54k| } pcurves_brainpool512r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEEE9ct_selectENSt3__14spanIKSC_Lm18446744073709551615EEEm: 966| 8.63k| static constexpr auto ct_select(std::span pts, size_t idx) { 967| 8.63k| auto result = Self::identity(pts[0]); 968| | 969| | // Intentionally wrapping; set to maximum size_t if idx == 0 970| 8.63k| const size_t idx1 = idx - 1; 971| 284k| for(size_t i = 0; i != pts.size(); ++i) { ------------------ | Branch (971:28): [True: 276k, False: 8.63k] ------------------ 972| 276k| const auto found = CT::Mask::is_equal(idx1, i).as_choice(); 973| 276k| result.conditional_assign(found, pts[i]); 974| 276k| } 975| | 976| 8.63k| return result; 977| 8.63k| } pcurves_brainpool512r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEEE8identityERKSC_: 935| 8.63k| static constexpr Self identity(const Self& /*unused*/) { 936| 8.63k| return Self(FieldElement::zero(), FieldElement::zero()); 937| 8.63k| } pcurves_brainpool512r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEEE18conditional_assignENS_2CT6ChoiceERKSC_: 992| 276k| constexpr void conditional_assign(CT::Choice cond, const Self& pt) { 993| 276k| FieldElement::conditional_assign(m_x, m_y, cond, pt.x(), pt.y()); 994| 276k| } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE18conditional_assignERSA_SB_NS_2CT6ChoiceERKSA_SF_: 382| 276k| static constexpr void conditional_assign(Self& x, Self& y, CT::Choice cond, const Self& nx, const Self& ny) { 383| 276k| const W mask = cond.into_bitmask(); 384| | 385| 2.48M| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (385:28): [True: 2.21M, False: 276k] ------------------ 386| 2.21M| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 387| 2.21M| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 388| 2.21M| } 389| 276k| } pcurves_brainpool512r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELm7EEELm1EE13randomize_repERNS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS4_6ParamsESA_E11FieldParamsEEEEESC_EEm: 1486| 356| void randomize_rep(typename C::ProjectivePoint& pt, size_t idx) const { 1487| 356| BOTAN_ASSERT_NOMSG(idx < Rerandomizations); ------------------ | | 84| 356| do { \ | | 85| 356| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 356| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 356] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 356| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 356] | | ------------------ ------------------ 1488| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1489| 356| if(m_seeded) { ------------------ | Branch (1489:13): [True: 356, False: 0] ------------------ 1490| 356| pt.randomize_rep(m_rerandomizers[idx]); 1491| 356| } 1492| 356| } pcurves_brainpool512r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_E13randomize_repERKSB_: 1202| 356| void randomize_rep(const FieldElement& r) { 1203| 356| const auto r2 = r.square(); 1204| 356| const auto r3 = r2 * r; 1205| | 1206| 356| m_x *= r2; 1207| 356| m_y *= r3; 1208| 356| m_z *= r; 1209| 356| } pcurves_brainpool512r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEES7_E20_const_time_unpoisonEv: 1228| 89| constexpr void _const_time_unpoison() const { CT::unpoison_all(m_x, m_y, m_z); } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE20_const_time_unpoisonEv: 893| 267| constexpr void _const_time_unpoison() const { CT::unpoison(m_val); } pcurves_brainpool512r1.cpp:_ZN5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELm7EED2Ev: 1414| 89| ~BlindedScalarBits() { 1415| 89| secure_zeroize_buffer(m_bytes.data(), m_bytes.size()); 1416| 89| CT::unpoison(m_bytes.data(), m_bytes.size()); 1417| 89| } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E12ScalarParamsEEEE10from_stashILm9EEESA_RKNSt3__15arrayImXT_EEE: 776| 267| static Self from_stash(const std::array& stash) { 777| 267| static_assert(L >= N); 778| 267| std::array val = {}; 779| 2.40k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (779:28): [True: 2.13k, False: 267] ------------------ 780| 2.13k| val[i] = stash[i]; 781| 2.13k| } 782| 267| return Self(val); 783| 267| } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E12ScalarParamsEEEEC2ENSt3__15arrayImLm8EEE: 908| 356| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE12serialize_toENSt3__14spanIhLm64EEE: 741| 178| constexpr void serialize_to(std::span bytes) const { 742| 178| auto v = Rep::from_rep(m_val); 743| 178| std::reverse(v.begin(), v.end()); 744| | 745| 178| if constexpr(Self::BYTES == N * WordInfo::bytes) { 746| 178| store_be(bytes, v); 747| | } else { 748| | // Remove leading zero bytes 749| | const auto padded_bytes = store_be(v); 750| | constexpr size_t extra = N * WordInfo::bytes - Self::BYTES; 751| | copy_mem(bytes, std::span{padded_bytes}.template subspan()); 752| | } 753| 178| } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E12ScalarParamsEEEE11stash_valueILm9EEENSt3__15arrayImXT_EEEv: 761| 89| std::array stash_value() const { 762| 89| static_assert(L >= N); 763| 89| std::array stash = {}; 764| 801| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (764:28): [True: 712, False: 89] ------------------ 765| 712| stash[i] = m_val[i]; 766| 712| } 767| 89| return stash; 768| 89| } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEE10from_stashILm9EEESA_RKNSt3__15arrayImXT_EEE: 776| 623| static Self from_stash(const std::array& stash) { 777| 623| static_assert(L >= N); 778| 623| std::array val = {}; 779| 5.60k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (779:28): [True: 4.98k, False: 623] ------------------ 780| 4.98k| val[i] = stash[i]; 781| 4.98k| } 782| 623| return Self(val); 783| 623| } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E12ScalarParamsEEEE7is_zeroEv: 227| 178| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E11FieldParamsEEEEeqERKSA_: 724| 89| constexpr CT::Choice operator==(const Self& other) const { 725| 89| return CT::is_equal(this->data(), other.data(), N).as_choice(); 726| 89| } pcurves_brainpool512r1.cpp:_ZN5Botan13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsENS_13MontgomeryRepEE7x3_ax_bERKNS_6IntModINS5_INS6_11FieldParamsEEEEE: 1327| 89| static constexpr FieldElement x3_ax_b(const FieldElement& x) { return (x.square() + A) * x + B; } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E12ScalarParamsEEEE11deserializeENSt3__14spanIKhLm18446744073709551615EEE: 794| 135| static std::optional deserialize(std::span bytes) { 795| | // Conditional ok: input length is public 796| 135| if(bytes.size() != Self::BYTES) { ------------------ | Branch (796:13): [True: 0, False: 135] ------------------ 797| 0| return {}; 798| 0| } 799| | 800| 135| const auto words = bytes_to_words(bytes.first()); 801| | 802| | // Conditional acceptable: std::optional is implicitly not constant time 803| 135| if(!bigint_ct_is_lt(words.data(), N, P.data(), N).as_bool()) { ------------------ | Branch (803:13): [True: 46, False: 89] ------------------ 804| 46| return {}; 805| 46| } 806| | 807| | // Safe because we checked above that words is an integer < P 808| 89| return Self::from_words(words); 809| 135| } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E12ScalarParamsEEEE10from_wordsILm8EEESA_NSt3__15arrayImXT_EEE: 213| 89| static constexpr Self from_words(std::array w) { 214| 89| if constexpr(L == N) { 215| 89| return Self(Rep::to_rep(w)); 216| | } else { 217| | static_assert(L < N); 218| | std::array ew = {}; 219| | copy_mem(std::span{ew}.template first(), w); 220| | return Self(Rep::to_rep(ew)); 221| | } 222| 89| } pcurves_brainpool512r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES0_E12ScalarParamsEE6to_repERKNSt3__15arrayImLm8EEE: 117| 89| constexpr static std::array to_rep(const std::array& x) { 118| 89| std::array z; // NOLINT(*-member-init) 119| 89| comba_mul(z.data(), x.data(), R2.data()); 120| 89| return Self::redc(z); 121| 89| } pcurves_brainpool512r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES2_E11FieldParamsEEEEEE12serialize_toENSt3__14spanIhLm129EEE: 952| 89| constexpr void serialize_to(std::span bytes) const { 953| 89| BOTAN_STATE_CHECK(this->is_identity().as_bool() == false); ------------------ | | 51| 89| do { \ | | 52| 89| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 89| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 89] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 89| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 89] | | ------------------ ------------------ 954| 89| BufferStuffer pack(bytes); 955| 89| pack.append(0x04); 956| 89| x().serialize_to(pack.next()); 957| 89| y().serialize_to(pack.next()); 958| 89| BOTAN_DEBUG_ASSERT(pack.full()); ------------------ | | 137| 89| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 89| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 89] | | ------------------ ------------------ 959| 89| } pcurves_brainpool512r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E12ScalarParamsEEEE6randomERNS_21RandomNumberGeneratorE: 853| 89| static Self random(RandomNumberGenerator& rng) { 854| 89| constexpr size_t MAX_ATTEMPTS = 1000; 855| | 856| 89| std::array buf{}; 857| | 858| 135| for(size_t i = 0; i != MAX_ATTEMPTS; ++i) { ------------------ | Branch (858:28): [True: 135, False: 0] ------------------ 859| 135| rng.randomize(buf); 860| | 861| | // Zero off high bits that if set would certainly cause us 862| | // to be out of range 863| | if constexpr(Self::BITS % 8 != 0) { 864| | constexpr uint8_t mask = 0xFF >> (8 - (Self::BITS % 8)); 865| | buf[0] &= mask; 866| | } 867| | 868| | // Conditionals ok: rejection sampling reveals only values we didn't use 869| 135| if(auto s = Self::deserialize(buf)) { ------------------ | Branch (869:21): [True: 89, False: 46] ------------------ 870| 89| if(s.value().is_nonzero().as_bool()) { ------------------ | Branch (870:19): [True: 89, False: 0] ------------------ 871| 89| return s.value(); 872| 89| } 873| 89| } 874| 135| } 875| | 876| 0| throw Internal_Error("Failed to generate random Scalar within bounded number of attempts"); 877| 89| } pcurves_brainpool512r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_114brainpool512r16ParamsES1_E12ScalarParamsEEEE10is_nonzeroEv: 232| 89| constexpr CT::Choice is_nonzero() const { return !is_zero(); } pcurves_secp224r1.cpp:_ZN5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_19secp224r15CurveELm6EEC2ERKNS_16AffineCurvePointINS_6IntModINS3_12Secp224r1RepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 1630| 1| m_table(basemul_booth_setup(p, BlindedScalar::Bits + 1)) {} pcurves_secp224r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E11from_affineERKNS_16AffineCurvePointISB_EE: 1027| 1| static constexpr Self from_affine(const AffinePoint& pt) { 1028| | /* 1029| | * If the point is the identity element (x=0, y=0) then instead of 1030| | * creating (x, y, 1) = (0, 0, 1) we want our projective identity 1031| | * encoding of (0, 1, 0) 1032| | * 1033| | * Which we can achieve by a conditional swap of y and z if the 1034| | * affine point is the identity. 1035| | */ 1036| | 1037| 1| const auto x = pt.x(); 1038| 1| auto y = pt.y(); 1039| 1| auto z = FieldElement::one(); 1040| | 1041| 1| FieldElement::conditional_swap(pt.is_identity(), y, z); 1042| | 1043| 1| return ProjectiveCurvePoint(x, y, z); 1044| 1| } pcurves_secp224r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE1xEv: 982| 18| constexpr const FieldElement& x() const { return m_x; } pcurves_secp224r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE1yEv: 987| 18| constexpr const FieldElement& y() const { return m_y; } pcurves_secp224r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE3oneEv: 202| 1| static constexpr Self one() { return Self(Rep::one()); } pcurves_secp224r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEC2ENSt3__15arrayImLm4EEE: 908| 41.2k| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_secp224r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE16conditional_swapENS_2CT6ChoiceERSA_SD_: 412| 1| static constexpr void conditional_swap(CT::Choice cond, Self& x, Self& y) { 413| 1| const W mask = cond.into_bitmask(); 414| | 415| 5| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (415:28): [True: 4, False: 1] ------------------ 416| 4| const auto nx = Botan::choose(mask, y.m_val[i], x.m_val[i]); 417| 4| const auto ny = Botan::choose(mask, x.m_val[i], y.m_val[i]); 418| 4| x.m_val[i] = nx; 419| 4| y.m_val[i] = ny; 420| 4| } 421| 1| } pcurves_secp224r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE11is_identityEv: 939| 9| constexpr CT::Choice is_identity() const { return x().is_zero() && y().is_zero(); } pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE7is_zeroEv: 227| 3.97k| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_secp224r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_EC2ERKSB_SE_SE_: 1067| 1.37k| m_x(x), m_y(y), m_z(z) {} pcurves_secp224r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E3dblEv: 1181| 731| constexpr Self dbl() const { 1182| 731| if constexpr(Self::A_is_minus_3) { 1183| 731| return dbl_a_minus_3(*this); 1184| | } else if constexpr(Self::A_is_zero) { 1185| | return dbl_a_zero(*this); 1186| | } else { 1187| | return dbl_generic(*this, A); 1188| | } 1189| 731| } pcurves_secp224r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E1zEv: 1224| 12.0k| constexpr const FieldElement& z() const { return m_z; } pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE6squareEv: 428| 7.02k| constexpr BOTAN_FORCE_INLINE Self square() const { 429| 7.02k| std::array z; // NOLINT(*-member-init) 430| 7.02k| comba_sqr(z.data(), this->data()); 431| 7.02k| return Self(Rep::redc(z)); 432| 7.02k| } pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4dataEv: 898| 45.6k| constexpr const W* data() const { return m_val.data(); } pcurves_secp224r1.cpp:_ZN5BotanmlERKNS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEESC_: 348| 18.9k| friend constexpr BOTAN_FORCE_INLINE Self operator*(const Self& a, const Self& b) { 349| 18.9k| std::array z; // NOLINT(*-member-init) 350| 18.9k| comba_mul(z.data(), a.data(), b.data()); 351| 18.9k| return Self(Rep::redc(z)); 352| 18.9k| } pcurves_secp224r1.cpp:_ZN5BotanmiERKNS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEESC_: 283| 6.79k| friend constexpr BOTAN_FORCE_INLINE Self operator-(const Self& a, const Self& b) { 284| 6.79k| std::array r; // NOLINT(*-member-init) 285| 6.79k| W carry = 0; 286| 33.9k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (286:28): [True: 27.1k, False: 6.79k] ------------------ 287| 27.1k| r[i] = word_sub(a.m_val[i], b.m_val[i], &carry); 288| 27.1k| } 289| | 290| 6.79k| const auto mask = CT::Mask::expand(carry).value(); 291| | 292| 6.79k| carry = 0; 293| | 294| 33.9k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (294:28): [True: 27.1k, False: 6.79k] ------------------ 295| 27.1k| r[i] = word_add(r[i], P[i] & mask, &carry); 296| 27.1k| } 297| | 298| 6.79k| return Self(r); 299| 6.79k| } pcurves_secp224r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E1xEv: 1214| 6.14k| constexpr const FieldElement& x() const { return m_x; } pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4mul3Ev: 337| 731| constexpr inline Self mul3() const { return mul2() + (*this); } pcurves_secp224r1.cpp:_ZN5BotanplERKNS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEESC_: 267| 2.40k| friend constexpr BOTAN_FORCE_INLINE Self operator+(const Self& a, const Self& b) { 268| 2.40k| std::array t; // NOLINT(*-member-init) 269| | 270| 2.40k| W carry = 0; 271| 12.0k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (271:28): [True: 9.62k, False: 2.40k] ------------------ 272| 9.62k| t[i] = word_add(a.m_val[i], b.m_val[i], &carry); 273| 9.62k| } 274| | 275| 2.40k| std::array r; // NOLINT(*-member-init) 276| 2.40k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 277| 2.40k| return Self(r); 278| 2.40k| } pcurves_secp224r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E1yEv: 1219| 5.41k| constexpr const FieldElement& y() const { return m_y; } pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4mul4Ev: 340| 731| constexpr inline Self mul4() const { return mul2().mul2(); } pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4mul2Ev: 327| 5.84k| constexpr BOTAN_FORCE_INLINE Self mul2() const { 328| 5.84k| std::array t = value(); 329| 5.84k| const W carry = shift_left<1>(t); 330| | 331| 5.84k| std::array r; // NOLINT(*-member-init) 332| 5.84k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 333| 5.84k| return Self(r); 334| 5.84k| } pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE5valueEv: 896| 5.84k| constexpr const std::array& value() const { return m_val; } pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4mul8Ev: 343| 731| constexpr inline Self mul8() const { return mul2().mul2().mul2(); } pcurves_secp224r1.cpp:_ZN5BotanplERKNS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_EESE_: 1075| 645| friend constexpr Self operator+(const Self& a, const Self& b) { return Self::add(a, b); } pcurves_secp224r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E3addERKSC_SE_: 1138| 645| constexpr static Self add(const Self& a, const Self& b) { return point_add(a, b); } pcurves_secp224r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E11is_identityEv: 1093| 2.66k| constexpr CT::Choice is_identity() const { return z().is_zero(); } pcurves_secp224r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE18conditional_assignERSA_SB_SB_NS_2CT6ChoiceERKSA_SF_SF_: 397| 1.29k| Self& x, Self& y, Self& z, CT::Choice cond, const Self& nx, const Self& ny, const Self& nz) { 398| 1.29k| const W mask = cond.into_bitmask(); 399| | 400| 6.45k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (400:28): [True: 5.16k, False: 1.29k] ------------------ 401| 5.16k| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 402| 5.16k| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 403| 5.16k| z.m_val[i] = Botan::choose(mask, nz.m_val[i], z.m_val[i]); 404| 5.16k| } 405| 1.29k| } pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE14invert_vartimeEv: 600| 1| constexpr Self invert_vartime() const { 601| | // Conditional ok: this function is variable time 602| 1| if(this->is_zero().as_bool()) { ------------------ | Branch (602:13): [True: 0, False: 1] ------------------ 603| 0| return Self::zero(); 604| 0| } 605| | 606| 1| auto x = Self(std::array{1}); // 1 in standard domain 607| 1| auto b = Self(this->to_words()); // *this in standard domain 608| | 609| | // First loop iteration 610| 1| Self::_invert_vartime_div2_helper(b, x); 611| | 612| 1| auto a = b.negate(); 613| | // y += x but y is zero at the outset 614| 1| auto y = x; 615| | 616| | // First half of second loop iteration 617| 1| Self::_invert_vartime_div2_helper(a, y); 618| | 619| 153| for(;;) { 620| | // Conditional ok: this function is variable time 621| 153| if(a.m_val == b.m_val) { ------------------ | Branch (621:16): [True: 1, False: 152] ------------------ 622| | // At this point it should be that a == b == 1 623| 1| auto r = y.negate(); 624| | 625| | // Convert back to Montgomery if required 626| 1| r.m_val = Rep::to_rep(r.m_val); 627| 1| return r; 628| 1| } 629| | 630| 152| const auto nx = x + y; 631| | 632| | /* 633| | * Otherwise either b > a or a > b 634| | * 635| | * If b > a we want to set b to b - a 636| | * Otherwise we want to set a to a - b 637| | * 638| | * Compute r = b - a and check if it underflowed 639| | * If it did not then we are in the b > a path 640| | */ 641| 152| std::array r; // NOLINT(*-member-init) 642| 152| const word carry = bigint_sub3(r.data(), b.data(), N, a.data(), N); 643| | 644| | // Conditional ok: this function is variable time 645| 152| if(carry == 0) { ------------------ | Branch (645:16): [True: 81, False: 71] ------------------ 646| | // b > a 647| 81| b.m_val = r; 648| 81| x = nx; 649| 81| Self::_invert_vartime_div2_helper(b, x); 650| 81| } else { 651| | // We know this can't underflow because a > b 652| 71| bigint_sub3(r.data(), a.data(), N, b.data(), N); 653| 71| a.m_val = r; 654| 71| y = nx; 655| 71| Self::_invert_vartime_div2_helper(a, y); 656| 71| } 657| 152| } 658| 1| } pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE8to_wordsEv: 736| 1| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_secp224r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE27_invert_vartime_div2_helperERSA_SB_: 549| 154| static constexpr void _invert_vartime_div2_helper(Self& a, Self& x) { 550| 154| constexpr auto INV_2 = p_div_2_plus_1(Rep::P); 551| | 552| | // Conditional ok: this function is variable time 553| 479| while((a.m_val[0] & 1) != 1) { ------------------ | Branch (553:16): [True: 325, False: 154] ------------------ 554| 325| shift_right<1>(a.m_val); 555| | 556| 325| const W borrow = shift_right<1>(x.m_val); 557| | 558| | // Conditional ok: this function is variable time 559| 325| if(borrow) { ------------------ | Branch (559:16): [True: 200, False: 125] ------------------ 560| 200| bigint_add2(x.m_val.data(), N, INV_2.data(), N); 561| 200| } 562| 325| } 563| 154| } pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE6negateEv: 454| 2| constexpr Self negate() const { 455| 2| const W x_is_zero = ~CT::all_zeros(this->data(), N).value(); 456| | 457| 2| std::array r; // NOLINT(*-member-init) 458| 2| W carry = 0; 459| 10| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (459:28): [True: 8, False: 2] ------------------ 460| 8| r[i] = word_sub(P[i] & x_is_zero, m_val[i], &carry); 461| 8| } 462| | 463| 2| return Self(r); 464| 2| } pcurves_secp224r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEEC2ERKSB_SE_: 928| 1.38k| constexpr AffineCurvePoint(const FieldElement& x, const FieldElement& y) : m_x(x), m_y(y) {} pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE11stash_valueILm9EEENSt3__15arrayImXT_EEEv: 761| 8| std::array stash_value() const { 762| 8| static_assert(L >= N); 763| 8| std::array stash = {}; 764| 40| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (764:28): [True: 32, False: 8] ------------------ 765| 32| stash[i] = m_val[i]; 766| 32| } 767| 8| return stash; 768| 8| } pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE12serialize_toENSt3__14spanIhLm28EEE: 741| 8| constexpr void serialize_to(std::span bytes) const { 742| 8| auto v = Rep::from_rep(m_val); 743| 8| std::reverse(v.begin(), v.end()); 744| | 745| | if constexpr(Self::BYTES == N * WordInfo::bytes) { 746| | store_be(bytes, v); 747| 8| } else { 748| | // Remove leading zero bytes 749| 8| const auto padded_bytes = store_be(v); 750| 8| constexpr size_t extra = N * WordInfo::bytes - Self::BYTES; 751| 8| copy_mem(bytes, std::span{padded_bytes}.template subspan()); 752| 8| } 753| 8| } pcurves_secp224r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE10from_stashILm9EEESA_RKNSt3__15arrayImXT_EEE: 776| 16| static Self from_stash(const std::array& stash) { 777| 16| static_assert(L >= N); 778| 16| std::array val = {}; 779| 80| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (779:28): [True: 64, False: 16] ------------------ 780| 64| val[i] = stash[i]; 781| 64| } 782| 16| return Self(val); 783| 16| } pcurves_secp224r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE11deserializeENSt3__14spanIKhLm18446744073709551615EEE: 794| 150| static std::optional deserialize(std::span bytes) { 795| | // Conditional ok: input length is public 796| 150| if(bytes.size() != Self::BYTES) { ------------------ | Branch (796:13): [True: 0, False: 150] ------------------ 797| 0| return {}; 798| 0| } 799| | 800| 150| const auto words = bytes_to_words(bytes.first()); 801| | 802| | // Conditional acceptable: std::optional is implicitly not constant time 803| 150| if(!bigint_ct_is_lt(words.data(), N, P.data(), N).as_bool()) { ------------------ | Branch (803:13): [True: 3, False: 147] ------------------ 804| 3| return {}; 805| 3| } 806| | 807| | // Safe because we checked above that words is an integer < P 808| 147| return Self::from_words(words); 809| 150| } pcurves_secp224r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEeqERKSA_: 724| 73| constexpr CT::Choice operator==(const Self& other) const { 725| 73| return CT::is_equal(this->data(), other.data(), N).as_choice(); 726| 73| } pcurves_secp224r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE10from_wordsILm4EEESA_NSt3__15arrayImXT_EEE: 213| 147| static constexpr Self from_words(std::array w) { 214| 147| if constexpr(L == N) { 215| 147| return Self(Rep::to_rep(w)); 216| | } else { 217| | static_assert(L < N); 218| | std::array ew = {}; 219| | copy_mem(std::span{ew}.template first(), w); 220| | return Self(Rep::to_rep(ew)); 221| | } 222| 147| } pcurves_secp224r1.cpp:_ZN5Botan13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp224r16ParamsENS3_12Secp224r1RepEE7x3_ax_bERKNS_6IntModINS5_INS6_11FieldParamsEEEEE: 1327| 73| static constexpr FieldElement x3_ax_b(const FieldElement& x) { return (x.square() + A) * x + B; } pcurves_secp224r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE12serialize_toENSt3__14spanIhLm57EEE: 952| 4| constexpr void serialize_to(std::span bytes) const { 953| 4| BOTAN_STATE_CHECK(this->is_identity().as_bool() == false); ------------------ | | 51| 4| do { \ | | 52| 4| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 4| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 4] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 4| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 4] | | ------------------ ------------------ 954| 4| BufferStuffer pack(bytes); 955| 4| pack.append(0x04); 956| 4| x().serialize_to(pack.next()); 957| 4| y().serialize_to(pack.next()); 958| 4| BOTAN_DEBUG_ASSERT(pack.full()); ------------------ | | 137| 4| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 4| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 4] | | ------------------ ------------------ 959| 4| } pcurves_secp256k1.cpp:_ZN5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_19secp256k15CurveELm6EEC2ERKNS_16AffineCurvePointINS_6IntModINS3_12Secp256k1RepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 1630| 1| m_table(basemul_booth_setup(p, BlindedScalar::Bits + 1)) {} pcurves_secp256k1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E11from_affineERKNS_16AffineCurvePointISB_EE: 1027| 1| static constexpr Self from_affine(const AffinePoint& pt) { 1028| | /* 1029| | * If the point is the identity element (x=0, y=0) then instead of 1030| | * creating (x, y, 1) = (0, 0, 1) we want our projective identity 1031| | * encoding of (0, 1, 0) 1032| | * 1033| | * Which we can achieve by a conditional swap of y and z if the 1034| | * affine point is the identity. 1035| | */ 1036| | 1037| 1| const auto x = pt.x(); 1038| 1| auto y = pt.y(); 1039| 1| auto z = FieldElement::one(); 1040| | 1041| 1| FieldElement::conditional_swap(pt.is_identity(), y, z); 1042| | 1043| 1| return ProjectiveCurvePoint(x, y, z); 1044| 1| } pcurves_secp256k1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE1xEv: 982| 2| constexpr const FieldElement& x() const { return m_x; } pcurves_secp256k1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE1yEv: 987| 2| constexpr const FieldElement& y() const { return m_y; } pcurves_secp256k1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE3oneEv: 202| 1| static constexpr Self one() { return Self(Rep::one()); } pcurves_secp256k1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEC2ENSt3__15arrayImLm4EEE: 908| 43.8k| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_secp256k1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE16conditional_swapENS_2CT6ChoiceERSA_SD_: 412| 1| static constexpr void conditional_swap(CT::Choice cond, Self& x, Self& y) { 413| 1| const W mask = cond.into_bitmask(); 414| | 415| 5| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (415:28): [True: 4, False: 1] ------------------ 416| 4| const auto nx = Botan::choose(mask, y.m_val[i], x.m_val[i]); 417| 4| const auto ny = Botan::choose(mask, x.m_val[i], y.m_val[i]); 418| 4| x.m_val[i] = nx; 419| 4| y.m_val[i] = ny; 420| 4| } 421| 1| } pcurves_secp256k1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE11is_identityEv: 939| 1| constexpr CT::Choice is_identity() const { return x().is_zero() && y().is_zero(); } pcurves_secp256k1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE7is_zeroEv: 227| 4.51k| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_secp256k1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_EC2ERKSB_SE_SE_: 1067| 1.56k| m_x(x), m_y(y), m_z(z) {} pcurves_secp256k1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E3dblEv: 1181| 833| constexpr Self dbl() const { 1182| | if constexpr(Self::A_is_minus_3) { 1183| | return dbl_a_minus_3(*this); 1184| 833| } else if constexpr(Self::A_is_zero) { 1185| 833| return dbl_a_zero(*this); 1186| | } else { 1187| | return dbl_generic(*this, A); 1188| | } 1189| 833| } pcurves_secp256k1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E1xEv: 1214| 6.17k| constexpr const FieldElement& x() const { return m_x; } pcurves_secp256k1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE6squareEv: 428| 7.84k| constexpr BOTAN_FORCE_INLINE Self square() const { 429| 7.84k| std::array z; // NOLINT(*-member-init) 430| 7.84k| comba_sqr(z.data(), this->data()); 431| 7.84k| return Self(Rep::redc(z)); 432| 7.84k| } pcurves_secp256k1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4dataEv: 898| 49.7k| constexpr const W* data() const { return m_val.data(); } pcurves_secp256k1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4mul3Ev: 337| 833| constexpr inline Self mul3() const { return mul2() + (*this); } pcurves_secp256k1.cpp:_ZN5BotanplERKNS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEESC_: 267| 1.74k| friend constexpr BOTAN_FORCE_INLINE Self operator+(const Self& a, const Self& b) { 268| 1.74k| std::array t; // NOLINT(*-member-init) 269| | 270| 1.74k| W carry = 0; 271| 8.71k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (271:28): [True: 6.97k, False: 1.74k] ------------------ 272| 6.97k| t[i] = word_add(a.m_val[i], b.m_val[i], &carry); 273| 6.97k| } 274| | 275| 1.74k| std::array r; // NOLINT(*-member-init) 276| 1.74k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 277| 1.74k| return Self(r); 278| 1.74k| } pcurves_secp256k1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E1yEv: 1219| 6.17k| constexpr const FieldElement& y() const { return m_y; } pcurves_secp256k1.cpp:_ZN5BotanmlERKNS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEESC_: 348| 20.7k| friend constexpr BOTAN_FORCE_INLINE Self operator*(const Self& a, const Self& b) { 349| 20.7k| std::array z; // NOLINT(*-member-init) 350| 20.7k| comba_mul(z.data(), a.data(), b.data()); 351| 20.7k| return Self(Rep::redc(z)); 352| 20.7k| } pcurves_secp256k1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4mul4Ev: 340| 833| constexpr inline Self mul4() const { return mul2().mul2(); } pcurves_secp256k1.cpp:_ZN5BotanmiERKNS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEESC_: 283| 6.90k| friend constexpr BOTAN_FORCE_INLINE Self operator-(const Self& a, const Self& b) { 284| 6.90k| std::array r; // NOLINT(*-member-init) 285| 6.90k| W carry = 0; 286| 34.5k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (286:28): [True: 27.6k, False: 6.90k] ------------------ 287| 27.6k| r[i] = word_sub(a.m_val[i], b.m_val[i], &carry); 288| 27.6k| } 289| | 290| 6.90k| const auto mask = CT::Mask::expand(carry).value(); 291| | 292| 6.90k| carry = 0; 293| | 294| 34.5k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (294:28): [True: 27.6k, False: 6.90k] ------------------ 295| 27.6k| r[i] = word_add(r[i], P[i] & mask, &carry); 296| 27.6k| } 297| | 298| 6.90k| return Self(r); 299| 6.90k| } pcurves_secp256k1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4mul2Ev: 327| 6.66k| constexpr BOTAN_FORCE_INLINE Self mul2() const { 328| 6.66k| std::array t = value(); 329| 6.66k| const W carry = shift_left<1>(t); 330| | 331| 6.66k| std::array r; // NOLINT(*-member-init) 332| 6.66k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 333| 6.66k| return Self(r); 334| 6.66k| } pcurves_secp256k1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE5valueEv: 896| 6.66k| constexpr const std::array& value() const { return m_val; } pcurves_secp256k1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4mul8Ev: 343| 833| constexpr inline Self mul8() const { return mul2().mul2().mul2(); } pcurves_secp256k1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E1zEv: 1224| 12.8k| constexpr const FieldElement& z() const { return m_z; } pcurves_secp256k1.cpp:_ZN5BotanplERKNS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_EESE_: 1075| 735| friend constexpr Self operator+(const Self& a, const Self& b) { return Self::add(a, b); } pcurves_secp256k1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E3addERKSC_SE_: 1138| 735| constexpr static Self add(const Self& a, const Self& b) { return point_add(a, b); } pcurves_secp256k1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E11is_identityEv: 1093| 3.03k| constexpr CT::Choice is_identity() const { return z().is_zero(); } pcurves_secp256k1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE18conditional_assignERSA_SB_SB_NS_2CT6ChoiceERKSA_SF_SF_: 397| 1.47k| Self& x, Self& y, Self& z, CT::Choice cond, const Self& nx, const Self& ny, const Self& nz) { 398| 1.47k| const W mask = cond.into_bitmask(); 399| | 400| 7.35k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (400:28): [True: 5.88k, False: 1.47k] ------------------ 401| 5.88k| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 402| 5.88k| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 403| 5.88k| z.m_val[i] = Botan::choose(mask, nz.m_val[i], z.m_val[i]); 404| 5.88k| } 405| 1.47k| } pcurves_secp256k1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE14invert_vartimeEv: 600| 1| constexpr Self invert_vartime() const { 601| | // Conditional ok: this function is variable time 602| 1| if(this->is_zero().as_bool()) { ------------------ | Branch (602:13): [True: 0, False: 1] ------------------ 603| 0| return Self::zero(); 604| 0| } 605| | 606| 1| auto x = Self(std::array{1}); // 1 in standard domain 607| 1| auto b = Self(this->to_words()); // *this in standard domain 608| | 609| | // First loop iteration 610| 1| Self::_invert_vartime_div2_helper(b, x); 611| | 612| 1| auto a = b.negate(); 613| | // y += x but y is zero at the outset 614| 1| auto y = x; 615| | 616| | // First half of second loop iteration 617| 1| Self::_invert_vartime_div2_helper(a, y); 618| | 619| 176| for(;;) { 620| | // Conditional ok: this function is variable time 621| 176| if(a.m_val == b.m_val) { ------------------ | Branch (621:16): [True: 1, False: 175] ------------------ 622| | // At this point it should be that a == b == 1 623| 1| auto r = y.negate(); 624| | 625| | // Convert back to Montgomery if required 626| 1| r.m_val = Rep::to_rep(r.m_val); 627| 1| return r; 628| 1| } 629| | 630| 175| const auto nx = x + y; 631| | 632| | /* 633| | * Otherwise either b > a or a > b 634| | * 635| | * If b > a we want to set b to b - a 636| | * Otherwise we want to set a to a - b 637| | * 638| | * Compute r = b - a and check if it underflowed 639| | * If it did not then we are in the b > a path 640| | */ 641| 175| std::array r; // NOLINT(*-member-init) 642| 175| const word carry = bigint_sub3(r.data(), b.data(), N, a.data(), N); 643| | 644| | // Conditional ok: this function is variable time 645| 175| if(carry == 0) { ------------------ | Branch (645:16): [True: 105, False: 70] ------------------ 646| | // b > a 647| 105| b.m_val = r; 648| 105| x = nx; 649| 105| Self::_invert_vartime_div2_helper(b, x); 650| 105| } else { 651| | // We know this can't underflow because a > b 652| 70| bigint_sub3(r.data(), a.data(), N, b.data(), N); 653| 70| a.m_val = r; 654| 70| y = nx; 655| 70| Self::_invert_vartime_div2_helper(a, y); 656| 70| } 657| 175| } 658| 1| } pcurves_secp256k1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE8to_wordsEv: 736| 1| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_secp256k1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE27_invert_vartime_div2_helperERSA_SB_: 549| 177| static constexpr void _invert_vartime_div2_helper(Self& a, Self& x) { 550| 177| constexpr auto INV_2 = p_div_2_plus_1(Rep::P); 551| | 552| | // Conditional ok: this function is variable time 553| 541| while((a.m_val[0] & 1) != 1) { ------------------ | Branch (553:16): [True: 364, False: 177] ------------------ 554| 364| shift_right<1>(a.m_val); 555| | 556| 364| const W borrow = shift_right<1>(x.m_val); 557| | 558| | // Conditional ok: this function is variable time 559| 364| if(borrow) { ------------------ | Branch (559:16): [True: 186, False: 178] ------------------ 560| 186| bigint_add2(x.m_val.data(), N, INV_2.data(), N); 561| 186| } 562| 364| } 563| 177| } pcurves_secp256k1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE6negateEv: 454| 2| constexpr Self negate() const { 455| 2| const W x_is_zero = ~CT::all_zeros(this->data(), N).value(); 456| | 457| 2| std::array r; // NOLINT(*-member-init) 458| 2| W carry = 0; 459| 10| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (459:28): [True: 8, False: 2] ------------------ 460| 8| r[i] = word_sub(P[i] & x_is_zero, m_val[i], &carry); 461| 8| } 462| | 463| 2| return Self(r); 464| 2| } pcurves_secp256k1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEEC2ERKSB_SE_: 928| 1.56k| constexpr AffineCurvePoint(const FieldElement& x, const FieldElement& y) : m_x(x), m_y(y) {} pcurves_secp256r1.cpp:_ZN5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_19secp256r15CurveELm6EEC2ERKNS_16AffineCurvePointINS_6IntModINS2_22Secp256r1MontgomeryRepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 1630| 1| m_table(basemul_booth_setup(p, BlindedScalar::Bits + 1)) {} pcurves_secp256r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_E11from_affineERKNS_16AffineCurvePointISB_EE: 1027| 102| static constexpr Self from_affine(const AffinePoint& pt) { 1028| | /* 1029| | * If the point is the identity element (x=0, y=0) then instead of 1030| | * creating (x, y, 1) = (0, 0, 1) we want our projective identity 1031| | * encoding of (0, 1, 0) 1032| | * 1033| | * Which we can achieve by a conditional swap of y and z if the 1034| | * affine point is the identity. 1035| | */ 1036| | 1037| 102| const auto x = pt.x(); 1038| 102| auto y = pt.y(); 1039| 102| auto z = FieldElement::one(); 1040| | 1041| 102| FieldElement::conditional_swap(pt.is_identity(), y, z); 1042| | 1043| 102| return ProjectiveCurvePoint(x, y, z); 1044| 102| } pcurves_secp256r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEEE1xEv: 982| 173k| constexpr const FieldElement& x() const { return m_x; } pcurves_secp256r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEEE1yEv: 987| 168k| constexpr const FieldElement& y() const { return m_y; } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE3oneEv: 202| 5.15k| static constexpr Self one() { return Self(Rep::one()); } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEEC2ENSt3__15arrayImLm4EEE: 908| 156k| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE16conditional_swapENS_2CT6ChoiceERSA_SD_: 412| 102| static constexpr void conditional_swap(CT::Choice cond, Self& x, Self& y) { 413| 102| const W mask = cond.into_bitmask(); 414| | 415| 510| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (415:28): [True: 408, False: 102] ------------------ 416| 408| const auto nx = Botan::choose(mask, y.m_val[i], x.m_val[i]); 417| 408| const auto ny = Botan::choose(mask, x.m_val[i], y.m_val[i]); 418| 408| x.m_val[i] = nx; 419| 408| y.m_val[i] = ny; 420| 408| } 421| 102| } pcurves_secp256r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEEE11is_identityEv: 939| 5.25k| constexpr CT::Choice is_identity() const { return x().is_zero() && y().is_zero(); } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE7is_zeroEv: 227| 29.6k| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_secp256r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_EC2ERKSB_SE_SE_: 1067| 6.72k| m_x(x), m_y(y), m_z(z) {} pcurves_secp256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_E3dblEv: 1181| 833| constexpr Self dbl() const { 1182| 833| if constexpr(Self::A_is_minus_3) { 1183| 833| return dbl_a_minus_3(*this); 1184| | } else if constexpr(Self::A_is_zero) { 1185| | return dbl_a_zero(*this); 1186| | } else { 1187| | return dbl_generic(*this, A); 1188| | } 1189| 833| } pcurves_secp256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_E1zEv: 1224| 38.4k| constexpr const FieldElement& z() const { return m_z; } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE6squareEv: 428| 23.3k| constexpr BOTAN_FORCE_INLINE Self square() const { 429| 23.3k| std::array z; // NOLINT(*-member-init) 430| 23.3k| comba_sqr(z.data(), this->data()); 431| 23.3k| return Self(Rep::redc(z)); 432| 23.3k| } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE4dataEv: 898| 181k| constexpr const W* data() const { return m_val.data(); } pcurves_secp256r1.cpp:_ZN5BotanmlERKNS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEEESC_: 348| 61.1k| friend constexpr BOTAN_FORCE_INLINE Self operator*(const Self& a, const Self& b) { 349| 61.1k| std::array z; // NOLINT(*-member-init) 350| 61.1k| comba_mul(z.data(), a.data(), b.data()); 351| 61.1k| return Self(Rep::redc(z)); 352| 61.1k| } pcurves_secp256r1.cpp:_ZN5BotanmiERKNS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEEESC_: 283| 36.8k| friend constexpr BOTAN_FORCE_INLINE Self operator-(const Self& a, const Self& b) { 284| 36.8k| std::array r; // NOLINT(*-member-init) 285| 36.8k| W carry = 0; 286| 184k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (286:28): [True: 147k, False: 36.8k] ------------------ 287| 147k| r[i] = word_sub(a.m_val[i], b.m_val[i], &carry); 288| 147k| } 289| | 290| 36.8k| const auto mask = CT::Mask::expand(carry).value(); 291| | 292| 36.8k| carry = 0; 293| | 294| 184k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (294:28): [True: 147k, False: 36.8k] ------------------ 295| 147k| r[i] = word_add(r[i], P[i] & mask, &carry); 296| 147k| } 297| | 298| 36.8k| return Self(r); 299| 36.8k| } pcurves_secp256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_E1xEv: 1214| 21.9k| constexpr const FieldElement& x() const { return m_x; } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE4mul3Ev: 337| 833| constexpr inline Self mul3() const { return mul2() + (*this); } pcurves_secp256r1.cpp:_ZN5BotanplERKNS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEEESC_: 267| 7.62k| friend constexpr BOTAN_FORCE_INLINE Self operator+(const Self& a, const Self& b) { 268| 7.62k| std::array t; // NOLINT(*-member-init) 269| | 270| 7.62k| W carry = 0; 271| 38.1k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (271:28): [True: 30.5k, False: 7.62k] ------------------ 272| 30.5k| t[i] = word_add(a.m_val[i], b.m_val[i], &carry); 273| 30.5k| } 274| | 275| 7.62k| std::array r; // NOLINT(*-member-init) 276| 7.62k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 277| 7.62k| return Self(r); 278| 7.62k| } pcurves_secp256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_E1yEv: 1219| 21.1k| constexpr const FieldElement& y() const { return m_y; } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE4mul4Ev: 340| 833| constexpr inline Self mul4() const { return mul2().mul2(); } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE4mul2Ev: 327| 6.66k| constexpr BOTAN_FORCE_INLINE Self mul2() const { 328| 6.66k| std::array t = value(); 329| 6.66k| const W carry = shift_left<1>(t); 330| | 331| 6.66k| std::array r; // NOLINT(*-member-init) 332| 6.66k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 333| 6.66k| return Self(r); 334| 6.66k| } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE5valueEv: 896| 6.66k| constexpr const std::array& value() const { return m_val; } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE4mul8Ev: 343| 833| constexpr inline Self mul8() const { return mul2().mul2().mul2(); } pcurves_secp256r1.cpp:_ZN5BotanplERKNS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_EESE_: 1075| 735| friend constexpr Self operator+(const Self& a, const Self& b) { return Self::add(a, b); } pcurves_secp256r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_E3addERKSC_SE_: 1138| 735| constexpr static Self add(const Self& a, const Self& b) { return point_add(a, b); } pcurves_secp256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_E11is_identityEv: 1093| 7.88k| constexpr CT::Choice is_identity() const { return z().is_zero(); } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE18conditional_assignERSA_SB_SB_NS_2CT6ChoiceERKSA_SF_SF_: 397| 11.2k| Self& x, Self& y, Self& z, CT::Choice cond, const Self& nx, const Self& ny, const Self& nz) { 398| 11.2k| const W mask = cond.into_bitmask(); 399| | 400| 56.3k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (400:28): [True: 45.0k, False: 11.2k] ------------------ 401| 45.0k| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 402| 45.0k| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 403| 45.0k| z.m_val[i] = Botan::choose(mask, nz.m_val[i], z.m_val[i]); 404| 45.0k| } 405| 11.2k| } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEEmLERKSA_: 357| 2.32k| constexpr BOTAN_FORCE_INLINE Self& operator*=(const Self& other) { 358| 2.32k| std::array z; // NOLINT(*-member-init) 359| 2.32k| comba_mul(z.data(), data(), other.data()); 360| 2.32k| m_val = Rep::redc(z); 361| 2.32k| return (*this); 362| 2.32k| } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE8square_nEm: 441| 909| constexpr void square_n(size_t n) { 442| 909| std::array z; // NOLINT(*-member-init) 443| 26.3k| for(size_t i = 0; i != n; ++i) { ------------------ | Branch (443:28): [True: 25.4k, False: 909] ------------------ 444| 25.4k| comba_sqr(z.data(), this->data()); 445| 25.4k| m_val = Rep::redc(z); 446| 25.4k| } 447| 909| } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE14invert_vartimeEv: 600| 1| constexpr Self invert_vartime() const { 601| | // Conditional ok: this function is variable time 602| 1| if(this->is_zero().as_bool()) { ------------------ | Branch (602:13): [True: 0, False: 1] ------------------ 603| 0| return Self::zero(); 604| 0| } 605| | 606| 1| auto x = Self(std::array{1}); // 1 in standard domain 607| 1| auto b = Self(this->to_words()); // *this in standard domain 608| | 609| | // First loop iteration 610| 1| Self::_invert_vartime_div2_helper(b, x); 611| | 612| 1| auto a = b.negate(); 613| | // y += x but y is zero at the outset 614| 1| auto y = x; 615| | 616| | // First half of second loop iteration 617| 1| Self::_invert_vartime_div2_helper(a, y); 618| | 619| 176| for(;;) { 620| | // Conditional ok: this function is variable time 621| 176| if(a.m_val == b.m_val) { ------------------ | Branch (621:16): [True: 1, False: 175] ------------------ 622| | // At this point it should be that a == b == 1 623| 1| auto r = y.negate(); 624| | 625| | // Convert back to Montgomery if required 626| 1| r.m_val = Rep::to_rep(r.m_val); 627| 1| return r; 628| 1| } 629| | 630| 175| const auto nx = x + y; 631| | 632| | /* 633| | * Otherwise either b > a or a > b 634| | * 635| | * If b > a we want to set b to b - a 636| | * Otherwise we want to set a to a - b 637| | * 638| | * Compute r = b - a and check if it underflowed 639| | * If it did not then we are in the b > a path 640| | */ 641| 175| std::array r; // NOLINT(*-member-init) 642| 175| const word carry = bigint_sub3(r.data(), b.data(), N, a.data(), N); 643| | 644| | // Conditional ok: this function is variable time 645| 175| if(carry == 0) { ------------------ | Branch (645:16): [True: 85, False: 90] ------------------ 646| | // b > a 647| 85| b.m_val = r; 648| 85| x = nx; 649| 85| Self::_invert_vartime_div2_helper(b, x); 650| 90| } else { 651| | // We know this can't underflow because a > b 652| 90| bigint_sub3(r.data(), a.data(), N, b.data(), N); 653| 90| a.m_val = r; 654| 90| y = nx; 655| 90| Self::_invert_vartime_div2_helper(a, y); 656| 90| } 657| 175| } 658| 1| } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE4zeroEv: 197| 9.89k| static constexpr Self zero() { return Self(std::array{0}); } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE8to_wordsEv: 736| 1| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE27_invert_vartime_div2_helperERSA_SB_: 549| 177| static constexpr void _invert_vartime_div2_helper(Self& a, Self& x) { 550| 177| constexpr auto INV_2 = p_div_2_plus_1(Rep::P); 551| | 552| | // Conditional ok: this function is variable time 553| 545| while((a.m_val[0] & 1) != 1) { ------------------ | Branch (553:16): [True: 368, False: 177] ------------------ 554| 368| shift_right<1>(a.m_val); 555| | 556| 368| const W borrow = shift_right<1>(x.m_val); 557| | 558| | // Conditional ok: this function is variable time 559| 368| if(borrow) { ------------------ | Branch (559:16): [True: 129, False: 239] ------------------ 560| 129| bigint_add2(x.m_val.data(), N, INV_2.data(), N); 561| 129| } 562| 368| } 563| 177| } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE6negateEv: 454| 4.95k| constexpr Self negate() const { 455| 4.95k| const W x_is_zero = ~CT::all_zeros(this->data(), N).value(); 456| | 457| 4.95k| std::array r; // NOLINT(*-member-init) 458| 4.95k| W carry = 0; 459| 24.7k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (459:28): [True: 19.8k, False: 4.95k] ------------------ 460| 19.8k| r[i] = word_sub(P[i] & x_is_zero, m_val[i], &carry); 461| 19.8k| } 462| | 463| 4.95k| return Self(r); 464| 4.95k| } pcurves_secp256r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEEEC2ERKSB_SE_: 928| 6.82k| constexpr AffineCurvePoint(const FieldElement& x, const FieldElement& y) : m_x(x), m_y(y) {} pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE11stash_valueILm9EEENSt3__15arrayImXT_EEEv: 761| 505| std::array stash_value() const { 762| 505| static_assert(L >= N); 763| 505| std::array stash = {}; 764| 2.52k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (764:28): [True: 2.02k, False: 505] ------------------ 765| 2.02k| stash[i] = m_val[i]; 766| 2.02k| } 767| 505| return stash; 768| 505| } pcurves_secp256r1.cpp:_ZNK5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_19secp256r15CurveELm6EE3mulERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsENS2_22Secp256r1MontgomeryRepEE12ScalarParamsEEEEERNS_21RandomNumberGeneratorE: 1632| 101| ProjectivePoint mul(const Scalar& s, RandomNumberGenerator& rng) const { 1633| 101| const BlindingRandomness blinding(rng); 1634| 101| const BlindedScalar scalar(s, blinding); 1635| 101| return basemul_booth_exec(m_table, scalar, blinding); 1636| 101| } pcurves_secp256r1.cpp:_ZN5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp256r15CurveELm7EEELm1EEC2ERNS_21RandomNumberGeneratorE: 1455| 101| explicit BlindingRandomness(RandomNumberGenerator& rng) : m_seeded(rng.is_seeded()) { 1456| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1457| 101| if(m_seeded) { ------------------ | Branch (1457:13): [True: 101, False: 0] ------------------ 1458| 101| std::array buf{}; 1459| 101| rng.randomize(buf); 1460| | 1461| 101| const std::span bytes(buf); 1462| | 1463| 101| copy_mem(m_masks, bytes.first()); 1464| | 1465| 505| for(size_t i = 0; i != Rerandomizations; ++i) { ------------------ | Branch (1465:31): [True: 404, False: 101] ------------------ 1466| 404| const auto wide = bytes.subspan(Scalars * MaskBytes + i * WideBytes).first(); 1467| 404| m_rerandomizers[i] = FieldElement::from_wide_bytes(wide); 1468| 404| } 1469| | 1470| 101| const auto iso = bytes.subspan(Scalars * MaskBytes + Rerandomizations * WideBytes).first(); 1471| 101| m_isomorphism = FieldElement::from_wide_bytes(iso); 1472| 101| m_isomorphism.conditional_assign(m_isomorphism.is_zero(), FieldElement::one()); 1473| 101| } 1474| 101| } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEEC2Ev: 182| 404| constexpr IntMod() : m_val({}) {} pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE15from_wide_bytesILm40EEESA_NSt3__14spanIKhXT_EEE: 818| 505| static constexpr Self from_wide_bytes(std::span bytes) { 819| 505| static_assert(8 * L <= 2 * Self::BITS); 820| 505| std::array padded_bytes = {}; 821| 505| copy_mem(std::span{padded_bytes}.template last(), bytes); 822| 505| return Self(Rep::wide_to_rep(bytes_to_words(std::span{padded_bytes}))); 823| 505| } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE18conditional_assignENS_2CT6ChoiceERKSA_: 369| 4.94k| constexpr void conditional_assign(CT::Choice cond, const Self& nx) { 370| 4.94k| const W mask = cond.into_bitmask(); 371| | 372| 24.7k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (372:28): [True: 19.7k, False: 4.94k] ------------------ 373| 19.7k| m_val[i] = Botan::choose(mask, nx.m_val[i], m_val[i]); 374| 19.7k| } 375| 4.94k| } pcurves_secp256r1.cpp:_ZN5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp256r15CurveELm7EEC2INS_18BlindingRandomnessIS5_Lm1EEEEERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsENS2_22Secp256r1MontgomeryRepEE12ScalarParamsEEEEERKT_m: 1368| 101| BlindedScalarBits(const typename C::Scalar& scalar, const Randomness& randomness, size_t idx = 0) { 1369| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1370| 101| if(BlindingBits > 0 && randomness.seeded()) { ------------------ | Branch (1370:13): [True: 101, Folded] | Branch (1370:33): [True: 101, False: 0] ------------------ 1371| 101| constexpr size_t n_words = C::Words; 1372| | 1373| 101| W mask[n_words] = {0}; 1374| 101| load_le(mask, randomness.mask(idx).data(), MaskWords); 1375| | 1376| | // Mask to exactly BlindingBits 1377| 101| constexpr size_t ExcessBits = MaskWords * WordInfo::bits - BlindingBits; 1378| 101| if constexpr(ExcessBits > 0) { 1379| 101| constexpr W ExcessMask = (static_cast(1) << (WordInfo::bits - ExcessBits)) - 1; 1380| 101| mask[MaskWords - 1] &= ExcessMask; 1381| 101| } 1382| | 1383| | // Set top and bottom bits of mask 1384| 101| constexpr size_t TopMaskBit = (BlindingBits - 1) % WordInfo::bits; 1385| 101| mask[(BlindingBits - 1) / WordInfo::bits] |= static_cast(1) << TopMaskBit; 1386| 101| mask[0] |= 1; 1387| | 1388| 101| W mask_n[2 * n_words] = {0}; 1389| | 1390| 101| const auto sw = scalar.to_words(); 1391| | 1392| | // Compute masked scalar s + k*n 1393| 101| comba_mul(mask_n, mask, C::NW.data()); 1394| 101| bigint_add2(mask_n, 2 * n_words, sw.data(), sw.size()); 1395| | 1396| 101| std::reverse(mask_n, mask_n + 2 * n_words); 1397| 101| m_bytes = store_be>(mask_n); 1398| 101| m_bits = C::Scalar::BITS + BlindingBits; 1399| 101| } else { 1400| | // No RNG available, skip blinding 1401| 0| m_bytes.resize(C::Scalar::BYTES); 1402| 0| scalar.serialize_to(std::span{m_bytes}.template first()); 1403| 0| m_bits = C::Scalar::BITS; 1404| 0| } 1405| | 1406| 101| CT::poison(m_bytes.data(), m_bytes.size()); 1407| 101| } pcurves_secp256r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp256r15CurveELm7EEELm1EE6seededEv: 1476| 101| bool seeded() const { return m_seeded; } pcurves_secp256r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp256r15CurveELm7EEELm1EE4maskEm: 1478| 101| std::span mask(size_t idx) const { 1479| 101| BOTAN_ASSERT_NOMSG(idx < Scalars); ------------------ | | 84| 101| do { \ | | 85| 101| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 101| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 101] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 101| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 101] | | ------------------ ------------------ 1480| 101| return std::span{m_masks}.subspan(idx * MaskBytes).template first(); 1481| 101| } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS4_22Secp256r1MontgomeryRepEE12ScalarParamsEEEE8to_wordsEv: 736| 101| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_secp256r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS3_22Secp256r1MontgomeryRepEE12ScalarParamsEE8from_repERKNSt3__15arrayImLm4EEE: 139| 202| constexpr static std::array from_rep(const std::array& z) { 140| 202| std::array ze = {}; 141| 202| copy_mem(std::span{ze}.template first(), z); 142| 202| return Self::redc(ze); 143| 202| } pcurves_secp256r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS3_22Secp256r1MontgomeryRepEE12ScalarParamsEE4redcERKNSt3__15arrayImLm8EEE: 106| 303| constexpr static std::array redc(const std::array& z) { 107| | if constexpr(P_dash == 1) { 108| | return monty_redc_pdash1(z, P); 109| 303| } else { 110| 303| return monty_redc(z, P, P_dash); 111| 303| } 112| 303| } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS4_22Secp256r1MontgomeryRepEE12ScalarParamsEEEE12serialize_toENSt3__14spanIhLm32EEE: 741| 101| constexpr void serialize_to(std::span bytes) const { 742| 101| auto v = Rep::from_rep(m_val); 743| 101| std::reverse(v.begin(), v.end()); 744| | 745| 101| if constexpr(Self::BYTES == N * WordInfo::bytes) { 746| 101| store_be(bytes, v); 747| | } else { 748| | // Remove leading zero bytes 749| | const auto padded_bytes = store_be(v); 750| | constexpr size_t extra = N * WordInfo::bytes - Self::BYTES; 751| | copy_mem(bytes, std::span{padded_bytes}.template subspan()); 752| | } 753| 101| } pcurves_secp256r1.cpp:_ZNK5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp256r15CurveELm7EE4bitsEv: 1362| 101| size_t bits() const { return m_bits; } pcurves_secp256r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_E18conditional_assignENS_2CT6ChoiceERKSC_: 1095| 101| constexpr void conditional_assign(CT::Choice cond, const Self& pt) { 1096| 101| FieldElement::conditional_assign(m_x, m_y, m_z, cond, pt.x(), pt.y(), pt.z()); 1097| 101| } pcurves_secp256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_E6negateEv: 1194| 101| constexpr Self negate() const { return Self(x(), y().negate(), z()); } pcurves_secp256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_E18_const_time_poisonEv: 1226| 101| constexpr void _const_time_poison() const { CT::poison_all(m_x, m_y, m_z); } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE18_const_time_poisonEv: 891| 303| constexpr void _const_time_poison() const { CT::poison(m_val); } pcurves_secp256r1.cpp:_ZNK5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp256r15CurveELm7EE10get_windowEm: 1409| 4.94k| size_t get_window(size_t offset) const { 1410| | // Extract a WindowBits sized window out of s, depending on offset. 1411| 4.94k| return read_window_bits(std::span{m_bytes}, offset); 1412| 4.94k| } pcurves_secp256r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_E10add_or_subERKSC_RKNS_16AffineCurvePointISB_EENS_2CT6ChoiceE: 1121| 4.84k| constexpr static Self add_or_sub(const Self& a, const AffinePoint& b, CT::Choice sub) { 1122| 4.84k| return point_add_or_sub_mixed(a, b, sub, FieldElement::one(), A); 1123| 4.84k| } pcurves_secp256r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEEE9ct_selectENSt3__14spanIKSC_Lm18446744073709551615EEEm: 966| 4.94k| static constexpr auto ct_select(std::span pts, size_t idx) { 967| 4.94k| auto result = Self::identity(pts[0]); 968| | 969| | // Intentionally wrapping; set to maximum size_t if idx == 0 970| 4.94k| const size_t idx1 = idx - 1; 971| 163k| for(size_t i = 0; i != pts.size(); ++i) { ------------------ | Branch (971:28): [True: 158k, False: 4.94k] ------------------ 972| 158k| const auto found = CT::Mask::is_equal(idx1, i).as_choice(); 973| 158k| result.conditional_assign(found, pts[i]); 974| 158k| } 975| | 976| 4.94k| return result; 977| 4.94k| } pcurves_secp256r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEEE8identityERKSC_: 935| 4.94k| static constexpr Self identity(const Self& /*unused*/) { 936| 4.94k| return Self(FieldElement::zero(), FieldElement::zero()); 937| 4.94k| } pcurves_secp256r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEEE18conditional_assignENS_2CT6ChoiceERKSC_: 992| 158k| constexpr void conditional_assign(CT::Choice cond, const Self& pt) { 993| 158k| FieldElement::conditional_assign(m_x, m_y, cond, pt.x(), pt.y()); 994| 158k| } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE18conditional_assignERSA_SB_NS_2CT6ChoiceERKSA_SF_: 382| 158k| static constexpr void conditional_assign(Self& x, Self& y, CT::Choice cond, const Self& nx, const Self& ny) { 383| 158k| const W mask = cond.into_bitmask(); 384| | 385| 791k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (385:28): [True: 633k, False: 158k] ------------------ 386| 633k| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 387| 633k| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 388| 633k| } 389| 158k| } pcurves_secp256r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp256r15CurveELm7EEELm1EE13randomize_repERNS_20ProjectiveCurvePointINS_6IntModINS3_22Secp256r1MontgomeryRepINS_13EllipticCurveINS4_6ParamsESA_E11FieldParamsEEEEESC_EEm: 1486| 404| void randomize_rep(typename C::ProjectivePoint& pt, size_t idx) const { 1487| 404| BOTAN_ASSERT_NOMSG(idx < Rerandomizations); ------------------ | | 84| 404| do { \ | | 85| 404| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 404| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 404] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 404| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 404] | | ------------------ ------------------ 1488| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1489| 404| if(m_seeded) { ------------------ | Branch (1489:13): [True: 404, False: 0] ------------------ 1490| 404| pt.randomize_rep(m_rerandomizers[idx]); 1491| 404| } 1492| 404| } pcurves_secp256r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_E13randomize_repERKSB_: 1202| 404| void randomize_rep(const FieldElement& r) { 1203| 404| const auto r2 = r.square(); 1204| 404| const auto r3 = r2 * r; 1205| | 1206| 404| m_x *= r2; 1207| 404| m_y *= r3; 1208| 404| m_z *= r; 1209| 404| } pcurves_secp256r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEES7_E20_const_time_unpoisonEv: 1228| 101| constexpr void _const_time_unpoison() const { CT::unpoison_all(m_x, m_y, m_z); } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE20_const_time_unpoisonEv: 893| 303| constexpr void _const_time_unpoison() const { CT::unpoison(m_val); } pcurves_secp256r1.cpp:_ZN5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp256r15CurveELm7EED2Ev: 1414| 101| ~BlindedScalarBits() { 1415| 101| secure_zeroize_buffer(m_bytes.data(), m_bytes.size()); 1416| 101| CT::unpoison(m_bytes.data(), m_bytes.size()); 1417| 101| } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS4_22Secp256r1MontgomeryRepEE12ScalarParamsEEEE10from_stashILm9EEESB_RKNSt3__15arrayImXT_EEE: 776| 303| static Self from_stash(const std::array& stash) { 777| 303| static_assert(L >= N); 778| 303| std::array val = {}; 779| 1.51k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (779:28): [True: 1.21k, False: 303] ------------------ 780| 1.21k| val[i] = stash[i]; 781| 1.21k| } 782| 303| return Self(val); 783| 303| } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS4_22Secp256r1MontgomeryRepEE12ScalarParamsEEEEC2ENSt3__15arrayImLm4EEE: 908| 404| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE12serialize_toENSt3__14spanIhLm32EEE: 741| 202| constexpr void serialize_to(std::span bytes) const { 742| 202| auto v = Rep::from_rep(m_val); 743| 202| std::reverse(v.begin(), v.end()); 744| | 745| 202| if constexpr(Self::BYTES == N * WordInfo::bytes) { 746| 202| store_be(bytes, v); 747| | } else { 748| | // Remove leading zero bytes 749| | const auto padded_bytes = store_be(v); 750| | constexpr size_t extra = N * WordInfo::bytes - Self::BYTES; 751| | copy_mem(bytes, std::span{padded_bytes}.template subspan()); 752| | } 753| 202| } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS4_22Secp256r1MontgomeryRepEE12ScalarParamsEEEE11stash_valueILm9EEENSt3__15arrayImXT_EEEv: 761| 101| std::array stash_value() const { 762| 101| static_assert(L >= N); 763| 101| std::array stash = {}; 764| 505| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (764:28): [True: 404, False: 101] ------------------ 765| 404| stash[i] = m_val[i]; 766| 404| } 767| 101| return stash; 768| 101| } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEE10from_stashILm9EEESA_RKNSt3__15arrayImXT_EEE: 776| 707| static Self from_stash(const std::array& stash) { 777| 707| static_assert(L >= N); 778| 707| std::array val = {}; 779| 3.53k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (779:28): [True: 2.82k, False: 707] ------------------ 780| 2.82k| val[i] = stash[i]; 781| 2.82k| } 782| 707| return Self(val); 783| 707| } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS4_22Secp256r1MontgomeryRepEE12ScalarParamsEEEE7is_zeroEv: 227| 202| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS2_9secp256r16ParamsES3_E11FieldParamsEEEEeqERKSA_: 724| 101| constexpr CT::Choice operator==(const Self& other) const { 725| 101| return CT::is_equal(this->data(), other.data(), N).as_choice(); 726| 101| } pcurves_secp256r1.cpp:_ZN5Botan13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS2_22Secp256r1MontgomeryRepEE7x3_ax_bERKNS_6IntModINS5_INS6_11FieldParamsEEEEE: 1327| 101| static constexpr FieldElement x3_ax_b(const FieldElement& x) { return (x.square() + A) * x + B; } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS4_22Secp256r1MontgomeryRepEE12ScalarParamsEEEE11deserializeENSt3__14spanIKhLm18446744073709551615EEE: 794| 101| static std::optional deserialize(std::span bytes) { 795| | // Conditional ok: input length is public 796| 101| if(bytes.size() != Self::BYTES) { ------------------ | Branch (796:13): [True: 0, False: 101] ------------------ 797| 0| return {}; 798| 0| } 799| | 800| 101| const auto words = bytes_to_words(bytes.first()); 801| | 802| | // Conditional acceptable: std::optional is implicitly not constant time 803| 101| if(!bigint_ct_is_lt(words.data(), N, P.data(), N).as_bool()) { ------------------ | Branch (803:13): [True: 0, False: 101] ------------------ 804| 0| return {}; 805| 0| } 806| | 807| | // Safe because we checked above that words is an integer < P 808| 101| return Self::from_words(words); 809| 101| } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS4_22Secp256r1MontgomeryRepEE12ScalarParamsEEEE10from_wordsILm4EEESB_NSt3__15arrayImXT_EEE: 213| 101| static constexpr Self from_words(std::array w) { 214| 101| if constexpr(L == N) { 215| 101| return Self(Rep::to_rep(w)); 216| | } else { 217| | static_assert(L < N); 218| | std::array ew = {}; 219| | copy_mem(std::span{ew}.template first(), w); 220| | return Self(Rep::to_rep(ew)); 221| | } 222| 101| } pcurves_secp256r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS3_22Secp256r1MontgomeryRepEE12ScalarParamsEE6to_repERKNSt3__15arrayImLm4EEE: 117| 101| constexpr static std::array to_rep(const std::array& x) { 118| 101| std::array z; // NOLINT(*-member-init) 119| 101| comba_mul(z.data(), x.data(), R2.data()); 120| 101| return Self::redc(z); 121| 101| } pcurves_secp256r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS3_9secp256r16ParamsES4_E11FieldParamsEEEEEE12serialize_toENSt3__14spanIhLm65EEE: 952| 101| constexpr void serialize_to(std::span bytes) const { 953| 101| BOTAN_STATE_CHECK(this->is_identity().as_bool() == false); ------------------ | | 51| 101| do { \ | | 52| 101| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 101| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 101] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 101| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 101] | | ------------------ ------------------ 954| 101| BufferStuffer pack(bytes); 955| 101| pack.append(0x04); 956| 101| x().serialize_to(pack.next()); 957| 101| y().serialize_to(pack.next()); 958| 101| BOTAN_DEBUG_ASSERT(pack.full()); ------------------ | | 137| 101| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 101| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 101] | | ------------------ ------------------ 959| 101| } pcurves_secp256r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS4_22Secp256r1MontgomeryRepEE12ScalarParamsEEEE6randomERNS_21RandomNumberGeneratorE: 853| 101| static Self random(RandomNumberGenerator& rng) { 854| 101| constexpr size_t MAX_ATTEMPTS = 1000; 855| | 856| 101| std::array buf{}; 857| | 858| 101| for(size_t i = 0; i != MAX_ATTEMPTS; ++i) { ------------------ | Branch (858:28): [True: 101, False: 0] ------------------ 859| 101| rng.randomize(buf); 860| | 861| | // Zero off high bits that if set would certainly cause us 862| | // to be out of range 863| | if constexpr(Self::BITS % 8 != 0) { 864| | constexpr uint8_t mask = 0xFF >> (8 - (Self::BITS % 8)); 865| | buf[0] &= mask; 866| | } 867| | 868| | // Conditionals ok: rejection sampling reveals only values we didn't use 869| 101| if(auto s = Self::deserialize(buf)) { ------------------ | Branch (869:21): [True: 101, False: 0] ------------------ 870| 101| if(s.value().is_nonzero().as_bool()) { ------------------ | Branch (870:19): [True: 101, False: 0] ------------------ 871| 101| return s.value(); 872| 101| } 873| 101| } 874| 101| } 875| | 876| 0| throw Internal_Error("Failed to generate random Scalar within bounded number of attempts"); 877| 101| } pcurves_secp256r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp256r16ParamsENS4_22Secp256r1MontgomeryRepEE12ScalarParamsEEEE10is_nonzeroEv: 232| 101| constexpr CT::Choice is_nonzero() const { return !is_zero(); } pcurves_secp384r1.cpp:_ZN5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_19secp384r15CurveELm6EEC2ERKNS_16AffineCurvePointINS_6IntModINS2_12Secp384r1RepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 1630| 1| m_table(basemul_booth_setup(p, BlindedScalar::Bits + 1)) {} pcurves_secp384r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_E11from_affineERKNS_16AffineCurvePointISB_EE: 1027| 121| static constexpr Self from_affine(const AffinePoint& pt) { 1028| | /* 1029| | * If the point is the identity element (x=0, y=0) then instead of 1030| | * creating (x, y, 1) = (0, 0, 1) we want our projective identity 1031| | * encoding of (0, 1, 0) 1032| | * 1033| | * Which we can achieve by a conditional swap of y and z if the 1034| | * affine point is the identity. 1035| | */ 1036| | 1037| 121| const auto x = pt.x(); 1038| 121| auto y = pt.y(); 1039| 121| auto z = FieldElement::one(); 1040| | 1041| 121| FieldElement::conditional_swap(pt.is_identity(), y, z); 1042| | 1043| 121| return ProjectiveCurvePoint(x, y, z); 1044| 121| } pcurves_secp384r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEEE1xEv: 982| 307k| constexpr const FieldElement& x() const { return m_x; } pcurves_secp384r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEEE1yEv: 987| 298k| constexpr const FieldElement& y() const { return m_y; } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE3oneEv: 202| 9.00k| static constexpr Self one() { return Self(Rep::one()); } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEEC2ENSt3__15arrayImLm6EEE: 908| 263k| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE16conditional_swapENS_2CT6ChoiceERSA_SD_: 412| 121| static constexpr void conditional_swap(CT::Choice cond, Self& x, Self& y) { 413| 121| const W mask = cond.into_bitmask(); 414| | 415| 847| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (415:28): [True: 726, False: 121] ------------------ 416| 726| const auto nx = Botan::choose(mask, y.m_val[i], x.m_val[i]); 417| 726| const auto ny = Botan::choose(mask, x.m_val[i], y.m_val[i]); 418| 726| x.m_val[i] = nx; 419| 726| y.m_val[i] = ny; 420| 726| } 421| 121| } pcurves_secp384r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEEE11is_identityEv: 939| 9.12k| constexpr CT::Choice is_identity() const { return x().is_zero() && y().is_zero(); } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE7is_zeroEv: 227| 50.9k| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_secp384r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_EC2ERKSB_SE_SE_: 1067| 11.3k| m_x(x), m_y(y), m_z(z) {} pcurves_secp384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_E3dblEv: 1181| 1.24k| constexpr Self dbl() const { 1182| 1.24k| if constexpr(Self::A_is_minus_3) { 1183| 1.24k| return dbl_a_minus_3(*this); 1184| | } else if constexpr(Self::A_is_zero) { 1185| | return dbl_a_zero(*this); 1186| | } else { 1187| | return dbl_generic(*this, A); 1188| | } 1189| 1.24k| } pcurves_secp384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_E1zEv: 1224| 64.2k| constexpr const FieldElement& z() const { return m_z; } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE6squareEv: 428| 38.6k| constexpr BOTAN_FORCE_INLINE Self square() const { 429| 38.6k| std::array z; // NOLINT(*-member-init) 430| 38.6k| comba_sqr(z.data(), this->data()); 431| 38.6k| return Self(Rep::redc(z)); 432| 38.6k| } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE4dataEv: 898| 304k| constexpr const W* data() const { return m_val.data(); } pcurves_secp384r1.cpp:_ZN5BotanmlERKNS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEEESC_: 348| 102k| friend constexpr BOTAN_FORCE_INLINE Self operator*(const Self& a, const Self& b) { 349| 102k| std::array z; // NOLINT(*-member-init) 350| 102k| comba_mul(z.data(), a.data(), b.data()); 351| 102k| return Self(Rep::redc(z)); 352| 102k| } pcurves_secp384r1.cpp:_ZN5BotanmiERKNS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEEESC_: 283| 63.3k| friend constexpr BOTAN_FORCE_INLINE Self operator-(const Self& a, const Self& b) { 284| 63.3k| std::array r; // NOLINT(*-member-init) 285| 63.3k| W carry = 0; 286| 443k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (286:28): [True: 380k, False: 63.3k] ------------------ 287| 380k| r[i] = word_sub(a.m_val[i], b.m_val[i], &carry); 288| 380k| } 289| | 290| 63.3k| const auto mask = CT::Mask::expand(carry).value(); 291| | 292| 63.3k| carry = 0; 293| | 294| 443k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (294:28): [True: 380k, False: 63.3k] ------------------ 295| 380k| r[i] = word_add(r[i], P[i] & mask, &carry); 296| 380k| } 297| | 298| 63.3k| return Self(r); 299| 63.3k| } pcurves_secp384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_E1xEv: 1214| 36.8k| constexpr const FieldElement& x() const { return m_x; } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE4mul3Ev: 337| 1.24k| constexpr inline Self mul3() const { return mul2() + (*this); } pcurves_secp384r1.cpp:_ZN5BotanplERKNS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEEESC_: 267| 12.7k| friend constexpr BOTAN_FORCE_INLINE Self operator+(const Self& a, const Self& b) { 268| 12.7k| std::array t; // NOLINT(*-member-init) 269| | 270| 12.7k| W carry = 0; 271| 88.9k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (271:28): [True: 76.2k, False: 12.7k] ------------------ 272| 76.2k| t[i] = word_add(a.m_val[i], b.m_val[i], &carry); 273| 76.2k| } 274| | 275| 12.7k| std::array r; // NOLINT(*-member-init) 276| 12.7k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 277| 12.7k| return Self(r); 278| 12.7k| } pcurves_secp384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_E1yEv: 1219| 35.5k| constexpr const FieldElement& y() const { return m_y; } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE4mul4Ev: 340| 1.24k| constexpr inline Self mul4() const { return mul2().mul2(); } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE4mul2Ev: 327| 9.92k| constexpr BOTAN_FORCE_INLINE Self mul2() const { 328| 9.92k| std::array t = value(); 329| 9.92k| const W carry = shift_left<1>(t); 330| | 331| 9.92k| std::array r; // NOLINT(*-member-init) 332| 9.92k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 333| 9.92k| return Self(r); 334| 9.92k| } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE5valueEv: 896| 9.92k| constexpr const std::array& value() const { return m_val; } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE4mul8Ev: 343| 1.24k| constexpr inline Self mul8() const { return mul2().mul2().mul2(); } pcurves_secp384r1.cpp:_ZN5BotanplERKNS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_EESE_: 1075| 1.09k| friend constexpr Self operator+(const Self& a, const Self& b) { return Self::add(a, b); } pcurves_secp384r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_E3addERKSC_SE_: 1138| 1.09k| constexpr static Self add(const Self& a, const Self& b) { return point_add(a, b); } pcurves_secp384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_E11is_identityEv: 1093| 13.1k| constexpr CT::Choice is_identity() const { return z().is_zero(); } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE18conditional_assignERSA_SB_SB_NS_2CT6ChoiceERKSA_SF_SF_: 397| 19.5k| Self& x, Self& y, Self& z, CT::Choice cond, const Self& nx, const Self& ny, const Self& nz) { 398| 19.5k| const W mask = cond.into_bitmask(); 399| | 400| 137k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (400:28): [True: 117k, False: 19.5k] ------------------ 401| 117k| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 402| 117k| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 403| 117k| z.m_val[i] = Botan::choose(mask, nz.m_val[i], z.m_val[i]); 404| 117k| } 405| 19.5k| } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEEmLERKSA_: 357| 3.00k| constexpr BOTAN_FORCE_INLINE Self& operator*=(const Self& other) { 358| 3.00k| std::array z; // NOLINT(*-member-init) 359| 3.00k| comba_mul(z.data(), data(), other.data()); 360| 3.00k| m_val = Rep::redc(z); 361| 3.00k| return (*this); 362| 3.00k| } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE8square_nEm: 441| 1.44k| constexpr void square_n(size_t n) { 442| 1.44k| std::array z; // NOLINT(*-member-init) 443| 47.1k| for(size_t i = 0; i != n; ++i) { ------------------ | Branch (443:28): [True: 45.7k, False: 1.44k] ------------------ 444| 45.7k| comba_sqr(z.data(), this->data()); 445| 45.7k| m_val = Rep::redc(z); 446| 45.7k| } 447| 1.44k| } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE14invert_vartimeEv: 600| 1| constexpr Self invert_vartime() const { 601| | // Conditional ok: this function is variable time 602| 1| if(this->is_zero().as_bool()) { ------------------ | Branch (602:13): [True: 0, False: 1] ------------------ 603| 0| return Self::zero(); 604| 0| } 605| | 606| 1| auto x = Self(std::array{1}); // 1 in standard domain 607| 1| auto b = Self(this->to_words()); // *this in standard domain 608| | 609| | // First loop iteration 610| 1| Self::_invert_vartime_div2_helper(b, x); 611| | 612| 1| auto a = b.negate(); 613| | // y += x but y is zero at the outset 614| 1| auto y = x; 615| | 616| | // First half of second loop iteration 617| 1| Self::_invert_vartime_div2_helper(a, y); 618| | 619| 252| for(;;) { 620| | // Conditional ok: this function is variable time 621| 252| if(a.m_val == b.m_val) { ------------------ | Branch (621:16): [True: 1, False: 251] ------------------ 622| | // At this point it should be that a == b == 1 623| 1| auto r = y.negate(); 624| | 625| | // Convert back to Montgomery if required 626| 1| r.m_val = Rep::to_rep(r.m_val); 627| 1| return r; 628| 1| } 629| | 630| 251| const auto nx = x + y; 631| | 632| | /* 633| | * Otherwise either b > a or a > b 634| | * 635| | * If b > a we want to set b to b - a 636| | * Otherwise we want to set a to a - b 637| | * 638| | * Compute r = b - a and check if it underflowed 639| | * If it did not then we are in the b > a path 640| | */ 641| 251| std::array r; // NOLINT(*-member-init) 642| 251| const word carry = bigint_sub3(r.data(), b.data(), N, a.data(), N); 643| | 644| | // Conditional ok: this function is variable time 645| 251| if(carry == 0) { ------------------ | Branch (645:16): [True: 118, False: 133] ------------------ 646| | // b > a 647| 118| b.m_val = r; 648| 118| x = nx; 649| 118| Self::_invert_vartime_div2_helper(b, x); 650| 133| } else { 651| | // We know this can't underflow because a > b 652| 133| bigint_sub3(r.data(), a.data(), N, b.data(), N); 653| 133| a.m_val = r; 654| 133| y = nx; 655| 133| Self::_invert_vartime_div2_helper(a, y); 656| 133| } 657| 251| } 658| 1| } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE4zeroEv: 197| 17.5k| static constexpr Self zero() { return Self(std::array{0}); } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE8to_wordsEv: 736| 1| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE27_invert_vartime_div2_helperERSA_SB_: 549| 253| static constexpr void _invert_vartime_div2_helper(Self& a, Self& x) { 550| 253| constexpr auto INV_2 = p_div_2_plus_1(Rep::P); 551| | 552| | // Conditional ok: this function is variable time 553| 809| while((a.m_val[0] & 1) != 1) { ------------------ | Branch (553:16): [True: 556, False: 253] ------------------ 554| 556| shift_right<1>(a.m_val); 555| | 556| 556| const W borrow = shift_right<1>(x.m_val); 557| | 558| | // Conditional ok: this function is variable time 559| 556| if(borrow) { ------------------ | Branch (559:16): [True: 248, False: 308] ------------------ 560| 248| bigint_add2(x.m_val.data(), N, INV_2.data(), N); 561| 248| } 562| 556| } 563| 253| } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE6negateEv: 454| 8.76k| constexpr Self negate() const { 455| 8.76k| const W x_is_zero = ~CT::all_zeros(this->data(), N).value(); 456| | 457| 8.76k| std::array r; // NOLINT(*-member-init) 458| 8.76k| W carry = 0; 459| 61.3k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (459:28): [True: 52.5k, False: 8.76k] ------------------ 460| 52.5k| r[i] = word_sub(P[i] & x_is_zero, m_val[i], &carry); 461| 52.5k| } 462| | 463| 8.76k| return Self(r); 464| 8.76k| } pcurves_secp384r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEEEC2ERKSB_SE_: 928| 11.4k| constexpr AffineCurvePoint(const FieldElement& x, const FieldElement& y) : m_x(x), m_y(y) {} pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE11stash_valueILm9EEENSt3__15arrayImXT_EEEv: 761| 600| std::array stash_value() const { 762| 600| static_assert(L >= N); 763| 600| std::array stash = {}; 764| 4.20k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (764:28): [True: 3.60k, False: 600] ------------------ 765| 3.60k| stash[i] = m_val[i]; 766| 3.60k| } 767| 600| return stash; 768| 600| } pcurves_secp384r1.cpp:_ZNK5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_19secp384r15CurveELm6EE3mulERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsENS2_12Secp384r1RepEE12ScalarParamsEEEEERNS_21RandomNumberGeneratorE: 1632| 120| ProjectivePoint mul(const Scalar& s, RandomNumberGenerator& rng) const { 1633| 120| const BlindingRandomness blinding(rng); 1634| 120| const BlindedScalar scalar(s, blinding); 1635| 120| return basemul_booth_exec(m_table, scalar, blinding); 1636| 120| } pcurves_secp384r1.cpp:_ZN5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp384r15CurveELm7EEELm1EEC2ERNS_21RandomNumberGeneratorE: 1455| 120| explicit BlindingRandomness(RandomNumberGenerator& rng) : m_seeded(rng.is_seeded()) { 1456| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1457| 120| if(m_seeded) { ------------------ | Branch (1457:13): [True: 120, False: 0] ------------------ 1458| 120| std::array buf{}; 1459| 120| rng.randomize(buf); 1460| | 1461| 120| const std::span bytes(buf); 1462| | 1463| 120| copy_mem(m_masks, bytes.first()); 1464| | 1465| 600| for(size_t i = 0; i != Rerandomizations; ++i) { ------------------ | Branch (1465:31): [True: 480, False: 120] ------------------ 1466| 480| const auto wide = bytes.subspan(Scalars * MaskBytes + i * WideBytes).first(); 1467| 480| m_rerandomizers[i] = FieldElement::from_wide_bytes(wide); 1468| 480| } 1469| | 1470| 120| const auto iso = bytes.subspan(Scalars * MaskBytes + Rerandomizations * WideBytes).first(); 1471| 120| m_isomorphism = FieldElement::from_wide_bytes(iso); 1472| 120| m_isomorphism.conditional_assign(m_isomorphism.is_zero(), FieldElement::one()); 1473| 120| } 1474| 120| } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEEC2Ev: 182| 480| constexpr IntMod() : m_val({}) {} pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE15from_wide_bytesILm56EEESA_NSt3__14spanIKhXT_EEE: 818| 600| static constexpr Self from_wide_bytes(std::span bytes) { 819| 600| static_assert(8 * L <= 2 * Self::BITS); 820| 600| std::array padded_bytes = {}; 821| 600| copy_mem(std::span{padded_bytes}.template last(), bytes); 822| 600| return Self(Rep::wide_to_rep(bytes_to_words(std::span{padded_bytes}))); 823| 600| } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE18conditional_assignENS_2CT6ChoiceERKSA_: 369| 8.76k| constexpr void conditional_assign(CT::Choice cond, const Self& nx) { 370| 8.76k| const W mask = cond.into_bitmask(); 371| | 372| 61.3k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (372:28): [True: 52.5k, False: 8.76k] ------------------ 373| 52.5k| m_val[i] = Botan::choose(mask, nx.m_val[i], m_val[i]); 374| 52.5k| } 375| 8.76k| } pcurves_secp384r1.cpp:_ZN5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp384r15CurveELm7EEC2INS_18BlindingRandomnessIS5_Lm1EEEEERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsENS2_12Secp384r1RepEE12ScalarParamsEEEEERKT_m: 1368| 120| BlindedScalarBits(const typename C::Scalar& scalar, const Randomness& randomness, size_t idx = 0) { 1369| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1370| 120| if(BlindingBits > 0 && randomness.seeded()) { ------------------ | Branch (1370:13): [True: 120, Folded] | Branch (1370:33): [True: 120, False: 0] ------------------ 1371| 120| constexpr size_t n_words = C::Words; 1372| | 1373| 120| W mask[n_words] = {0}; 1374| 120| load_le(mask, randomness.mask(idx).data(), MaskWords); 1375| | 1376| | // Mask to exactly BlindingBits 1377| 120| constexpr size_t ExcessBits = MaskWords * WordInfo::bits - BlindingBits; 1378| 120| if constexpr(ExcessBits > 0) { 1379| 120| constexpr W ExcessMask = (static_cast(1) << (WordInfo::bits - ExcessBits)) - 1; 1380| 120| mask[MaskWords - 1] &= ExcessMask; 1381| 120| } 1382| | 1383| | // Set top and bottom bits of mask 1384| 120| constexpr size_t TopMaskBit = (BlindingBits - 1) % WordInfo::bits; 1385| 120| mask[(BlindingBits - 1) / WordInfo::bits] |= static_cast(1) << TopMaskBit; 1386| 120| mask[0] |= 1; 1387| | 1388| 120| W mask_n[2 * n_words] = {0}; 1389| | 1390| 120| const auto sw = scalar.to_words(); 1391| | 1392| | // Compute masked scalar s + k*n 1393| 120| comba_mul(mask_n, mask, C::NW.data()); 1394| 120| bigint_add2(mask_n, 2 * n_words, sw.data(), sw.size()); 1395| | 1396| 120| std::reverse(mask_n, mask_n + 2 * n_words); 1397| 120| m_bytes = store_be>(mask_n); 1398| 120| m_bits = C::Scalar::BITS + BlindingBits; 1399| 120| } else { 1400| | // No RNG available, skip blinding 1401| 0| m_bytes.resize(C::Scalar::BYTES); 1402| 0| scalar.serialize_to(std::span{m_bytes}.template first()); 1403| 0| m_bits = C::Scalar::BITS; 1404| 0| } 1405| | 1406| 120| CT::poison(m_bytes.data(), m_bytes.size()); 1407| 120| } pcurves_secp384r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp384r15CurveELm7EEELm1EE6seededEv: 1476| 120| bool seeded() const { return m_seeded; } pcurves_secp384r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp384r15CurveELm7EEELm1EE4maskEm: 1478| 120| std::span mask(size_t idx) const { 1479| 120| BOTAN_ASSERT_NOMSG(idx < Scalars); ------------------ | | 84| 120| do { \ | | 85| 120| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 120| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 120] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 120| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 120] | | ------------------ ------------------ 1480| 120| return std::span{m_masks}.subspan(idx * MaskBytes).template first(); 1481| 120| } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS4_12Secp384r1RepEE12ScalarParamsEEEE8to_wordsEv: 736| 120| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_secp384r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS3_12Secp384r1RepEE12ScalarParamsEE8from_repERKNSt3__15arrayImLm6EEE: 139| 240| constexpr static std::array from_rep(const std::array& z) { 140| 240| std::array ze = {}; 141| 240| copy_mem(std::span{ze}.template first(), z); 142| 240| return Self::redc(ze); 143| 240| } pcurves_secp384r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS3_12Secp384r1RepEE12ScalarParamsEE4redcERKNSt3__15arrayImLm12EEE: 106| 360| constexpr static std::array redc(const std::array& z) { 107| | if constexpr(P_dash == 1) { 108| | return monty_redc_pdash1(z, P); 109| 360| } else { 110| 360| return monty_redc(z, P, P_dash); 111| 360| } 112| 360| } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS4_12Secp384r1RepEE12ScalarParamsEEEE12serialize_toENSt3__14spanIhLm48EEE: 741| 120| constexpr void serialize_to(std::span bytes) const { 742| 120| auto v = Rep::from_rep(m_val); 743| 120| std::reverse(v.begin(), v.end()); 744| | 745| 120| if constexpr(Self::BYTES == N * WordInfo::bytes) { 746| 120| store_be(bytes, v); 747| | } else { 748| | // Remove leading zero bytes 749| | const auto padded_bytes = store_be(v); 750| | constexpr size_t extra = N * WordInfo::bytes - Self::BYTES; 751| | copy_mem(bytes, std::span{padded_bytes}.template subspan()); 752| | } 753| 120| } pcurves_secp384r1.cpp:_ZNK5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp384r15CurveELm7EE4bitsEv: 1362| 120| size_t bits() const { return m_bits; } pcurves_secp384r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_E18conditional_assignENS_2CT6ChoiceERKSC_: 1095| 120| constexpr void conditional_assign(CT::Choice cond, const Self& pt) { 1096| 120| FieldElement::conditional_assign(m_x, m_y, m_z, cond, pt.x(), pt.y(), pt.z()); 1097| 120| } pcurves_secp384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_E6negateEv: 1194| 120| constexpr Self negate() const { return Self(x(), y().negate(), z()); } pcurves_secp384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_E18_const_time_poisonEv: 1226| 120| constexpr void _const_time_poison() const { CT::poison_all(m_x, m_y, m_z); } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE18_const_time_poisonEv: 891| 360| constexpr void _const_time_poison() const { CT::poison(m_val); } pcurves_secp384r1.cpp:_ZNK5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp384r15CurveELm7EE10get_windowEm: 1409| 8.76k| size_t get_window(size_t offset) const { 1410| | // Extract a WindowBits sized window out of s, depending on offset. 1411| 8.76k| return read_window_bits(std::span{m_bytes}, offset); 1412| 8.76k| } pcurves_secp384r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_E10add_or_subERKSC_RKNS_16AffineCurvePointISB_EENS_2CT6ChoiceE: 1121| 8.64k| constexpr static Self add_or_sub(const Self& a, const AffinePoint& b, CT::Choice sub) { 1122| 8.64k| return point_add_or_sub_mixed(a, b, sub, FieldElement::one(), A); 1123| 8.64k| } pcurves_secp384r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEEE9ct_selectENSt3__14spanIKSC_Lm18446744073709551615EEEm: 966| 8.76k| static constexpr auto ct_select(std::span pts, size_t idx) { 967| 8.76k| auto result = Self::identity(pts[0]); 968| | 969| | // Intentionally wrapping; set to maximum size_t if idx == 0 970| 8.76k| const size_t idx1 = idx - 1; 971| 289k| for(size_t i = 0; i != pts.size(); ++i) { ------------------ | Branch (971:28): [True: 280k, False: 8.76k] ------------------ 972| 280k| const auto found = CT::Mask::is_equal(idx1, i).as_choice(); 973| 280k| result.conditional_assign(found, pts[i]); 974| 280k| } 975| | 976| 8.76k| return result; 977| 8.76k| } pcurves_secp384r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEEE8identityERKSC_: 935| 8.76k| static constexpr Self identity(const Self& /*unused*/) { 936| 8.76k| return Self(FieldElement::zero(), FieldElement::zero()); 937| 8.76k| } pcurves_secp384r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEEE18conditional_assignENS_2CT6ChoiceERKSC_: 992| 280k| constexpr void conditional_assign(CT::Choice cond, const Self& pt) { 993| 280k| FieldElement::conditional_assign(m_x, m_y, cond, pt.x(), pt.y()); 994| 280k| } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE18conditional_assignERSA_SB_NS_2CT6ChoiceERKSA_SF_: 382| 280k| static constexpr void conditional_assign(Self& x, Self& y, CT::Choice cond, const Self& nx, const Self& ny) { 383| 280k| const W mask = cond.into_bitmask(); 384| | 385| 1.96M| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (385:28): [True: 1.68M, False: 280k] ------------------ 386| 1.68M| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 387| 1.68M| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 388| 1.68M| } 389| 280k| } pcurves_secp384r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp384r15CurveELm7EEELm1EE13randomize_repERNS_20ProjectiveCurvePointINS_6IntModINS3_12Secp384r1RepINS_13EllipticCurveINS4_6ParamsESA_E11FieldParamsEEEEESC_EEm: 1486| 480| void randomize_rep(typename C::ProjectivePoint& pt, size_t idx) const { 1487| 480| BOTAN_ASSERT_NOMSG(idx < Rerandomizations); ------------------ | | 84| 480| do { \ | | 85| 480| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 480| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 480] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 480| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 480] | | ------------------ ------------------ 1488| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1489| 480| if(m_seeded) { ------------------ | Branch (1489:13): [True: 480, False: 0] ------------------ 1490| 480| pt.randomize_rep(m_rerandomizers[idx]); 1491| 480| } 1492| 480| } pcurves_secp384r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_E13randomize_repERKSB_: 1202| 480| void randomize_rep(const FieldElement& r) { 1203| 480| const auto r2 = r.square(); 1204| 480| const auto r3 = r2 * r; 1205| | 1206| 480| m_x *= r2; 1207| 480| m_y *= r3; 1208| 480| m_z *= r; 1209| 480| } pcurves_secp384r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEES7_E20_const_time_unpoisonEv: 1228| 120| constexpr void _const_time_unpoison() const { CT::unpoison_all(m_x, m_y, m_z); } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE20_const_time_unpoisonEv: 893| 360| constexpr void _const_time_unpoison() const { CT::unpoison(m_val); } pcurves_secp384r1.cpp:_ZN5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp384r15CurveELm7EED2Ev: 1414| 120| ~BlindedScalarBits() { 1415| 120| secure_zeroize_buffer(m_bytes.data(), m_bytes.size()); 1416| 120| CT::unpoison(m_bytes.data(), m_bytes.size()); 1417| 120| } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS4_12Secp384r1RepEE12ScalarParamsEEEE10from_stashILm9EEESB_RKNSt3__15arrayImXT_EEE: 776| 360| static Self from_stash(const std::array& stash) { 777| 360| static_assert(L >= N); 778| 360| std::array val = {}; 779| 2.52k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (779:28): [True: 2.16k, False: 360] ------------------ 780| 2.16k| val[i] = stash[i]; 781| 2.16k| } 782| 360| return Self(val); 783| 360| } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS4_12Secp384r1RepEE12ScalarParamsEEEEC2ENSt3__15arrayImLm6EEE: 908| 480| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE12serialize_toENSt3__14spanIhLm48EEE: 741| 240| constexpr void serialize_to(std::span bytes) const { 742| 240| auto v = Rep::from_rep(m_val); 743| 240| std::reverse(v.begin(), v.end()); 744| | 745| 240| if constexpr(Self::BYTES == N * WordInfo::bytes) { 746| 240| store_be(bytes, v); 747| | } else { 748| | // Remove leading zero bytes 749| | const auto padded_bytes = store_be(v); 750| | constexpr size_t extra = N * WordInfo::bytes - Self::BYTES; 751| | copy_mem(bytes, std::span{padded_bytes}.template subspan()); 752| | } 753| 240| } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS4_12Secp384r1RepEE12ScalarParamsEEEE11stash_valueILm9EEENSt3__15arrayImXT_EEEv: 761| 120| std::array stash_value() const { 762| 120| static_assert(L >= N); 763| 120| std::array stash = {}; 764| 840| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (764:28): [True: 720, False: 120] ------------------ 765| 720| stash[i] = m_val[i]; 766| 720| } 767| 120| return stash; 768| 120| } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEE10from_stashILm9EEESA_RKNSt3__15arrayImXT_EEE: 776| 840| static Self from_stash(const std::array& stash) { 777| 840| static_assert(L >= N); 778| 840| std::array val = {}; 779| 5.88k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (779:28): [True: 5.04k, False: 840] ------------------ 780| 5.04k| val[i] = stash[i]; 781| 5.04k| } 782| 840| return Self(val); 783| 840| } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS4_12Secp384r1RepEE12ScalarParamsEEEE7is_zeroEv: 227| 240| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS2_9secp384r16ParamsES3_E11FieldParamsEEEEeqERKSA_: 724| 120| constexpr CT::Choice operator==(const Self& other) const { 725| 120| return CT::is_equal(this->data(), other.data(), N).as_choice(); 726| 120| } pcurves_secp384r1.cpp:_ZN5Botan13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS2_12Secp384r1RepEE7x3_ax_bERKNS_6IntModINS5_INS6_11FieldParamsEEEEE: 1327| 120| static constexpr FieldElement x3_ax_b(const FieldElement& x) { return (x.square() + A) * x + B; } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS4_12Secp384r1RepEE12ScalarParamsEEEE11deserializeENSt3__14spanIKhLm18446744073709551615EEE: 794| 120| static std::optional deserialize(std::span bytes) { 795| | // Conditional ok: input length is public 796| 120| if(bytes.size() != Self::BYTES) { ------------------ | Branch (796:13): [True: 0, False: 120] ------------------ 797| 0| return {}; 798| 0| } 799| | 800| 120| const auto words = bytes_to_words(bytes.first()); 801| | 802| | // Conditional acceptable: std::optional is implicitly not constant time 803| 120| if(!bigint_ct_is_lt(words.data(), N, P.data(), N).as_bool()) { ------------------ | Branch (803:13): [True: 0, False: 120] ------------------ 804| 0| return {}; 805| 0| } 806| | 807| | // Safe because we checked above that words is an integer < P 808| 120| return Self::from_words(words); 809| 120| } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS4_12Secp384r1RepEE12ScalarParamsEEEE10from_wordsILm6EEESB_NSt3__15arrayImXT_EEE: 213| 120| static constexpr Self from_words(std::array w) { 214| 120| if constexpr(L == N) { 215| 120| return Self(Rep::to_rep(w)); 216| | } else { 217| | static_assert(L < N); 218| | std::array ew = {}; 219| | copy_mem(std::span{ew}.template first(), w); 220| | return Self(Rep::to_rep(ew)); 221| | } 222| 120| } pcurves_secp384r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS3_12Secp384r1RepEE12ScalarParamsEE6to_repERKNSt3__15arrayImLm6EEE: 117| 120| constexpr static std::array to_rep(const std::array& x) { 118| 120| std::array z; // NOLINT(*-member-init) 119| 120| comba_mul(z.data(), x.data(), R2.data()); 120| 120| return Self::redc(z); 121| 120| } pcurves_secp384r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS3_9secp384r16ParamsES4_E11FieldParamsEEEEEE12serialize_toENSt3__14spanIhLm97EEE: 952| 120| constexpr void serialize_to(std::span bytes) const { 953| 120| BOTAN_STATE_CHECK(this->is_identity().as_bool() == false); ------------------ | | 51| 120| do { \ | | 52| 120| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 120| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 120] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 120| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 120] | | ------------------ ------------------ 954| 120| BufferStuffer pack(bytes); 955| 120| pack.append(0x04); 956| 120| x().serialize_to(pack.next()); 957| 120| y().serialize_to(pack.next()); 958| 120| BOTAN_DEBUG_ASSERT(pack.full()); ------------------ | | 137| 120| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 120| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 120] | | ------------------ ------------------ 959| 120| } pcurves_secp384r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS4_12Secp384r1RepEE12ScalarParamsEEEE6randomERNS_21RandomNumberGeneratorE: 853| 120| static Self random(RandomNumberGenerator& rng) { 854| 120| constexpr size_t MAX_ATTEMPTS = 1000; 855| | 856| 120| std::array buf{}; 857| | 858| 120| for(size_t i = 0; i != MAX_ATTEMPTS; ++i) { ------------------ | Branch (858:28): [True: 120, False: 0] ------------------ 859| 120| rng.randomize(buf); 860| | 861| | // Zero off high bits that if set would certainly cause us 862| | // to be out of range 863| | if constexpr(Self::BITS % 8 != 0) { 864| | constexpr uint8_t mask = 0xFF >> (8 - (Self::BITS % 8)); 865| | buf[0] &= mask; 866| | } 867| | 868| | // Conditionals ok: rejection sampling reveals only values we didn't use 869| 120| if(auto s = Self::deserialize(buf)) { ------------------ | Branch (869:21): [True: 120, False: 0] ------------------ 870| 120| if(s.value().is_nonzero().as_bool()) { ------------------ | Branch (870:19): [True: 120, False: 0] ------------------ 871| 120| return s.value(); 872| 120| } 873| 120| } 874| 120| } 875| | 876| 0| throw Internal_Error("Failed to generate random Scalar within bounded number of attempts"); 877| 120| } pcurves_secp384r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp384r16ParamsENS4_12Secp384r1RepEE12ScalarParamsEEEE10is_nonzeroEv: 232| 120| constexpr CT::Choice is_nonzero() const { return !is_zero(); } pcurves_secp521r1.cpp:_ZN5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_19secp521r15CurveELm6EEC2ERKNS_16AffineCurvePointINS_6IntModINS3_7P521RepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 1630| 1| m_table(basemul_booth_setup(p, BlindedScalar::Bits + 1)) {} pcurves_secp521r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E11from_affineERKNS_16AffineCurvePointISB_EE: 1027| 71| static constexpr Self from_affine(const AffinePoint& pt) { 1028| | /* 1029| | * If the point is the identity element (x=0, y=0) then instead of 1030| | * creating (x, y, 1) = (0, 0, 1) we want our projective identity 1031| | * encoding of (0, 1, 0) 1032| | * 1033| | * Which we can achieve by a conditional swap of y and z if the 1034| | * affine point is the identity. 1035| | */ 1036| | 1037| 71| const auto x = pt.x(); 1038| 71| auto y = pt.y(); 1039| 71| auto z = FieldElement::one(); 1040| | 1041| 71| FieldElement::conditional_swap(pt.is_identity(), y, z); 1042| | 1043| 71| return ProjectiveCurvePoint(x, y, z); 1044| 71| } pcurves_secp521r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE1xEv: 982| 238k| constexpr const FieldElement& x() const { return m_x; } pcurves_secp521r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE1yEv: 987| 231k| constexpr const FieldElement& y() const { return m_y; } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE3oneEv: 202| 6.93k| static constexpr Self one() { return Self(Rep::one()); } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEC2ENSt3__15arrayImLm9EEE: 908| 242k| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE16conditional_swapENS_2CT6ChoiceERSA_SD_: 412| 71| static constexpr void conditional_swap(CT::Choice cond, Self& x, Self& y) { 413| 71| const W mask = cond.into_bitmask(); 414| | 415| 710| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (415:28): [True: 639, False: 71] ------------------ 416| 639| const auto nx = Botan::choose(mask, y.m_val[i], x.m_val[i]); 417| 639| const auto ny = Botan::choose(mask, x.m_val[i], y.m_val[i]); 418| 639| x.m_val[i] = nx; 419| 639| y.m_val[i] = ny; 420| 639| } 421| 71| } pcurves_secp521r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE11is_identityEv: 939| 7.00k| constexpr CT::Choice is_identity() const { return x().is_zero() && y().is_zero(); } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE7is_zeroEv: 227| 43.1k| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_secp521r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_EC2ERKSB_SE_SE_: 1067| 10.0k| m_x(x), m_y(y), m_z(z) {} pcurves_secp521r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E3dblEv: 1181| 1.64k| constexpr Self dbl() const { 1182| 1.64k| if constexpr(Self::A_is_minus_3) { 1183| 1.64k| return dbl_a_minus_3(*this); 1184| | } else if constexpr(Self::A_is_zero) { 1185| | return dbl_a_zero(*this); 1186| | } else { 1187| | return dbl_generic(*this, A); 1188| | } 1189| 1.64k| } pcurves_secp521r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E1zEv: 1224| 61.1k| constexpr const FieldElement& z() const { return m_z; } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE6squareEv: 428| 36.4k| constexpr BOTAN_FORCE_INLINE Self square() const { 429| 36.4k| std::array z; // NOLINT(*-member-init) 430| 36.4k| comba_sqr(z.data(), this->data()); 431| 36.4k| return Self(Rep::redc(z)); 432| 36.4k| } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4dataEv: 898| 278k| constexpr const W* data() const { return m_val.data(); } pcurves_secp521r1.cpp:_ZN5BotanmlERKNS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEESC_: 348| 97.0k| friend constexpr BOTAN_FORCE_INLINE Self operator*(const Self& a, const Self& b) { 349| 97.0k| std::array z; // NOLINT(*-member-init) 350| 97.0k| comba_mul(z.data(), a.data(), b.data()); 351| 97.0k| return Self(Rep::redc(z)); 352| 97.0k| } pcurves_secp521r1.cpp:_ZN5BotanmiERKNS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEESC_: 283| 55.6k| friend constexpr BOTAN_FORCE_INLINE Self operator-(const Self& a, const Self& b) { 284| 55.6k| std::array r; // NOLINT(*-member-init) 285| 55.6k| W carry = 0; 286| 556k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (286:28): [True: 500k, False: 55.6k] ------------------ 287| 500k| r[i] = word_sub(a.m_val[i], b.m_val[i], &carry); 288| 500k| } 289| | 290| 55.6k| const auto mask = CT::Mask::expand(carry).value(); 291| | 292| 55.6k| carry = 0; 293| | 294| 556k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (294:28): [True: 500k, False: 55.6k] ------------------ 295| 500k| r[i] = word_add(r[i], P[i] & mask, &carry); 296| 500k| } 297| | 298| 55.6k| return Self(r); 299| 55.6k| } pcurves_secp521r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E1xEv: 1214| 34.3k| constexpr const FieldElement& x() const { return m_x; } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4mul3Ev: 337| 1.64k| constexpr inline Self mul3() const { return mul2() + (*this); } pcurves_secp521r1.cpp:_ZN5BotanplERKNS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEESC_: 267| 12.1k| friend constexpr BOTAN_FORCE_INLINE Self operator+(const Self& a, const Self& b) { 268| 12.1k| std::array t; // NOLINT(*-member-init) 269| | 270| 12.1k| W carry = 0; 271| 121k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (271:28): [True: 109k, False: 12.1k] ------------------ 272| 109k| t[i] = word_add(a.m_val[i], b.m_val[i], &carry); 273| 109k| } 274| | 275| 12.1k| std::array r; // NOLINT(*-member-init) 276| 12.1k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 277| 12.1k| return Self(r); 278| 12.1k| } pcurves_secp521r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E1yEv: 1219| 32.6k| constexpr const FieldElement& y() const { return m_y; } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4mul4Ev: 340| 1.64k| constexpr inline Self mul4() const { return mul2().mul2(); } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4mul2Ev: 327| 13.1k| constexpr BOTAN_FORCE_INLINE Self mul2() const { 328| 13.1k| std::array t = value(); 329| 13.1k| const W carry = shift_left<1>(t); 330| | 331| 13.1k| std::array r; // NOLINT(*-member-init) 332| 13.1k| bigint_monty_maybe_sub(r.data(), carry, t.data(), P.data()); 333| 13.1k| return Self(r); 334| 13.1k| } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE5valueEv: 896| 13.1k| constexpr const std::array& value() const { return m_val; } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4mul8Ev: 343| 1.64k| constexpr inline Self mul8() const { return mul2().mul2().mul2(); } pcurves_secp521r1.cpp:_ZN5BotanplERKNS_20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_EESE_: 1075| 1.45k| friend constexpr Self operator+(const Self& a, const Self& b) { return Self::add(a, b); } pcurves_secp521r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E3addERKSC_SE_: 1138| 1.45k| constexpr static Self add(const Self& a, const Self& b) { return point_add(a, b); } pcurves_secp521r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E11is_identityEv: 1093| 12.7k| constexpr CT::Choice is_identity() const { return z().is_zero(); } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE18conditional_assignERSA_SB_SB_NS_2CT6ChoiceERKSA_SF_SF_: 397| 16.4k| Self& x, Self& y, Self& z, CT::Choice cond, const Self& nx, const Self& ny, const Self& nz) { 398| 16.4k| const W mask = cond.into_bitmask(); 399| | 400| 164k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (400:28): [True: 147k, False: 16.4k] ------------------ 401| 147k| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 402| 147k| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 403| 147k| z.m_val[i] = Botan::choose(mask, nz.m_val[i], z.m_val[i]); 404| 147k| } 405| 16.4k| } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEmLERKSA_: 357| 1.68k| constexpr BOTAN_FORCE_INLINE Self& operator*=(const Self& other) { 358| 1.68k| std::array z; // NOLINT(*-member-init) 359| 1.68k| comba_mul(z.data(), data(), other.data()); 360| 1.68k| m_val = Rep::redc(z); 361| 1.68k| return (*this); 362| 1.68k| } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE8square_nEm: 441| 770| constexpr void square_n(size_t n) { 442| 770| std::array z; // NOLINT(*-member-init) 443| 37.0k| for(size_t i = 0; i != n; ++i) { ------------------ | Branch (443:28): [True: 36.2k, False: 770] ------------------ 444| 36.2k| comba_sqr(z.data(), this->data()); 445| 36.2k| m_val = Rep::redc(z); 446| 36.2k| } 447| 770| } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE14invert_vartimeEv: 600| 1| constexpr Self invert_vartime() const { 601| | // Conditional ok: this function is variable time 602| 1| if(this->is_zero().as_bool()) { ------------------ | Branch (602:13): [True: 0, False: 1] ------------------ 603| 0| return Self::zero(); 604| 0| } 605| | 606| 1| auto x = Self(std::array{1}); // 1 in standard domain 607| 1| auto b = Self(this->to_words()); // *this in standard domain 608| | 609| | // First loop iteration 610| 1| Self::_invert_vartime_div2_helper(b, x); 611| | 612| 1| auto a = b.negate(); 613| | // y += x but y is zero at the outset 614| 1| auto y = x; 615| | 616| | // First half of second loop iteration 617| 1| Self::_invert_vartime_div2_helper(a, y); 618| | 619| 350| for(;;) { 620| | // Conditional ok: this function is variable time 621| 350| if(a.m_val == b.m_val) { ------------------ | Branch (621:16): [True: 1, False: 349] ------------------ 622| | // At this point it should be that a == b == 1 623| 1| auto r = y.negate(); 624| | 625| | // Convert back to Montgomery if required 626| 1| r.m_val = Rep::to_rep(r.m_val); 627| 1| return r; 628| 1| } 629| | 630| 349| const auto nx = x + y; 631| | 632| | /* 633| | * Otherwise either b > a or a > b 634| | * 635| | * If b > a we want to set b to b - a 636| | * Otherwise we want to set a to a - b 637| | * 638| | * Compute r = b - a and check if it underflowed 639| | * If it did not then we are in the b > a path 640| | */ 641| 349| std::array r; // NOLINT(*-member-init) 642| 349| const word carry = bigint_sub3(r.data(), b.data(), N, a.data(), N); 643| | 644| | // Conditional ok: this function is variable time 645| 349| if(carry == 0) { ------------------ | Branch (645:16): [True: 170, False: 179] ------------------ 646| | // b > a 647| 170| b.m_val = r; 648| 170| x = nx; 649| 170| Self::_invert_vartime_div2_helper(b, x); 650| 179| } else { 651| | // We know this can't underflow because a > b 652| 179| bigint_sub3(r.data(), a.data(), N, b.data(), N); 653| 179| a.m_val = r; 654| 179| y = nx; 655| 179| Self::_invert_vartime_div2_helper(a, y); 656| 179| } 657| 349| } 658| 1| } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE4zeroEv: 197| 13.5k| static constexpr Self zero() { return Self(std::array{0}); } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE8to_wordsEv: 736| 1| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE27_invert_vartime_div2_helperERSA_SB_: 549| 351| static constexpr void _invert_vartime_div2_helper(Self& a, Self& x) { 550| 351| constexpr auto INV_2 = p_div_2_plus_1(Rep::P); 551| | 552| | // Conditional ok: this function is variable time 553| 1.09k| while((a.m_val[0] & 1) != 1) { ------------------ | Branch (553:16): [True: 742, False: 351] ------------------ 554| 742| shift_right<1>(a.m_val); 555| | 556| 742| const W borrow = shift_right<1>(x.m_val); 557| | 558| | // Conditional ok: this function is variable time 559| 742| if(borrow) { ------------------ | Branch (559:16): [True: 109, False: 633] ------------------ 560| 109| bigint_add2(x.m_val.data(), N, INV_2.data(), N); 561| 109| } 562| 742| } 563| 351| } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE6negateEv: 454| 6.79k| constexpr Self negate() const { 455| 6.79k| const W x_is_zero = ~CT::all_zeros(this->data(), N).value(); 456| | 457| 6.79k| std::array r; // NOLINT(*-member-init) 458| 6.79k| W carry = 0; 459| 67.9k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (459:28): [True: 61.1k, False: 6.79k] ------------------ 460| 61.1k| r[i] = word_sub(P[i] & x_is_zero, m_val[i], &carry); 461| 61.1k| } 462| | 463| 6.79k| return Self(r); 464| 6.79k| } pcurves_secp521r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEEC2ERKSB_SE_: 928| 10.1k| constexpr AffineCurvePoint(const FieldElement& x, const FieldElement& y) : m_x(x), m_y(y) {} pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE11stash_valueILm9EEENSt3__15arrayImXT_EEEv: 761| 350| std::array stash_value() const { 762| 350| static_assert(L >= N); 763| 350| std::array stash = {}; 764| 3.50k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (764:28): [True: 3.15k, False: 350] ------------------ 765| 3.15k| stash[i] = m_val[i]; 766| 3.15k| } 767| 350| return stash; 768| 350| } pcurves_secp521r1.cpp:_ZNK5Botan23PrecomputedBaseMulTableINS_6PCurve12_GLOBAL__N_19secp521r15CurveELm6EE3mulERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsENS3_7P521RepEE12ScalarParamsEEEEERNS_21RandomNumberGeneratorE: 1632| 70| ProjectivePoint mul(const Scalar& s, RandomNumberGenerator& rng) const { 1633| 70| const BlindingRandomness blinding(rng); 1634| 70| const BlindedScalar scalar(s, blinding); 1635| 70| return basemul_booth_exec(m_table, scalar, blinding); 1636| 70| } pcurves_secp521r1.cpp:_ZN5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp521r15CurveELm7EEELm1EEC2ERNS_21RandomNumberGeneratorE: 1455| 70| explicit BlindingRandomness(RandomNumberGenerator& rng) : m_seeded(rng.is_seeded()) { 1456| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1457| 70| if(m_seeded) { ------------------ | Branch (1457:13): [True: 70, False: 0] ------------------ 1458| 70| std::array buf{}; 1459| 70| rng.randomize(buf); 1460| | 1461| 70| const std::span bytes(buf); 1462| | 1463| 70| copy_mem(m_masks, bytes.first()); 1464| | 1465| 350| for(size_t i = 0; i != Rerandomizations; ++i) { ------------------ | Branch (1465:31): [True: 280, False: 70] ------------------ 1466| 280| const auto wide = bytes.subspan(Scalars * MaskBytes + i * WideBytes).first(); 1467| 280| m_rerandomizers[i] = FieldElement::from_wide_bytes(wide); 1468| 280| } 1469| | 1470| 70| const auto iso = bytes.subspan(Scalars * MaskBytes + Rerandomizations * WideBytes).first(); 1471| 70| m_isomorphism = FieldElement::from_wide_bytes(iso); 1472| 70| m_isomorphism.conditional_assign(m_isomorphism.is_zero(), FieldElement::one()); 1473| 70| } 1474| 70| } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEC2Ev: 182| 280| constexpr IntMod() : m_val({}) {} pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE15from_wide_bytesILm74EEESA_NSt3__14spanIKhXT_EEE: 818| 350| static constexpr Self from_wide_bytes(std::span bytes) { 819| 350| static_assert(8 * L <= 2 * Self::BITS); 820| 350| std::array padded_bytes = {}; 821| 350| copy_mem(std::span{padded_bytes}.template last(), bytes); 822| 350| return Self(Rep::wide_to_rep(bytes_to_words(std::span{padded_bytes}))); 823| 350| } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE18conditional_assignENS_2CT6ChoiceERKSA_: 369| 6.79k| constexpr void conditional_assign(CT::Choice cond, const Self& nx) { 370| 6.79k| const W mask = cond.into_bitmask(); 371| | 372| 67.9k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (372:28): [True: 61.1k, False: 6.79k] ------------------ 373| 61.1k| m_val[i] = Botan::choose(mask, nx.m_val[i], m_val[i]); 374| 61.1k| } 375| 6.79k| } pcurves_secp521r1.cpp:_ZN5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp521r15CurveELm7EEC2INS_18BlindingRandomnessIS5_Lm1EEEEERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsENS3_7P521RepEE12ScalarParamsEEEEERKT_m: 1368| 70| BlindedScalarBits(const typename C::Scalar& scalar, const Randomness& randomness, size_t idx = 0) { 1369| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1370| 70| if(BlindingBits > 0 && randomness.seeded()) { ------------------ | Branch (1370:13): [True: 70, Folded] | Branch (1370:33): [True: 70, False: 0] ------------------ 1371| 70| constexpr size_t n_words = C::Words; 1372| | 1373| 70| W mask[n_words] = {0}; 1374| 70| load_le(mask, randomness.mask(idx).data(), MaskWords); 1375| | 1376| | // Mask to exactly BlindingBits 1377| 70| constexpr size_t ExcessBits = MaskWords * WordInfo::bits - BlindingBits; 1378| 70| if constexpr(ExcessBits > 0) { 1379| 70| constexpr W ExcessMask = (static_cast(1) << (WordInfo::bits - ExcessBits)) - 1; 1380| 70| mask[MaskWords - 1] &= ExcessMask; 1381| 70| } 1382| | 1383| | // Set top and bottom bits of mask 1384| 70| constexpr size_t TopMaskBit = (BlindingBits - 1) % WordInfo::bits; 1385| 70| mask[(BlindingBits - 1) / WordInfo::bits] |= static_cast(1) << TopMaskBit; 1386| 70| mask[0] |= 1; 1387| | 1388| 70| W mask_n[2 * n_words] = {0}; 1389| | 1390| 70| const auto sw = scalar.to_words(); 1391| | 1392| | // Compute masked scalar s + k*n 1393| 70| comba_mul(mask_n, mask, C::NW.data()); 1394| 70| bigint_add2(mask_n, 2 * n_words, sw.data(), sw.size()); 1395| | 1396| 70| std::reverse(mask_n, mask_n + 2 * n_words); 1397| 70| m_bytes = store_be>(mask_n); 1398| 70| m_bits = C::Scalar::BITS + BlindingBits; 1399| 70| } else { 1400| | // No RNG available, skip blinding 1401| 0| m_bytes.resize(C::Scalar::BYTES); 1402| 0| scalar.serialize_to(std::span{m_bytes}.template first()); 1403| 0| m_bits = C::Scalar::BITS; 1404| 0| } 1405| | 1406| 70| CT::poison(m_bytes.data(), m_bytes.size()); 1407| 70| } pcurves_secp521r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp521r15CurveELm7EEELm1EE6seededEv: 1476| 70| bool seeded() const { return m_seeded; } pcurves_secp521r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp521r15CurveELm7EEELm1EE4maskEm: 1478| 70| std::span mask(size_t idx) const { 1479| 70| BOTAN_ASSERT_NOMSG(idx < Scalars); ------------------ | | 84| 70| do { \ | | 85| 70| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 70| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 70] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 70| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 70] | | ------------------ ------------------ 1480| 70| return std::span{m_masks}.subspan(idx * MaskBytes).template first(); 1481| 70| } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS5_7P521RepEE12ScalarParamsEEEE8to_wordsEv: 736| 70| constexpr std::array to_words() const { return Rep::from_rep(m_val); } pcurves_secp521r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS4_7P521RepEE12ScalarParamsEE8from_repERKNSt3__15arrayImLm9EEE: 139| 140| constexpr static std::array from_rep(const std::array& z) { 140| 140| std::array ze = {}; 141| 140| copy_mem(std::span{ze}.template first(), z); 142| 140| return Self::redc(ze); 143| 140| } pcurves_secp521r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS4_7P521RepEE12ScalarParamsEE4redcERKNSt3__15arrayImLm18EEE: 106| 210| constexpr static std::array redc(const std::array& z) { 107| | if constexpr(P_dash == 1) { 108| | return monty_redc_pdash1(z, P); 109| 210| } else { 110| 210| return monty_redc(z, P, P_dash); 111| 210| } 112| 210| } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS5_7P521RepEE12ScalarParamsEEEE12serialize_toENSt3__14spanIhLm66EEE: 741| 70| constexpr void serialize_to(std::span bytes) const { 742| 70| auto v = Rep::from_rep(m_val); 743| 70| std::reverse(v.begin(), v.end()); 744| | 745| | if constexpr(Self::BYTES == N * WordInfo::bytes) { 746| | store_be(bytes, v); 747| 70| } else { 748| | // Remove leading zero bytes 749| 70| const auto padded_bytes = store_be(v); 750| 70| constexpr size_t extra = N * WordInfo::bytes - Self::BYTES; 751| 70| copy_mem(bytes, std::span{padded_bytes}.template subspan()); 752| 70| } 753| 70| } pcurves_secp521r1.cpp:_ZNK5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp521r15CurveELm7EE4bitsEv: 1362| 70| size_t bits() const { return m_bits; } pcurves_secp521r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E18conditional_assignENS_2CT6ChoiceERKSC_: 1095| 70| constexpr void conditional_assign(CT::Choice cond, const Self& pt) { 1096| 70| FieldElement::conditional_assign(m_x, m_y, m_z, cond, pt.x(), pt.y(), pt.z()); 1097| 70| } pcurves_secp521r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E6negateEv: 1194| 70| constexpr Self negate() const { return Self(x(), y().negate(), z()); } pcurves_secp521r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E18_const_time_poisonEv: 1226| 70| constexpr void _const_time_poison() const { CT::poison_all(m_x, m_y, m_z); } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE18_const_time_poisonEv: 891| 210| constexpr void _const_time_poison() const { CT::poison(m_val); } pcurves_secp521r1.cpp:_ZNK5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp521r15CurveELm7EE10get_windowEm: 1409| 6.79k| size_t get_window(size_t offset) const { 1410| | // Extract a WindowBits sized window out of s, depending on offset. 1411| 6.79k| return read_window_bits(std::span{m_bytes}, offset); 1412| 6.79k| } pcurves_secp521r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E10add_or_subERKSC_RKNS_16AffineCurvePointISB_EENS_2CT6ChoiceE: 1121| 6.72k| constexpr static Self add_or_sub(const Self& a, const AffinePoint& b, CT::Choice sub) { 1122| 6.72k| return point_add_or_sub_mixed(a, b, sub, FieldElement::one(), A); 1123| 6.72k| } pcurves_secp521r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE9ct_selectENSt3__14spanIKSC_Lm18446744073709551615EEEm: 966| 6.79k| static constexpr auto ct_select(std::span pts, size_t idx) { 967| 6.79k| auto result = Self::identity(pts[0]); 968| | 969| | // Intentionally wrapping; set to maximum size_t if idx == 0 970| 6.79k| const size_t idx1 = idx - 1; 971| 224k| for(size_t i = 0; i != pts.size(); ++i) { ------------------ | Branch (971:28): [True: 217k, False: 6.79k] ------------------ 972| 217k| const auto found = CT::Mask::is_equal(idx1, i).as_choice(); 973| 217k| result.conditional_assign(found, pts[i]); 974| 217k| } 975| | 976| 6.79k| return result; 977| 6.79k| } pcurves_secp521r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE8identityERKSC_: 935| 6.79k| static constexpr Self identity(const Self& /*unused*/) { 936| 6.79k| return Self(FieldElement::zero(), FieldElement::zero()); 937| 6.79k| } pcurves_secp521r1.cpp:_ZN5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE18conditional_assignENS_2CT6ChoiceERKSC_: 992| 217k| constexpr void conditional_assign(CT::Choice cond, const Self& pt) { 993| 217k| FieldElement::conditional_assign(m_x, m_y, cond, pt.x(), pt.y()); 994| 217k| } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE18conditional_assignERSA_SB_NS_2CT6ChoiceERKSA_SF_: 382| 217k| static constexpr void conditional_assign(Self& x, Self& y, CT::Choice cond, const Self& nx, const Self& ny) { 383| 217k| const W mask = cond.into_bitmask(); 384| | 385| 2.17M| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (385:28): [True: 1.95M, False: 217k] ------------------ 386| 1.95M| x.m_val[i] = Botan::choose(mask, nx.m_val[i], x.m_val[i]); 387| 1.95M| y.m_val[i] = Botan::choose(mask, ny.m_val[i], y.m_val[i]); 388| 1.95M| } 389| 217k| } pcurves_secp521r1.cpp:_ZNK5Botan18BlindingRandomnessINS_17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp521r15CurveELm7EEELm1EE13randomize_repERNS_20ProjectiveCurvePointINS_6IntModINS4_7P521RepINS_13EllipticCurveINS4_6ParamsESA_E11FieldParamsEEEEESC_EEm: 1486| 280| void randomize_rep(typename C::ProjectivePoint& pt, size_t idx) const { 1487| 280| BOTAN_ASSERT_NOMSG(idx < Rerandomizations); ------------------ | | 84| 280| do { \ | | 85| 280| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 280| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 280] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 280| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 280] | | ------------------ ------------------ 1488| | // Conditional ok: caller's RNG state (seeded vs not) is presumed public 1489| 280| if(m_seeded) { ------------------ | Branch (1489:13): [True: 280, False: 0] ------------------ 1490| 280| pt.randomize_rep(m_rerandomizers[idx]); 1491| 280| } 1492| 280| } pcurves_secp521r1.cpp:_ZN5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E13randomize_repERKSB_: 1202| 280| void randomize_rep(const FieldElement& r) { 1203| 280| const auto r2 = r.square(); 1204| 280| const auto r3 = r2 * r; 1205| | 1206| 280| m_x *= r2; 1207| 280| m_y *= r3; 1208| 280| m_z *= r; 1209| 280| } pcurves_secp521r1.cpp:_ZNK5Botan20ProjectiveCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEES7_E20_const_time_unpoisonEv: 1228| 70| constexpr void _const_time_unpoison() const { CT::unpoison_all(m_x, m_y, m_z); } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE20_const_time_unpoisonEv: 893| 210| constexpr void _const_time_unpoison() const { CT::unpoison(m_val); } pcurves_secp521r1.cpp:_ZN5Botan17BlindedScalarBitsINS_6PCurve12_GLOBAL__N_19secp521r15CurveELm7EED2Ev: 1414| 70| ~BlindedScalarBits() { 1415| 70| secure_zeroize_buffer(m_bytes.data(), m_bytes.size()); 1416| 70| CT::unpoison(m_bytes.data(), m_bytes.size()); 1417| 70| } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS5_7P521RepEE12ScalarParamsEEEE10from_stashILm9EEESB_RKNSt3__15arrayImXT_EEE: 776| 210| static Self from_stash(const std::array& stash) { 777| 210| static_assert(L >= N); 778| 210| std::array val = {}; 779| 2.10k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (779:28): [True: 1.89k, False: 210] ------------------ 780| 1.89k| val[i] = stash[i]; 781| 1.89k| } 782| 210| return Self(val); 783| 210| } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS5_7P521RepEE12ScalarParamsEEEEC2ENSt3__15arrayImLm9EEE: 908| 280| explicit constexpr IntMod(std::array v) : m_val(v) {} pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE12serialize_toENSt3__14spanIhLm66EEE: 741| 140| constexpr void serialize_to(std::span bytes) const { 742| 140| auto v = Rep::from_rep(m_val); 743| 140| std::reverse(v.begin(), v.end()); 744| | 745| | if constexpr(Self::BYTES == N * WordInfo::bytes) { 746| | store_be(bytes, v); 747| 140| } else { 748| | // Remove leading zero bytes 749| 140| const auto padded_bytes = store_be(v); 750| 140| constexpr size_t extra = N * WordInfo::bytes - Self::BYTES; 751| 140| copy_mem(bytes, std::span{padded_bytes}.template subspan()); 752| 140| } 753| 140| } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS5_7P521RepEE12ScalarParamsEEEE11stash_valueILm9EEENSt3__15arrayImXT_EEEv: 761| 70| std::array stash_value() const { 762| 70| static_assert(L >= N); 763| 70| std::array stash = {}; 764| 700| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (764:28): [True: 630, False: 70] ------------------ 765| 630| stash[i] = m_val[i]; 766| 630| } 767| 70| return stash; 768| 70| } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE10from_stashILm9EEESA_RKNSt3__15arrayImXT_EEE: 776| 490| static Self from_stash(const std::array& stash) { 777| 490| static_assert(L >= N); 778| 490| std::array val = {}; 779| 4.90k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (779:28): [True: 4.41k, False: 490] ------------------ 780| 4.41k| val[i] = stash[i]; 781| 4.41k| } 782| 490| return Self(val); 783| 490| } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS5_7P521RepEE12ScalarParamsEEEE7is_zeroEv: 227| 140| constexpr CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_val.size()).as_choice(); } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE11deserializeENSt3__14spanIKhLm18446744073709551615EEE: 794| 206| static std::optional deserialize(std::span bytes) { 795| | // Conditional ok: input length is public 796| 206| if(bytes.size() != Self::BYTES) { ------------------ | Branch (796:13): [True: 0, False: 206] ------------------ 797| 0| return {}; 798| 0| } 799| | 800| 206| const auto words = bytes_to_words(bytes.first()); 801| | 802| | // Conditional acceptable: std::optional is implicitly not constant time 803| 206| if(!bigint_ct_is_lt(words.data(), N, P.data(), N).as_bool()) { ------------------ | Branch (803:13): [True: 19, False: 187] ------------------ 804| 19| return {}; 805| 19| } 806| | 807| | // Safe because we checked above that words is an integer < P 808| 187| return Self::from_words(words); 809| 206| } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEEeqERKSA_: 724| 156| constexpr CT::Choice operator==(const Self& other) const { 725| 156| return CT::is_equal(this->data(), other.data(), N).as_choice(); 726| 156| } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS3_6ParamsES4_E11FieldParamsEEEE10from_wordsILm9EEESA_NSt3__15arrayImXT_EEE: 213| 187| static constexpr Self from_words(std::array w) { 214| 187| if constexpr(L == N) { 215| 187| return Self(Rep::to_rep(w)); 216| | } else { 217| | static_assert(L < N); 218| | std::array ew = {}; 219| | copy_mem(std::span{ew}.template first(), w); 220| | return Self(Rep::to_rep(ew)); 221| | } 222| 187| } pcurves_secp521r1.cpp:_ZN5Botan13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS3_7P521RepEE7x3_ax_bERKNS_6IntModINS5_INS6_11FieldParamsEEEEE: 1327| 156| static constexpr FieldElement x3_ax_b(const FieldElement& x) { return (x.square() + A) * x + B; } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS5_7P521RepEE12ScalarParamsEEEE11deserializeENSt3__14spanIKhLm18446744073709551615EEE: 794| 70| static std::optional deserialize(std::span bytes) { 795| | // Conditional ok: input length is public 796| 70| if(bytes.size() != Self::BYTES) { ------------------ | Branch (796:13): [True: 0, False: 70] ------------------ 797| 0| return {}; 798| 0| } 799| | 800| 70| const auto words = bytes_to_words(bytes.first()); 801| | 802| | // Conditional acceptable: std::optional is implicitly not constant time 803| 70| if(!bigint_ct_is_lt(words.data(), N, P.data(), N).as_bool()) { ------------------ | Branch (803:13): [True: 0, False: 70] ------------------ 804| 0| return {}; 805| 0| } 806| | 807| | // Safe because we checked above that words is an integer < P 808| 70| return Self::from_words(words); 809| 70| } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS5_7P521RepEE12ScalarParamsEEEE10from_wordsILm9EEESB_NSt3__15arrayImXT_EEE: 213| 70| static constexpr Self from_words(std::array w) { 214| 70| if constexpr(L == N) { 215| 70| return Self(Rep::to_rep(w)); 216| | } else { 217| | static_assert(L < N); 218| | std::array ew = {}; 219| | copy_mem(std::span{ew}.template first(), w); 220| | return Self(Rep::to_rep(ew)); 221| | } 222| 70| } pcurves_secp521r1.cpp:_ZN5Botan13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS4_7P521RepEE12ScalarParamsEE6to_repERKNSt3__15arrayImLm9EEE: 117| 70| constexpr static std::array to_rep(const std::array& x) { 118| 70| std::array z; // NOLINT(*-member-init) 119| 70| comba_mul(z.data(), x.data(), R2.data()); 120| 70| return Self::redc(z); 121| 70| } pcurves_secp521r1.cpp:_ZNK5Botan16AffineCurvePointINS_6IntModINS_6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS4_6ParamsES5_E11FieldParamsEEEEEE12serialize_toENSt3__14spanIhLm133EEE: 952| 70| constexpr void serialize_to(std::span bytes) const { 953| 70| BOTAN_STATE_CHECK(this->is_identity().as_bool() == false); ------------------ | | 51| 70| do { \ | | 52| 70| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 70| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 70] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 70| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 70] | | ------------------ ------------------ 954| 70| BufferStuffer pack(bytes); 955| 70| pack.append(0x04); 956| 70| x().serialize_to(pack.next()); 957| 70| y().serialize_to(pack.next()); 958| 70| BOTAN_DEBUG_ASSERT(pack.full()); ------------------ | | 137| 70| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 70| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 70] | | ------------------ ------------------ 959| 70| } pcurves_secp521r1.cpp:_ZN5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS5_7P521RepEE12ScalarParamsEEEE6randomERNS_21RandomNumberGeneratorE: 853| 70| static Self random(RandomNumberGenerator& rng) { 854| 70| constexpr size_t MAX_ATTEMPTS = 1000; 855| | 856| 70| std::array buf{}; 857| | 858| 70| for(size_t i = 0; i != MAX_ATTEMPTS; ++i) { ------------------ | Branch (858:28): [True: 70, False: 0] ------------------ 859| 70| rng.randomize(buf); 860| | 861| | // Zero off high bits that if set would certainly cause us 862| | // to be out of range 863| 70| if constexpr(Self::BITS % 8 != 0) { 864| 70| constexpr uint8_t mask = 0xFF >> (8 - (Self::BITS % 8)); 865| 70| buf[0] &= mask; 866| 70| } 867| | 868| | // Conditionals ok: rejection sampling reveals only values we didn't use 869| 70| if(auto s = Self::deserialize(buf)) { ------------------ | Branch (869:21): [True: 70, False: 0] ------------------ 870| 70| if(s.value().is_nonzero().as_bool()) { ------------------ | Branch (870:19): [True: 70, False: 0] ------------------ 871| 70| return s.value(); 872| 70| } 873| 70| } 874| 70| } 875| | 876| 0| throw Internal_Error("Failed to generate random Scalar within bounded number of attempts"); 877| 70| } pcurves_secp521r1.cpp:_ZNK5Botan6IntModINS_13MontgomeryRepINS_13EllipticCurveINS_6PCurve12_GLOBAL__N_19secp521r16ParamsENS5_7P521RepEE12ScalarParamsEEEE10is_nonzeroEv: 232| 70| constexpr CT::Choice is_nonzero() const { return !is_zero(); } pcurves_brainpool256r1.cpp:_ZN5Botan19basemul_booth_setupINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELm6EEENSt3__16vectorINT_11AffinePointENS5_9allocatorIS8_EEEERKS8_m: 180| 1|std::vector basemul_booth_setup(const typename C::AffinePoint& p, size_t max_scalar_bits) { 181| 1| static_assert(WindowBits >= 1 && WindowBits <= 8); 182| | 183| | // 2^(W-1) elements per window [1*base .. 2^(W-1)*base] 184| 1| constexpr size_t WindowElements = 1 << (WindowBits - 1); 185| | 186| 1| const size_t Windows = (max_scalar_bits + WindowBits - 1) / WindowBits; 187| | 188| 1| const size_t TableSize = Windows * WindowElements; 189| | 190| 1| std::vector table; 191| 1| table.reserve(TableSize); 192| | 193| 1| auto accum = C::ProjectivePoint::from_affine(p); 194| | 195| 50| for(size_t i = 0; i != TableSize; i += WindowElements) { ------------------ | Branch (195:22): [True: 49, False: 1] ------------------ 196| 49| table.push_back(accum); 197| | 198| 1.56k| for(size_t j = 1; j != WindowElements; ++j) { ------------------ | Branch (198:25): [True: 1.51k, False: 49] ------------------ 199| | // Conditional ok: loop iteration count is public 200| 1.51k| if(j % 2 == 1) { ------------------ | Branch (200:13): [True: 784, False: 735] ------------------ 201| 784| table.emplace_back(table[i + j / 2].dbl()); 202| 784| } else { 203| 735| table.emplace_back(table[i + j - 1] + table[i]); 204| 735| } 205| 1.51k| } 206| | 207| | // Advance to next window's base: 2^W * current_base 208| | // The last entry is 2^(W-1) * base, so doubling gives 2^W * base 209| 49| accum = table[i + WindowElements - 1].dbl(); 210| 49| } 211| | 212| | // Variable time batch conversion is fine since generator is public 213| 1| return to_affine_batch(table); 214| 1|} pcurves_brainpool256r1.cpp:_ZN5Botan18basemul_booth_execINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELm6ENS_17BlindedScalarBitsIS4_Lm7EEENS_18BlindingRandomnessIS6_Lm1EEEEENT_15ProjectivePointENSt3__14spanIKNS9_11AffinePointELm18446744073709551615EEERKT1_RKT2_: 219| 90| const Blinding& blinding) { 220| 90| static constexpr size_t WindowElements = 1 << (WindowBits - 1); 221| | 222| 90| const size_t windows = (scalar.bits() + WindowBits) / WindowBits; 223| | 224| 90| auto accum = [&]() { 225| | // First window: extract W bits, shift left 1 to insert implicit carry in of zero 226| 90| const size_t w_bits = scalar.get_window(0) & ((1 << WindowBits) - 1); 227| 90| const size_t raw = w_bits << 1; 228| 90| const auto [tidx, tneg] = booth_recode(raw); 229| 90| const auto tbl_0 = table.first(WindowElements); 230| | 231| 90| auto pt = C::ProjectivePoint::from_affine(C::AffinePoint::ct_select(tbl_0, tidx)); 232| 90| pt.conditional_assign(tneg, pt.negate()); 233| 90| CT::poison(pt); 234| 90| blinding.randomize_rep(pt, 0); 235| 90| return pt; 236| 90| }(); 237| | 238| 4.41k| for(size_t i = 1; i != windows; ++i) { ------------------ | Branch (238:22): [True: 4.32k, False: 90] ------------------ 239| | // Extract W+1 bits overlapping by 1 with the previous window 240| 4.32k| const size_t bit_pos = WindowBits * i - 1; 241| 4.32k| const size_t raw = scalar.get_window(bit_pos); 242| 4.32k| const auto [tidx, tneg] = booth_recode(raw); 243| | 244| 4.32k| const auto tbl_i = table.subspan(WindowElements * i, WindowElements); 245| | 246| 4.32k| accum = C::ProjectivePoint::add_or_sub(accum, C::AffinePoint::ct_select(tbl_i, tidx), tneg); 247| | 248| | // Conditional ok: loop iteration count is public 249| 4.32k| if(i < Blinding::Rerandomizations) { ------------------ | Branch (249:10): [True: 270, False: 4.05k] ------------------ 250| 270| blinding.randomize_rep(accum, i); 251| 270| } 252| 4.32k| } 253| | 254| 90| CT::unpoison(accum); 255| 90| return accum; 256| 90|} pcurves_brainpool256r1.cpp:_ZZN5Botan18basemul_booth_execINS_6PCurve12_GLOBAL__N_114brainpool256r15CurveELm6ENS_17BlindedScalarBitsIS4_Lm7EEENS_18BlindingRandomnessIS6_Lm1EEEEENT_15ProjectivePointENSt3__14spanIKNS9_11AffinePointELm18446744073709551615EEERKT1_RKT2_ENKUlvE_clEv: 224| 90| auto accum = [&]() { 225| | // First window: extract W bits, shift left 1 to insert implicit carry in of zero 226| 90| const size_t w_bits = scalar.get_window(0) & ((1 << WindowBits) - 1); 227| 90| const size_t raw = w_bits << 1; 228| 90| const auto [tidx, tneg] = booth_recode(raw); 229| 90| const auto tbl_0 = table.first(WindowElements); 230| | 231| 90| auto pt = C::ProjectivePoint::from_affine(C::AffinePoint::ct_select(tbl_0, tidx)); 232| 90| pt.conditional_assign(tneg, pt.negate()); 233| 90| CT::poison(pt); 234| 90| blinding.randomize_rep(pt, 0); 235| 90| return pt; 236| 90| }(); _ZN5Botan20scalar_blinding_bitsEm: 42| 1|constexpr size_t scalar_blinding_bits(size_t scalar_bits) { 43| | // For blinding use 1/8 the order length for most curves; for P-521 we round down a bit 44| | // so the masked scalar fits exactly in 9 or 18 words. 45| | 46| 1| if(scalar_bits == 521) { ------------------ | Branch (46:7): [True: 0, False: 1] ------------------ 47| 0| return 55; 48| 1| } else { 49| 1| return scalar_bits / 8; 50| 1| } 51| 1|} pcurves_brainpool384r1.cpp:_ZN5Botan19basemul_booth_setupINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELm6EEENSt3__16vectorINT_11AffinePointENS5_9allocatorIS8_EEEERKS8_m: 180| 1|std::vector basemul_booth_setup(const typename C::AffinePoint& p, size_t max_scalar_bits) { 181| 1| static_assert(WindowBits >= 1 && WindowBits <= 8); 182| | 183| | // 2^(W-1) elements per window [1*base .. 2^(W-1)*base] 184| 1| constexpr size_t WindowElements = 1 << (WindowBits - 1); 185| | 186| 1| const size_t Windows = (max_scalar_bits + WindowBits - 1) / WindowBits; 187| | 188| 1| const size_t TableSize = Windows * WindowElements; 189| | 190| 1| std::vector table; 191| 1| table.reserve(TableSize); 192| | 193| 1| auto accum = C::ProjectivePoint::from_affine(p); 194| | 195| 74| for(size_t i = 0; i != TableSize; i += WindowElements) { ------------------ | Branch (195:22): [True: 73, False: 1] ------------------ 196| 73| table.push_back(accum); 197| | 198| 2.33k| for(size_t j = 1; j != WindowElements; ++j) { ------------------ | Branch (198:25): [True: 2.26k, False: 73] ------------------ 199| | // Conditional ok: loop iteration count is public 200| 2.26k| if(j % 2 == 1) { ------------------ | Branch (200:13): [True: 1.16k, False: 1.09k] ------------------ 201| 1.16k| table.emplace_back(table[i + j / 2].dbl()); 202| 1.16k| } else { 203| 1.09k| table.emplace_back(table[i + j - 1] + table[i]); 204| 1.09k| } 205| 2.26k| } 206| | 207| | // Advance to next window's base: 2^W * current_base 208| | // The last entry is 2^(W-1) * base, so doubling gives 2^W * base 209| 73| accum = table[i + WindowElements - 1].dbl(); 210| 73| } 211| | 212| | // Variable time batch conversion is fine since generator is public 213| 1| return to_affine_batch(table); 214| 1|} pcurves_brainpool384r1.cpp:_ZN5Botan18basemul_booth_execINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELm6ENS_17BlindedScalarBitsIS4_Lm7EEENS_18BlindingRandomnessIS6_Lm1EEEEENT_15ProjectivePointENSt3__14spanIKNS9_11AffinePointELm18446744073709551615EEERKT1_RKT2_: 219| 126| const Blinding& blinding) { 220| 126| static constexpr size_t WindowElements = 1 << (WindowBits - 1); 221| | 222| 126| const size_t windows = (scalar.bits() + WindowBits) / WindowBits; 223| | 224| 126| auto accum = [&]() { 225| | // First window: extract W bits, shift left 1 to insert implicit carry in of zero 226| 126| const size_t w_bits = scalar.get_window(0) & ((1 << WindowBits) - 1); 227| 126| const size_t raw = w_bits << 1; 228| 126| const auto [tidx, tneg] = booth_recode(raw); 229| 126| const auto tbl_0 = table.first(WindowElements); 230| | 231| 126| auto pt = C::ProjectivePoint::from_affine(C::AffinePoint::ct_select(tbl_0, tidx)); 232| 126| pt.conditional_assign(tneg, pt.negate()); 233| 126| CT::poison(pt); 234| 126| blinding.randomize_rep(pt, 0); 235| 126| return pt; 236| 126| }(); 237| | 238| 9.19k| for(size_t i = 1; i != windows; ++i) { ------------------ | Branch (238:22): [True: 9.07k, False: 126] ------------------ 239| | // Extract W+1 bits overlapping by 1 with the previous window 240| 9.07k| const size_t bit_pos = WindowBits * i - 1; 241| 9.07k| const size_t raw = scalar.get_window(bit_pos); 242| 9.07k| const auto [tidx, tneg] = booth_recode(raw); 243| | 244| 9.07k| const auto tbl_i = table.subspan(WindowElements * i, WindowElements); 245| | 246| 9.07k| accum = C::ProjectivePoint::add_or_sub(accum, C::AffinePoint::ct_select(tbl_i, tidx), tneg); 247| | 248| | // Conditional ok: loop iteration count is public 249| 9.07k| if(i < Blinding::Rerandomizations) { ------------------ | Branch (249:10): [True: 378, False: 8.69k] ------------------ 250| 378| blinding.randomize_rep(accum, i); 251| 378| } 252| 9.07k| } 253| | 254| 126| CT::unpoison(accum); 255| 126| return accum; 256| 126|} pcurves_brainpool384r1.cpp:_ZZN5Botan18basemul_booth_execINS_6PCurve12_GLOBAL__N_114brainpool384r15CurveELm6ENS_17BlindedScalarBitsIS4_Lm7EEENS_18BlindingRandomnessIS6_Lm1EEEEENT_15ProjectivePointENSt3__14spanIKNS9_11AffinePointELm18446744073709551615EEERKT1_RKT2_ENKUlvE_clEv: 224| 126| auto accum = [&]() { 225| | // First window: extract W bits, shift left 1 to insert implicit carry in of zero 226| 126| const size_t w_bits = scalar.get_window(0) & ((1 << WindowBits) - 1); 227| 126| const size_t raw = w_bits << 1; 228| 126| const auto [tidx, tneg] = booth_recode(raw); 229| 126| const auto tbl_0 = table.first(WindowElements); 230| | 231| 126| auto pt = C::ProjectivePoint::from_affine(C::AffinePoint::ct_select(tbl_0, tidx)); 232| 126| pt.conditional_assign(tneg, pt.negate()); 233| 126| CT::poison(pt); 234| 126| blinding.randomize_rep(pt, 0); 235| 126| return pt; 236| 126| }(); pcurves_brainpool512r1.cpp:_ZN5Botan19basemul_booth_setupINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELm6EEENSt3__16vectorINT_11AffinePointENS5_9allocatorIS8_EEEERKS8_m: 180| 1|std::vector basemul_booth_setup(const typename C::AffinePoint& p, size_t max_scalar_bits) { 181| 1| static_assert(WindowBits >= 1 && WindowBits <= 8); 182| | 183| | // 2^(W-1) elements per window [1*base .. 2^(W-1)*base] 184| 1| constexpr size_t WindowElements = 1 << (WindowBits - 1); 185| | 186| 1| const size_t Windows = (max_scalar_bits + WindowBits - 1) / WindowBits; 187| | 188| 1| const size_t TableSize = Windows * WindowElements; 189| | 190| 1| std::vector table; 191| 1| table.reserve(TableSize); 192| | 193| 1| auto accum = C::ProjectivePoint::from_affine(p); 194| | 195| 98| for(size_t i = 0; i != TableSize; i += WindowElements) { ------------------ | Branch (195:22): [True: 97, False: 1] ------------------ 196| 97| table.push_back(accum); 197| | 198| 3.10k| for(size_t j = 1; j != WindowElements; ++j) { ------------------ | Branch (198:25): [True: 3.00k, False: 97] ------------------ 199| | // Conditional ok: loop iteration count is public 200| 3.00k| if(j % 2 == 1) { ------------------ | Branch (200:13): [True: 1.55k, False: 1.45k] ------------------ 201| 1.55k| table.emplace_back(table[i + j / 2].dbl()); 202| 1.55k| } else { 203| 1.45k| table.emplace_back(table[i + j - 1] + table[i]); 204| 1.45k| } 205| 3.00k| } 206| | 207| | // Advance to next window's base: 2^W * current_base 208| | // The last entry is 2^(W-1) * base, so doubling gives 2^W * base 209| 97| accum = table[i + WindowElements - 1].dbl(); 210| 97| } 211| | 212| | // Variable time batch conversion is fine since generator is public 213| 1| return to_affine_batch(table); 214| 1|} pcurves_brainpool512r1.cpp:_ZN5Botan18basemul_booth_execINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELm6ENS_17BlindedScalarBitsIS4_Lm7EEENS_18BlindingRandomnessIS6_Lm1EEEEENT_15ProjectivePointENSt3__14spanIKNS9_11AffinePointELm18446744073709551615EEERKT1_RKT2_: 219| 89| const Blinding& blinding) { 220| 89| static constexpr size_t WindowElements = 1 << (WindowBits - 1); 221| | 222| 89| const size_t windows = (scalar.bits() + WindowBits) / WindowBits; 223| | 224| 89| auto accum = [&]() { 225| | // First window: extract W bits, shift left 1 to insert implicit carry in of zero 226| 89| const size_t w_bits = scalar.get_window(0) & ((1 << WindowBits) - 1); 227| 89| const size_t raw = w_bits << 1; 228| 89| const auto [tidx, tneg] = booth_recode(raw); 229| 89| const auto tbl_0 = table.first(WindowElements); 230| | 231| 89| auto pt = C::ProjectivePoint::from_affine(C::AffinePoint::ct_select(tbl_0, tidx)); 232| 89| pt.conditional_assign(tneg, pt.negate()); 233| 89| CT::poison(pt); 234| 89| blinding.randomize_rep(pt, 0); 235| 89| return pt; 236| 89| }(); 237| | 238| 8.63k| for(size_t i = 1; i != windows; ++i) { ------------------ | Branch (238:22): [True: 8.54k, False: 89] ------------------ 239| | // Extract W+1 bits overlapping by 1 with the previous window 240| 8.54k| const size_t bit_pos = WindowBits * i - 1; 241| 8.54k| const size_t raw = scalar.get_window(bit_pos); 242| 8.54k| const auto [tidx, tneg] = booth_recode(raw); 243| | 244| 8.54k| const auto tbl_i = table.subspan(WindowElements * i, WindowElements); 245| | 246| 8.54k| accum = C::ProjectivePoint::add_or_sub(accum, C::AffinePoint::ct_select(tbl_i, tidx), tneg); 247| | 248| | // Conditional ok: loop iteration count is public 249| 8.54k| if(i < Blinding::Rerandomizations) { ------------------ | Branch (249:10): [True: 267, False: 8.27k] ------------------ 250| 267| blinding.randomize_rep(accum, i); 251| 267| } 252| 8.54k| } 253| | 254| 89| CT::unpoison(accum); 255| 89| return accum; 256| 89|} pcurves_brainpool512r1.cpp:_ZZN5Botan18basemul_booth_execINS_6PCurve12_GLOBAL__N_114brainpool512r15CurveELm6ENS_17BlindedScalarBitsIS4_Lm7EEENS_18BlindingRandomnessIS6_Lm1EEEEENT_15ProjectivePointENSt3__14spanIKNS9_11AffinePointELm18446744073709551615EEERKT1_RKT2_ENKUlvE_clEv: 224| 89| auto accum = [&]() { 225| | // First window: extract W bits, shift left 1 to insert implicit carry in of zero 226| 89| const size_t w_bits = scalar.get_window(0) & ((1 << WindowBits) - 1); 227| 89| const size_t raw = w_bits << 1; 228| 89| const auto [tidx, tneg] = booth_recode(raw); 229| 89| const auto tbl_0 = table.first(WindowElements); 230| | 231| 89| auto pt = C::ProjectivePoint::from_affine(C::AffinePoint::ct_select(tbl_0, tidx)); 232| 89| pt.conditional_assign(tneg, pt.negate()); 233| 89| CT::poison(pt); 234| 89| blinding.randomize_rep(pt, 0); 235| 89| return pt; 236| 89| }(); pcurves_generic.cpp:_ZN5Botan19basemul_booth_setupINS_6PCurve12_GLOBAL__N_112GenericCurveELm6EEENSt3__16vectorINT_11AffinePointENS4_9allocatorIS7_EEEERKS7_m: 180| 1|std::vector basemul_booth_setup(const typename C::AffinePoint& p, size_t max_scalar_bits) { 181| 1| static_assert(WindowBits >= 1 && WindowBits <= 8); 182| | 183| | // 2^(W-1) elements per window [1*base .. 2^(W-1)*base] 184| 1| constexpr size_t WindowElements = 1 << (WindowBits - 1); 185| | 186| 1| const size_t Windows = (max_scalar_bits + WindowBits - 1) / WindowBits; 187| | 188| 1| const size_t TableSize = Windows * WindowElements; 189| | 190| 1| std::vector table; 191| 1| table.reserve(TableSize); 192| | 193| 1| auto accum = C::ProjectivePoint::from_affine(p); 194| | 195| 38| for(size_t i = 0; i != TableSize; i += WindowElements) { ------------------ | Branch (195:22): [True: 37, False: 1] ------------------ 196| 37| table.push_back(accum); 197| | 198| 1.18k| for(size_t j = 1; j != WindowElements; ++j) { ------------------ | Branch (198:25): [True: 1.14k, False: 37] ------------------ 199| | // Conditional ok: loop iteration count is public 200| 1.14k| if(j % 2 == 1) { ------------------ | Branch (200:13): [True: 592, False: 555] ------------------ 201| 592| table.emplace_back(table[i + j / 2].dbl()); 202| 592| } else { 203| 555| table.emplace_back(table[i + j - 1] + table[i]); 204| 555| } 205| 1.14k| } 206| | 207| | // Advance to next window's base: 2^W * current_base 208| | // The last entry is 2^(W-1) * base, so doubling gives 2^W * base 209| 37| accum = table[i + WindowElements - 1].dbl(); 210| 37| } 211| | 212| | // Variable time batch conversion is fine since generator is public 213| 1| return to_affine_batch(table); 214| 1|} pcurves_secp224r1.cpp:_ZN5Botan19basemul_booth_setupINS_6PCurve12_GLOBAL__N_19secp224r15CurveELm6EEENSt3__16vectorINT_11AffinePointENS5_9allocatorIS8_EEEERKS8_m: 180| 1|std::vector basemul_booth_setup(const typename C::AffinePoint& p, size_t max_scalar_bits) { 181| 1| static_assert(WindowBits >= 1 && WindowBits <= 8); 182| | 183| | // 2^(W-1) elements per window [1*base .. 2^(W-1)*base] 184| 1| constexpr size_t WindowElements = 1 << (WindowBits - 1); 185| | 186| 1| const size_t Windows = (max_scalar_bits + WindowBits - 1) / WindowBits; 187| | 188| 1| const size_t TableSize = Windows * WindowElements; 189| | 190| 1| std::vector table; 191| 1| table.reserve(TableSize); 192| | 193| 1| auto accum = C::ProjectivePoint::from_affine(p); 194| | 195| 44| for(size_t i = 0; i != TableSize; i += WindowElements) { ------------------ | Branch (195:22): [True: 43, False: 1] ------------------ 196| 43| table.push_back(accum); 197| | 198| 1.37k| for(size_t j = 1; j != WindowElements; ++j) { ------------------ | Branch (198:25): [True: 1.33k, False: 43] ------------------ 199| | // Conditional ok: loop iteration count is public 200| 1.33k| if(j % 2 == 1) { ------------------ | Branch (200:13): [True: 688, False: 645] ------------------ 201| 688| table.emplace_back(table[i + j / 2].dbl()); 202| 688| } else { 203| 645| table.emplace_back(table[i + j - 1] + table[i]); 204| 645| } 205| 1.33k| } 206| | 207| | // Advance to next window's base: 2^W * current_base 208| | // The last entry is 2^(W-1) * base, so doubling gives 2^W * base 209| 43| accum = table[i + WindowElements - 1].dbl(); 210| 43| } 211| | 212| | // Variable time batch conversion is fine since generator is public 213| 1| return to_affine_batch(table); 214| 1|} pcurves_secp256k1.cpp:_ZN5Botan19basemul_booth_setupINS_6PCurve12_GLOBAL__N_19secp256k15CurveELm6EEENSt3__16vectorINT_11AffinePointENS5_9allocatorIS8_EEEERKS8_m: 180| 1|std::vector basemul_booth_setup(const typename C::AffinePoint& p, size_t max_scalar_bits) { 181| 1| static_assert(WindowBits >= 1 && WindowBits <= 8); 182| | 183| | // 2^(W-1) elements per window [1*base .. 2^(W-1)*base] 184| 1| constexpr size_t WindowElements = 1 << (WindowBits - 1); 185| | 186| 1| const size_t Windows = (max_scalar_bits + WindowBits - 1) / WindowBits; 187| | 188| 1| const size_t TableSize = Windows * WindowElements; 189| | 190| 1| std::vector table; 191| 1| table.reserve(TableSize); 192| | 193| 1| auto accum = C::ProjectivePoint::from_affine(p); 194| | 195| 50| for(size_t i = 0; i != TableSize; i += WindowElements) { ------------------ | Branch (195:22): [True: 49, False: 1] ------------------ 196| 49| table.push_back(accum); 197| | 198| 1.56k| for(size_t j = 1; j != WindowElements; ++j) { ------------------ | Branch (198:25): [True: 1.51k, False: 49] ------------------ 199| | // Conditional ok: loop iteration count is public 200| 1.51k| if(j % 2 == 1) { ------------------ | Branch (200:13): [True: 784, False: 735] ------------------ 201| 784| table.emplace_back(table[i + j / 2].dbl()); 202| 784| } else { 203| 735| table.emplace_back(table[i + j - 1] + table[i]); 204| 735| } 205| 1.51k| } 206| | 207| | // Advance to next window's base: 2^W * current_base 208| | // The last entry is 2^(W-1) * base, so doubling gives 2^W * base 209| 49| accum = table[i + WindowElements - 1].dbl(); 210| 49| } 211| | 212| | // Variable time batch conversion is fine since generator is public 213| 1| return to_affine_batch(table); 214| 1|} pcurves_secp256r1.cpp:_ZN5Botan19basemul_booth_setupINS_6PCurve12_GLOBAL__N_19secp256r15CurveELm6EEENSt3__16vectorINT_11AffinePointENS5_9allocatorIS8_EEEERKS8_m: 180| 1|std::vector basemul_booth_setup(const typename C::AffinePoint& p, size_t max_scalar_bits) { 181| 1| static_assert(WindowBits >= 1 && WindowBits <= 8); 182| | 183| | // 2^(W-1) elements per window [1*base .. 2^(W-1)*base] 184| 1| constexpr size_t WindowElements = 1 << (WindowBits - 1); 185| | 186| 1| const size_t Windows = (max_scalar_bits + WindowBits - 1) / WindowBits; 187| | 188| 1| const size_t TableSize = Windows * WindowElements; 189| | 190| 1| std::vector table; 191| 1| table.reserve(TableSize); 192| | 193| 1| auto accum = C::ProjectivePoint::from_affine(p); 194| | 195| 50| for(size_t i = 0; i != TableSize; i += WindowElements) { ------------------ | Branch (195:22): [True: 49, False: 1] ------------------ 196| 49| table.push_back(accum); 197| | 198| 1.56k| for(size_t j = 1; j != WindowElements; ++j) { ------------------ | Branch (198:25): [True: 1.51k, False: 49] ------------------ 199| | // Conditional ok: loop iteration count is public 200| 1.51k| if(j % 2 == 1) { ------------------ | Branch (200:13): [True: 784, False: 735] ------------------ 201| 784| table.emplace_back(table[i + j / 2].dbl()); 202| 784| } else { 203| 735| table.emplace_back(table[i + j - 1] + table[i]); 204| 735| } 205| 1.51k| } 206| | 207| | // Advance to next window's base: 2^W * current_base 208| | // The last entry is 2^(W-1) * base, so doubling gives 2^W * base 209| 49| accum = table[i + WindowElements - 1].dbl(); 210| 49| } 211| | 212| | // Variable time batch conversion is fine since generator is public 213| 1| return to_affine_batch(table); 214| 1|} pcurves_secp256r1.cpp:_ZN5Botan18basemul_booth_execINS_6PCurve12_GLOBAL__N_19secp256r15CurveELm6ENS_17BlindedScalarBitsIS4_Lm7EEENS_18BlindingRandomnessIS6_Lm1EEEEENT_15ProjectivePointENSt3__14spanIKNS9_11AffinePointELm18446744073709551615EEERKT1_RKT2_: 219| 101| const Blinding& blinding) { 220| 101| static constexpr size_t WindowElements = 1 << (WindowBits - 1); 221| | 222| 101| const size_t windows = (scalar.bits() + WindowBits) / WindowBits; 223| | 224| 101| auto accum = [&]() { 225| | // First window: extract W bits, shift left 1 to insert implicit carry in of zero 226| 101| const size_t w_bits = scalar.get_window(0) & ((1 << WindowBits) - 1); 227| 101| const size_t raw = w_bits << 1; 228| 101| const auto [tidx, tneg] = booth_recode(raw); 229| 101| const auto tbl_0 = table.first(WindowElements); 230| | 231| 101| auto pt = C::ProjectivePoint::from_affine(C::AffinePoint::ct_select(tbl_0, tidx)); 232| 101| pt.conditional_assign(tneg, pt.negate()); 233| 101| CT::poison(pt); 234| 101| blinding.randomize_rep(pt, 0); 235| 101| return pt; 236| 101| }(); 237| | 238| 4.94k| for(size_t i = 1; i != windows; ++i) { ------------------ | Branch (238:22): [True: 4.84k, False: 101] ------------------ 239| | // Extract W+1 bits overlapping by 1 with the previous window 240| 4.84k| const size_t bit_pos = WindowBits * i - 1; 241| 4.84k| const size_t raw = scalar.get_window(bit_pos); 242| 4.84k| const auto [tidx, tneg] = booth_recode(raw); 243| | 244| 4.84k| const auto tbl_i = table.subspan(WindowElements * i, WindowElements); 245| | 246| 4.84k| accum = C::ProjectivePoint::add_or_sub(accum, C::AffinePoint::ct_select(tbl_i, tidx), tneg); 247| | 248| | // Conditional ok: loop iteration count is public 249| 4.84k| if(i < Blinding::Rerandomizations) { ------------------ | Branch (249:10): [True: 303, False: 4.54k] ------------------ 250| 303| blinding.randomize_rep(accum, i); 251| 303| } 252| 4.84k| } 253| | 254| 101| CT::unpoison(accum); 255| 101| return accum; 256| 101|} pcurves_secp256r1.cpp:_ZZN5Botan18basemul_booth_execINS_6PCurve12_GLOBAL__N_19secp256r15CurveELm6ENS_17BlindedScalarBitsIS4_Lm7EEENS_18BlindingRandomnessIS6_Lm1EEEEENT_15ProjectivePointENSt3__14spanIKNS9_11AffinePointELm18446744073709551615EEERKT1_RKT2_ENKUlvE_clEv: 224| 101| auto accum = [&]() { 225| | // First window: extract W bits, shift left 1 to insert implicit carry in of zero 226| 101| const size_t w_bits = scalar.get_window(0) & ((1 << WindowBits) - 1); 227| 101| const size_t raw = w_bits << 1; 228| 101| const auto [tidx, tneg] = booth_recode(raw); 229| 101| const auto tbl_0 = table.first(WindowElements); 230| | 231| 101| auto pt = C::ProjectivePoint::from_affine(C::AffinePoint::ct_select(tbl_0, tidx)); 232| 101| pt.conditional_assign(tneg, pt.negate()); 233| 101| CT::poison(pt); 234| 101| blinding.randomize_rep(pt, 0); 235| 101| return pt; 236| 101| }(); pcurves_secp384r1.cpp:_ZN5Botan19basemul_booth_setupINS_6PCurve12_GLOBAL__N_19secp384r15CurveELm6EEENSt3__16vectorINT_11AffinePointENS5_9allocatorIS8_EEEERKS8_m: 180| 1|std::vector basemul_booth_setup(const typename C::AffinePoint& p, size_t max_scalar_bits) { 181| 1| static_assert(WindowBits >= 1 && WindowBits <= 8); 182| | 183| | // 2^(W-1) elements per window [1*base .. 2^(W-1)*base] 184| 1| constexpr size_t WindowElements = 1 << (WindowBits - 1); 185| | 186| 1| const size_t Windows = (max_scalar_bits + WindowBits - 1) / WindowBits; 187| | 188| 1| const size_t TableSize = Windows * WindowElements; 189| | 190| 1| std::vector table; 191| 1| table.reserve(TableSize); 192| | 193| 1| auto accum = C::ProjectivePoint::from_affine(p); 194| | 195| 74| for(size_t i = 0; i != TableSize; i += WindowElements) { ------------------ | Branch (195:22): [True: 73, False: 1] ------------------ 196| 73| table.push_back(accum); 197| | 198| 2.33k| for(size_t j = 1; j != WindowElements; ++j) { ------------------ | Branch (198:25): [True: 2.26k, False: 73] ------------------ 199| | // Conditional ok: loop iteration count is public 200| 2.26k| if(j % 2 == 1) { ------------------ | Branch (200:13): [True: 1.16k, False: 1.09k] ------------------ 201| 1.16k| table.emplace_back(table[i + j / 2].dbl()); 202| 1.16k| } else { 203| 1.09k| table.emplace_back(table[i + j - 1] + table[i]); 204| 1.09k| } 205| 2.26k| } 206| | 207| | // Advance to next window's base: 2^W * current_base 208| | // The last entry is 2^(W-1) * base, so doubling gives 2^W * base 209| 73| accum = table[i + WindowElements - 1].dbl(); 210| 73| } 211| | 212| | // Variable time batch conversion is fine since generator is public 213| 1| return to_affine_batch(table); 214| 1|} pcurves_secp384r1.cpp:_ZN5Botan18basemul_booth_execINS_6PCurve12_GLOBAL__N_19secp384r15CurveELm6ENS_17BlindedScalarBitsIS4_Lm7EEENS_18BlindingRandomnessIS6_Lm1EEEEENT_15ProjectivePointENSt3__14spanIKNS9_11AffinePointELm18446744073709551615EEERKT1_RKT2_: 219| 120| const Blinding& blinding) { 220| 120| static constexpr size_t WindowElements = 1 << (WindowBits - 1); 221| | 222| 120| const size_t windows = (scalar.bits() + WindowBits) / WindowBits; 223| | 224| 120| auto accum = [&]() { 225| | // First window: extract W bits, shift left 1 to insert implicit carry in of zero 226| 120| const size_t w_bits = scalar.get_window(0) & ((1 << WindowBits) - 1); 227| 120| const size_t raw = w_bits << 1; 228| 120| const auto [tidx, tneg] = booth_recode(raw); 229| 120| const auto tbl_0 = table.first(WindowElements); 230| | 231| 120| auto pt = C::ProjectivePoint::from_affine(C::AffinePoint::ct_select(tbl_0, tidx)); 232| 120| pt.conditional_assign(tneg, pt.negate()); 233| 120| CT::poison(pt); 234| 120| blinding.randomize_rep(pt, 0); 235| 120| return pt; 236| 120| }(); 237| | 238| 8.76k| for(size_t i = 1; i != windows; ++i) { ------------------ | Branch (238:22): [True: 8.64k, False: 120] ------------------ 239| | // Extract W+1 bits overlapping by 1 with the previous window 240| 8.64k| const size_t bit_pos = WindowBits * i - 1; 241| 8.64k| const size_t raw = scalar.get_window(bit_pos); 242| 8.64k| const auto [tidx, tneg] = booth_recode(raw); 243| | 244| 8.64k| const auto tbl_i = table.subspan(WindowElements * i, WindowElements); 245| | 246| 8.64k| accum = C::ProjectivePoint::add_or_sub(accum, C::AffinePoint::ct_select(tbl_i, tidx), tneg); 247| | 248| | // Conditional ok: loop iteration count is public 249| 8.64k| if(i < Blinding::Rerandomizations) { ------------------ | Branch (249:10): [True: 360, False: 8.28k] ------------------ 250| 360| blinding.randomize_rep(accum, i); 251| 360| } 252| 8.64k| } 253| | 254| 120| CT::unpoison(accum); 255| 120| return accum; 256| 120|} pcurves_secp384r1.cpp:_ZZN5Botan18basemul_booth_execINS_6PCurve12_GLOBAL__N_19secp384r15CurveELm6ENS_17BlindedScalarBitsIS4_Lm7EEENS_18BlindingRandomnessIS6_Lm1EEEEENT_15ProjectivePointENSt3__14spanIKNS9_11AffinePointELm18446744073709551615EEERKT1_RKT2_ENKUlvE_clEv: 224| 120| auto accum = [&]() { 225| | // First window: extract W bits, shift left 1 to insert implicit carry in of zero 226| 120| const size_t w_bits = scalar.get_window(0) & ((1 << WindowBits) - 1); 227| 120| const size_t raw = w_bits << 1; 228| 120| const auto [tidx, tneg] = booth_recode(raw); 229| 120| const auto tbl_0 = table.first(WindowElements); 230| | 231| 120| auto pt = C::ProjectivePoint::from_affine(C::AffinePoint::ct_select(tbl_0, tidx)); 232| 120| pt.conditional_assign(tneg, pt.negate()); 233| 120| CT::poison(pt); 234| 120| blinding.randomize_rep(pt, 0); 235| 120| return pt; 236| 120| }(); pcurves_secp521r1.cpp:_ZN5Botan19basemul_booth_setupINS_6PCurve12_GLOBAL__N_19secp521r15CurveELm6EEENSt3__16vectorINT_11AffinePointENS5_9allocatorIS8_EEEERKS8_m: 180| 1|std::vector basemul_booth_setup(const typename C::AffinePoint& p, size_t max_scalar_bits) { 181| 1| static_assert(WindowBits >= 1 && WindowBits <= 8); 182| | 183| | // 2^(W-1) elements per window [1*base .. 2^(W-1)*base] 184| 1| constexpr size_t WindowElements = 1 << (WindowBits - 1); 185| | 186| 1| const size_t Windows = (max_scalar_bits + WindowBits - 1) / WindowBits; 187| | 188| 1| const size_t TableSize = Windows * WindowElements; 189| | 190| 1| std::vector table; 191| 1| table.reserve(TableSize); 192| | 193| 1| auto accum = C::ProjectivePoint::from_affine(p); 194| | 195| 98| for(size_t i = 0; i != TableSize; i += WindowElements) { ------------------ | Branch (195:22): [True: 97, False: 1] ------------------ 196| 97| table.push_back(accum); 197| | 198| 3.10k| for(size_t j = 1; j != WindowElements; ++j) { ------------------ | Branch (198:25): [True: 3.00k, False: 97] ------------------ 199| | // Conditional ok: loop iteration count is public 200| 3.00k| if(j % 2 == 1) { ------------------ | Branch (200:13): [True: 1.55k, False: 1.45k] ------------------ 201| 1.55k| table.emplace_back(table[i + j / 2].dbl()); 202| 1.55k| } else { 203| 1.45k| table.emplace_back(table[i + j - 1] + table[i]); 204| 1.45k| } 205| 3.00k| } 206| | 207| | // Advance to next window's base: 2^W * current_base 208| | // The last entry is 2^(W-1) * base, so doubling gives 2^W * base 209| 97| accum = table[i + WindowElements - 1].dbl(); 210| 97| } 211| | 212| | // Variable time batch conversion is fine since generator is public 213| 1| return to_affine_batch(table); 214| 1|} pcurves_secp521r1.cpp:_ZN5Botan18basemul_booth_execINS_6PCurve12_GLOBAL__N_19secp521r15CurveELm6ENS_17BlindedScalarBitsIS4_Lm7EEENS_18BlindingRandomnessIS6_Lm1EEEEENT_15ProjectivePointENSt3__14spanIKNS9_11AffinePointELm18446744073709551615EEERKT1_RKT2_: 219| 70| const Blinding& blinding) { 220| 70| static constexpr size_t WindowElements = 1 << (WindowBits - 1); 221| | 222| 70| const size_t windows = (scalar.bits() + WindowBits) / WindowBits; 223| | 224| 70| auto accum = [&]() { 225| | // First window: extract W bits, shift left 1 to insert implicit carry in of zero 226| 70| const size_t w_bits = scalar.get_window(0) & ((1 << WindowBits) - 1); 227| 70| const size_t raw = w_bits << 1; 228| 70| const auto [tidx, tneg] = booth_recode(raw); 229| 70| const auto tbl_0 = table.first(WindowElements); 230| | 231| 70| auto pt = C::ProjectivePoint::from_affine(C::AffinePoint::ct_select(tbl_0, tidx)); 232| 70| pt.conditional_assign(tneg, pt.negate()); 233| 70| CT::poison(pt); 234| 70| blinding.randomize_rep(pt, 0); 235| 70| return pt; 236| 70| }(); 237| | 238| 6.79k| for(size_t i = 1; i != windows; ++i) { ------------------ | Branch (238:22): [True: 6.72k, False: 70] ------------------ 239| | // Extract W+1 bits overlapping by 1 with the previous window 240| 6.72k| const size_t bit_pos = WindowBits * i - 1; 241| 6.72k| const size_t raw = scalar.get_window(bit_pos); 242| 6.72k| const auto [tidx, tneg] = booth_recode(raw); 243| | 244| 6.72k| const auto tbl_i = table.subspan(WindowElements * i, WindowElements); 245| | 246| 6.72k| accum = C::ProjectivePoint::add_or_sub(accum, C::AffinePoint::ct_select(tbl_i, tidx), tneg); 247| | 248| | // Conditional ok: loop iteration count is public 249| 6.72k| if(i < Blinding::Rerandomizations) { ------------------ | Branch (249:10): [True: 210, False: 6.51k] ------------------ 250| 210| blinding.randomize_rep(accum, i); 251| 210| } 252| 6.72k| } 253| | 254| 70| CT::unpoison(accum); 255| 70| return accum; 256| 70|} pcurves_secp521r1.cpp:_ZZN5Botan18basemul_booth_execINS_6PCurve12_GLOBAL__N_19secp521r15CurveELm6ENS_17BlindedScalarBitsIS4_Lm7EEENS_18BlindingRandomnessIS6_Lm1EEEEENT_15ProjectivePointENSt3__14spanIKNS9_11AffinePointELm18446744073709551615EEERKT1_RKT2_ENKUlvE_clEv: 224| 70| auto accum = [&]() { 225| | // First window: extract W bits, shift left 1 to insert implicit carry in of zero 226| 70| const size_t w_bits = scalar.get_window(0) & ((1 << WindowBits) - 1); 227| 70| const size_t raw = w_bits << 1; 228| 70| const auto [tidx, tneg] = booth_recode(raw); 229| 70| const auto tbl_0 = table.first(WindowElements); 230| | 231| 70| auto pt = C::ProjectivePoint::from_affine(C::AffinePoint::ct_select(tbl_0, tidx)); 232| 70| pt.conditional_assign(tneg, pt.negate()); 233| 70| CT::poison(pt); 234| 70| blinding.randomize_rep(pt, 0); 235| 70| return pt; 236| 70| }(); _ZN5Botan10get_uint32ITkNS_8WordTypeEmEEjPKT_m: 33| 4.92M|constexpr uint32_t get_uint32(const W xw[], size_t i) { 34| 4.92M| static_assert(WordInfo::bits == 32 || WordInfo::bits == 64); 35| | 36| | if constexpr(WordInfo::bits == 32) { 37| | return xw[i]; 38| 4.92M| } else { 39| 4.92M| return static_cast(xw[i / 2] >> ((i % 2) * 32)); 40| 4.92M| } 41| 4.92M|} _ZN5Botan12SolinasAccumImLm4EEC2ERNSt3__15arrayImLm4EEE: 50| 26.0k| constexpr explicit SolinasAccum(std::array& r) : m_r(r) {} _ZN5Botan12SolinasAccumImLm4EE5accumEl: 52| 182k| constexpr void accum(int64_t v) { 53| 182k| BOTAN_DEBUG_ASSERT(m_idx < N32); ------------------ | | 137| 182k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 182k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 182k] | | ------------------ ------------------ 54| | 55| 182k| m_S += v; 56| 182k| const uint32_t r = static_cast(m_S); 57| 182k| m_S >>= 32; 58| | 59| | if constexpr(WordInfo::bits == 32) { 60| | m_r[m_idx] = r; 61| 182k| } else { 62| 182k| m_r[m_idx / 2] |= static_cast(r) << (32 * (m_idx % 2)); 63| 182k| } 64| | 65| 182k| m_idx += 1; 66| 182k| } _ZN5Botan12SolinasAccumImLm4EE11final_carryEl: 68| 26.0k| constexpr W final_carry(int64_t C) { 69| 26.0k| m_S += C; 70| 26.0k| BOTAN_DEBUG_ASSERT(m_S >= 0); ------------------ | | 137| 26.0k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 26.0k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 26.0k] | | ------------------ ------------------ 71| 26.0k| return static_cast(m_S); 72| 26.0k| } _ZN5Botan20solinas_correct_redcILm4ETkNS_8WordTypeEmEEvRNSt3__15arrayIT0_XT_EEERKS4_S7_: 84| 26.0k|constexpr inline void solinas_correct_redc(std::array& r, const std::array& P, const std::array& C) { 85| 26.0k| W borrow = 0; 86| 130k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (86:22): [True: 104k, False: 26.0k] ------------------ 87| 104k| r[i] = word_sub(r[i], C[i], &borrow); 88| 104k| } 89| | 90| | // borrow is either 0 or 1, perfect for setting up a mask without extra work 91| 26.0k| const W mask = CT::value_barrier(0 - borrow); 92| | 93| 26.0k| W carry = 0; 94| | 95| 130k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (95:22): [True: 104k, False: 26.0k] ------------------ 96| 104k| r[i] = word_add(r[i], P[i] & mask, &carry); 97| 104k| } 98| 26.0k|} _ZN5Botan12SolinasAccumImLm6EEC2ERNSt3__15arrayImLm6EEE: 50| 190k| constexpr explicit SolinasAccum(std::array& r) : m_r(r) {} _ZN5Botan12SolinasAccumImLm6EE5accumEl: 52| 2.28M| constexpr void accum(int64_t v) { 53| 2.28M| BOTAN_DEBUG_ASSERT(m_idx < N32); ------------------ | | 137| 2.28M| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 2.28M| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 2.28M] | | ------------------ ------------------ 54| | 55| 2.28M| m_S += v; 56| 2.28M| const uint32_t r = static_cast(m_S); 57| 2.28M| m_S >>= 32; 58| | 59| | if constexpr(WordInfo::bits == 32) { 60| | m_r[m_idx] = r; 61| 2.28M| } else { 62| 2.28M| m_r[m_idx / 2] |= static_cast(r) << (32 * (m_idx % 2)); 63| 2.28M| } 64| | 65| 2.28M| m_idx += 1; 66| 2.28M| } _ZN5Botan12SolinasAccumImLm6EE11final_carryEl: 68| 190k| constexpr W final_carry(int64_t C) { 69| 190k| m_S += C; 70| 190k| BOTAN_DEBUG_ASSERT(m_S >= 0); ------------------ | | 137| 190k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 190k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 190k] | | ------------------ ------------------ 71| 190k| return static_cast(m_S); 72| 190k| } _ZN5Botan20solinas_correct_redcILm6ETkNS_8WordTypeEmEEvRNSt3__15arrayIT0_XT_EEERKS4_S7_: 84| 190k|constexpr inline void solinas_correct_redc(std::array& r, const std::array& P, const std::array& C) { 85| 190k| W borrow = 0; 86| 1.33M| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (86:22): [True: 1.14M, False: 190k] ------------------ 87| 1.14M| r[i] = word_sub(r[i], C[i], &borrow); 88| 1.14M| } 89| | 90| | // borrow is either 0 or 1, perfect for setting up a mask without extra work 91| 190k| const W mask = CT::value_barrier(0 - borrow); 92| | 93| 190k| W carry = 0; 94| | 95| 1.33M| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (95:22): [True: 1.14M, False: 190k] ------------------ 96| 1.14M| r[i] = word_add(r[i], P[i] & mask, &carry); 97| 1.14M| } 98| 190k|} _ZN5Botan10monty_redcITkNS_8WordTypeEmLm4EEENSt3__15arrayIT_XT0_EEERKNS2_IS3_XmlLi2ET0_EEERKS4_S3_: 110| 111k| -> std::array { 111| 111k| static_assert(N >= 1); 112| | 113| 111k| std::array ws; // NOLINT(*-member-init) 114| 111k| std::array r; // NOLINT(*-member-init) 115| | 116| | // Conditional ok: the parameter size is public 117| 111k| if(!std::is_constant_evaluated()) { ------------------ | Branch (117:7): [True: 111k, Folded] ------------------ 118| | // This range ensures we cover fields of 256, 384 and 512 bits for both 32 and 64 bit words 119| 111k| if constexpr(N == 4) { 120| 111k| bigint_monty_redc_4(r.data(), z.data(), p.data(), p_dash, ws.data()); 121| 111k| return r; 122| | } else if constexpr(N == 6) { 123| | bigint_monty_redc_6(r.data(), z.data(), p.data(), p_dash, ws.data()); 124| | return r; 125| | } else if constexpr(N == 8) { 126| | bigint_monty_redc_8(r.data(), z.data(), p.data(), p_dash, ws.data()); 127| | return r; 128| | } else if constexpr(N == 12) { 129| | bigint_monty_redc_12(r.data(), z.data(), p.data(), p_dash, ws.data()); 130| | return r; 131| | } else if constexpr(N == 16) { 132| | bigint_monty_redc_16(r.data(), z.data(), p.data(), p_dash, ws.data()); 133| | return r; 134| | } 135| 111k| } 136| | 137| 0| word3 accum; 138| | 139| 111k| accum.add(z[0]); 140| | 141| 111k| ws[0] = accum.monty_step(p[0], p_dash); 142| | 143| 111k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (143:22): [True: 0, False: 111k] ------------------ 144| 0| for(size_t j = 0; j < i; ++j) { ------------------ | Branch (144:25): [True: 0, False: 0] ------------------ 145| 0| accum.mul(ws[j], p[i - j]); 146| 0| } 147| | 148| 0| accum.add(z[i]); 149| | 150| 0| ws[i] = accum.monty_step(p[0], p_dash); 151| 0| } 152| | 153| 111k| for(size_t i = 0; i != N - 1; ++i) { ------------------ | Branch (153:22): [True: 0, False: 111k] ------------------ 154| 0| for(size_t j = i + 1; j != N; ++j) { ------------------ | Branch (154:29): [True: 0, False: 0] ------------------ 155| 0| accum.mul(ws[j], p[N + i - j]); 156| 0| } 157| | 158| 0| accum.add(z[N + i]); 159| | 160| 0| ws[i] = accum.extract(); 161| 0| } 162| | 163| 111k| accum.add(z[2 * N - 1]); 164| | 165| 111k| ws[N - 1] = accum.extract(); 166| | // w1 is the final part, which is not stored in the workspace 167| 111k| const W w1 = accum.extract(); 168| | 169| 111k| bigint_monty_maybe_sub(r.data(), w1, ws.data(), p.data()); 170| | 171| 111k| return r; 172| 111k|} _ZN5Botan10monty_redcITkNS_8WordTypeEmLm6EEENSt3__15arrayIT_XT0_EEERKNS2_IS3_XmlLi2ET0_EEERKS4_S3_: 110| 212k| -> std::array { 111| 212k| static_assert(N >= 1); 112| | 113| 212k| std::array ws; // NOLINT(*-member-init) 114| 212k| std::array r; // NOLINT(*-member-init) 115| | 116| | // Conditional ok: the parameter size is public 117| 212k| if(!std::is_constant_evaluated()) { ------------------ | Branch (117:7): [True: 212k, Folded] ------------------ 118| | // This range ensures we cover fields of 256, 384 and 512 bits for both 32 and 64 bit words 119| | if constexpr(N == 4) { 120| | bigint_monty_redc_4(r.data(), z.data(), p.data(), p_dash, ws.data()); 121| | return r; 122| 212k| } else if constexpr(N == 6) { 123| 212k| bigint_monty_redc_6(r.data(), z.data(), p.data(), p_dash, ws.data()); 124| 212k| return r; 125| | } else if constexpr(N == 8) { 126| | bigint_monty_redc_8(r.data(), z.data(), p.data(), p_dash, ws.data()); 127| | return r; 128| | } else if constexpr(N == 12) { 129| | bigint_monty_redc_12(r.data(), z.data(), p.data(), p_dash, ws.data()); 130| | return r; 131| | } else if constexpr(N == 16) { 132| | bigint_monty_redc_16(r.data(), z.data(), p.data(), p_dash, ws.data()); 133| | return r; 134| | } 135| 212k| } 136| | 137| 0| word3 accum; 138| | 139| 212k| accum.add(z[0]); 140| | 141| 212k| ws[0] = accum.monty_step(p[0], p_dash); 142| | 143| 212k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (143:22): [True: 0, False: 212k] ------------------ 144| 0| for(size_t j = 0; j < i; ++j) { ------------------ | Branch (144:25): [True: 0, False: 0] ------------------ 145| 0| accum.mul(ws[j], p[i - j]); 146| 0| } 147| | 148| 0| accum.add(z[i]); 149| | 150| 0| ws[i] = accum.monty_step(p[0], p_dash); 151| 0| } 152| | 153| 212k| for(size_t i = 0; i != N - 1; ++i) { ------------------ | Branch (153:22): [True: 0, False: 212k] ------------------ 154| 0| for(size_t j = i + 1; j != N; ++j) { ------------------ | Branch (154:29): [True: 0, False: 0] ------------------ 155| 0| accum.mul(ws[j], p[N + i - j]); 156| 0| } 157| | 158| 0| accum.add(z[N + i]); 159| | 160| 0| ws[i] = accum.extract(); 161| 0| } 162| | 163| 212k| accum.add(z[2 * N - 1]); 164| | 165| 212k| ws[N - 1] = accum.extract(); 166| | // w1 is the final part, which is not stored in the workspace 167| 212k| const W w1 = accum.extract(); 168| | 169| 212k| bigint_monty_maybe_sub(r.data(), w1, ws.data(), p.data()); 170| | 171| 212k| return r; 172| 212k|} _ZN5Botan10monty_redcITkNS_8WordTypeEmLm8EEENSt3__15arrayIT_XT0_EEERKNS2_IS3_XmlLi2ET0_EEERKS4_S3_: 110| 216k| -> std::array { 111| 216k| static_assert(N >= 1); 112| | 113| 216k| std::array ws; // NOLINT(*-member-init) 114| 216k| std::array r; // NOLINT(*-member-init) 115| | 116| | // Conditional ok: the parameter size is public 117| 216k| if(!std::is_constant_evaluated()) { ------------------ | Branch (117:7): [True: 216k, Folded] ------------------ 118| | // This range ensures we cover fields of 256, 384 and 512 bits for both 32 and 64 bit words 119| | if constexpr(N == 4) { 120| | bigint_monty_redc_4(r.data(), z.data(), p.data(), p_dash, ws.data()); 121| | return r; 122| | } else if constexpr(N == 6) { 123| | bigint_monty_redc_6(r.data(), z.data(), p.data(), p_dash, ws.data()); 124| | return r; 125| 216k| } else if constexpr(N == 8) { 126| 216k| bigint_monty_redc_8(r.data(), z.data(), p.data(), p_dash, ws.data()); 127| 216k| return r; 128| | } else if constexpr(N == 12) { 129| | bigint_monty_redc_12(r.data(), z.data(), p.data(), p_dash, ws.data()); 130| | return r; 131| | } else if constexpr(N == 16) { 132| | bigint_monty_redc_16(r.data(), z.data(), p.data(), p_dash, ws.data()); 133| | return r; 134| | } 135| 216k| } 136| | 137| 0| word3 accum; 138| | 139| 216k| accum.add(z[0]); 140| | 141| 216k| ws[0] = accum.monty_step(p[0], p_dash); 142| | 143| 216k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (143:22): [True: 0, False: 216k] ------------------ 144| 0| for(size_t j = 0; j < i; ++j) { ------------------ | Branch (144:25): [True: 0, False: 0] ------------------ 145| 0| accum.mul(ws[j], p[i - j]); 146| 0| } 147| | 148| 0| accum.add(z[i]); 149| | 150| 0| ws[i] = accum.monty_step(p[0], p_dash); 151| 0| } 152| | 153| 216k| for(size_t i = 0; i != N - 1; ++i) { ------------------ | Branch (153:22): [True: 0, False: 216k] ------------------ 154| 0| for(size_t j = i + 1; j != N; ++j) { ------------------ | Branch (154:29): [True: 0, False: 0] ------------------ 155| 0| accum.mul(ws[j], p[N + i - j]); 156| 0| } 157| | 158| 0| accum.add(z[N + i]); 159| | 160| 0| ws[i] = accum.extract(); 161| 0| } 162| | 163| 216k| accum.add(z[2 * N - 1]); 164| | 165| 216k| ws[N - 1] = accum.extract(); 166| | // w1 is the final part, which is not stored in the workspace 167| 216k| const W w1 = accum.extract(); 168| | 169| 216k| bigint_monty_maybe_sub(r.data(), w1, ws.data(), p.data()); 170| | 171| 216k| return r; 172| 216k|} _ZN5Botan10monty_redcITkNS_8WordTypeEmLm9EEENSt3__15arrayIT_XT0_EEERKNS2_IS3_XmlLi2ET0_EEERKS4_S3_: 110| 210| -> std::array { 111| 210| static_assert(N >= 1); 112| | 113| 210| std::array ws; // NOLINT(*-member-init) 114| 210| std::array r; // NOLINT(*-member-init) 115| | 116| | // Conditional ok: the parameter size is public 117| 210| if(!std::is_constant_evaluated()) { ------------------ | Branch (117:7): [True: 210, Folded] ------------------ 118| | // This range ensures we cover fields of 256, 384 and 512 bits for both 32 and 64 bit words 119| | if constexpr(N == 4) { 120| | bigint_monty_redc_4(r.data(), z.data(), p.data(), p_dash, ws.data()); 121| | return r; 122| | } else if constexpr(N == 6) { 123| | bigint_monty_redc_6(r.data(), z.data(), p.data(), p_dash, ws.data()); 124| | return r; 125| | } else if constexpr(N == 8) { 126| | bigint_monty_redc_8(r.data(), z.data(), p.data(), p_dash, ws.data()); 127| | return r; 128| | } else if constexpr(N == 12) { 129| | bigint_monty_redc_12(r.data(), z.data(), p.data(), p_dash, ws.data()); 130| | return r; 131| 210| } else if constexpr(N == 16) { 132| 210| bigint_monty_redc_16(r.data(), z.data(), p.data(), p_dash, ws.data()); 133| 210| return r; 134| 210| } 135| 210| } 136| | 137| 210| word3 accum; 138| | 139| 210| accum.add(z[0]); 140| | 141| 210| ws[0] = accum.monty_step(p[0], p_dash); 142| | 143| 1.89k| for(size_t i = 1; i != N; ++i) { ------------------ | Branch (143:22): [True: 1.68k, False: 210] ------------------ 144| 9.24k| for(size_t j = 0; j < i; ++j) { ------------------ | Branch (144:25): [True: 7.56k, False: 1.68k] ------------------ 145| 7.56k| accum.mul(ws[j], p[i - j]); 146| 7.56k| } 147| | 148| 1.68k| accum.add(z[i]); 149| | 150| 1.68k| ws[i] = accum.monty_step(p[0], p_dash); 151| 1.68k| } 152| | 153| 1.89k| for(size_t i = 0; i != N - 1; ++i) { ------------------ | Branch (153:22): [True: 1.68k, False: 210] ------------------ 154| 9.24k| for(size_t j = i + 1; j != N; ++j) { ------------------ | Branch (154:29): [True: 7.56k, False: 1.68k] ------------------ 155| 7.56k| accum.mul(ws[j], p[N + i - j]); 156| 7.56k| } 157| | 158| 1.68k| accum.add(z[N + i]); 159| | 160| 1.68k| ws[i] = accum.extract(); 161| 1.68k| } 162| | 163| 210| accum.add(z[2 * N - 1]); 164| | 165| 210| ws[N - 1] = accum.extract(); 166| | // w1 is the final part, which is not stored in the workspace 167| 210| const W w1 = accum.extract(); 168| | 169| 210| bigint_monty_maybe_sub(r.data(), w1, ws.data(), p.data()); 170| | 171| 210| return r; 172| 210|} pcurves_brainpool256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE8instanceEv: 341| 811| static std::shared_ptr instance() { 342| 811| static const auto g_curve = std::make_shared>(); 343| 811| return g_curve; 344| 811| } pcurves_brainpool256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEEC2Ev: 339| 1| PrimeOrderCurveImpl() : m_mul_by_g(C::G) {} pcurves_brainpool256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE19field_element_bytesEv: 36| 180| size_t field_element_bytes() const override { return C::FieldElement::BYTES; } pcurves_brainpool256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE8mul_by_gERKNS0_15PrimeOrderCurve6ScalarERNS_21RandomNumberGeneratorE: 38| 90| ProjectivePoint mul_by_g(const Scalar& scalar, RandomNumberGenerator& rng) const override { 39| 90| return stash(m_mul_by_g.mul(from_stash(scalar), rng)); 40| 90| } pcurves_brainpool256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE5stashERKNS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEESA_EE: 373| 90| static ProjectivePoint stash(const typename C::ProjectivePoint& pt) { 374| 90| const auto x_w = pt.x().template stash_value(); 375| 90| const auto y_w = pt.y().template stash_value(); 376| 90| const auto z_w = pt.z().template stash_value(); 377| 90| return ProjectivePoint::_create(instance(), x_w, y_w, z_w); 378| 90| } pcurves_brainpool256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE10from_stashERKNS0_15PrimeOrderCurve6ScalarE: 351| 270| static typename C::Scalar from_stash(const Scalar& s) { 352| 270| if(s._curve() != instance()) { ------------------ | Branch (352:13): [True: 0, False: 270] ------------------ 353| 0| throw Invalid_Argument("Curve mismatch"); 354| 0| } 355| 270| return C::Scalar::from_stash(s._value()); 356| 270| } pcurves_brainpool256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE5stashERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES7_E12ScalarParamsEEEEE: 347| 90| static Scalar stash(const typename C::Scalar& s) { 348| 90| return Scalar::_create(instance(), s.template stash_value()); 349| 90| } pcurves_brainpool256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE10from_stashERKNS0_15PrimeOrderCurve11AffinePointE: 364| 180| static typename C::AffinePoint from_stash(const AffinePoint& pt) { 365| 180| if(pt._curve() != instance()) { ------------------ | Branch (365:13): [True: 0, False: 180] ------------------ 366| 0| throw Invalid_Argument("Curve mismatch"); 367| 0| } 368| 180| const auto x = C::FieldElement::from_stash(pt._x()); 369| 180| const auto y = C::FieldElement::from_stash(pt._y()); 370| 180| return typename C::AffinePoint(x, y); 371| 180| } pcurves_brainpool256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE5stashERKNS_16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 358| 90| static AffinePoint stash(const typename C::AffinePoint& pt) { 359| 90| const auto x_w = pt.x().template stash_value(); 360| 90| const auto y_w = pt.y().template stash_value(); 361| 90| return AffinePoint::_create(instance(), x_w, y_w); 362| 90| } pcurves_brainpool256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE15point_to_affineERKNS0_15PrimeOrderCurve15ProjectivePointE: 189| 90| AffinePoint point_to_affine(const ProjectivePoint& pt) const override { 190| 90| const auto affine = to_affine(from_stash(pt)); 191| | 192| 90| const auto y2 = affine.y().square(); 193| 90| const auto x3_ax_b = C::x3_ax_b(affine.x()); 194| 90| const auto valid_point = affine.is_identity() || (y2 == x3_ax_b); 195| | 196| 90| BOTAN_ASSERT(valid_point.as_bool(), "Computed point is on the curve"); ------------------ | | 71| 90| do { \ | | 72| 90| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 90| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 90] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 90| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 90] | | ------------------ ------------------ 197| | 198| 90| return stash(affine); 199| 90| } pcurves_brainpool256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE10from_stashERKNS0_15PrimeOrderCurve15ProjectivePointE: 380| 90| static typename C::ProjectivePoint from_stash(const ProjectivePoint& pt) { 381| 90| if(pt._curve() != instance()) { ------------------ | Branch (381:13): [True: 0, False: 90] ------------------ 382| 0| throw Invalid_Argument("Curve mismatch"); 383| 0| } 384| 90| const auto x = C::FieldElement::from_stash(pt._x()); 385| 90| const auto y = C::FieldElement::from_stash(pt._y()); 386| 90| const auto z = C::FieldElement::from_stash(pt._z()); 387| 90| return typename C::ProjectivePoint(x, y, z); 388| 90| } pcurves_brainpool256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE24affine_point_is_identityERKNS0_15PrimeOrderCurve11AffinePointE: 207| 90| bool affine_point_is_identity(const AffinePoint& pt) const override { 208| 90| return from_stash(pt).is_identity().as_bool(); 209| 90| } pcurves_brainpool256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE15serialize_pointENSt3__14spanIhLm18446744073709551615EEERKNS0_15PrimeOrderCurve11AffinePointE: 211| 90| void serialize_point(std::span bytes, const AffinePoint& pt) const override { 212| 90| BOTAN_ARG_CHECK(bytes.size() == C::AffinePoint::BYTES, "Invalid length for serialize_point"); ------------------ | | 35| 90| do { \ | | 36| 90| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 90| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 90] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 90| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 90] | | ------------------ ------------------ 213| 90| from_stash(pt).serialize_to(bytes.subspan<0, C::AffinePoint::BYTES>()); 214| 90| } pcurves_brainpool256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE16serialize_scalarENSt3__14spanIhLm18446744073709551615EEERKNS0_15PrimeOrderCurve6ScalarE: 216| 90| void serialize_scalar(std::span bytes, const Scalar& scalar) const override { 217| 90| BOTAN_ARG_CHECK(bytes.size() == C::Scalar::BYTES, "Invalid length to serialize_scalar"); ------------------ | | 35| 90| do { \ | | 36| 90| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 90| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 90] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 90| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 90] | | ------------------ ------------------ 218| 90| return from_stash(scalar).serialize_to(bytes.subspan<0, C::Scalar::BYTES>()); 219| 90| } pcurves_brainpool256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE14scalar_is_zeroERKNS0_15PrimeOrderCurve6ScalarE: 329| 90| bool scalar_is_zero(const Scalar& s) const override { return from_stash(s).is_zero().as_bool(); } pcurves_brainpool256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool256r15CurveEE13random_scalarERNS_21RandomNumberGeneratorE: 337| 90| Scalar random_scalar(RandomNumberGenerator& rng) const override { return stash(C::Scalar::random(rng)); } pcurves_brainpool384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE8instanceEv: 341| 1.13k| static std::shared_ptr instance() { 342| 1.13k| static const auto g_curve = std::make_shared>(); 343| 1.13k| return g_curve; 344| 1.13k| } pcurves_brainpool384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEEC2Ev: 339| 1| PrimeOrderCurveImpl() : m_mul_by_g(C::G) {} pcurves_brainpool384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE19field_element_bytesEv: 36| 252| size_t field_element_bytes() const override { return C::FieldElement::BYTES; } pcurves_brainpool384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE8mul_by_gERKNS0_15PrimeOrderCurve6ScalarERNS_21RandomNumberGeneratorE: 38| 126| ProjectivePoint mul_by_g(const Scalar& scalar, RandomNumberGenerator& rng) const override { 39| 126| return stash(m_mul_by_g.mul(from_stash(scalar), rng)); 40| 126| } pcurves_brainpool384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE5stashERKNS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEESA_EE: 373| 126| static ProjectivePoint stash(const typename C::ProjectivePoint& pt) { 374| 126| const auto x_w = pt.x().template stash_value(); 375| 126| const auto y_w = pt.y().template stash_value(); 376| 126| const auto z_w = pt.z().template stash_value(); 377| 126| return ProjectivePoint::_create(instance(), x_w, y_w, z_w); 378| 126| } pcurves_brainpool384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE10from_stashERKNS0_15PrimeOrderCurve6ScalarE: 351| 378| static typename C::Scalar from_stash(const Scalar& s) { 352| 378| if(s._curve() != instance()) { ------------------ | Branch (352:13): [True: 0, False: 378] ------------------ 353| 0| throw Invalid_Argument("Curve mismatch"); 354| 0| } 355| 378| return C::Scalar::from_stash(s._value()); 356| 378| } pcurves_brainpool384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE5stashERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES7_E12ScalarParamsEEEEE: 347| 126| static Scalar stash(const typename C::Scalar& s) { 348| 126| return Scalar::_create(instance(), s.template stash_value()); 349| 126| } pcurves_brainpool384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE10from_stashERKNS0_15PrimeOrderCurve11AffinePointE: 364| 252| static typename C::AffinePoint from_stash(const AffinePoint& pt) { 365| 252| if(pt._curve() != instance()) { ------------------ | Branch (365:13): [True: 0, False: 252] ------------------ 366| 0| throw Invalid_Argument("Curve mismatch"); 367| 0| } 368| 252| const auto x = C::FieldElement::from_stash(pt._x()); 369| 252| const auto y = C::FieldElement::from_stash(pt._y()); 370| 252| return typename C::AffinePoint(x, y); 371| 252| } pcurves_brainpool384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE5stashERKNS_16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 358| 126| static AffinePoint stash(const typename C::AffinePoint& pt) { 359| 126| const auto x_w = pt.x().template stash_value(); 360| 126| const auto y_w = pt.y().template stash_value(); 361| 126| return AffinePoint::_create(instance(), x_w, y_w); 362| 126| } pcurves_brainpool384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE15point_to_affineERKNS0_15PrimeOrderCurve15ProjectivePointE: 189| 126| AffinePoint point_to_affine(const ProjectivePoint& pt) const override { 190| 126| const auto affine = to_affine(from_stash(pt)); 191| | 192| 126| const auto y2 = affine.y().square(); 193| 126| const auto x3_ax_b = C::x3_ax_b(affine.x()); 194| 126| const auto valid_point = affine.is_identity() || (y2 == x3_ax_b); 195| | 196| 126| BOTAN_ASSERT(valid_point.as_bool(), "Computed point is on the curve"); ------------------ | | 71| 126| do { \ | | 72| 126| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 126| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 126] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 126| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 126] | | ------------------ ------------------ 197| | 198| 126| return stash(affine); 199| 126| } pcurves_brainpool384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE10from_stashERKNS0_15PrimeOrderCurve15ProjectivePointE: 380| 126| static typename C::ProjectivePoint from_stash(const ProjectivePoint& pt) { 381| 126| if(pt._curve() != instance()) { ------------------ | Branch (381:13): [True: 0, False: 126] ------------------ 382| 0| throw Invalid_Argument("Curve mismatch"); 383| 0| } 384| 126| const auto x = C::FieldElement::from_stash(pt._x()); 385| 126| const auto y = C::FieldElement::from_stash(pt._y()); 386| 126| const auto z = C::FieldElement::from_stash(pt._z()); 387| 126| return typename C::ProjectivePoint(x, y, z); 388| 126| } pcurves_brainpool384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE24affine_point_is_identityERKNS0_15PrimeOrderCurve11AffinePointE: 207| 126| bool affine_point_is_identity(const AffinePoint& pt) const override { 208| 126| return from_stash(pt).is_identity().as_bool(); 209| 126| } pcurves_brainpool384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE15serialize_pointENSt3__14spanIhLm18446744073709551615EEERKNS0_15PrimeOrderCurve11AffinePointE: 211| 126| void serialize_point(std::span bytes, const AffinePoint& pt) const override { 212| 126| BOTAN_ARG_CHECK(bytes.size() == C::AffinePoint::BYTES, "Invalid length for serialize_point"); ------------------ | | 35| 126| do { \ | | 36| 126| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 126| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 126] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 126| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 126] | | ------------------ ------------------ 213| 126| from_stash(pt).serialize_to(bytes.subspan<0, C::AffinePoint::BYTES>()); 214| 126| } pcurves_brainpool384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE16serialize_scalarENSt3__14spanIhLm18446744073709551615EEERKNS0_15PrimeOrderCurve6ScalarE: 216| 126| void serialize_scalar(std::span bytes, const Scalar& scalar) const override { 217| 126| BOTAN_ARG_CHECK(bytes.size() == C::Scalar::BYTES, "Invalid length to serialize_scalar"); ------------------ | | 35| 126| do { \ | | 36| 126| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 126| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 126] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 126| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 126] | | ------------------ ------------------ 218| 126| return from_stash(scalar).serialize_to(bytes.subspan<0, C::Scalar::BYTES>()); 219| 126| } pcurves_brainpool384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE14scalar_is_zeroERKNS0_15PrimeOrderCurve6ScalarE: 329| 126| bool scalar_is_zero(const Scalar& s) const override { return from_stash(s).is_zero().as_bool(); } pcurves_brainpool384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool384r15CurveEE13random_scalarERNS_21RandomNumberGeneratorE: 337| 126| Scalar random_scalar(RandomNumberGenerator& rng) const override { return stash(C::Scalar::random(rng)); } pcurves_brainpool512r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE8instanceEv: 341| 802| static std::shared_ptr instance() { 342| 802| static const auto g_curve = std::make_shared>(); 343| 802| return g_curve; 344| 802| } pcurves_brainpool512r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEEC2Ev: 339| 1| PrimeOrderCurveImpl() : m_mul_by_g(C::G) {} pcurves_brainpool512r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE19field_element_bytesEv: 36| 178| size_t field_element_bytes() const override { return C::FieldElement::BYTES; } pcurves_brainpool512r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE8mul_by_gERKNS0_15PrimeOrderCurve6ScalarERNS_21RandomNumberGeneratorE: 38| 89| ProjectivePoint mul_by_g(const Scalar& scalar, RandomNumberGenerator& rng) const override { 39| 89| return stash(m_mul_by_g.mul(from_stash(scalar), rng)); 40| 89| } pcurves_brainpool512r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE5stashERKNS_20ProjectiveCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEESA_EE: 373| 89| static ProjectivePoint stash(const typename C::ProjectivePoint& pt) { 374| 89| const auto x_w = pt.x().template stash_value(); 375| 89| const auto y_w = pt.y().template stash_value(); 376| 89| const auto z_w = pt.z().template stash_value(); 377| 89| return ProjectivePoint::_create(instance(), x_w, y_w, z_w); 378| 89| } pcurves_brainpool512r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE10from_stashERKNS0_15PrimeOrderCurve6ScalarE: 351| 267| static typename C::Scalar from_stash(const Scalar& s) { 352| 267| if(s._curve() != instance()) { ------------------ | Branch (352:13): [True: 0, False: 267] ------------------ 353| 0| throw Invalid_Argument("Curve mismatch"); 354| 0| } 355| 267| return C::Scalar::from_stash(s._value()); 356| 267| } pcurves_brainpool512r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE5stashERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES7_E12ScalarParamsEEEEE: 347| 89| static Scalar stash(const typename C::Scalar& s) { 348| 89| return Scalar::_create(instance(), s.template stash_value()); 349| 89| } pcurves_brainpool512r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE10from_stashERKNS0_15PrimeOrderCurve11AffinePointE: 364| 178| static typename C::AffinePoint from_stash(const AffinePoint& pt) { 365| 178| if(pt._curve() != instance()) { ------------------ | Branch (365:13): [True: 0, False: 178] ------------------ 366| 0| throw Invalid_Argument("Curve mismatch"); 367| 0| } 368| 178| const auto x = C::FieldElement::from_stash(pt._x()); 369| 178| const auto y = C::FieldElement::from_stash(pt._y()); 370| 178| return typename C::AffinePoint(x, y); 371| 178| } pcurves_brainpool512r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE5stashERKNS_16AffineCurvePointINS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 358| 89| static AffinePoint stash(const typename C::AffinePoint& pt) { 359| 89| const auto x_w = pt.x().template stash_value(); 360| 89| const auto y_w = pt.y().template stash_value(); 361| 89| return AffinePoint::_create(instance(), x_w, y_w); 362| 89| } pcurves_brainpool512r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE15point_to_affineERKNS0_15PrimeOrderCurve15ProjectivePointE: 189| 89| AffinePoint point_to_affine(const ProjectivePoint& pt) const override { 190| 89| const auto affine = to_affine(from_stash(pt)); 191| | 192| 89| const auto y2 = affine.y().square(); 193| 89| const auto x3_ax_b = C::x3_ax_b(affine.x()); 194| 89| const auto valid_point = affine.is_identity() || (y2 == x3_ax_b); 195| | 196| 89| BOTAN_ASSERT(valid_point.as_bool(), "Computed point is on the curve"); ------------------ | | 71| 89| do { \ | | 72| 89| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 89| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 89] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 89| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 89] | | ------------------ ------------------ 197| | 198| 89| return stash(affine); 199| 89| } pcurves_brainpool512r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE10from_stashERKNS0_15PrimeOrderCurve15ProjectivePointE: 380| 89| static typename C::ProjectivePoint from_stash(const ProjectivePoint& pt) { 381| 89| if(pt._curve() != instance()) { ------------------ | Branch (381:13): [True: 0, False: 89] ------------------ 382| 0| throw Invalid_Argument("Curve mismatch"); 383| 0| } 384| 89| const auto x = C::FieldElement::from_stash(pt._x()); 385| 89| const auto y = C::FieldElement::from_stash(pt._y()); 386| 89| const auto z = C::FieldElement::from_stash(pt._z()); 387| 89| return typename C::ProjectivePoint(x, y, z); 388| 89| } pcurves_brainpool512r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE24affine_point_is_identityERKNS0_15PrimeOrderCurve11AffinePointE: 207| 89| bool affine_point_is_identity(const AffinePoint& pt) const override { 208| 89| return from_stash(pt).is_identity().as_bool(); 209| 89| } pcurves_brainpool512r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE15serialize_pointENSt3__14spanIhLm18446744073709551615EEERKNS0_15PrimeOrderCurve11AffinePointE: 211| 89| void serialize_point(std::span bytes, const AffinePoint& pt) const override { 212| 89| BOTAN_ARG_CHECK(bytes.size() == C::AffinePoint::BYTES, "Invalid length for serialize_point"); ------------------ | | 35| 89| do { \ | | 36| 89| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 89| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 89] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 89| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 89] | | ------------------ ------------------ 213| 89| from_stash(pt).serialize_to(bytes.subspan<0, C::AffinePoint::BYTES>()); 214| 89| } pcurves_brainpool512r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE16serialize_scalarENSt3__14spanIhLm18446744073709551615EEERKNS0_15PrimeOrderCurve6ScalarE: 216| 89| void serialize_scalar(std::span bytes, const Scalar& scalar) const override { 217| 89| BOTAN_ARG_CHECK(bytes.size() == C::Scalar::BYTES, "Invalid length to serialize_scalar"); ------------------ | | 35| 89| do { \ | | 36| 89| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 89| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 89] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 89| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 89] | | ------------------ ------------------ 218| 89| return from_stash(scalar).serialize_to(bytes.subspan<0, C::Scalar::BYTES>()); 219| 89| } pcurves_brainpool512r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE14scalar_is_zeroERKNS0_15PrimeOrderCurve6ScalarE: 329| 89| bool scalar_is_zero(const Scalar& s) const override { return from_stash(s).is_zero().as_bool(); } pcurves_brainpool512r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_114brainpool512r15CurveEE13random_scalarERNS_21RandomNumberGeneratorE: 337| 89| Scalar random_scalar(RandomNumberGenerator& rng) const override { return stash(C::Scalar::random(rng)); } pcurves_secp224r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp224r15CurveEE8instanceEv: 341| 13| static std::shared_ptr instance() { 342| 13| static const auto g_curve = std::make_shared>(); 343| 13| return g_curve; 344| 13| } pcurves_secp224r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp224r15CurveEEC2Ev: 339| 1| PrimeOrderCurveImpl() : m_mul_by_g(C::G) {} pcurves_secp224r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp224r15CurveEE19field_element_bytesEv: 36| 8| size_t field_element_bytes() const override { return C::FieldElement::BYTES; } pcurves_secp224r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp224r15CurveEE10from_stashERKNS0_15PrimeOrderCurve11AffinePointE: 364| 8| static typename C::AffinePoint from_stash(const AffinePoint& pt) { 365| 8| if(pt._curve() != instance()) { ------------------ | Branch (365:13): [True: 0, False: 8] ------------------ 366| 0| throw Invalid_Argument("Curve mismatch"); 367| 0| } 368| 8| const auto x = C::FieldElement::from_stash(pt._x()); 369| 8| const auto y = C::FieldElement::from_stash(pt._y()); 370| 8| return typename C::AffinePoint(x, y); 371| 8| } pcurves_secp224r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp224r15CurveEE5stashERKNS_16AffineCurvePointINS_6IntModINS3_12Secp224r1RepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 358| 4| static AffinePoint stash(const typename C::AffinePoint& pt) { 359| 4| const auto x_w = pt.x().template stash_value(); 360| 4| const auto y_w = pt.y().template stash_value(); 361| 4| return AffinePoint::_create(instance(), x_w, y_w); 362| 4| } pcurves_secp224r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp224r15CurveEE30deserialize_point_uncompressedENSt3__14spanIKhLm18446744073709551615EEE: 241| 75| std::optional deserialize_point_uncompressed(std::span bytes) const override { 242| 75| constexpr size_t FieldElementBytes = C::FieldElement::BYTES; 243| 75| constexpr size_t UncompressedBytes = 2 * C::FieldElement::BYTES + 1; 244| | 245| 75| if(bytes.size() == UncompressedBytes && bytes[0] == 0x04) { ------------------ | Branch (245:13): [True: 75, False: 0] | Branch (245:50): [True: 75, False: 0] ------------------ 246| 75| const auto encoded_point = bytes.subspan(1); 247| 75| auto x = C::FieldElement::deserialize(encoded_point.first(FieldElementBytes)); 248| 75| auto y = C::FieldElement::deserialize(encoded_point.last(FieldElementBytes)); 249| | 250| 75| if(x && y) { ------------------ | Branch (250:16): [True: 74, False: 1] | Branch (250:21): [True: 73, False: 1] ------------------ 251| | // Check that y^2 = x^3 + ax + b 252| 73| const auto lhs = (*y).square(); 253| 73| const auto rhs = C::x3_ax_b(*x); 254| 73| const auto valid = (lhs == rhs); 255| 73| if(valid.as_bool()) { ------------------ | Branch (255:19): [True: 4, False: 69] ------------------ 256| 4| return stash(typename C::AffinePoint(*x, *y)); 257| 4| } 258| 73| } 259| 75| } 260| | 261| 71| return {}; 262| 75| } pcurves_secp224r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp224r15CurveEE24affine_point_is_identityERKNS0_15PrimeOrderCurve11AffinePointE: 207| 4| bool affine_point_is_identity(const AffinePoint& pt) const override { 208| 4| return from_stash(pt).is_identity().as_bool(); 209| 4| } pcurves_secp224r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp224r15CurveEE15serialize_pointENSt3__14spanIhLm18446744073709551615EEERKNS0_15PrimeOrderCurve11AffinePointE: 211| 4| void serialize_point(std::span bytes, const AffinePoint& pt) const override { 212| 4| BOTAN_ARG_CHECK(bytes.size() == C::AffinePoint::BYTES, "Invalid length for serialize_point"); ------------------ | | 35| 4| do { \ | | 36| 4| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 4| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 4] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 4| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 4] | | ------------------ ------------------ 213| 4| from_stash(pt).serialize_to(bytes.subspan<0, C::AffinePoint::BYTES>()); 214| 4| } pcurves_secp256k1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256k15CurveEE8instanceEv: 341| 1| static std::shared_ptr instance() { 342| 1| static const auto g_curve = std::make_shared>(); 343| 1| return g_curve; 344| 1| } pcurves_secp256k1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256k15CurveEEC2Ev: 339| 1| PrimeOrderCurveImpl() : m_mul_by_g(C::G) {} pcurves_secp256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE8instanceEv: 341| 910| static std::shared_ptr instance() { 342| 910| static const auto g_curve = std::make_shared>(); 343| 910| return g_curve; 344| 910| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEEC2Ev: 339| 1| PrimeOrderCurveImpl() : m_mul_by_g(C::G) {} pcurves_secp256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE19field_element_bytesEv: 36| 202| size_t field_element_bytes() const override { return C::FieldElement::BYTES; } pcurves_secp256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE8mul_by_gERKNS0_15PrimeOrderCurve6ScalarERNS_21RandomNumberGeneratorE: 38| 101| ProjectivePoint mul_by_g(const Scalar& scalar, RandomNumberGenerator& rng) const override { 39| 101| return stash(m_mul_by_g.mul(from_stash(scalar), rng)); 40| 101| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE5stashERKNS_20ProjectiveCurvePointINS_6IntModINS2_22Secp256r1MontgomeryRepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEESA_EE: 373| 101| static ProjectivePoint stash(const typename C::ProjectivePoint& pt) { 374| 101| const auto x_w = pt.x().template stash_value(); 375| 101| const auto y_w = pt.y().template stash_value(); 376| 101| const auto z_w = pt.z().template stash_value(); 377| 101| return ProjectivePoint::_create(instance(), x_w, y_w, z_w); 378| 101| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE10from_stashERKNS0_15PrimeOrderCurve6ScalarE: 351| 303| static typename C::Scalar from_stash(const Scalar& s) { 352| 303| if(s._curve() != instance()) { ------------------ | Branch (352:13): [True: 0, False: 303] ------------------ 353| 0| throw Invalid_Argument("Curve mismatch"); 354| 0| } 355| 303| return C::Scalar::from_stash(s._value()); 356| 303| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE5stashERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsENS2_22Secp256r1MontgomeryRepEE12ScalarParamsEEEEE: 347| 101| static Scalar stash(const typename C::Scalar& s) { 348| 101| return Scalar::_create(instance(), s.template stash_value()); 349| 101| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE10from_stashERKNS0_15PrimeOrderCurve11AffinePointE: 364| 202| static typename C::AffinePoint from_stash(const AffinePoint& pt) { 365| 202| if(pt._curve() != instance()) { ------------------ | Branch (365:13): [True: 0, False: 202] ------------------ 366| 0| throw Invalid_Argument("Curve mismatch"); 367| 0| } 368| 202| const auto x = C::FieldElement::from_stash(pt._x()); 369| 202| const auto y = C::FieldElement::from_stash(pt._y()); 370| 202| return typename C::AffinePoint(x, y); 371| 202| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE5stashERKNS_16AffineCurvePointINS_6IntModINS2_22Secp256r1MontgomeryRepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 358| 101| static AffinePoint stash(const typename C::AffinePoint& pt) { 359| 101| const auto x_w = pt.x().template stash_value(); 360| 101| const auto y_w = pt.y().template stash_value(); 361| 101| return AffinePoint::_create(instance(), x_w, y_w); 362| 101| } pcurves_secp256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE15point_to_affineERKNS0_15PrimeOrderCurve15ProjectivePointE: 189| 101| AffinePoint point_to_affine(const ProjectivePoint& pt) const override { 190| 101| const auto affine = to_affine(from_stash(pt)); 191| | 192| 101| const auto y2 = affine.y().square(); 193| 101| const auto x3_ax_b = C::x3_ax_b(affine.x()); 194| 101| const auto valid_point = affine.is_identity() || (y2 == x3_ax_b); 195| | 196| 101| BOTAN_ASSERT(valid_point.as_bool(), "Computed point is on the curve"); ------------------ | | 71| 101| do { \ | | 72| 101| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 101| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 101] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 101| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 101] | | ------------------ ------------------ 197| | 198| 101| return stash(affine); 199| 101| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE10from_stashERKNS0_15PrimeOrderCurve15ProjectivePointE: 380| 101| static typename C::ProjectivePoint from_stash(const ProjectivePoint& pt) { 381| 101| if(pt._curve() != instance()) { ------------------ | Branch (381:13): [True: 0, False: 101] ------------------ 382| 0| throw Invalid_Argument("Curve mismatch"); 383| 0| } 384| 101| const auto x = C::FieldElement::from_stash(pt._x()); 385| 101| const auto y = C::FieldElement::from_stash(pt._y()); 386| 101| const auto z = C::FieldElement::from_stash(pt._z()); 387| 101| return typename C::ProjectivePoint(x, y, z); 388| 101| } pcurves_secp256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE24affine_point_is_identityERKNS0_15PrimeOrderCurve11AffinePointE: 207| 101| bool affine_point_is_identity(const AffinePoint& pt) const override { 208| 101| return from_stash(pt).is_identity().as_bool(); 209| 101| } pcurves_secp256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE15serialize_pointENSt3__14spanIhLm18446744073709551615EEERKNS0_15PrimeOrderCurve11AffinePointE: 211| 101| void serialize_point(std::span bytes, const AffinePoint& pt) const override { 212| 101| BOTAN_ARG_CHECK(bytes.size() == C::AffinePoint::BYTES, "Invalid length for serialize_point"); ------------------ | | 35| 101| do { \ | | 36| 101| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 101| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 101] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 101| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 101] | | ------------------ ------------------ 213| 101| from_stash(pt).serialize_to(bytes.subspan<0, C::AffinePoint::BYTES>()); 214| 101| } pcurves_secp256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE16serialize_scalarENSt3__14spanIhLm18446744073709551615EEERKNS0_15PrimeOrderCurve6ScalarE: 216| 101| void serialize_scalar(std::span bytes, const Scalar& scalar) const override { 217| 101| BOTAN_ARG_CHECK(bytes.size() == C::Scalar::BYTES, "Invalid length to serialize_scalar"); ------------------ | | 35| 101| do { \ | | 36| 101| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 101| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 101] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 101| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 101] | | ------------------ ------------------ 218| 101| return from_stash(scalar).serialize_to(bytes.subspan<0, C::Scalar::BYTES>()); 219| 101| } pcurves_secp256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE14scalar_is_zeroERKNS0_15PrimeOrderCurve6ScalarE: 329| 101| bool scalar_is_zero(const Scalar& s) const override { return from_stash(s).is_zero().as_bool(); } pcurves_secp256r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp256r15CurveEE13random_scalarERNS_21RandomNumberGeneratorE: 337| 101| Scalar random_scalar(RandomNumberGenerator& rng) const override { return stash(C::Scalar::random(rng)); } pcurves_secp384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE8instanceEv: 341| 1.08k| static std::shared_ptr instance() { 342| 1.08k| static const auto g_curve = std::make_shared>(); 343| 1.08k| return g_curve; 344| 1.08k| } pcurves_secp384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEEC2Ev: 339| 1| PrimeOrderCurveImpl() : m_mul_by_g(C::G) {} pcurves_secp384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE19field_element_bytesEv: 36| 240| size_t field_element_bytes() const override { return C::FieldElement::BYTES; } pcurves_secp384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE8mul_by_gERKNS0_15PrimeOrderCurve6ScalarERNS_21RandomNumberGeneratorE: 38| 120| ProjectivePoint mul_by_g(const Scalar& scalar, RandomNumberGenerator& rng) const override { 39| 120| return stash(m_mul_by_g.mul(from_stash(scalar), rng)); 40| 120| } pcurves_secp384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE5stashERKNS_20ProjectiveCurvePointINS_6IntModINS2_12Secp384r1RepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEESA_EE: 373| 120| static ProjectivePoint stash(const typename C::ProjectivePoint& pt) { 374| 120| const auto x_w = pt.x().template stash_value(); 375| 120| const auto y_w = pt.y().template stash_value(); 376| 120| const auto z_w = pt.z().template stash_value(); 377| 120| return ProjectivePoint::_create(instance(), x_w, y_w, z_w); 378| 120| } pcurves_secp384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE10from_stashERKNS0_15PrimeOrderCurve6ScalarE: 351| 360| static typename C::Scalar from_stash(const Scalar& s) { 352| 360| if(s._curve() != instance()) { ------------------ | Branch (352:13): [True: 0, False: 360] ------------------ 353| 0| throw Invalid_Argument("Curve mismatch"); 354| 0| } 355| 360| return C::Scalar::from_stash(s._value()); 356| 360| } pcurves_secp384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE5stashERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsENS2_12Secp384r1RepEE12ScalarParamsEEEEE: 347| 120| static Scalar stash(const typename C::Scalar& s) { 348| 120| return Scalar::_create(instance(), s.template stash_value()); 349| 120| } pcurves_secp384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE10from_stashERKNS0_15PrimeOrderCurve11AffinePointE: 364| 240| static typename C::AffinePoint from_stash(const AffinePoint& pt) { 365| 240| if(pt._curve() != instance()) { ------------------ | Branch (365:13): [True: 0, False: 240] ------------------ 366| 0| throw Invalid_Argument("Curve mismatch"); 367| 0| } 368| 240| const auto x = C::FieldElement::from_stash(pt._x()); 369| 240| const auto y = C::FieldElement::from_stash(pt._y()); 370| 240| return typename C::AffinePoint(x, y); 371| 240| } pcurves_secp384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE5stashERKNS_16AffineCurvePointINS_6IntModINS2_12Secp384r1RepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 358| 120| static AffinePoint stash(const typename C::AffinePoint& pt) { 359| 120| const auto x_w = pt.x().template stash_value(); 360| 120| const auto y_w = pt.y().template stash_value(); 361| 120| return AffinePoint::_create(instance(), x_w, y_w); 362| 120| } pcurves_secp384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE15point_to_affineERKNS0_15PrimeOrderCurve15ProjectivePointE: 189| 120| AffinePoint point_to_affine(const ProjectivePoint& pt) const override { 190| 120| const auto affine = to_affine(from_stash(pt)); 191| | 192| 120| const auto y2 = affine.y().square(); 193| 120| const auto x3_ax_b = C::x3_ax_b(affine.x()); 194| 120| const auto valid_point = affine.is_identity() || (y2 == x3_ax_b); 195| | 196| 120| BOTAN_ASSERT(valid_point.as_bool(), "Computed point is on the curve"); ------------------ | | 71| 120| do { \ | | 72| 120| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 120| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 120] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 120| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 120] | | ------------------ ------------------ 197| | 198| 120| return stash(affine); 199| 120| } pcurves_secp384r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE10from_stashERKNS0_15PrimeOrderCurve15ProjectivePointE: 380| 120| static typename C::ProjectivePoint from_stash(const ProjectivePoint& pt) { 381| 120| if(pt._curve() != instance()) { ------------------ | Branch (381:13): [True: 0, False: 120] ------------------ 382| 0| throw Invalid_Argument("Curve mismatch"); 383| 0| } 384| 120| const auto x = C::FieldElement::from_stash(pt._x()); 385| 120| const auto y = C::FieldElement::from_stash(pt._y()); 386| 120| const auto z = C::FieldElement::from_stash(pt._z()); 387| 120| return typename C::ProjectivePoint(x, y, z); 388| 120| } pcurves_secp384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE24affine_point_is_identityERKNS0_15PrimeOrderCurve11AffinePointE: 207| 120| bool affine_point_is_identity(const AffinePoint& pt) const override { 208| 120| return from_stash(pt).is_identity().as_bool(); 209| 120| } pcurves_secp384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE15serialize_pointENSt3__14spanIhLm18446744073709551615EEERKNS0_15PrimeOrderCurve11AffinePointE: 211| 120| void serialize_point(std::span bytes, const AffinePoint& pt) const override { 212| 120| BOTAN_ARG_CHECK(bytes.size() == C::AffinePoint::BYTES, "Invalid length for serialize_point"); ------------------ | | 35| 120| do { \ | | 36| 120| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 120| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 120] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 120| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 120] | | ------------------ ------------------ 213| 120| from_stash(pt).serialize_to(bytes.subspan<0, C::AffinePoint::BYTES>()); 214| 120| } pcurves_secp384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE16serialize_scalarENSt3__14spanIhLm18446744073709551615EEERKNS0_15PrimeOrderCurve6ScalarE: 216| 120| void serialize_scalar(std::span bytes, const Scalar& scalar) const override { 217| 120| BOTAN_ARG_CHECK(bytes.size() == C::Scalar::BYTES, "Invalid length to serialize_scalar"); ------------------ | | 35| 120| do { \ | | 36| 120| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 120| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 120] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 120| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 120] | | ------------------ ------------------ 218| 120| return from_stash(scalar).serialize_to(bytes.subspan<0, C::Scalar::BYTES>()); 219| 120| } pcurves_secp384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE14scalar_is_zeroERKNS0_15PrimeOrderCurve6ScalarE: 329| 120| bool scalar_is_zero(const Scalar& s) const override { return from_stash(s).is_zero().as_bool(); } pcurves_secp384r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp384r15CurveEE13random_scalarERNS_21RandomNumberGeneratorE: 337| 120| Scalar random_scalar(RandomNumberGenerator& rng) const override { return stash(C::Scalar::random(rng)); } pcurves_secp521r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE8instanceEv: 341| 631| static std::shared_ptr instance() { 342| 631| static const auto g_curve = std::make_shared>(); 343| 631| return g_curve; 344| 631| } pcurves_secp521r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEEC2Ev: 339| 1| PrimeOrderCurveImpl() : m_mul_by_g(C::G) {} pcurves_secp521r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE19field_element_bytesEv: 36| 140| size_t field_element_bytes() const override { return C::FieldElement::BYTES; } pcurves_secp521r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE8mul_by_gERKNS0_15PrimeOrderCurve6ScalarERNS_21RandomNumberGeneratorE: 38| 70| ProjectivePoint mul_by_g(const Scalar& scalar, RandomNumberGenerator& rng) const override { 39| 70| return stash(m_mul_by_g.mul(from_stash(scalar), rng)); 40| 70| } pcurves_secp521r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE5stashERKNS_20ProjectiveCurvePointINS_6IntModINS3_7P521RepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEESA_EE: 373| 70| static ProjectivePoint stash(const typename C::ProjectivePoint& pt) { 374| 70| const auto x_w = pt.x().template stash_value(); 375| 70| const auto y_w = pt.y().template stash_value(); 376| 70| const auto z_w = pt.z().template stash_value(); 377| 70| return ProjectivePoint::_create(instance(), x_w, y_w, z_w); 378| 70| } pcurves_secp521r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE10from_stashERKNS0_15PrimeOrderCurve6ScalarE: 351| 210| static typename C::Scalar from_stash(const Scalar& s) { 352| 210| if(s._curve() != instance()) { ------------------ | Branch (352:13): [True: 0, False: 210] ------------------ 353| 0| throw Invalid_Argument("Curve mismatch"); 354| 0| } 355| 210| return C::Scalar::from_stash(s._value()); 356| 210| } pcurves_secp521r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE5stashERKNS_6IntModINS_13MontgomeryRepINS_13EllipticCurveINS3_6ParamsENS3_7P521RepEE12ScalarParamsEEEEE: 347| 70| static Scalar stash(const typename C::Scalar& s) { 348| 70| return Scalar::_create(instance(), s.template stash_value()); 349| 70| } pcurves_secp521r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE10from_stashERKNS0_15PrimeOrderCurve11AffinePointE: 364| 140| static typename C::AffinePoint from_stash(const AffinePoint& pt) { 365| 140| if(pt._curve() != instance()) { ------------------ | Branch (365:13): [True: 0, False: 140] ------------------ 366| 0| throw Invalid_Argument("Curve mismatch"); 367| 0| } 368| 140| const auto x = C::FieldElement::from_stash(pt._x()); 369| 140| const auto y = C::FieldElement::from_stash(pt._y()); 370| 140| return typename C::AffinePoint(x, y); 371| 140| } pcurves_secp521r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE5stashERKNS_16AffineCurvePointINS_6IntModINS3_7P521RepINS_13EllipticCurveINS3_6ParamsES8_E11FieldParamsEEEEEEE: 358| 70| static AffinePoint stash(const typename C::AffinePoint& pt) { 359| 70| const auto x_w = pt.x().template stash_value(); 360| 70| const auto y_w = pt.y().template stash_value(); 361| 70| return AffinePoint::_create(instance(), x_w, y_w); 362| 70| } pcurves_secp521r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE30deserialize_point_uncompressedENSt3__14spanIKhLm18446744073709551615EEE: 241| 103| std::optional deserialize_point_uncompressed(std::span bytes) const override { 242| 103| constexpr size_t FieldElementBytes = C::FieldElement::BYTES; 243| 103| constexpr size_t UncompressedBytes = 2 * C::FieldElement::BYTES + 1; 244| | 245| 103| if(bytes.size() == UncompressedBytes && bytes[0] == 0x04) { ------------------ | Branch (245:13): [True: 103, False: 0] | Branch (245:50): [True: 103, False: 0] ------------------ 246| 103| const auto encoded_point = bytes.subspan(1); 247| 103| auto x = C::FieldElement::deserialize(encoded_point.first(FieldElementBytes)); 248| 103| auto y = C::FieldElement::deserialize(encoded_point.last(FieldElementBytes)); 249| | 250| 103| if(x && y) { ------------------ | Branch (250:16): [True: 100, False: 3] | Branch (250:21): [True: 86, False: 14] ------------------ 251| | // Check that y^2 = x^3 + ax + b 252| 86| const auto lhs = (*y).square(); 253| 86| const auto rhs = C::x3_ax_b(*x); 254| 86| const auto valid = (lhs == rhs); 255| 86| if(valid.as_bool()) { ------------------ | Branch (255:19): [True: 0, False: 86] ------------------ 256| 0| return stash(typename C::AffinePoint(*x, *y)); 257| 0| } 258| 86| } 259| 103| } 260| | 261| 103| return {}; 262| 103| } pcurves_secp521r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE15point_to_affineERKNS0_15PrimeOrderCurve15ProjectivePointE: 189| 70| AffinePoint point_to_affine(const ProjectivePoint& pt) const override { 190| 70| const auto affine = to_affine(from_stash(pt)); 191| | 192| 70| const auto y2 = affine.y().square(); 193| 70| const auto x3_ax_b = C::x3_ax_b(affine.x()); 194| 70| const auto valid_point = affine.is_identity() || (y2 == x3_ax_b); 195| | 196| 70| BOTAN_ASSERT(valid_point.as_bool(), "Computed point is on the curve"); ------------------ | | 71| 70| do { \ | | 72| 70| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 70| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 70] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 70| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 70] | | ------------------ ------------------ 197| | 198| 70| return stash(affine); 199| 70| } pcurves_secp521r1.cpp:_ZN5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE10from_stashERKNS0_15PrimeOrderCurve15ProjectivePointE: 380| 70| static typename C::ProjectivePoint from_stash(const ProjectivePoint& pt) { 381| 70| if(pt._curve() != instance()) { ------------------ | Branch (381:13): [True: 0, False: 70] ------------------ 382| 0| throw Invalid_Argument("Curve mismatch"); 383| 0| } 384| 70| const auto x = C::FieldElement::from_stash(pt._x()); 385| 70| const auto y = C::FieldElement::from_stash(pt._y()); 386| 70| const auto z = C::FieldElement::from_stash(pt._z()); 387| 70| return typename C::ProjectivePoint(x, y, z); 388| 70| } pcurves_secp521r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE24affine_point_is_identityERKNS0_15PrimeOrderCurve11AffinePointE: 207| 70| bool affine_point_is_identity(const AffinePoint& pt) const override { 208| 70| return from_stash(pt).is_identity().as_bool(); 209| 70| } pcurves_secp521r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE15serialize_pointENSt3__14spanIhLm18446744073709551615EEERKNS0_15PrimeOrderCurve11AffinePointE: 211| 70| void serialize_point(std::span bytes, const AffinePoint& pt) const override { 212| 70| BOTAN_ARG_CHECK(bytes.size() == C::AffinePoint::BYTES, "Invalid length for serialize_point"); ------------------ | | 35| 70| do { \ | | 36| 70| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 70| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 70] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 70| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 70] | | ------------------ ------------------ 213| 70| from_stash(pt).serialize_to(bytes.subspan<0, C::AffinePoint::BYTES>()); 214| 70| } pcurves_secp521r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE16serialize_scalarENSt3__14spanIhLm18446744073709551615EEERKNS0_15PrimeOrderCurve6ScalarE: 216| 70| void serialize_scalar(std::span bytes, const Scalar& scalar) const override { 217| 70| BOTAN_ARG_CHECK(bytes.size() == C::Scalar::BYTES, "Invalid length to serialize_scalar"); ------------------ | | 35| 70| do { \ | | 36| 70| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 70| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 70] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 70| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 70] | | ------------------ ------------------ 218| 70| return from_stash(scalar).serialize_to(bytes.subspan<0, C::Scalar::BYTES>()); 219| 70| } pcurves_secp521r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE14scalar_is_zeroERKNS0_15PrimeOrderCurve6ScalarE: 329| 70| bool scalar_is_zero(const Scalar& s) const override { return from_stash(s).is_zero().as_bool(); } pcurves_secp521r1.cpp:_ZNK5Botan6PCurve19PrimeOrderCurveImplINS0_12_GLOBAL__N_19secp521r15CurveEE13random_scalarERNS_21RandomNumberGeneratorE: 337| 70| Scalar random_scalar(RandomNumberGenerator& rng) const override { return stash(C::Scalar::random(rng)); } _ZN5Botan25require_software_providerINS_31PK_Key_Agreement_Options_ReaderEEEvRKT_NSt3__117basic_string_viewIcNS5_11char_traitsIcEEEE: 87| 272|void require_software_provider(const OptionsT& options, std::string_view algo_name) { 88| 272| if(options.using_provider()) { ------------------ | Branch (88:7): [True: 0, False: 272] ------------------ 89| 0| throw Provider_Not_Found(algo_name, options.provider().value()); 90| 0| } 91| 272|} _ZN5Botan25require_software_providerINS_28PK_Encryption_Options_ReaderEEEvRKT_NSt3__117basic_string_viewIcNS5_11char_traitsIcEEEE: 87| 36|void require_software_provider(const OptionsT& options, std::string_view algo_name) { 88| 36| if(options.using_provider()) { ------------------ | Branch (88:7): [True: 0, False: 36] ------------------ 89| 0| throw Provider_Not_Found(algo_name, options.provider().value()); 90| 0| } 91| 36|} _ZN5Botan25require_software_providerINS_27PK_Signature_Options_ReaderEEEvRKT_NSt3__117basic_string_viewIcNS5_11char_traitsIcEEEE: 87| 569|void require_software_provider(const OptionsT& options, std::string_view algo_name) { 88| 569| if(options.using_provider()) { ------------------ | Branch (88:7): [True: 0, False: 569] ------------------ 89| 0| throw Provider_Not_Found(algo_name, options.provider().value()); 90| 0| } 91| 569|} _ZNK5Botan8Poly130513output_lengthEv: 31| 117| size_t output_length() const override { return 16; } _ZNK5Botan8Poly13058key_specEv: 33| 117| Key_Length_Specification key_spec() const override { return Key_Length_Specification(32); } _ZN5Botan16polyval_multiplyERKNS_9SIMD_4x32ES2_: 140| 3.46k|BOTAN_FORCE_INLINE SIMD_4x32 BOTAN_FN_ISA_CLMUL polyval_multiply(const SIMD_4x32& H, const SIMD_4x32& x) { 141| 3.46k| SIMD_4x32 hi = clmul<0x11>(H, x); 142| 3.46k| const SIMD_4x32 mid = clmul<0x10>(H, x) ^ clmul<0x01>(H, x); 143| 3.46k| SIMD_4x32 lo = clmul<0x00>(H, x); 144| | 145| 3.46k| hi ^= mid.shift_elems_right<2>(); 146| 3.46k| lo ^= mid.shift_elems_left<2>(); 147| | 148| 3.46k| return polyval_reduce(hi, lo); 149| 3.46k|} _ZN5Botan5clmulILi17EEENS_9SIMD_4x32ERKS1_S3_: 21| 9.47k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_CLMUL SIMD_4x32 clmul(const SIMD_4x32& H, const SIMD_4x32& x) { 22| 9.47k| static_assert(M == 0x00 || M == 0x01 || M == 0x10 || M == 0x11, "Valid clmul mode"); 23| | 24| 9.47k|#if defined(BOTAN_SIMD_USE_SSSE3) 25| 9.47k| return SIMD_4x32(_mm_clmulepi64_si128(x.raw(), H.raw(), M)); 26| |#elif defined(BOTAN_SIMD_USE_NEON) 27| | const uint64_t a = vgetq_lane_u64(vreinterpretq_u64_u32(x.raw()), M & 0x01); 28| | const uint64_t b = vgetq_lane_u64(vreinterpretq_u64_u32(H.raw()), (M & 0x10) >> 4); 29| | 30| | #if defined(BOTAN_BUILD_COMPILER_IS_MSVC) 31| | __n64 a1 = {a}, b1 = {b}; 32| | return SIMD_4x32(vmull_p64(a1, b1)); 33| | #else 34| | return SIMD_4x32(reinterpret_cast(vmull_p64(a, b))); 35| | #endif 36| | 37| |#elif defined(BOTAN_SIMD_USE_VSX) 38| | const SIMD_4x32 mask_lo = SIMD_4x32(0, 0, 0xFFFFFFFF, 0xFFFFFFFF); 39| | constexpr uint8_t flip = (std::endian::native == std::endian::big) ? 0x11 : 0x00; 40| | 41| | SIMD_4x32 i1 = x; 42| | SIMD_4x32 i2 = H; 43| | 44| | if constexpr(std::endian::native == std::endian::big) { 45| | i1 = i1.reverse_all_bytes().bswap(); 46| | i2 = i2.reverse_all_bytes().bswap(); 47| | } 48| | 49| | if constexpr(M == (0x11 ^ flip)) { 50| | i1 &= mask_lo; 51| | i2 &= mask_lo; 52| | } else if constexpr(M == (0x10 ^ flip)) { 53| | i1 = i1.shift_elems_left<2>(); 54| | } else if constexpr(M == (0x01 ^ flip)) { 55| | i2 = i2.shift_elems_left<2>(); 56| | } else if constexpr(M == (0x00 ^ flip)) { 57| | i1 = mask_lo.andc(i1); 58| | i2 = mask_lo.andc(i2); 59| | } 60| | 61| | auto i1v = reinterpret_cast<__vector unsigned long long>(i1.raw()); 62| | auto i2v = reinterpret_cast<__vector unsigned long long>(i2.raw()); 63| | 64| | #if BOTAN_COMPILER_HAS_BUILTIN(__builtin_crypto_vpmsumd) 65| | auto rv = __builtin_crypto_vpmsumd(i1v, i2v); 66| | #else 67| | auto rv = __builtin_altivec_crypto_vpmsumd(i1v, i2v); 68| | #endif 69| | 70| | auto z = SIMD_4x32(reinterpret_cast<__vector unsigned int>(rv)); 71| | 72| | if constexpr(std::endian::native == std::endian::big) { 73| | z = z.reverse_all_bytes().bswap(); 74| | } 75| | 76| | return z; 77| |#endif 78| 9.47k|} _ZN5Botan5clmulILi16EEENS_9SIMD_4x32ERKS1_S3_: 21| 3.46k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_CLMUL SIMD_4x32 clmul(const SIMD_4x32& H, const SIMD_4x32& x) { 22| 3.46k| static_assert(M == 0x00 || M == 0x01 || M == 0x10 || M == 0x11, "Valid clmul mode"); 23| | 24| 3.46k|#if defined(BOTAN_SIMD_USE_SSSE3) 25| 3.46k| return SIMD_4x32(_mm_clmulepi64_si128(x.raw(), H.raw(), M)); 26| |#elif defined(BOTAN_SIMD_USE_NEON) 27| | const uint64_t a = vgetq_lane_u64(vreinterpretq_u64_u32(x.raw()), M & 0x01); 28| | const uint64_t b = vgetq_lane_u64(vreinterpretq_u64_u32(H.raw()), (M & 0x10) >> 4); 29| | 30| | #if defined(BOTAN_BUILD_COMPILER_IS_MSVC) 31| | __n64 a1 = {a}, b1 = {b}; 32| | return SIMD_4x32(vmull_p64(a1, b1)); 33| | #else 34| | return SIMD_4x32(reinterpret_cast(vmull_p64(a, b))); 35| | #endif 36| | 37| |#elif defined(BOTAN_SIMD_USE_VSX) 38| | const SIMD_4x32 mask_lo = SIMD_4x32(0, 0, 0xFFFFFFFF, 0xFFFFFFFF); 39| | constexpr uint8_t flip = (std::endian::native == std::endian::big) ? 0x11 : 0x00; 40| | 41| | SIMD_4x32 i1 = x; 42| | SIMD_4x32 i2 = H; 43| | 44| | if constexpr(std::endian::native == std::endian::big) { 45| | i1 = i1.reverse_all_bytes().bswap(); 46| | i2 = i2.reverse_all_bytes().bswap(); 47| | } 48| | 49| | if constexpr(M == (0x11 ^ flip)) { 50| | i1 &= mask_lo; 51| | i2 &= mask_lo; 52| | } else if constexpr(M == (0x10 ^ flip)) { 53| | i1 = i1.shift_elems_left<2>(); 54| | } else if constexpr(M == (0x01 ^ flip)) { 55| | i2 = i2.shift_elems_left<2>(); 56| | } else if constexpr(M == (0x00 ^ flip)) { 57| | i1 = mask_lo.andc(i1); 58| | i2 = mask_lo.andc(i2); 59| | } 60| | 61| | auto i1v = reinterpret_cast<__vector unsigned long long>(i1.raw()); 62| | auto i2v = reinterpret_cast<__vector unsigned long long>(i2.raw()); 63| | 64| | #if BOTAN_COMPILER_HAS_BUILTIN(__builtin_crypto_vpmsumd) 65| | auto rv = __builtin_crypto_vpmsumd(i1v, i2v); 66| | #else 67| | auto rv = __builtin_altivec_crypto_vpmsumd(i1v, i2v); 68| | #endif 69| | 70| | auto z = SIMD_4x32(reinterpret_cast<__vector unsigned int>(rv)); 71| | 72| | if constexpr(std::endian::native == std::endian::big) { 73| | z = z.reverse_all_bytes().bswap(); 74| | } 75| | 76| | return z; 77| |#endif 78| 3.46k|} _ZN5Botan5clmulILi1EEENS_9SIMD_4x32ERKS1_S3_: 21| 3.46k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_CLMUL SIMD_4x32 clmul(const SIMD_4x32& H, const SIMD_4x32& x) { 22| 3.46k| static_assert(M == 0x00 || M == 0x01 || M == 0x10 || M == 0x11, "Valid clmul mode"); 23| | 24| 3.46k|#if defined(BOTAN_SIMD_USE_SSSE3) 25| 3.46k| return SIMD_4x32(_mm_clmulepi64_si128(x.raw(), H.raw(), M)); 26| |#elif defined(BOTAN_SIMD_USE_NEON) 27| | const uint64_t a = vgetq_lane_u64(vreinterpretq_u64_u32(x.raw()), M & 0x01); 28| | const uint64_t b = vgetq_lane_u64(vreinterpretq_u64_u32(H.raw()), (M & 0x10) >> 4); 29| | 30| | #if defined(BOTAN_BUILD_COMPILER_IS_MSVC) 31| | __n64 a1 = {a}, b1 = {b}; 32| | return SIMD_4x32(vmull_p64(a1, b1)); 33| | #else 34| | return SIMD_4x32(reinterpret_cast(vmull_p64(a, b))); 35| | #endif 36| | 37| |#elif defined(BOTAN_SIMD_USE_VSX) 38| | const SIMD_4x32 mask_lo = SIMD_4x32(0, 0, 0xFFFFFFFF, 0xFFFFFFFF); 39| | constexpr uint8_t flip = (std::endian::native == std::endian::big) ? 0x11 : 0x00; 40| | 41| | SIMD_4x32 i1 = x; 42| | SIMD_4x32 i2 = H; 43| | 44| | if constexpr(std::endian::native == std::endian::big) { 45| | i1 = i1.reverse_all_bytes().bswap(); 46| | i2 = i2.reverse_all_bytes().bswap(); 47| | } 48| | 49| | if constexpr(M == (0x11 ^ flip)) { 50| | i1 &= mask_lo; 51| | i2 &= mask_lo; 52| | } else if constexpr(M == (0x10 ^ flip)) { 53| | i1 = i1.shift_elems_left<2>(); 54| | } else if constexpr(M == (0x01 ^ flip)) { 55| | i2 = i2.shift_elems_left<2>(); 56| | } else if constexpr(M == (0x00 ^ flip)) { 57| | i1 = mask_lo.andc(i1); 58| | i2 = mask_lo.andc(i2); 59| | } 60| | 61| | auto i1v = reinterpret_cast<__vector unsigned long long>(i1.raw()); 62| | auto i2v = reinterpret_cast<__vector unsigned long long>(i2.raw()); 63| | 64| | #if BOTAN_COMPILER_HAS_BUILTIN(__builtin_crypto_vpmsumd) 65| | auto rv = __builtin_crypto_vpmsumd(i1v, i2v); 66| | #else 67| | auto rv = __builtin_altivec_crypto_vpmsumd(i1v, i2v); 68| | #endif 69| | 70| | auto z = SIMD_4x32(reinterpret_cast<__vector unsigned int>(rv)); 71| | 72| | if constexpr(std::endian::native == std::endian::big) { 73| | z = z.reverse_all_bytes().bswap(); 74| | } 75| | 76| | return z; 77| |#endif 78| 3.46k|} _ZN5Botan5clmulILi0EEENS_9SIMD_4x32ERKS1_S3_: 21| 23.9k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_CLMUL SIMD_4x32 clmul(const SIMD_4x32& H, const SIMD_4x32& x) { 22| 23.9k| static_assert(M == 0x00 || M == 0x01 || M == 0x10 || M == 0x11, "Valid clmul mode"); 23| | 24| 23.9k|#if defined(BOTAN_SIMD_USE_SSSE3) 25| 23.9k| return SIMD_4x32(_mm_clmulepi64_si128(x.raw(), H.raw(), M)); 26| |#elif defined(BOTAN_SIMD_USE_NEON) 27| | const uint64_t a = vgetq_lane_u64(vreinterpretq_u64_u32(x.raw()), M & 0x01); 28| | const uint64_t b = vgetq_lane_u64(vreinterpretq_u64_u32(H.raw()), (M & 0x10) >> 4); 29| | 30| | #if defined(BOTAN_BUILD_COMPILER_IS_MSVC) 31| | __n64 a1 = {a}, b1 = {b}; 32| | return SIMD_4x32(vmull_p64(a1, b1)); 33| | #else 34| | return SIMD_4x32(reinterpret_cast(vmull_p64(a, b))); 35| | #endif 36| | 37| |#elif defined(BOTAN_SIMD_USE_VSX) 38| | const SIMD_4x32 mask_lo = SIMD_4x32(0, 0, 0xFFFFFFFF, 0xFFFFFFFF); 39| | constexpr uint8_t flip = (std::endian::native == std::endian::big) ? 0x11 : 0x00; 40| | 41| | SIMD_4x32 i1 = x; 42| | SIMD_4x32 i2 = H; 43| | 44| | if constexpr(std::endian::native == std::endian::big) { 45| | i1 = i1.reverse_all_bytes().bswap(); 46| | i2 = i2.reverse_all_bytes().bswap(); 47| | } 48| | 49| | if constexpr(M == (0x11 ^ flip)) { 50| | i1 &= mask_lo; 51| | i2 &= mask_lo; 52| | } else if constexpr(M == (0x10 ^ flip)) { 53| | i1 = i1.shift_elems_left<2>(); 54| | } else if constexpr(M == (0x01 ^ flip)) { 55| | i2 = i2.shift_elems_left<2>(); 56| | } else if constexpr(M == (0x00 ^ flip)) { 57| | i1 = mask_lo.andc(i1); 58| | i2 = mask_lo.andc(i2); 59| | } 60| | 61| | auto i1v = reinterpret_cast<__vector unsigned long long>(i1.raw()); 62| | auto i2v = reinterpret_cast<__vector unsigned long long>(i2.raw()); 63| | 64| | #if BOTAN_COMPILER_HAS_BUILTIN(__builtin_crypto_vpmsumd) 65| | auto rv = __builtin_crypto_vpmsumd(i1v, i2v); 66| | #else 67| | auto rv = __builtin_altivec_crypto_vpmsumd(i1v, i2v); 68| | #endif 69| | 70| | auto z = SIMD_4x32(reinterpret_cast<__vector unsigned int>(rv)); 71| | 72| | if constexpr(std::endian::native == std::endian::big) { 73| | z = z.reverse_all_bytes().bswap(); 74| | } 75| | 76| | return z; 77| |#endif 78| 23.9k|} _ZN5Botan14polyval_reduceERKNS_9SIMD_4x32ES2_: 119| 4.24k|BOTAN_FORCE_INLINE SIMD_4x32 BOTAN_FN_ISA_CLMUL polyval_reduce(const SIMD_4x32& hi, const SIMD_4x32& lo) { 120| 4.24k| const SIMD_4x32 V(0, 0xC2000000, 0, 0); 121| | 122| | /* 123| | Montgomery reduction 124| | Input: 256-bit operand [X3 : X2 : X1 : X0] 125| | [A1 : A0] = X0 * 0xc200000000000000 126| | [B1 : B0] = [X0 + A1 : X1 + A0] 127| | [C1 : C0] = B0 * 0xc200000000000000 128| | [D1 : D0] = [B0 + C1 : B1 + C0] 129| | Output: [D1 + X3 : D0 + X2] 130| | */ 131| | 132| 4.24k| const auto A = clmul<0x00>(lo, V); 133| 4.24k| const auto B = A ^ lo.swap_halves(); 134| 4.24k| const auto C = clmul<0x00>(B, V); 135| 4.24k| const auto D = C ^ B.swap_halves(); 136| | 137| 4.24k| return D ^ hi; 138| 4.24k|} _ZN5Botan12mulx_polyvalERKNS_9SIMD_4x32E: 104| 476|BOTAN_FORCE_INLINE SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 mulx_polyval(const SIMD_4x32& h) { 105| 476| const auto V = SIMD_4x32(0x00000001, 0x00000000, 0x00000000, 0xc2000000); 106| | 107| | // Bitmask set iff the top bit of h is set 108| 476| const auto mask = h.top_bit_mask(); 109| | 110| | // Extract the top bits of the words and move them into place as the low bit of the next word 111| 476| const auto top_bits = h.shr<31>().shift_elems_left<1>(); 112| | 113| | // The main shift, adding back in the top bits that are otherwise lost 114| 476| const auto shifted_h = h.shl<1>() | top_bits; 115| | 116| 476| return shifted_h ^ (mask & V); 117| 476|} _ZN5Botan10load_blockILb1EEENS_9SIMD_4x32EPKh: 87| 9.54k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_SIMD_4X32 SIMD_4x32 load_block(const uint8_t in[]) { 88| 9.54k| if constexpr(BSWAP) { 89| 9.54k| return SIMD_4x32::load_le(in).reverse_all_bytes(); 90| | } else { 91| | return SIMD_4x32::load_le(in); 92| | } 93| 9.54k|} _ZN5Botan11store_blockILb1EEEvRKNS_9SIMD_4x32EPh: 96| 1.74k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_SIMD_4X32 void store_block(const SIMD_4x32& b, uint8_t out[]) { 97| 1.74k| if constexpr(BSWAP) { 98| 1.74k| b.reverse_all_bytes().store_le(out); 99| | } else { 100| | b.store_le(out); 101| | } 102| 1.74k|} _ZN5Botan15prefetch_arraysITkNSt3__117unsigned_integralEKhJLm256ELm256ELm256ELm256EEEET_DpRAT0__S3_: 34| 48|T prefetch_arrays(T (&... arr)[Ns]) noexcept { 35| 48| return (static_cast(prefetch_array_raw(sizeof(T) * Ns, arr)) & ...); 36| 48|} _ZN5Botan15prefetch_arraysITkNSt3__117unsigned_integralEKhJLm256EEEET_DpRAT0__S3_: 34| 67|T prefetch_arrays(T (&... arr)[Ns]) noexcept { 35| 67| return (static_cast(prefetch_array_raw(sizeof(T) * Ns, arr)) & ...); 36| 67|} _ZN5Botan10TLS_12_PRFC2ENSt3__110unique_ptrINS_25MessageAuthenticationCodeENS1_14default_deleteIS3_EEEE: 28| 1.40k| explicit TLS_12_PRF(std::unique_ptr mac) : m_mac(std::move(mac)) {} _ZN5Botan4rotlILm1ETkNSt3__117unsigned_integralEhEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_: 25| 1.60k|{ 26| 1.60k| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 27| 1.60k|} _ZN5Botan4rotlILm7ETkNSt3__117unsigned_integralEhEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_: 25| 804|{ 26| 804| return static_cast((input << ROT) | (input >> (8 * sizeof(T) - ROT))); 27| 804|} _ZN5Botan4rotrILm8ETkNSt3__117unsigned_integralEjEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_: 37| 2.52k|{ 38| 2.52k| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 39| 2.52k|} _ZN5Botan4rotrILm16ETkNSt3__117unsigned_integralEjEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_: 37| 3.30k|{ 38| 3.30k| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 39| 3.30k|} _ZN5Botan4rotrILm24ETkNSt3__117unsigned_integralEjEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_: 37| 2.52k|{ 38| 2.52k| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 39| 2.52k|} _ZN5Botan4rotrILm39ETkNSt3__117unsigned_integralEmEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_: 37| 2.44M|{ 38| 2.44M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 39| 2.44M|} _ZN5Botan4rotrILm34ETkNSt3__117unsigned_integralEmEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_: 37| 2.44M|{ 38| 2.44M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 39| 2.44M|} _ZN5Botan4rotrILm14ETkNSt3__117unsigned_integralEmEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_: 37| 2.44M|{ 38| 2.44M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 39| 2.44M|} _ZN5Botan3rhoILm14ELm18ELm41ETkNSt3__117unsigned_integralEmEET2_S2_: 53| 2.44M|BOTAN_FORCE_INLINE constexpr T rho(T x) { 54| 2.44M| return rotr(x) ^ rotr(x) ^ rotr(x); 55| 2.44M|} _ZN5Botan4rotrILm18ETkNSt3__117unsigned_integralEmEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_: 37| 2.44M|{ 38| 2.44M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 39| 2.44M|} _ZN5Botan4rotrILm41ETkNSt3__117unsigned_integralEmEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_: 37| 2.44M|{ 38| 2.44M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 39| 2.44M|} _ZN5Botan3rhoILm28ELm34ELm39ETkNSt3__117unsigned_integralEmEET2_S2_: 53| 2.44M|BOTAN_FORCE_INLINE constexpr T rho(T x) { 54| 2.44M| return rotr(x) ^ rotr(x) ^ rotr(x); 55| 2.44M|} _ZN5Botan4rotrILm28ETkNSt3__117unsigned_integralEmEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_: 37| 2.44M|{ 38| 2.44M| return static_cast((input >> ROT) | (input << (8 * sizeof(T) - ROT))); 39| 2.44M|} _ZN5Botan14scoped_cleanupIZNS_2CT13scoped_poisonIJNSt3__16vectorIhNS_16secure_allocatorIhEEEEEQaaaagtsZT_Li0Efraa10poisonableIT_Efraa12unpoisonableIS8_EEEDaDpRKS8_EUlvE_EC2ESC_: 26| 1| explicit scoped_cleanup(FunT cleanup) : m_cleanup(std::move(cleanup)) {} _ZN5Botan14scoped_cleanupIZNS_2CT13scoped_poisonIJNSt3__16vectorIhNS_16secure_allocatorIhEEEEEQaaaagtsZT_Li0Efraa10poisonableIT_Efraa12unpoisonableIS8_EEEDaDpRKS8_EUlvE_EC2EOSD_: 32| 1| scoped_cleanup(scoped_cleanup&& other) noexcept : m_cleanup(std::move(other.m_cleanup)) { other.disengage(); } _ZN5Botan14scoped_cleanupIZNS_2CT13scoped_poisonIJNSt3__16vectorIhNS_16secure_allocatorIhEEEEEQaaaagtsZT_Li0Efraa10poisonableIT_Efraa12unpoisonableIS8_EEEDaDpRKS8_EUlvE_E9disengageEv: 43| 1| void disengage() noexcept { m_cleanup.reset(); } _ZN5Botan14scoped_cleanupIZNS_2CT13scoped_poisonIJNSt3__16vectorIhNS_16secure_allocatorIhEEEEEQaaaagtsZT_Li0Efraa10poisonableIT_Efraa12unpoisonableIS8_EEEDaDpRKS8_EUlvE_ED2Ev: 34| 2| ~scoped_cleanup() { 35| 2| if(m_cleanup.has_value()) { ------------------ | Branch (35:13): [True: 1, False: 1] ------------------ 36| 1| (*m_cleanup)(); // NOLINT(bugprone-exception-escape) clang-tidy bug 37| 1| } 38| 2| } _ZNK5Botan5SHA_14nameEv: 32| 231| std::string name() const override { return "SHA-1"; } _ZNK5Botan5SHA_113output_lengthEv: 34| 21.1k| size_t output_length() const override { return 20; } _ZNK5Botan5SHA_115hash_block_sizeEv: 36| 184| size_t hash_block_size() const override { return block_bytes; } _ZN5Botan5SHA_15clearEv: 47| 184| void clear() override { m_md.clear(); } _ZNK5Botan7SHA_2564nameEv: 73| 74| std::string name() const override { return "SHA-256"; } _ZNK5Botan7SHA_25613output_lengthEv: 75| 41.7k| size_t output_length() const override { return output_bytes; } _ZNK5Botan7SHA_25615hash_block_sizeEv: 77| 755| size_t hash_block_size() const override { return block_bytes; } _ZN5Botan7SHA_2565clearEv: 83| 1.10k| void clear() override { m_md.clear(); } _ZNK5Botan7SHA_3844nameEv: 32| 58| std::string name() const override { return "SHA-384"; } _ZNK5Botan7SHA_38413output_lengthEv: 34| 13.5k| size_t output_length() const override { return output_bytes; } _ZNK5Botan7SHA_38415hash_block_sizeEv: 36| 741| size_t hash_block_size() const override { return block_bytes; } _ZN5Botan7SHA_3845clearEv: 44| 1.09k| void clear() override { m_md.clear(); } _ZNK5Botan7SHA_5124nameEv: 72| 528| std::string name() const override { return "SHA-512"; } _ZNK5Botan7SHA_51213output_lengthEv: 74| 915| size_t output_length() const override { return output_bytes; } _ZN5Botan9SHA2_64_FEmmmRmmmmS0_m: 64| 2.44M| uint64_t A, uint64_t B, uint64_t C, uint64_t& D, uint64_t E, uint64_t F, uint64_t G, uint64_t& H, uint64_t M) { 65| 2.44M| H += rho<14, 18, 41>(E) + choose(E, F, G) + M; 66| 2.44M| D += H; 67| 2.44M| H += rho<28, 34, 39>(A) + majority(A, B, C); 68| 2.44M|} _ZN5Botan22SignaturePaddingSchemeD2Ev: 28| 569| virtual ~SignaturePaddingScheme() = default; _ZN5Botan9SIMD_2x64C2Ev: 61| 128k| m_simd(_mm_setzero_si128()) 62| |#elif defined(BOTAN_SIMD_USE_NEON) 63| | m_simd(vdupq_n_u64(0)) 64| |#elif defined(BOTAN_SIMD_USE_SIMD128) 65| | m_simd(wasm_u64x2_const_splat(0)) 66| |#elif defined(BOTAN_SIMD_USE_VSX) 67| | m_simd(vec_splats(static_cast(0))) 68| |#endif 69| 128k| { 70| 128k| } _ZN5Botan9SIMD_2x647load_beEPKv: 132| 128k| static SIMD_2x64 BOTAN_FN_ISA_SIMD_2X64 load_be(const void* in) { 133| | if constexpr(std::endian::native == std::endian::big) { 134| | return SIMD_2x64::load_native(in); 135| 128k| } else { 136| 128k| return SIMD_2x64::load_native(in).bswap(); 137| 128k| } 138| 128k| } _ZN5Botan9SIMD_2x6411load_nativeEPKv: 112| 770k| static SIMD_2x64 BOTAN_FN_ISA_SIMD_2X64 load_native(const void* in) { 113| 770k|#if defined(BOTAN_SIMD_USE_SSSE3) 114| 770k| return SIMD_2x64(_mm_loadu_si128(reinterpret_cast(in))); 115| |#elif defined(BOTAN_SIMD_USE_NEON) 116| | return SIMD_2x64(vld1q_u64(static_cast(in))); 117| |#elif defined(BOTAN_SIMD_USE_SIMD128) 118| | return SIMD_2x64(wasm_v128_load(in)); 119| |#elif defined(BOTAN_SIMD_USE_VSX) 120| | return SIMD_2x64(reinterpret_cast(vec_xl(0, static_cast(in)))); 121| |#endif 122| 770k| } _ZN5Botan9SIMD_2x64C2EDv2_x: 507| 5.00M| explicit BOTAN_FN_ISA_SIMD_2X64 SIMD_2x64(native_simd_type x) : m_simd(x) {} _ZNK5Botan9SIMD_2x645bswapEv: 148| 128k| SIMD_2x64 BOTAN_FN_ISA_SIMD_2X64 bswap() const { 149| 128k|#if defined(BOTAN_SIMD_USE_SSSE3) 150| 128k| const auto idx = _mm_set_epi8(8, 9, 10, 11, 12, 13, 14, 15, 0, 1, 2, 3, 4, 5, 6, 7); 151| 128k| return SIMD_2x64(_mm_shuffle_epi8(m_simd, idx)); 152| |#elif defined(BOTAN_SIMD_USE_NEON) 153| | return SIMD_2x64(vreinterpretq_u64_u8(vrev64q_u8(vreinterpretq_u8_u64(m_simd)))); 154| |#elif defined(BOTAN_SIMD_USE_SIMD128) 155| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 7, 6, 5, 4, 3, 2, 1, 0, 15, 14, 13, 12, 11, 10, 9, 8)); 156| |#elif defined(BOTAN_SIMD_USE_VSX) 157| | return SIMD_2x64(vec_revb(m_simd)); 158| |#endif 159| 128k| } _ZNK5Botan9SIMD_2x64plERKS0_: 224| 2.18M| SIMD_2x64 BOTAN_FN_ISA_SIMD_2X64 operator+(const SIMD_2x64& other) const { 225| 2.18M| SIMD_2x64 retval(*this); 226| 2.18M| retval += other; 227| 2.18M| return retval; 228| 2.18M| } _ZN5Botan9SIMD_2x64pLERKS0_: 254| 2.18M| void BOTAN_FN_ISA_SIMD_2X64 operator+=(const SIMD_2x64& other) { 255| 2.18M|#if defined(BOTAN_SIMD_USE_SSSE3) 256| 2.18M| m_simd = _mm_add_epi64(m_simd, other.m_simd); 257| |#elif defined(BOTAN_SIMD_USE_NEON) 258| | m_simd = vaddq_u64(m_simd, other.m_simd); 259| |#elif defined(BOTAN_SIMD_USE_SIMD128) 260| | m_simd = wasm_i64x2_add(m_simd, other.m_simd); 261| |#elif defined(BOTAN_SIMD_USE_VSX) 262| | m_simd = vec_add(m_simd, other.m_simd); 263| |#endif 264| 2.18M| } _ZN5Botan9SIMD_2x647load_leEPKv: 124| 641k| static SIMD_2x64 BOTAN_FN_ISA_SIMD_2X64 load_le(const void* in) { 125| 641k| if constexpr(std::endian::native == std::endian::little) { 126| 641k| return SIMD_2x64::load_native(in); 127| | } else { 128| | return SIMD_2x64::load_native(in).bswap(); 129| | } 130| 641k| } _ZNK5Botan9SIMD_2x648store_leEPm: 200| 641k| void BOTAN_FN_ISA_SIMD_2X64 store_le(uint64_t out[2]) const { this->store_le(reinterpret_cast(out)); } _ZNK5Botan9SIMD_2x648store_leEPh: 202| 641k| void BOTAN_FN_ISA_SIMD_2X64 store_le(uint8_t out[]) const { 203| 641k| if constexpr(std::endian::native == std::endian::little) { 204| 641k| this->store_native(out); 205| | } else { 206| | this->bswap().store_native(out); 207| | } 208| 641k| } _ZNK5Botan9SIMD_2x6412store_nativeEPv: 188| 641k| void BOTAN_FN_ISA_SIMD_2X64 store_native(void* out) const { 189| 641k|#if defined(BOTAN_SIMD_USE_SSSE3) 190| 641k| _mm_storeu_si128(static_cast<__m128i*>(out), m_simd); 191| |#elif defined(BOTAN_SIMD_USE_NEON) 192| | vst1q_u64(static_cast(out), m_simd); 193| |#elif defined(BOTAN_SIMD_USE_SIMD128) 194| | wasm_v128_store(out, m_simd); 195| |#elif defined(BOTAN_SIMD_USE_VSX) 196| | vec_xst(reinterpret_cast<__vector unsigned char>(m_simd), 0, static_cast(out)); 197| |#endif 198| 641k| } _ZN5Botan9SIMD_2x647alignr8ERKS0_S2_: 401| 1.02M| static SIMD_2x64 BOTAN_FN_ISA_SIMD_2X64 alignr8(const SIMD_2x64& a, const SIMD_2x64& b) { 402| 1.02M|#if defined(BOTAN_SIMD_USE_SSSE3) 403| 1.02M| return SIMD_2x64(_mm_alignr_epi8(a.m_simd, b.m_simd, 8)); 404| |#elif defined(BOTAN_SIMD_USE_NEON) 405| | return SIMD_2x64(vextq_u64(b.m_simd, a.m_simd, 1)); 406| |#elif defined(BOTAN_SIMD_USE_SIMD128) 407| | return SIMD_2x64( 408| | wasm_i8x16_shuffle(b.m_simd, a.m_simd, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23)); 409| |#elif defined(BOTAN_SIMD_USE_VSX) 410| | const __vector unsigned char mask = {8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23}; 411| | return SIMD_2x64(vec_perm(b.m_simd, a.m_simd, mask)); 412| |#endif 413| 1.02M| } _ZNK5Botan9SIMD_2x644rotrILm1EEES0_vQaagtT_Li0EltT_Li64E: 296| 513k| { 297| 513k|#if defined(BOTAN_SIMD_USE_SSSE3) 298| | if constexpr(ROT == 8) { 299| | const auto tab = _mm_setr_epi8(1, 2, 3, 4, 5, 6, 7, 0, 9, 10, 11, 12, 13, 14, 15, 8); 300| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 301| | } else if constexpr(ROT == 16) { 302| | const auto tab = _mm_setr_epi8(2, 3, 4, 5, 6, 7, 0, 1, 10, 11, 12, 13, 14, 15, 8, 9); 303| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 304| | } else if constexpr(ROT == 24) { 305| | const auto tab = _mm_setr_epi8(3, 4, 5, 6, 7, 0, 1, 2, 11, 12, 13, 14, 15, 8, 9, 10); 306| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 307| | } else if constexpr(ROT == 32) { 308| | const auto tab = _mm_setr_epi8(4, 5, 6, 7, 0, 1, 2, 3, 12, 13, 14, 15, 8, 9, 10, 11); 309| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 310| 513k| } else { 311| 513k| return SIMD_2x64(_mm_or_si128(_mm_srli_epi64(m_simd, static_cast(ROT)), 312| 513k| _mm_slli_epi64(m_simd, static_cast(64 - ROT)))); 313| 513k| } 314| |#elif defined(BOTAN_SIMD_USE_NEON) 315| | return SIMD_2x64(vsriq_n_u64(vshlq_n_u64(m_simd, 64 - ROT), m_simd, ROT)); 316| |#elif defined(BOTAN_SIMD_USE_SIMD128) 317| | if constexpr(ROT == 8) { 318| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 1, 2, 3, 4, 5, 6, 7, 0, 9, 10, 11, 12, 13, 14, 15, 8)); 319| | } else if constexpr(ROT == 16) { 320| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 2, 3, 4, 5, 6, 7, 0, 1, 10, 11, 12, 13, 14, 15, 8, 9)); 321| | } else if constexpr(ROT == 24) { 322| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 3, 4, 5, 6, 7, 0, 1, 2, 11, 12, 13, 14, 15, 8, 9, 10)); 323| | } else if constexpr(ROT == 32) { 324| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 4, 5, 6, 7, 0, 1, 2, 3, 12, 13, 14, 15, 8, 9, 10, 11)); 325| | } else { 326| | return SIMD_2x64(wasm_v128_or(wasm_u64x2_shr(m_simd, ROT), wasm_i64x2_shl(m_simd, 64 - ROT))); 327| | } 328| |#elif defined(BOTAN_SIMD_USE_VSX) && defined(__clang__) 329| | // Clang only declares the 64-bit vec_rl if POWER8 is enabled for the whole TU 330| | using s64x2 = __vector signed long long; 331| | const auto rot = vec_splats(static_cast(64 - ROT)); 332| | const auto r = __builtin_altivec_vrld(reinterpret_cast(m_simd), rot); 333| | return SIMD_2x64(reinterpret_cast(r)); 334| |#elif defined(BOTAN_SIMD_USE_VSX) 335| | return SIMD_2x64(vec_rl(m_simd, vec_splats(static_cast(64 - ROT)))); 336| |#endif 337| 513k| } _ZNK5Botan9SIMD_2x64eoERKS0_: 230| 2.05M| SIMD_2x64 BOTAN_FN_ISA_SIMD_2X64 operator^(const SIMD_2x64& other) const { 231| 2.05M| SIMD_2x64 retval(*this); 232| 2.05M| retval ^= other; 233| 2.05M| return retval; 234| 2.05M| } _ZN5Botan9SIMD_2x64eOERKS0_: 266| 2.05M| void BOTAN_FN_ISA_SIMD_2X64 operator^=(const SIMD_2x64& other) { 267| 2.05M|#if defined(BOTAN_SIMD_USE_SSSE3) 268| 2.05M| m_simd = _mm_xor_si128(m_simd, other.m_simd); 269| |#elif defined(BOTAN_SIMD_USE_NEON) 270| | m_simd = veorq_u64(m_simd, other.m_simd); 271| |#elif defined(BOTAN_SIMD_USE_SIMD128) 272| | m_simd = wasm_v128_xor(m_simd, other.m_simd); 273| |#elif defined(BOTAN_SIMD_USE_VSX) 274| | m_simd = vec_xor(m_simd, other.m_simd); 275| |#endif 276| 2.05M| } _ZNK5Botan9SIMD_2x644rotrILm8EEES0_vQaagtT_Li0EltT_Li64E: 296| 513k| { 297| 513k|#if defined(BOTAN_SIMD_USE_SSSE3) 298| 513k| if constexpr(ROT == 8) { 299| 513k| const auto tab = _mm_setr_epi8(1, 2, 3, 4, 5, 6, 7, 0, 9, 10, 11, 12, 13, 14, 15, 8); 300| 513k| return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 301| | } else if constexpr(ROT == 16) { 302| | const auto tab = _mm_setr_epi8(2, 3, 4, 5, 6, 7, 0, 1, 10, 11, 12, 13, 14, 15, 8, 9); 303| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 304| | } else if constexpr(ROT == 24) { 305| | const auto tab = _mm_setr_epi8(3, 4, 5, 6, 7, 0, 1, 2, 11, 12, 13, 14, 15, 8, 9, 10); 306| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 307| | } else if constexpr(ROT == 32) { 308| | const auto tab = _mm_setr_epi8(4, 5, 6, 7, 0, 1, 2, 3, 12, 13, 14, 15, 8, 9, 10, 11); 309| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 310| | } else { 311| | return SIMD_2x64(_mm_or_si128(_mm_srli_epi64(m_simd, static_cast(ROT)), 312| | _mm_slli_epi64(m_simd, static_cast(64 - ROT)))); 313| | } 314| |#elif defined(BOTAN_SIMD_USE_NEON) 315| | return SIMD_2x64(vsriq_n_u64(vshlq_n_u64(m_simd, 64 - ROT), m_simd, ROT)); 316| |#elif defined(BOTAN_SIMD_USE_SIMD128) 317| | if constexpr(ROT == 8) { 318| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 1, 2, 3, 4, 5, 6, 7, 0, 9, 10, 11, 12, 13, 14, 15, 8)); 319| | } else if constexpr(ROT == 16) { 320| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 2, 3, 4, 5, 6, 7, 0, 1, 10, 11, 12, 13, 14, 15, 8, 9)); 321| | } else if constexpr(ROT == 24) { 322| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 3, 4, 5, 6, 7, 0, 1, 2, 11, 12, 13, 14, 15, 8, 9, 10)); 323| | } else if constexpr(ROT == 32) { 324| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 4, 5, 6, 7, 0, 1, 2, 3, 12, 13, 14, 15, 8, 9, 10, 11)); 325| | } else { 326| | return SIMD_2x64(wasm_v128_or(wasm_u64x2_shr(m_simd, ROT), wasm_i64x2_shl(m_simd, 64 - ROT))); 327| | } 328| |#elif defined(BOTAN_SIMD_USE_VSX) && defined(__clang__) 329| | // Clang only declares the 64-bit vec_rl if POWER8 is enabled for the whole TU 330| | using s64x2 = __vector signed long long; 331| | const auto rot = vec_splats(static_cast(64 - ROT)); 332| | const auto r = __builtin_altivec_vrld(reinterpret_cast(m_simd), rot); 333| | return SIMD_2x64(reinterpret_cast(r)); 334| |#elif defined(BOTAN_SIMD_USE_VSX) 335| | return SIMD_2x64(vec_rl(m_simd, vec_splats(static_cast(64 - ROT)))); 336| |#endif 337| 513k| } _ZNK5Botan9SIMD_2x643shrILi7EEES0_v: 376| 513k| SIMD_2x64 BOTAN_FN_ISA_SIMD_2X64 shr() const noexcept { 377| 513k|#if defined(BOTAN_SIMD_USE_SSSE3) 378| 513k| return SIMD_2x64(_mm_srli_epi64(m_simd, SHIFT)); 379| |#elif defined(BOTAN_SIMD_USE_NEON) 380| | return SIMD_2x64(vshrq_n_u64(m_simd, SHIFT)); 381| |#elif defined(BOTAN_SIMD_USE_SIMD128) 382| | return SIMD_2x64(wasm_u64x2_shr(m_simd, SHIFT)); 383| |#elif defined(BOTAN_SIMD_USE_VSX) 384| | return SIMD_2x64(vec_sr(m_simd, vec_splats(static_cast(SHIFT)))); 385| |#endif 386| 513k| } _ZNK5Botan9SIMD_2x644rotrILm19EEES0_vQaagtT_Li0EltT_Li64E: 296| 513k| { 297| 513k|#if defined(BOTAN_SIMD_USE_SSSE3) 298| | if constexpr(ROT == 8) { 299| | const auto tab = _mm_setr_epi8(1, 2, 3, 4, 5, 6, 7, 0, 9, 10, 11, 12, 13, 14, 15, 8); 300| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 301| | } else if constexpr(ROT == 16) { 302| | const auto tab = _mm_setr_epi8(2, 3, 4, 5, 6, 7, 0, 1, 10, 11, 12, 13, 14, 15, 8, 9); 303| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 304| | } else if constexpr(ROT == 24) { 305| | const auto tab = _mm_setr_epi8(3, 4, 5, 6, 7, 0, 1, 2, 11, 12, 13, 14, 15, 8, 9, 10); 306| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 307| | } else if constexpr(ROT == 32) { 308| | const auto tab = _mm_setr_epi8(4, 5, 6, 7, 0, 1, 2, 3, 12, 13, 14, 15, 8, 9, 10, 11); 309| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 310| 513k| } else { 311| 513k| return SIMD_2x64(_mm_or_si128(_mm_srli_epi64(m_simd, static_cast(ROT)), 312| 513k| _mm_slli_epi64(m_simd, static_cast(64 - ROT)))); 313| 513k| } 314| |#elif defined(BOTAN_SIMD_USE_NEON) 315| | return SIMD_2x64(vsriq_n_u64(vshlq_n_u64(m_simd, 64 - ROT), m_simd, ROT)); 316| |#elif defined(BOTAN_SIMD_USE_SIMD128) 317| | if constexpr(ROT == 8) { 318| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 1, 2, 3, 4, 5, 6, 7, 0, 9, 10, 11, 12, 13, 14, 15, 8)); 319| | } else if constexpr(ROT == 16) { 320| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 2, 3, 4, 5, 6, 7, 0, 1, 10, 11, 12, 13, 14, 15, 8, 9)); 321| | } else if constexpr(ROT == 24) { 322| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 3, 4, 5, 6, 7, 0, 1, 2, 11, 12, 13, 14, 15, 8, 9, 10)); 323| | } else if constexpr(ROT == 32) { 324| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 4, 5, 6, 7, 0, 1, 2, 3, 12, 13, 14, 15, 8, 9, 10, 11)); 325| | } else { 326| | return SIMD_2x64(wasm_v128_or(wasm_u64x2_shr(m_simd, ROT), wasm_i64x2_shl(m_simd, 64 - ROT))); 327| | } 328| |#elif defined(BOTAN_SIMD_USE_VSX) && defined(__clang__) 329| | // Clang only declares the 64-bit vec_rl if POWER8 is enabled for the whole TU 330| | using s64x2 = __vector signed long long; 331| | const auto rot = vec_splats(static_cast(64 - ROT)); 332| | const auto r = __builtin_altivec_vrld(reinterpret_cast(m_simd), rot); 333| | return SIMD_2x64(reinterpret_cast(r)); 334| |#elif defined(BOTAN_SIMD_USE_VSX) 335| | return SIMD_2x64(vec_rl(m_simd, vec_splats(static_cast(64 - ROT)))); 336| |#endif 337| 513k| } _ZNK5Botan9SIMD_2x644rotrILm61EEES0_vQaagtT_Li0EltT_Li64E: 296| 513k| { 297| 513k|#if defined(BOTAN_SIMD_USE_SSSE3) 298| | if constexpr(ROT == 8) { 299| | const auto tab = _mm_setr_epi8(1, 2, 3, 4, 5, 6, 7, 0, 9, 10, 11, 12, 13, 14, 15, 8); 300| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 301| | } else if constexpr(ROT == 16) { 302| | const auto tab = _mm_setr_epi8(2, 3, 4, 5, 6, 7, 0, 1, 10, 11, 12, 13, 14, 15, 8, 9); 303| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 304| | } else if constexpr(ROT == 24) { 305| | const auto tab = _mm_setr_epi8(3, 4, 5, 6, 7, 0, 1, 2, 11, 12, 13, 14, 15, 8, 9, 10); 306| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 307| | } else if constexpr(ROT == 32) { 308| | const auto tab = _mm_setr_epi8(4, 5, 6, 7, 0, 1, 2, 3, 12, 13, 14, 15, 8, 9, 10, 11); 309| | return SIMD_2x64(_mm_shuffle_epi8(m_simd, tab)); 310| 513k| } else { 311| 513k| return SIMD_2x64(_mm_or_si128(_mm_srli_epi64(m_simd, static_cast(ROT)), 312| 513k| _mm_slli_epi64(m_simd, static_cast(64 - ROT)))); 313| 513k| } 314| |#elif defined(BOTAN_SIMD_USE_NEON) 315| | return SIMD_2x64(vsriq_n_u64(vshlq_n_u64(m_simd, 64 - ROT), m_simd, ROT)); 316| |#elif defined(BOTAN_SIMD_USE_SIMD128) 317| | if constexpr(ROT == 8) { 318| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 1, 2, 3, 4, 5, 6, 7, 0, 9, 10, 11, 12, 13, 14, 15, 8)); 319| | } else if constexpr(ROT == 16) { 320| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 2, 3, 4, 5, 6, 7, 0, 1, 10, 11, 12, 13, 14, 15, 8, 9)); 321| | } else if constexpr(ROT == 24) { 322| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 3, 4, 5, 6, 7, 0, 1, 2, 11, 12, 13, 14, 15, 8, 9, 10)); 323| | } else if constexpr(ROT == 32) { 324| | return SIMD_2x64(wasm_i8x16_shuffle(m_simd, m_simd, 4, 5, 6, 7, 0, 1, 2, 3, 12, 13, 14, 15, 8, 9, 10, 11)); 325| | } else { 326| | return SIMD_2x64(wasm_v128_or(wasm_u64x2_shr(m_simd, ROT), wasm_i64x2_shl(m_simd, 64 - ROT))); 327| | } 328| |#elif defined(BOTAN_SIMD_USE_VSX) && defined(__clang__) 329| | // Clang only declares the 64-bit vec_rl if POWER8 is enabled for the whole TU 330| | using s64x2 = __vector signed long long; 331| | const auto rot = vec_splats(static_cast(64 - ROT)); 332| | const auto r = __builtin_altivec_vrld(reinterpret_cast(m_simd), rot); 333| | return SIMD_2x64(reinterpret_cast(r)); 334| |#elif defined(BOTAN_SIMD_USE_VSX) 335| | return SIMD_2x64(vec_rl(m_simd, vec_splats(static_cast(64 - ROT)))); 336| |#endif 337| 513k| } _ZNK5Botan9SIMD_2x643shrILi6EEES0_v: 376| 513k| SIMD_2x64 BOTAN_FN_ISA_SIMD_2X64 shr() const noexcept { 377| 513k|#if defined(BOTAN_SIMD_USE_SSSE3) 378| 513k| return SIMD_2x64(_mm_srli_epi64(m_simd, SHIFT)); 379| |#elif defined(BOTAN_SIMD_USE_NEON) 380| | return SIMD_2x64(vshrq_n_u64(m_simd, SHIFT)); 381| |#elif defined(BOTAN_SIMD_USE_SIMD128) 382| | return SIMD_2x64(wasm_u64x2_shr(m_simd, SHIFT)); 383| |#elif defined(BOTAN_SIMD_USE_VSX) 384| | return SIMD_2x64(vec_sr(m_simd, vec_splats(static_cast(SHIFT)))); 385| |#endif 386| 513k| } _ZN5Botan9SIMD_4x32C2Ev: 82| 4.33k| BOTAN_FN_ISA_SIMD_4X32 SIMD_4x32() noexcept { 83| 4.33k|#if defined(BOTAN_SIMD_USE_SSSE3) 84| 4.33k| m_simd = _mm_setzero_si128(); 85| |#elif defined(BOTAN_SIMD_USE_VSX) 86| | m_simd = vec_splat_u32(0); 87| |#elif defined(BOTAN_SIMD_USE_NEON) 88| | m_simd = vdupq_n_u32(0); 89| |#elif defined(BOTAN_SIMD_USE_LSX) 90| | m_simd = __lsx_vldi(0); 91| |#elif defined(BOTAN_SIMD_USE_SIMD128) 92| | m_simd = wasm_u32x4_const_splat(0); 93| |#endif 94| 4.33k| } _ZN5Botan9SIMD_4x3212byte_shuffleERKS0_S2_: 796| 942k| static inline SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 byte_shuffle(const SIMD_4x32& tbl, const SIMD_4x32& idx) { 797| 942k|#if defined(BOTAN_SIMD_USE_SSSE3) 798| 942k| return SIMD_4x32(_mm_shuffle_epi8(tbl.raw(), idx.raw())); 799| |#elif defined(BOTAN_SIMD_USE_NEON) 800| | const uint8x16_t tbl8 = vreinterpretq_u8_u32(tbl.raw()); 801| | const uint8x16_t idx8 = vreinterpretq_u8_u32(idx.raw()); 802| | 803| | #if defined(BOTAN_TARGET_ARCH_IS_ARM32) 804| | const uint8x8x2_t tbl2 = {vget_low_u8(tbl8), vget_high_u8(tbl8)}; 805| | 806| | return SIMD_4x32( 807| | vreinterpretq_u32_u8(vcombine_u8(vtbl2_u8(tbl2, vget_low_u8(idx8)), vtbl2_u8(tbl2, vget_high_u8(idx8))))); 808| | #else 809| | return SIMD_4x32(vreinterpretq_u32_u8(vqtbl1q_u8(tbl8, idx8))); 810| | #endif 811| | 812| |#elif defined(BOTAN_SIMD_USE_VSX) 813| | if constexpr(std::endian::native == std::endian::big) { 814| | // vec_perm numbers the bytes in big-endian order 815| | return SIMD_4x32::altivec_perm(tbl.bswap(), idx.bswap()).bswap(); 816| | } else { 817| | return SIMD_4x32::altivec_perm(tbl, idx); 818| | } 819| |#elif defined(BOTAN_SIMD_USE_LSX) 820| | return SIMD_4x32(__lsx_vshuf_b(tbl.raw(), tbl.raw(), idx.raw())); 821| |#elif defined(BOTAN_SIMD_USE_SIMD128) 822| | return SIMD_4x32(wasm_i8x16_swizzle(tbl.raw(), idx.raw())); 823| |#endif 824| 942k| } _ZNK5Botan9SIMD_4x323rawEv: 964| 30.4M| native_simd_type BOTAN_FN_ISA_SIMD_4X32 raw() const noexcept { return m_simd; } _ZN5Botan9SIMD_4x32C2EDv2_x: 966| 18.0M| explicit BOTAN_FN_ISA_SIMD_4X32 SIMD_4x32(native_simd_type x) noexcept : m_simd(x) {} _ZN5Botan9SIMD_4x327load_leEPKv: 183| 1.70M| static SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 load_le(const void* in) noexcept { 184| 1.70M| if constexpr(std::endian::native == std::endian::little) { 185| 1.70M| return SIMD_4x32::load_native(in); 186| | } else { 187| | return SIMD_4x32::load_native(in).bswap(); 188| | } 189| 1.70M| } _ZN5Botan9SIMD_4x3211load_nativeEPKv: 166| 2.30M| static SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 load_native(const void* in) noexcept { 167| 2.30M|#if defined(BOTAN_SIMD_USE_SSSE3) 168| 2.30M| return SIMD_4x32(_mm_loadu_si128(reinterpret_cast(in))); 169| |#elif defined(BOTAN_SIMD_USE_VSX) 170| | return SIMD_4x32(reinterpret_cast(vec_xl(0, static_cast(in)))); 171| |#elif defined(BOTAN_SIMD_USE_NEON) 172| | return SIMD_4x32(vld1q_u32(static_cast(in))); 173| |#elif defined(BOTAN_SIMD_USE_LSX) 174| | return SIMD_4x32(__lsx_vld(in, 0)); 175| |#elif defined(BOTAN_SIMD_USE_SIMD128) 176| | return SIMD_4x32(wasm_v128_load(in)); 177| |#endif 178| 2.30M| } _ZN5Botan9SIMD_4x32C2Ejjjj: 99| 1.13M| BOTAN_FN_ISA_SIMD_4X32 SIMD_4x32(uint32_t B0, uint32_t B1, uint32_t B2, uint32_t B3) noexcept { 100| 1.13M|#if defined(BOTAN_SIMD_USE_SSSE3) 101| 1.13M| m_simd = _mm_set_epi32(B3, B2, B1, B0); 102| |#elif defined(BOTAN_SIMD_USE_VSX) 103| | __vector unsigned int val = {B0, B1, B2, B3}; 104| | m_simd = val; 105| |#elif defined(BOTAN_SIMD_USE_NEON) 106| | // Better way to do this? 107| | const uint32_t B[4] = {B0, B1, B2, B3}; 108| | m_simd = vld1q_u32(B); 109| |#elif defined(BOTAN_SIMD_USE_LSX) 110| | // Better way to do this? 111| | const uint32_t B[4] = {B0, B1, B2, B3}; 112| | m_simd = __lsx_vld(B, 0); 113| |#elif defined(BOTAN_SIMD_USE_SIMD128) 114| | m_simd = wasm_u32x4_make(B0, B1, B2, B3); 115| |#endif 116| 1.13M| } _ZN5Botan9SIMD_4x3210byte_blendERKS0_S2_S2_: 755| 127k| const SIMD_4x32& b) noexcept { 756| | // TODO(SSE4.1) could use _mm_blendv_epi8 here 757| 127k| return SIMD_4x32::choose(mask, a, b); 758| 127k| } _ZN5Botan9SIMD_4x326chooseERKS0_S2_S2_: 732| 127k| const SIMD_4x32& b) noexcept { 733| |#if defined(BOTAN_SIMD_USE_VSX) 734| | return SIMD_4x32(vec_sel(b.raw(), a.raw(), mask.raw())); 735| |#elif defined(BOTAN_SIMD_USE_NEON) 736| | return SIMD_4x32(vbslq_u32(mask.raw(), a.raw(), b.raw())); 737| |#elif defined(BOTAN_SIMD_USE_LSX) 738| | return SIMD_4x32(__lsx_vbitsel_v(b.raw(), a.raw(), mask.raw())); 739| |#elif defined(BOTAN_SIMD_USE_SIMD128) 740| | return SIMD_4x32(wasm_v128_bitselect(a.raw(), b.raw(), mask.raw())); 741| |#else 742| 127k| return (mask & a) ^ mask.andc(b); 743| 127k|#endif 744| 127k| } _ZNK5Botan9SIMD_4x32anERKS0_: 388| 573k| SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 operator&(const SIMD_4x32& other) const noexcept { 389| 573k| SIMD_4x32 retval(*this); 390| 573k| retval &= other; 391| 573k| return retval; 392| 573k| } _ZN5Botan9SIMD_4x32aNERKS0_: 452| 573k| void BOTAN_FN_ISA_SIMD_4X32 operator&=(const SIMD_4x32& other) noexcept { 453| 573k|#if defined(BOTAN_SIMD_USE_SSSE3) 454| 573k| m_simd = _mm_and_si128(m_simd, other.m_simd); 455| |#elif defined(BOTAN_SIMD_USE_VSX) 456| | m_simd = vec_and(m_simd, other.m_simd); 457| |#elif defined(BOTAN_SIMD_USE_NEON) 458| | m_simd = vandq_u32(m_simd, other.m_simd); 459| |#elif defined(BOTAN_SIMD_USE_LSX) 460| | m_simd = __lsx_vand_v(m_simd, other.m_simd); 461| |#elif defined(BOTAN_SIMD_USE_SIMD128) 462| | m_simd = wasm_v128_and(m_simd, other.m_simd); 463| |#endif 464| 573k| } _ZNK5Botan9SIMD_4x32eoERKS0_: 370| 730k| SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 operator^(const SIMD_4x32& other) const noexcept { 371| 730k| SIMD_4x32 retval(*this); 372| 730k| retval ^= other; 373| 730k| return retval; 374| 730k| } _ZNK5Botan9SIMD_4x324andcERKS0_: 515| 127k| SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 andc(const SIMD_4x32& other) const noexcept { 516| 127k|#if defined(BOTAN_SIMD_USE_SSSE3) 517| 127k| return SIMD_4x32(_mm_andnot_si128(m_simd, other.m_simd)); 518| |#elif defined(BOTAN_SIMD_USE_VSX) 519| | /* 520| | AltiVec does arg1 & ~arg2 rather than SSE's ~arg1 & arg2 521| | so swap the arguments 522| | */ 523| | return SIMD_4x32(vec_andc(other.m_simd, m_simd)); 524| |#elif defined(BOTAN_SIMD_USE_NEON) 525| | // NEON is also a & ~b 526| | return SIMD_4x32(vbicq_u32(other.m_simd, m_simd)); 527| |#elif defined(BOTAN_SIMD_USE_LSX) 528| | // LSX is ~a & b 529| | return SIMD_4x32(__lsx_vandn_v(m_simd, other.m_simd)); 530| |#elif defined(BOTAN_SIMD_USE_SIMD128) 531| | // SIMD128 is a & ~b 532| | return SIMD_4x32(wasm_v128_andnot(other.m_simd, m_simd)); 533| |#endif 534| 127k| } _ZNK5Botan9SIMD_4x3211swap_halvesEv: 930| 15.6k| inline SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 swap_halves() const { 931| 15.6k|#if defined(BOTAN_SIMD_USE_SSSE3) 932| 15.6k| return SIMD_4x32(_mm_shuffle_epi32(raw(), 0b01001110)); 933| |#else 934| | return SIMD_4x32::alignr8(*this, *this); 935| |#endif 936| 15.6k| } _ZN5Botan9SIMD_4x32eOERKS0_: 422| 2.12M| void BOTAN_FN_ISA_SIMD_4X32 operator^=(const SIMD_4x32& other) noexcept { 423| 2.12M|#if defined(BOTAN_SIMD_USE_SSSE3) 424| 2.12M| m_simd = _mm_xor_si128(m_simd, other.m_simd); 425| |#elif defined(BOTAN_SIMD_USE_VSX) 426| | m_simd = vec_xor(m_simd, other.m_simd); 427| |#elif defined(BOTAN_SIMD_USE_NEON) 428| | m_simd = veorq_u32(m_simd, other.m_simd); 429| |#elif defined(BOTAN_SIMD_USE_LSX) 430| | m_simd = __lsx_vxor_v(m_simd, other.m_simd); 431| |#elif defined(BOTAN_SIMD_USE_SIMD128) 432| | m_simd = wasm_v128_xor(m_simd, other.m_simd); 433| |#endif 434| 2.12M| } _ZN5Botan9SIMD_4x328splat_u8Eh: 140| 218k| static SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 splat_u8(uint8_t B) noexcept { 141| 218k|#if defined(BOTAN_SIMD_USE_SSSE3) 142| 218k| return SIMD_4x32(_mm_set1_epi8(B)); 143| |#elif defined(BOTAN_SIMD_USE_NEON) 144| | /* 145| | * Do not use vdupq_n_u8 here. MSVC ARM64 (VS 17.13 through at least 146| | * VS 18.6) can fold vand(vdupq_n_u8(k), vdupq_n_u32(x)) into a scalar 147| | * and+dup which wrongly uses the 8-bit k as the 32-bit immediate, 148| | * computing dup(x & k) instead of dup(x) & splat_u8(k). This 149| | * miscompiled the SM4 key schedule. Broadcasting an explicitly 150| | * replicated 32-bit value avoids the bad fold; GCC and Clang generate 151| | * identical code either way. 152| | */ 153| | return SIMD_4x32(vdupq_n_u32(static_cast(B) * 0x01010101U)); 154| |#elif defined(BOTAN_SIMD_USE_LSX) 155| | return SIMD_4x32(__lsx_vreplgr2vr_b(B)); 156| |#elif defined(BOTAN_SIMD_USE_SIMD128) 157| | return SIMD_4x32(wasm_u8x16_splat(B)); 158| |#elif defined(BOTAN_SIMD_USE_VSX) 159| | return SIMD_4x32(reinterpret_cast<__vector unsigned int>(vec_splats(static_cast(B)))); 160| |#endif 161| 218k| } _ZNK5Botan9SIMD_4x323shrILi4EEES0_v: 485| 218k| SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 shr() const noexcept { 486| 218k|#if defined(BOTAN_SIMD_USE_SSSE3) 487| 218k| return SIMD_4x32(_mm_srli_epi32(m_simd, SHIFT)); 488| | 489| |#elif defined(BOTAN_SIMD_USE_VSX) 490| | return SIMD_4x32(vec_sr(m_simd, vec_splats(static_cast(SHIFT)))); 491| |#elif defined(BOTAN_SIMD_USE_NEON) 492| | return SIMD_4x32(vshrq_n_u32(m_simd, SHIFT)); 493| |#elif defined(BOTAN_SIMD_USE_LSX) 494| | return SIMD_4x32(__lsx_vsrli_w(m_simd, SHIFT)); 495| |#elif defined(BOTAN_SIMD_USE_SIMD128) 496| | return SIMD_4x32(wasm_u32x4_shr(m_simd, SHIFT)); 497| |#endif 498| 218k| } _ZN5Botan9SIMD_4x3219masked_byte_shuffleERKS0_S2_: 836| 37.2k| inline static SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 masked_byte_shuffle(const SIMD_4x32& tbl, const SIMD_4x32& idx) { 837| |#if defined(BOTAN_SIMD_USE_VSX) 838| | if constexpr(std::endian::native == std::endian::big) { 839| | // vec_perm numbers the bytes in big-endian order 840| | return SIMD_4x32::altivec_masked_perm(tbl.bswap(), idx.bswap()).bswap(); 841| | } else { 842| | return SIMD_4x32::altivec_masked_perm(tbl, idx); 843| | } 844| |#elif defined(BOTAN_SIMD_USE_LSX) 845| | /* 846| | * The behavior of vshuf.b unfortunately differs among microarchitectures 847| | * when the index is larger than the available elements. In LA664 CPUs, 848| | * larger indices result in a zero byte, which is exactly what we want. 849| | * Unfortunately on LA464 machines, the output is instead undefined. 850| | * 851| | * So we must use a slower sequence that handles the larger indices. 852| | * If we had a way of knowing at compile time that we are on an LA664 853| | * or later, we could use __lsx_vshuf_b without the comparison or select. 854| | */ 855| | const auto zero = __lsx_vldi(0); 856| | const auto r = __lsx_vshuf_b(zero, tbl.raw(), idx.raw()); 857| | const auto mask = __lsx_vslti_bu(idx.raw(), 16); 858| | return SIMD_4x32(__lsx_vbitsel_v(zero, r, mask)); 859| |#else 860| | // ARM, x86 and Wasm byte shuffles have the behavior we want for out of range idx 861| 37.2k| return SIMD_4x32::byte_shuffle(tbl, idx); 862| 37.2k|#endif 863| 37.2k| } _ZN5Botan9SIMD_4x325splatEj: 123| 86.8k| static SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 splat(uint32_t B) noexcept { 124| 86.8k|#if defined(BOTAN_SIMD_USE_SSSE3) 125| 86.8k| return SIMD_4x32(_mm_set1_epi32(B)); 126| |#elif defined(BOTAN_SIMD_USE_NEON) 127| | return SIMD_4x32(vdupq_n_u32(B)); 128| |#elif defined(BOTAN_SIMD_USE_LSX) 129| | return SIMD_4x32(__lsx_vreplgr2vr_w(B)); 130| |#elif defined(BOTAN_SIMD_USE_SIMD128) 131| | return SIMD_4x32(wasm_u32x4_splat(B)); 132| |#elif defined(BOTAN_SIMD_USE_VSX) 133| | return SIMD_4x32(vec_splats(static_cast(B))); 134| |#endif 135| 86.8k| } _ZNK5Botan9SIMD_4x324rotlILm1EEES0_vQaagtT_Li0EltT_Li32E: 299| 8.84k| { 300| 8.84k|#if defined(BOTAN_SIMD_USE_SSSE3) 301| | if constexpr(ROT == 8) { 302| | const auto shuf_rotl_8 = _mm_set_epi64x(0x0e0d0c0f0a09080b, 0x0605040702010003); 303| | return SIMD_4x32(_mm_shuffle_epi8(raw(), shuf_rotl_8)); 304| | } else if constexpr(ROT == 16) { 305| | const auto shuf_rotl_16 = _mm_set_epi64x(0x0d0c0f0e09080b0a, 0x0504070601000302); 306| | return SIMD_4x32(_mm_shuffle_epi8(raw(), shuf_rotl_16)); 307| | } else if constexpr(ROT == 24) { 308| | const auto shuf_rotl_24 = _mm_set_epi64x(0x0c0f0e0d080b0a09, 0x0407060500030201); 309| | return SIMD_4x32(_mm_shuffle_epi8(raw(), shuf_rotl_24)); 310| 8.84k| } else { 311| 8.84k| return SIMD_4x32(_mm_xor_si128(_mm_slli_epi32(raw(), static_cast(ROT)), 312| 8.84k| _mm_srli_epi32(raw(), static_cast(32 - ROT)))); 313| 8.84k| } 314| | 315| |#elif defined(BOTAN_SIMD_USE_VSX) 316| | 317| | return SIMD_4x32(vec_rl(m_simd, vec_splats(static_cast(ROT)))); 318| | 319| |#elif defined(BOTAN_SIMD_USE_NEON) && defined(BOTAN_TARGET_ARCH_IS_ARM64) 320| | 321| | if constexpr(ROT == 8) { 322| | const uint8_t maskb[16] = {3, 0, 1, 2, 7, 4, 5, 6, 11, 8, 9, 10, 15, 12, 13, 14}; 323| | const uint8x16_t mask = vld1q_u8(maskb); 324| | return SIMD_4x32(vreinterpretq_u32_u8(vqtbl1q_u8(vreinterpretq_u8_u32(m_simd), mask))); 325| | } else if constexpr(ROT == 16) { 326| | return SIMD_4x32(vreinterpretq_u32_u16(vrev32q_u16(vreinterpretq_u16_u32(m_simd)))); 327| | } else { 328| | return SIMD_4x32( 329| | vorrq_u32(vshlq_n_u32(m_simd, static_cast(ROT)), vshrq_n_u32(m_simd, static_cast(32 - ROT)))); 330| | } 331| |#elif defined(BOTAN_SIMD_USE_NEON) 332| | return SIMD_4x32( 333| | vorrq_u32(vshlq_n_u32(m_simd, static_cast(ROT)), vshrq_n_u32(m_simd, static_cast(32 - ROT)))); 334| |#elif defined(BOTAN_SIMD_USE_LSX) 335| | return SIMD_4x32(__lsx_vrotri_w(raw(), 32 - ROT)); 336| |#elif defined(BOTAN_SIMD_USE_SIMD128) 337| | return SIMD_4x32(wasm_v128_or(wasm_i32x4_shl(m_simd, ROT), wasm_u32x4_shr(m_simd, 32 - ROT))); 338| |#endif 339| 8.84k| } _ZNK5Botan9SIMD_4x32orERKS0_: 379| 9.32k| SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 operator|(const SIMD_4x32& other) const noexcept { 380| 9.32k| SIMD_4x32 retval(*this); 381| 9.32k| retval |= other; 382| 9.32k| return retval; 383| 9.32k| } _ZN5Botan9SIMD_4x32oRERKS0_: 438| 9.32k| void BOTAN_FN_ISA_SIMD_4X32 operator|=(const SIMD_4x32& other) noexcept { 439| 9.32k|#if defined(BOTAN_SIMD_USE_SSSE3) 440| 9.32k| m_simd = _mm_or_si128(m_simd, other.m_simd); 441| |#elif defined(BOTAN_SIMD_USE_VSX) 442| | m_simd = vec_or(m_simd, other.m_simd); 443| |#elif defined(BOTAN_SIMD_USE_NEON) 444| | m_simd = vorrq_u32(m_simd, other.m_simd); 445| |#elif defined(BOTAN_SIMD_USE_LSX) 446| | m_simd = __lsx_vor_v(m_simd, other.m_simd); 447| |#elif defined(BOTAN_SIMD_USE_SIMD128) 448| | m_simd = wasm_v128_or(m_simd, other.m_simd); 449| |#endif 450| 9.32k| } _ZNK5Botan9SIMD_4x328store_leEPh: 242| 174k| void BOTAN_FN_ISA_SIMD_4X32 store_le(uint8_t out[]) const noexcept { 243| 174k| if constexpr(std::endian::native == std::endian::little) { 244| 174k| this->store_native(out); 245| | } else { 246| | this->bswap().store_native(out); 247| | } 248| 174k| } _ZNK5Botan9SIMD_4x3212store_nativeEPv: 225| 179k| void BOTAN_FN_ISA_SIMD_4X32 store_native(void* out) const noexcept { 226| 179k|#if defined(BOTAN_SIMD_USE_SSSE3) 227| 179k| _mm_storeu_si128(static_cast<__m128i*>(out), raw()); 228| |#elif defined(BOTAN_SIMD_USE_VSX) 229| | vec_xst(reinterpret_cast<__vector unsigned char>(m_simd), 0, static_cast(out)); 230| |#elif defined(BOTAN_SIMD_USE_NEON) 231| | vst1q_u32(static_cast(out), m_simd); 232| |#elif defined(BOTAN_SIMD_USE_LSX) 233| | __lsx_vst(raw(), out, 0); 234| |#elif defined(BOTAN_SIMD_USE_SIMD128) 235| | wasm_v128_store(out, m_simd); 236| |#endif 237| 179k| } _ZN5Botan9SIMD_4x327load_beEPKv: 194| 599k| static SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 load_be(const void* in) noexcept { 195| | if constexpr(std::endian::native == std::endian::big) { 196| | return SIMD_4x32::load_native(in); 197| 599k| } else { 198| 599k| return SIMD_4x32::load_native(in).bswap(); 199| 599k| } 200| 599k| } _ZNK5Botan9SIMD_4x328store_leEPj: 210| 135k| void BOTAN_FN_ISA_SIMD_4X32 store_le(uint32_t out[4]) const noexcept { 211| 135k| this->store_le(reinterpret_cast(out)); 212| 135k| } _ZNK5Botan9SIMD_4x328store_leEPm: 218| 2.14k| void BOTAN_FN_ISA_SIMD_4X32 store_le(uint64_t out[2]) const noexcept { 219| 2.14k| this->store_le(reinterpret_cast(out)); 220| 2.14k| } _ZNK5Botan9SIMD_4x328store_beEPh: 253| 4.67k| void BOTAN_FN_ISA_SIMD_4X32 store_be(uint8_t out[]) const noexcept { 254| | if constexpr(std::endian::native == std::endian::big) { 255| | this->store_native(out); 256| 4.67k| } else { 257| 4.67k| this->bswap().store_native(out); 258| 4.67k| } 259| 4.67k| } _ZNK5Botan9SIMD_4x32plERKS0_: 352| 1.49M| SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 operator+(const SIMD_4x32& other) const noexcept { 353| 1.49M| SIMD_4x32 retval(*this); 354| 1.49M| retval += other; 355| 1.49M| return retval; 356| 1.49M| } _ZN5Botan9SIMD_4x32pLERKS0_: 394| 2.81M| void BOTAN_FN_ISA_SIMD_4X32 operator+=(const SIMD_4x32& other) noexcept { 395| 2.81M|#if defined(BOTAN_SIMD_USE_SSSE3) 396| 2.81M| m_simd = _mm_add_epi32(m_simd, other.m_simd); 397| |#elif defined(BOTAN_SIMD_USE_VSX) 398| | m_simd = vec_add(m_simd, other.m_simd); 399| |#elif defined(BOTAN_SIMD_USE_NEON) 400| | m_simd = vaddq_u32(m_simd, other.m_simd); 401| |#elif defined(BOTAN_SIMD_USE_LSX) 402| | m_simd = __lsx_vadd_w(m_simd, other.m_simd); 403| |#elif defined(BOTAN_SIMD_USE_SIMD128) 404| | m_simd = wasm_i32x4_add(m_simd, other.m_simd); 405| |#endif 406| 2.81M| } _ZNK5Botan9SIMD_4x3217reverse_all_bytesEv: 536| 11.7k| BOTAN_FN_ISA_SIMD_4X32 SIMD_4x32 reverse_all_bytes() const { 537| 11.7k| const auto rev_idx = SIMD_4x32(0x0C0D0E0F, 0x08090A0B, 0x04050607, 0x00010203); 538| 11.7k| return SIMD_4x32::byte_shuffle(*this, rev_idx); 539| 11.7k| } _ZNK5Botan9SIMD_4x325bswapEv: 544| 618k| BOTAN_FN_ISA_SIMD_4X32 SIMD_4x32 bswap() const noexcept { 545| 618k|#if defined(BOTAN_SIMD_USE_SSSE3) 546| 618k| const auto idx = _mm_set_epi8(12, 13, 14, 15, 8, 9, 10, 11, 4, 5, 6, 7, 0, 1, 2, 3); 547| | 548| 618k| return SIMD_4x32(_mm_shuffle_epi8(raw(), idx)); 549| |#elif defined(BOTAN_SIMD_USE_VSX) 550| | return SIMD_4x32(vec_revb(m_simd)); 551| | 552| |#elif defined(BOTAN_SIMD_USE_NEON) 553| | return SIMD_4x32(vreinterpretq_u32_u8(vrev32q_u8(vreinterpretq_u8_u32(m_simd)))); 554| |#elif defined(BOTAN_SIMD_USE_LSX) 555| | return SIMD_4x32(__lsx_vshuf4i_b(m_simd, 0b00011011)); 556| |#elif defined(BOTAN_SIMD_USE_SIMD128) 557| | return SIMD_4x32(wasm_i8x16_shuffle(m_simd, m_simd, 3, 2, 1, 0, 7, 6, 5, 4, 11, 10, 9, 8, 15, 14, 13, 12)); 558| |#endif 559| 618k| } _ZN5Botan9SIMD_4x329transposeERS0_S1_S1_S1_: 644| 34.5k| SIMD_4x32& B3) noexcept { 645| 34.5k|#if defined(BOTAN_SIMD_USE_SSSE3) 646| 34.5k| const __m128i T0 = _mm_unpacklo_epi32(B0.m_simd, B1.m_simd); 647| 34.5k| const __m128i T1 = _mm_unpacklo_epi32(B2.m_simd, B3.m_simd); 648| 34.5k| const __m128i T2 = _mm_unpackhi_epi32(B0.m_simd, B1.m_simd); 649| 34.5k| const __m128i T3 = _mm_unpackhi_epi32(B2.m_simd, B3.m_simd); 650| | 651| 34.5k| B0.m_simd = _mm_unpacklo_epi64(T0, T1); 652| 34.5k| B1.m_simd = _mm_unpackhi_epi64(T0, T1); 653| 34.5k| B2.m_simd = _mm_unpacklo_epi64(T2, T3); 654| 34.5k| B3.m_simd = _mm_unpackhi_epi64(T2, T3); 655| |#elif defined(BOTAN_SIMD_USE_VSX) 656| | const __vector unsigned int T0 = vec_mergeh(B0.m_simd, B2.m_simd); 657| | const __vector unsigned int T1 = vec_mergeh(B1.m_simd, B3.m_simd); 658| | const __vector unsigned int T2 = vec_mergel(B0.m_simd, B2.m_simd); 659| | const __vector unsigned int T3 = vec_mergel(B1.m_simd, B3.m_simd); 660| | 661| | B0.m_simd = vec_mergeh(T0, T1); 662| | B1.m_simd = vec_mergel(T0, T1); 663| | B2.m_simd = vec_mergeh(T2, T3); 664| | B3.m_simd = vec_mergel(T2, T3); 665| | 666| |#elif defined(BOTAN_SIMD_USE_NEON) && defined(BOTAN_TARGET_ARCH_IS_ARM32) 667| | const uint32x4x2_t T0 = vzipq_u32(B0.m_simd, B2.m_simd); 668| | const uint32x4x2_t T1 = vzipq_u32(B1.m_simd, B3.m_simd); 669| | const uint32x4x2_t O0 = vzipq_u32(T0.val[0], T1.val[0]); 670| | const uint32x4x2_t O1 = vzipq_u32(T0.val[1], T1.val[1]); 671| | 672| | B0.m_simd = O0.val[0]; 673| | B1.m_simd = O0.val[1]; 674| | B2.m_simd = O1.val[0]; 675| | B3.m_simd = O1.val[1]; 676| | 677| |#elif defined(BOTAN_SIMD_USE_NEON) && defined(BOTAN_TARGET_ARCH_IS_ARM64) 678| | const uint32x4_t T0 = vzip1q_u32(B0.m_simd, B2.m_simd); 679| | const uint32x4_t T2 = vzip2q_u32(B0.m_simd, B2.m_simd); 680| | const uint32x4_t T1 = vzip1q_u32(B1.m_simd, B3.m_simd); 681| | const uint32x4_t T3 = vzip2q_u32(B1.m_simd, B3.m_simd); 682| | 683| | B0.m_simd = vzip1q_u32(T0, T1); 684| | B1.m_simd = vzip2q_u32(T0, T1); 685| | B2.m_simd = vzip1q_u32(T2, T3); 686| | B3.m_simd = vzip2q_u32(T2, T3); 687| |#elif defined(BOTAN_SIMD_USE_LSX) 688| | const __m128i T0 = __lsx_vilvl_w(B2.raw(), B0.raw()); 689| | const __m128i T1 = __lsx_vilvh_w(B2.raw(), B0.raw()); 690| | const __m128i T2 = __lsx_vilvl_w(B3.raw(), B1.raw()); 691| | const __m128i T3 = __lsx_vilvh_w(B3.raw(), B1.raw()); 692| | B0.m_simd = __lsx_vilvl_w(T2, T0); 693| | B1.m_simd = __lsx_vilvh_w(T2, T0); 694| | B2.m_simd = __lsx_vilvl_w(T3, T1); 695| | B3.m_simd = __lsx_vilvh_w(T3, T1); 696| |#elif defined(BOTAN_SIMD_USE_SIMD128) 697| | const auto T0 = wasm_i32x4_shuffle(B0.m_simd, B2.m_simd, 0, 4, 1, 5); 698| | const auto T2 = wasm_i32x4_shuffle(B0.m_simd, B2.m_simd, 2, 6, 3, 7); 699| | const auto T1 = wasm_i32x4_shuffle(B1.m_simd, B3.m_simd, 0, 4, 1, 5); 700| | const auto T3 = wasm_i32x4_shuffle(B1.m_simd, B3.m_simd, 2, 6, 3, 7); 701| | 702| | B0.m_simd = wasm_i32x4_shuffle(T0, T1, 0, 4, 1, 5); 703| | B1.m_simd = wasm_i32x4_shuffle(T0, T1, 2, 6, 3, 7); 704| | B2.m_simd = wasm_i32x4_shuffle(T2, T3, 0, 4, 1, 5); 705| | B3.m_simd = wasm_i32x4_shuffle(T2, T3, 2, 6, 3, 7); 706| |#endif 707| 34.5k| } _ZN5Botan9SIMD_4x327alignr4ERKS0_S2_: 865| 1.07M| static inline SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 alignr4(const SIMD_4x32& a, const SIMD_4x32& b) { 866| 1.07M|#if defined(BOTAN_SIMD_USE_SSSE3) 867| 1.07M| return SIMD_4x32(_mm_alignr_epi8(a.raw(), b.raw(), 4)); 868| |#elif defined(BOTAN_SIMD_USE_NEON) 869| | return SIMD_4x32(vextq_u32(b.raw(), a.raw(), 1)); 870| |#elif defined(BOTAN_SIMD_USE_VSX) 871| | const __vector unsigned char mask = {4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19}; 872| | return SIMD_4x32(vec_perm(b.raw(), a.raw(), mask)); 873| |#elif defined(BOTAN_SIMD_USE_LSX) 874| | const auto mask = SIMD_4x32(0x07060504, 0x0B0A0908, 0x0F0E0D0C, 0x13121110); 875| | return SIMD_4x32(__lsx_vshuf_b(a.raw(), b.raw(), mask.raw())); 876| |#elif defined(BOTAN_SIMD_USE_SIMD128) 877| | return SIMD_4x32( 878| | wasm_i8x16_shuffle(b.raw(), a.raw(), 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19)); 879| |#endif 880| 1.07M| } _ZN5Botan9SIMD_4x327alignr8ERKS0_S2_: 882| 95.4k| static inline SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 alignr8(const SIMD_4x32& a, const SIMD_4x32& b) { 883| 95.4k|#if defined(BOTAN_SIMD_USE_SSSE3) 884| 95.4k| return SIMD_4x32(_mm_alignr_epi8(a.raw(), b.raw(), 8)); 885| |#elif defined(BOTAN_SIMD_USE_NEON) 886| | return SIMD_4x32(vextq_u32(b.raw(), a.raw(), 2)); 887| |#elif defined(BOTAN_SIMD_USE_VSX) 888| | const __vector unsigned char mask = {8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23}; 889| | return SIMD_4x32(vec_perm(b.raw(), a.raw(), mask)); 890| |#elif defined(BOTAN_SIMD_USE_LSX) 891| | return SIMD_4x32(__lsx_vshuf4i_d(a.raw(), b.raw(), 0b0011)); 892| |#elif defined(BOTAN_SIMD_USE_SIMD128) 893| | return SIMD_4x32( 894| | wasm_i8x16_shuffle(b.raw(), a.raw(), 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23)); 895| |#endif 896| 95.4k| } _ZNK5Botan9SIMD_4x3212top_bit_maskEv: 905| 476| inline SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 top_bit_mask() const { 906| 476|#if defined(BOTAN_SIMD_USE_SSSE3) 907| 476| return SIMD_4x32(_mm_shuffle_epi32(_mm_srai_epi32(raw(), 31), 0b11111111)); 908| |#elif defined(BOTAN_SIMD_USE_NEON) 909| | #if defined(BOTAN_TARGET_ARCH_IS_ARM32) 910| | int32x4_t v = vshrq_n_s32(vreinterpretq_s32_u32(raw()), 31); 911| | int32x2_t hi = vget_high_s32(v); 912| | return SIMD_4x32(vreinterpretq_u32_s32(vdupq_lane_s32(hi, 1))); 913| | #else 914| | return SIMD_4x32(vreinterpretq_u32_s32(vdupq_laneq_s32(vshrq_n_s32(vreinterpretq_s32_u32(raw()), 31), 3))); 915| | #endif 916| |#elif defined(BOTAN_SIMD_USE_VSX) 917| | const __vector unsigned int shift = vec_splats(31U); 918| | const __vector signed int shifted = vec_sra(reinterpret_cast<__vector signed int>(raw()), shift); 919| | return SIMD_4x32(reinterpret_cast<__vector unsigned int>(vec_splat(shifted, 3))); 920| |#elif defined(BOTAN_SIMD_USE_LSX) 921| | return SIMD_4x32(__lsx_vshuf4i_w(__lsx_vsrai_w(raw(), 31), 0xFF)); 922| |#elif defined(BOTAN_SIMD_USE_SIMD128) 923| | return SIMD_4x32(wasm_i32x4_splat(wasm_i32x4_extract_lane(wasm_i32x4_shr(raw(), 31), 3))); 924| |#endif 925| 476| } _ZNK5Botan9SIMD_4x324rotlILm8EEES0_vQaagtT_Li0EltT_Li32E: 299| 59.8k| { 300| 59.8k|#if defined(BOTAN_SIMD_USE_SSSE3) 301| 59.8k| if constexpr(ROT == 8) { 302| 59.8k| const auto shuf_rotl_8 = _mm_set_epi64x(0x0e0d0c0f0a09080b, 0x0605040702010003); 303| 59.8k| return SIMD_4x32(_mm_shuffle_epi8(raw(), shuf_rotl_8)); 304| | } else if constexpr(ROT == 16) { 305| | const auto shuf_rotl_16 = _mm_set_epi64x(0x0d0c0f0e09080b0a, 0x0504070601000302); 306| | return SIMD_4x32(_mm_shuffle_epi8(raw(), shuf_rotl_16)); 307| | } else if constexpr(ROT == 24) { 308| | const auto shuf_rotl_24 = _mm_set_epi64x(0x0c0f0e0d080b0a09, 0x0407060500030201); 309| | return SIMD_4x32(_mm_shuffle_epi8(raw(), shuf_rotl_24)); 310| | } else { 311| | return SIMD_4x32(_mm_xor_si128(_mm_slli_epi32(raw(), static_cast(ROT)), 312| | _mm_srli_epi32(raw(), static_cast(32 - ROT)))); 313| | } 314| | 315| |#elif defined(BOTAN_SIMD_USE_VSX) 316| | 317| | return SIMD_4x32(vec_rl(m_simd, vec_splats(static_cast(ROT)))); 318| | 319| |#elif defined(BOTAN_SIMD_USE_NEON) && defined(BOTAN_TARGET_ARCH_IS_ARM64) 320| | 321| | if constexpr(ROT == 8) { 322| | const uint8_t maskb[16] = {3, 0, 1, 2, 7, 4, 5, 6, 11, 8, 9, 10, 15, 12, 13, 14}; 323| | const uint8x16_t mask = vld1q_u8(maskb); 324| | return SIMD_4x32(vreinterpretq_u32_u8(vqtbl1q_u8(vreinterpretq_u8_u32(m_simd), mask))); 325| | } else if constexpr(ROT == 16) { 326| | return SIMD_4x32(vreinterpretq_u32_u16(vrev32q_u16(vreinterpretq_u16_u32(m_simd)))); 327| | } else { 328| | return SIMD_4x32( 329| | vorrq_u32(vshlq_n_u32(m_simd, static_cast(ROT)), vshrq_n_u32(m_simd, static_cast(32 - ROT)))); 330| | } 331| |#elif defined(BOTAN_SIMD_USE_NEON) 332| | return SIMD_4x32( 333| | vorrq_u32(vshlq_n_u32(m_simd, static_cast(ROT)), vshrq_n_u32(m_simd, static_cast(32 - ROT)))); 334| |#elif defined(BOTAN_SIMD_USE_LSX) 335| | return SIMD_4x32(__lsx_vrotri_w(raw(), 32 - ROT)); 336| |#elif defined(BOTAN_SIMD_USE_SIMD128) 337| | return SIMD_4x32(wasm_v128_or(wasm_i32x4_shl(m_simd, ROT), wasm_u32x4_shr(m_simd, 32 - ROT))); 338| |#endif 339| 59.8k| } _ZNK5Botan9SIMD_4x324rotlILm24EEES0_vQaagtT_Li0EltT_Li32E: 299| 59.8k| { 300| 59.8k|#if defined(BOTAN_SIMD_USE_SSSE3) 301| | if constexpr(ROT == 8) { 302| | const auto shuf_rotl_8 = _mm_set_epi64x(0x0e0d0c0f0a09080b, 0x0605040702010003); 303| | return SIMD_4x32(_mm_shuffle_epi8(raw(), shuf_rotl_8)); 304| | } else if constexpr(ROT == 16) { 305| | const auto shuf_rotl_16 = _mm_set_epi64x(0x0d0c0f0e09080b0a, 0x0504070601000302); 306| | return SIMD_4x32(_mm_shuffle_epi8(raw(), shuf_rotl_16)); 307| 59.8k| } else if constexpr(ROT == 24) { 308| 59.8k| const auto shuf_rotl_24 = _mm_set_epi64x(0x0c0f0e0d080b0a09, 0x0407060500030201); 309| 59.8k| return SIMD_4x32(_mm_shuffle_epi8(raw(), shuf_rotl_24)); 310| | } else { 311| | return SIMD_4x32(_mm_xor_si128(_mm_slli_epi32(raw(), static_cast(ROT)), 312| | _mm_srli_epi32(raw(), static_cast(32 - ROT)))); 313| | } 314| | 315| |#elif defined(BOTAN_SIMD_USE_VSX) 316| | 317| | return SIMD_4x32(vec_rl(m_simd, vec_splats(static_cast(ROT)))); 318| | 319| |#elif defined(BOTAN_SIMD_USE_NEON) && defined(BOTAN_TARGET_ARCH_IS_ARM64) 320| | 321| | if constexpr(ROT == 8) { 322| | const uint8_t maskb[16] = {3, 0, 1, 2, 7, 4, 5, 6, 11, 8, 9, 10, 15, 12, 13, 14}; 323| | const uint8x16_t mask = vld1q_u8(maskb); 324| | return SIMD_4x32(vreinterpretq_u32_u8(vqtbl1q_u8(vreinterpretq_u8_u32(m_simd), mask))); 325| | } else if constexpr(ROT == 16) { 326| | return SIMD_4x32(vreinterpretq_u32_u16(vrev32q_u16(vreinterpretq_u16_u32(m_simd)))); 327| | } else { 328| | return SIMD_4x32( 329| | vorrq_u32(vshlq_n_u32(m_simd, static_cast(ROT)), vshrq_n_u32(m_simd, static_cast(32 - ROT)))); 330| | } 331| |#elif defined(BOTAN_SIMD_USE_NEON) 332| | return SIMD_4x32( 333| | vorrq_u32(vshlq_n_u32(m_simd, static_cast(ROT)), vshrq_n_u32(m_simd, static_cast(32 - ROT)))); 334| |#elif defined(BOTAN_SIMD_USE_LSX) 335| | return SIMD_4x32(__lsx_vrotri_w(raw(), 32 - ROT)); 336| |#elif defined(BOTAN_SIMD_USE_SIMD128) 337| | return SIMD_4x32(wasm_v128_or(wasm_i32x4_shl(m_simd, ROT), wasm_u32x4_shr(m_simd, 32 - ROT))); 338| |#endif 339| 59.8k| } _ZNK5Botan9SIMD_4x3212extract_wordILm3EEEjv: 942| 20.9k| inline uint32_t BOTAN_FN_ISA_SIMD_4X32 extract_word() const noexcept { 943| 20.9k| static_assert(W <= 3); 944| | 945| |#if defined(BOTAN_SIMD_USE_NEON) 946| | return vgetq_lane_u32(raw(), W); 947| |#elif defined(BOTAN_SIMD_USE_VSX) 948| | return vec_extract(raw(), W); 949| |#elif defined(BOTAN_SIMD_USE_LSX) 950| | return __lsx_vpickve2gr_wu(raw(), W); 951| |#elif defined(BOTAN_SIMD_USE_SIMD128) 952| | return wasm_u32x4_extract_lane(raw(), W); 953| |#elif defined(BOTAN_SIMD_USE_SSSE3) 954| | if constexpr(W == 0) { 955| | return static_cast(_mm_cvtsi128_si32(raw())); 956| 20.9k| } else { 957| | // Broadcast the word then extract the low 958| | // TODO(SSE4.1) could use _mm_extract_epi32 here 959| | return static_cast(_mm_cvtsi128_si32(_mm_shuffle_epi32(raw(), _MM_SHUFFLE(W, W, W, W)))); 960| 20.9k| } 961| 20.9k|#endif 962| 20.9k| } _ZNK5Botan9SIMD_4x3217shift_elems_rightILm2EEES0_vQleT_Li3E: 601| 1.45M| { 602| 1.45M|#if defined(BOTAN_SIMD_USE_SSSE3) 603| 1.45M| return SIMD_4x32(_mm_srli_si128(raw(), 4 * I)); 604| |#elif defined(BOTAN_SIMD_USE_NEON) 605| | return SIMD_4x32(vextq_u32(raw(), vdupq_n_u32(0), I)); 606| |#elif defined(BOTAN_SIMD_USE_VSX) 607| | const __vector unsigned int zero = vec_splat_u32(0); 608| | 609| | const __vector unsigned char shuf[3] = { 610| | {4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19}, 611| | {8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23}, 612| | {12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27}, 613| | }; 614| | 615| | return SIMD_4x32(vec_perm(raw(), zero, shuf[I - 1])); 616| |#elif defined(BOTAN_SIMD_USE_LSX) 617| | return SIMD_4x32(__lsx_vbsrl_v(raw(), 4 * I)); 618| |#elif defined(BOTAN_SIMD_USE_SIMD128) 619| | if constexpr(I == 0) { 620| | return SIMD_4x32(m_simd); 621| | } 622| | 623| | const auto zero = wasm_u32x4_const_splat(0); 624| | if constexpr(I == 1) { 625| | return SIMD_4x32( 626| | wasm_i8x16_shuffle(m_simd, zero, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 16, 16, 16)); 627| | } 628| | if constexpr(I == 2) { 629| | return SIMD_4x32( 630| | wasm_i8x16_shuffle(m_simd, zero, 8, 9, 10, 11, 12, 13, 14, 15, 16, 16, 16, 16, 16, 16, 16, 16)); 631| | } 632| | 633| | return SIMD_4x32( 634| | wasm_i8x16_shuffle(m_simd, zero, 12, 13, 14, 15, 16, 16, 16, 16, 16, 16, 16, 16, 16, 16, 16, 16)); 635| |#endif 636| 1.45M| } _ZNK5Botan9SIMD_4x324rotlILm16EEES0_vQaagtT_Li0EltT_Li32E: 299| 47.2k| { 300| 47.2k|#if defined(BOTAN_SIMD_USE_SSSE3) 301| | if constexpr(ROT == 8) { 302| | const auto shuf_rotl_8 = _mm_set_epi64x(0x0e0d0c0f0a09080b, 0x0605040702010003); 303| | return SIMD_4x32(_mm_shuffle_epi8(raw(), shuf_rotl_8)); 304| 47.2k| } else if constexpr(ROT == 16) { 305| 47.2k| const auto shuf_rotl_16 = _mm_set_epi64x(0x0d0c0f0e09080b0a, 0x0504070601000302); 306| 47.2k| return SIMD_4x32(_mm_shuffle_epi8(raw(), shuf_rotl_16)); 307| | } else if constexpr(ROT == 24) { 308| | const auto shuf_rotl_24 = _mm_set_epi64x(0x0c0f0e0d080b0a09, 0x0407060500030201); 309| | return SIMD_4x32(_mm_shuffle_epi8(raw(), shuf_rotl_24)); 310| | } else { 311| | return SIMD_4x32(_mm_xor_si128(_mm_slli_epi32(raw(), static_cast(ROT)), 312| | _mm_srli_epi32(raw(), static_cast(32 - ROT)))); 313| | } 314| | 315| |#elif defined(BOTAN_SIMD_USE_VSX) 316| | 317| | return SIMD_4x32(vec_rl(m_simd, vec_splats(static_cast(ROT)))); 318| | 319| |#elif defined(BOTAN_SIMD_USE_NEON) && defined(BOTAN_TARGET_ARCH_IS_ARM64) 320| | 321| | if constexpr(ROT == 8) { 322| | const uint8_t maskb[16] = {3, 0, 1, 2, 7, 4, 5, 6, 11, 8, 9, 10, 15, 12, 13, 14}; 323| | const uint8x16_t mask = vld1q_u8(maskb); 324| | return SIMD_4x32(vreinterpretq_u32_u8(vqtbl1q_u8(vreinterpretq_u8_u32(m_simd), mask))); 325| | } else if constexpr(ROT == 16) { 326| | return SIMD_4x32(vreinterpretq_u32_u16(vrev32q_u16(vreinterpretq_u16_u32(m_simd)))); 327| | } else { 328| | return SIMD_4x32( 329| | vorrq_u32(vshlq_n_u32(m_simd, static_cast(ROT)), vshrq_n_u32(m_simd, static_cast(32 - ROT)))); 330| | } 331| |#elif defined(BOTAN_SIMD_USE_NEON) 332| | return SIMD_4x32( 333| | vorrq_u32(vshlq_n_u32(m_simd, static_cast(ROT)), vshrq_n_u32(m_simd, static_cast(32 - ROT)))); 334| |#elif defined(BOTAN_SIMD_USE_LSX) 335| | return SIMD_4x32(__lsx_vrotri_w(raw(), 32 - ROT)); 336| |#elif defined(BOTAN_SIMD_USE_SIMD128) 337| | return SIMD_4x32(wasm_v128_or(wasm_i32x4_shl(m_simd, ROT), wasm_u32x4_shr(m_simd, 32 - ROT))); 338| |#endif 339| 47.2k| } _ZNK5Botan9SIMD_4x3216shift_elems_leftILm2EEES0_vQleT_Li3E: 564| 4.24k| { 565| 4.24k|#if defined(BOTAN_SIMD_USE_SSSE3) 566| 4.24k| return SIMD_4x32(_mm_slli_si128(raw(), 4 * I)); 567| |#elif defined(BOTAN_SIMD_USE_NEON) 568| | return SIMD_4x32(vextq_u32(vdupq_n_u32(0), raw(), 4 - I)); 569| |#elif defined(BOTAN_SIMD_USE_VSX) 570| | const __vector unsigned int zero = vec_splat_u32(0); 571| | 572| | const __vector unsigned char shuf[3] = { 573| | {16, 17, 18, 19, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11}, 574| | {16, 17, 18, 19, 20, 21, 22, 23, 0, 1, 2, 3, 4, 5, 6, 7}, 575| | {16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 0, 1, 2, 3}, 576| | }; 577| | 578| | return SIMD_4x32(vec_perm(raw(), zero, shuf[I - 1])); 579| |#elif defined(BOTAN_SIMD_USE_LSX) 580| | return SIMD_4x32(__lsx_vbsll_v(raw(), 4 * I)); 581| |#elif defined(BOTAN_SIMD_USE_SIMD128) 582| | if constexpr(I == 0) { 583| | return SIMD_4x32(m_simd); 584| | } 585| | 586| | const auto zero = wasm_u32x4_const_splat(0); 587| | if constexpr(I == 1) { 588| | return SIMD_4x32(wasm_i8x16_shuffle(m_simd, zero, 16, 16, 16, 16, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11)); 589| | } 590| | if constexpr(I == 2) { 591| | return SIMD_4x32(wasm_i8x16_shuffle(m_simd, zero, 16, 16, 16, 16, 16, 16, 16, 16, 0, 1, 2, 3, 4, 5, 6, 7)); 592| | } 593| | 594| | return SIMD_4x32(wasm_i8x16_shuffle(m_simd, zero, 16, 16, 16, 16, 16, 16, 16, 16, 16, 16, 16, 16, 0, 1, 2, 3)); 595| |#endif 596| 4.24k| } _ZNK5Botan9SIMD_4x323shrILi31EEES0_v: 485| 476| SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 shr() const noexcept { 486| 476|#if defined(BOTAN_SIMD_USE_SSSE3) 487| 476| return SIMD_4x32(_mm_srli_epi32(m_simd, SHIFT)); 488| | 489| |#elif defined(BOTAN_SIMD_USE_VSX) 490| | return SIMD_4x32(vec_sr(m_simd, vec_splats(static_cast(SHIFT)))); 491| |#elif defined(BOTAN_SIMD_USE_NEON) 492| | return SIMD_4x32(vshrq_n_u32(m_simd, SHIFT)); 493| |#elif defined(BOTAN_SIMD_USE_LSX) 494| | return SIMD_4x32(__lsx_vsrli_w(m_simd, SHIFT)); 495| |#elif defined(BOTAN_SIMD_USE_SIMD128) 496| | return SIMD_4x32(wasm_u32x4_shr(m_simd, SHIFT)); 497| |#endif 498| 476| } _ZNK5Botan9SIMD_4x3216shift_elems_leftILm1EEES0_vQleT_Li3E: 564| 25.8k| { 565| 25.8k|#if defined(BOTAN_SIMD_USE_SSSE3) 566| 25.8k| return SIMD_4x32(_mm_slli_si128(raw(), 4 * I)); 567| |#elif defined(BOTAN_SIMD_USE_NEON) 568| | return SIMD_4x32(vextq_u32(vdupq_n_u32(0), raw(), 4 - I)); 569| |#elif defined(BOTAN_SIMD_USE_VSX) 570| | const __vector unsigned int zero = vec_splat_u32(0); 571| | 572| | const __vector unsigned char shuf[3] = { 573| | {16, 17, 18, 19, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11}, 574| | {16, 17, 18, 19, 20, 21, 22, 23, 0, 1, 2, 3, 4, 5, 6, 7}, 575| | {16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 0, 1, 2, 3}, 576| | }; 577| | 578| | return SIMD_4x32(vec_perm(raw(), zero, shuf[I - 1])); 579| |#elif defined(BOTAN_SIMD_USE_LSX) 580| | return SIMD_4x32(__lsx_vbsll_v(raw(), 4 * I)); 581| |#elif defined(BOTAN_SIMD_USE_SIMD128) 582| | if constexpr(I == 0) { 583| | return SIMD_4x32(m_simd); 584| | } 585| | 586| | const auto zero = wasm_u32x4_const_splat(0); 587| | if constexpr(I == 1) { 588| | return SIMD_4x32(wasm_i8x16_shuffle(m_simd, zero, 16, 16, 16, 16, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11)); 589| | } 590| | if constexpr(I == 2) { 591| | return SIMD_4x32(wasm_i8x16_shuffle(m_simd, zero, 16, 16, 16, 16, 16, 16, 16, 16, 0, 1, 2, 3, 4, 5, 6, 7)); 592| | } 593| | 594| | return SIMD_4x32(wasm_i8x16_shuffle(m_simd, zero, 16, 16, 16, 16, 16, 16, 16, 16, 16, 16, 16, 16, 0, 1, 2, 3)); 595| |#endif 596| 25.8k| } _ZNK5Botan9SIMD_4x323shlILi1EEES0_vQaagtT_Li0EltT_Li32E: 469| 476| { 470| 476|#if defined(BOTAN_SIMD_USE_SSSE3) 471| 476| return SIMD_4x32(_mm_slli_epi32(m_simd, SHIFT)); 472| | 473| |#elif defined(BOTAN_SIMD_USE_VSX) 474| | return SIMD_4x32(vec_sl(m_simd, vec_splats(static_cast(SHIFT)))); 475| |#elif defined(BOTAN_SIMD_USE_NEON) 476| | return SIMD_4x32(vshlq_n_u32(m_simd, SHIFT)); 477| |#elif defined(BOTAN_SIMD_USE_LSX) 478| | return SIMD_4x32(__lsx_vslli_w(m_simd, SHIFT)); 479| |#elif defined(BOTAN_SIMD_USE_SIMD128) 480| | return SIMD_4x32(wasm_i32x4_shl(m_simd, SHIFT)); 481| |#endif 482| 476| } _ZN5Botan9SIMD_4x64C2Ev: 33| 58.2k| BOTAN_FN_ISA_SIMD_4X64 SIMD_4x64() : m_simd(_mm256_setzero_si256()) {} _ZNK5Botan9SIMD_4x645bswapEv: 65| 58.2k| SIMD_4x64 BOTAN_FN_ISA_SIMD_4X64 bswap() const { 66| 58.2k| const auto idx = _mm256_set_epi8( 67| 58.2k| 8, 9, 10, 11, 12, 13, 14, 15, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 0, 1, 2, 3, 4, 5, 6, 7); 68| | 69| 58.2k| return SIMD_4x64(_mm256_shuffle_epi8(m_simd, idx)); 70| 58.2k| } _ZN5Botan9SIMD_4x64C2EDv4_x: 267| 2.26M| explicit BOTAN_FN_ISA_SIMD_4X64 SIMD_4x64(__m256i x) : m_simd(x) {} _ZN5Botan9SIMD_4x64eOERKS0_: 112| 931k| BOTAN_FN_ISA_SIMD_4X64 void operator^=(const SIMD_4x64& other) { 113| 931k| m_simd = _mm256_xor_si256(m_simd, other.m_simd); 114| 931k| } _ZNK5Botan9SIMD_4x64eoERKS0_: 90| 931k| SIMD_4x64 BOTAN_FN_ISA_SIMD_4X64 operator^(const SIMD_4x64& other) const { 91| 931k| SIMD_4x64 retval(*this); 92| 931k| retval ^= other; 93| 931k| return retval; 94| 931k| } _ZN5Botan9SIMD_4x648load_le2EPKvS2_: 36| 58.2k| static BOTAN_FN_ISA_SIMD_4X64 SIMD_4x64 load_le2(const void* lo, const void* hi) { 37| 58.2k| return SIMD_4x64( 38| 58.2k| _mm256_loadu2_m128i(reinterpret_cast(lo), reinterpret_cast(hi))); 39| 58.2k| } _ZN5Botan9SIMD_4x648load_be2EPKvS2_: 41| 58.2k| static BOTAN_FN_ISA_SIMD_4X64 SIMD_4x64 load_be2(const void* lo, const void* hi) { 42| 58.2k| return SIMD_4x64::load_le2(lo, hi).bswap(); 43| 58.2k| } _ZN5Botan9SIMD_4x6414broadcast_2x64EPKm: 61| 291k| static BOTAN_FN_ISA_SIMD_4X64 SIMD_4x64 broadcast_2x64(const uint64_t* in) { 62| 291k| return SIMD_4x64(_mm256_broadcastsi128_si256(_mm_loadu_si128(reinterpret_cast(in)))); 63| 291k| } _ZN5Botan9SIMD_4x649store_le2EPvS1_: 78| 291k| BOTAN_FN_ISA_SIMD_4X64 void store_le2(void* outh, void* outl) { 79| 291k| _mm256_storeu2_m128i(reinterpret_cast<__m128i*>(outh), reinterpret_cast<__m128i*>(outl), m_simd); 80| 291k| } _ZNK5Botan9SIMD_4x64plERKS0_: 84| 989k| SIMD_4x64 BOTAN_FN_ISA_SIMD_4X64 operator+(const SIMD_4x64& other) const { 85| 989k| SIMD_4x64 retval(*this); 86| 989k| retval += other; 87| 989k| return retval; 88| 989k| } _ZN5Botan9SIMD_4x64pLERKS0_: 108| 989k| BOTAN_FN_ISA_SIMD_4X64 void operator+=(const SIMD_4x64& other) { 109| 989k| m_simd = _mm256_add_epi64(m_simd, other.m_simd); 110| 989k| } _ZN5Botan9SIMD_4x647alignr8ERKS0_S2_: 233| 465k| static SIMD_4x64 BOTAN_FN_ISA_SIMD_4X64 alignr8(const SIMD_4x64& a, const SIMD_4x64& b) { 234| | return SIMD_4x64(_mm256_alignr_epi8(a.m_simd, b.m_simd, 8)); 235| 465k| } _ZNK5Botan9SIMD_4x644rotrILm1EEES0_vQaagtT_Li0EltT_Li64E: 130| 232k| { 131| |#if defined(__AVX512VL__) 132| | return SIMD_4x64(_mm256_ror_epi64(m_simd, ROT)); 133| |#else 134| | if constexpr(ROT == 8) { 135| | const auto shuf_rot_8 = 136| | _mm256_set_epi64x(0x080f0e0d0c0b0a09, 0x0007060504030201, 0x080f0e0d0c0b0a09, 0x0007060504030201); 137| | 138| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_8)); 139| | } else if constexpr(ROT == 16) { 140| | const auto shuf_rot_16 = 141| | _mm256_set_epi64x(0x09080f0e0d0c0b0a, 0x0100070605040302, 0x09080f0e0d0c0b0a, 0x0100070605040302); 142| | 143| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_16)); 144| | } else if constexpr(ROT == 24) { 145| | const auto shuf_rot_24 = 146| | _mm256_set_epi64x(0x0a09080f0e0d0c0b, 0x0201000706050403, 0x0a09080f0e0d0c0b, 0x0201000706050403); 147| | 148| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_24)); 149| | } else if constexpr(ROT == 32) { 150| | const auto shuf_rot_32 = 151| | _mm256_set_epi64x(0x0b0a09080f0e0d0c, 0x0302010007060504, 0x0b0a09080f0e0d0c, 0x0302010007060504); 152| | 153| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_32)); 154| 232k| } else { 155| 232k| return SIMD_4x64(_mm256_or_si256(_mm256_srli_epi64(m_simd, static_cast(ROT)), 156| 232k| _mm256_slli_epi64(m_simd, static_cast(64 - ROT)))); 157| 232k| } 158| 232k|#endif 159| 232k| } _ZNK5Botan9SIMD_4x644rotrILm8EEES0_vQaagtT_Li0EltT_Li64E: 130| 232k| { 131| |#if defined(__AVX512VL__) 132| | return SIMD_4x64(_mm256_ror_epi64(m_simd, ROT)); 133| |#else 134| 232k| if constexpr(ROT == 8) { 135| 232k| const auto shuf_rot_8 = 136| 232k| _mm256_set_epi64x(0x080f0e0d0c0b0a09, 0x0007060504030201, 0x080f0e0d0c0b0a09, 0x0007060504030201); 137| | 138| 232k| return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_8)); 139| | } else if constexpr(ROT == 16) { 140| | const auto shuf_rot_16 = 141| | _mm256_set_epi64x(0x09080f0e0d0c0b0a, 0x0100070605040302, 0x09080f0e0d0c0b0a, 0x0100070605040302); 142| | 143| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_16)); 144| | } else if constexpr(ROT == 24) { 145| | const auto shuf_rot_24 = 146| | _mm256_set_epi64x(0x0a09080f0e0d0c0b, 0x0201000706050403, 0x0a09080f0e0d0c0b, 0x0201000706050403); 147| | 148| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_24)); 149| | } else if constexpr(ROT == 32) { 150| | const auto shuf_rot_32 = 151| | _mm256_set_epi64x(0x0b0a09080f0e0d0c, 0x0302010007060504, 0x0b0a09080f0e0d0c, 0x0302010007060504); 152| | 153| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_32)); 154| | } else { 155| | return SIMD_4x64(_mm256_or_si256(_mm256_srli_epi64(m_simd, static_cast(ROT)), 156| | _mm256_slli_epi64(m_simd, static_cast(64 - ROT)))); 157| | } 158| 232k|#endif 159| 232k| } _ZNK5Botan9SIMD_4x643shrILi7EEES0_v: 224| 232k| SIMD_4x64 BOTAN_FN_ISA_SIMD_4X64 shr() const noexcept { 225| 232k| return SIMD_4x64(_mm256_srli_epi64(m_simd, SHIFT)); 226| 232k| } _ZNK5Botan9SIMD_4x644rotrILm19EEES0_vQaagtT_Li0EltT_Li64E: 130| 232k| { 131| |#if defined(__AVX512VL__) 132| | return SIMD_4x64(_mm256_ror_epi64(m_simd, ROT)); 133| |#else 134| | if constexpr(ROT == 8) { 135| | const auto shuf_rot_8 = 136| | _mm256_set_epi64x(0x080f0e0d0c0b0a09, 0x0007060504030201, 0x080f0e0d0c0b0a09, 0x0007060504030201); 137| | 138| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_8)); 139| | } else if constexpr(ROT == 16) { 140| | const auto shuf_rot_16 = 141| | _mm256_set_epi64x(0x09080f0e0d0c0b0a, 0x0100070605040302, 0x09080f0e0d0c0b0a, 0x0100070605040302); 142| | 143| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_16)); 144| | } else if constexpr(ROT == 24) { 145| | const auto shuf_rot_24 = 146| | _mm256_set_epi64x(0x0a09080f0e0d0c0b, 0x0201000706050403, 0x0a09080f0e0d0c0b, 0x0201000706050403); 147| | 148| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_24)); 149| | } else if constexpr(ROT == 32) { 150| | const auto shuf_rot_32 = 151| | _mm256_set_epi64x(0x0b0a09080f0e0d0c, 0x0302010007060504, 0x0b0a09080f0e0d0c, 0x0302010007060504); 152| | 153| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_32)); 154| 232k| } else { 155| 232k| return SIMD_4x64(_mm256_or_si256(_mm256_srli_epi64(m_simd, static_cast(ROT)), 156| 232k| _mm256_slli_epi64(m_simd, static_cast(64 - ROT)))); 157| 232k| } 158| 232k|#endif 159| 232k| } _ZNK5Botan9SIMD_4x644rotrILm61EEES0_vQaagtT_Li0EltT_Li64E: 130| 232k| { 131| |#if defined(__AVX512VL__) 132| | return SIMD_4x64(_mm256_ror_epi64(m_simd, ROT)); 133| |#else 134| | if constexpr(ROT == 8) { 135| | const auto shuf_rot_8 = 136| | _mm256_set_epi64x(0x080f0e0d0c0b0a09, 0x0007060504030201, 0x080f0e0d0c0b0a09, 0x0007060504030201); 137| | 138| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_8)); 139| | } else if constexpr(ROT == 16) { 140| | const auto shuf_rot_16 = 141| | _mm256_set_epi64x(0x09080f0e0d0c0b0a, 0x0100070605040302, 0x09080f0e0d0c0b0a, 0x0100070605040302); 142| | 143| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_16)); 144| | } else if constexpr(ROT == 24) { 145| | const auto shuf_rot_24 = 146| | _mm256_set_epi64x(0x0a09080f0e0d0c0b, 0x0201000706050403, 0x0a09080f0e0d0c0b, 0x0201000706050403); 147| | 148| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_24)); 149| | } else if constexpr(ROT == 32) { 150| | const auto shuf_rot_32 = 151| | _mm256_set_epi64x(0x0b0a09080f0e0d0c, 0x0302010007060504, 0x0b0a09080f0e0d0c, 0x0302010007060504); 152| | 153| | return SIMD_4x64(_mm256_shuffle_epi8(m_simd, shuf_rot_32)); 154| 232k| } else { 155| 232k| return SIMD_4x64(_mm256_or_si256(_mm256_srli_epi64(m_simd, static_cast(ROT)), 156| 232k| _mm256_slli_epi64(m_simd, static_cast(64 - ROT)))); 157| 232k| } 158| 232k|#endif 159| 232k| } _ZNK5Botan9SIMD_4x643shrILi6EEES0_v: 224| 232k| SIMD_4x64 BOTAN_FN_ISA_SIMD_4X64 shr() const noexcept { 225| 232k| return SIMD_4x64(_mm256_srli_epi64(m_simd, SHIFT)); 226| 232k| } _ZN5Botan9SIMD_8x32C2Ejjjjjjjj: 46| 3.90k| uint32_t B7) noexcept { 47| | // NOLINTNEXTLINE(*-prefer-member-initializer) 48| 3.90k| m_avx2 = _mm256_set_epi32(B7, B6, B5, B4, B3, B2, B1, B0); 49| 3.90k| } _ZN5Botan9SIMD_8x32C2Ejjjj: 52| 42| explicit SIMD_8x32(uint32_t B0, uint32_t B1, uint32_t B2, uint32_t B3) noexcept { 53| | // NOLINTNEXTLINE(*-prefer-member-initializer) 54| 42| m_avx2 = _mm256_set_epi32(B3, B2, B1, B0, B3, B2, B1, B0); 55| 42| } _ZN5Botan9SIMD_8x325splatEj: 58| 117k| static SIMD_8x32 splat(uint32_t B) noexcept { return SIMD_8x32(_mm256_set1_epi32(B)); } _ZN5Botan9SIMD_8x327load_leEPKh: 61| 5.14k| static SIMD_8x32 load_le(const uint8_t* in) noexcept { 62| 5.14k| return SIMD_8x32(_mm256_loadu_si256(reinterpret_cast(in))); 63| 5.14k| } _ZN5Botan9SIMD_8x3210load_le128EPKh: 71| 42| static SIMD_8x32 load_le128(const uint8_t* in) noexcept { 72| 42| return SIMD_8x32(_mm256_broadcastsi128_si256(_mm_loadu_si128(reinterpret_cast(in)))); 73| 42| } _ZNK5Botan9SIMD_8x328store_leEPh: 94| 65.5k| void store_le(uint8_t out[]) const noexcept { _mm256_storeu_si256(reinterpret_cast<__m256i*>(out), m_avx2); } _ZNK5Botan9SIMD_8x32plERKS0_: 174| 3.85k| SIMD_8x32 operator+(const SIMD_8x32& other) const noexcept { 175| 3.85k| SIMD_8x32 retval(*this); 176| 3.85k| retval += other; 177| 3.85k| return retval; 178| 3.85k| } _ZNK5Botan9SIMD_8x32miERKS0_: 181| 3.77k| SIMD_8x32 operator-(const SIMD_8x32& other) const noexcept { 182| 3.77k| SIMD_8x32 retval(*this); 183| 3.77k| retval -= other; 184| 3.77k| return retval; 185| 3.77k| } _ZN5Botan9SIMD_8x32pLERKS0_: 209| 1.27M| void operator+=(const SIMD_8x32& other) { m_avx2 = _mm256_add_epi32(m_avx2, other.m_avx2); } _ZN5Botan9SIMD_8x32mIERKS0_: 212| 3.77k| void operator-=(const SIMD_8x32& other) { m_avx2 = _mm256_sub_epi32(m_avx2, other.m_avx2); } _ZN5Botan9SIMD_8x32eOERKS0_: 215| 1.21M| void operator^=(const SIMD_8x32& other) { m_avx2 = _mm256_xor_si256(m_avx2, other.m_avx2); } _ZN5Botan9SIMD_8x329transposeERS0_S1_S1_S1_: 274| 15.1k| static void transpose(SIMD_8x32& B0, SIMD_8x32& B1, SIMD_8x32& B2, SIMD_8x32& B3) noexcept { 275| 15.1k| const __m256i T0 = _mm256_unpacklo_epi32(B0.m_avx2, B1.m_avx2); 276| 15.1k| const __m256i T1 = _mm256_unpacklo_epi32(B2.m_avx2, B3.m_avx2); 277| 15.1k| const __m256i T2 = _mm256_unpackhi_epi32(B0.m_avx2, B1.m_avx2); 278| 15.1k| const __m256i T3 = _mm256_unpackhi_epi32(B2.m_avx2, B3.m_avx2); 279| | 280| 15.1k| B0.m_avx2 = _mm256_unpacklo_epi64(T0, T1); 281| 15.1k| B1.m_avx2 = _mm256_unpackhi_epi64(T0, T1); 282| 15.1k| B2.m_avx2 = _mm256_unpacklo_epi64(T2, T3); 283| 15.1k| B3.m_avx2 = _mm256_unpackhi_epi64(T2, T3); 284| 15.1k| } _ZN5Botan9SIMD_8x329transposeERS0_S1_S1_S1_S1_S1_S1_S1_: 312| 7.55k| SIMD_8x32& B7) noexcept { 313| 7.55k| transpose(B0, B1, B2, B3); 314| 7.55k| transpose(B4, B5, B6, B7); 315| | 316| 7.55k| swap_tops(B0, B4); 317| 7.55k| swap_tops(B1, B5); 318| 7.55k| swap_tops(B2, B6); 319| 7.55k| swap_tops(B3, B7); 320| 7.55k| } _ZNK5Botan9SIMD_8x3211unsigned_ltERKS0_: 327| 3.77k| SIMD_8x32 BOTAN_FN_ISA_SIMD_8X32 unsigned_lt(const SIMD_8x32& other) const noexcept { 328| | // No unsigned comparison before AVX-512; bias into the signed domain 329| 3.77k| const __m256i bias = _mm256_set1_epi32(static_cast(0x80000000)); 330| 3.77k| return SIMD_8x32(_mm256_cmpgt_epi32(_mm256_xor_si256(other.raw(), bias), _mm256_xor_si256(raw(), bias))); 331| 3.77k| } _ZN5Botan9SIMD_8x3212byte_shuffleERKS0_S2_: 351| 2.61k| static inline SIMD_8x32 BOTAN_FN_ISA_SIMD_8X32 byte_shuffle(const SIMD_8x32& tbl, const SIMD_8x32& idx) { 352| 2.61k| return SIMD_8x32(_mm256_shuffle_epi8(tbl.raw(), idx.raw())); 353| 2.61k| } _ZN5Botan9SIMD_8x3215reset_registersEv: 385| 3.77k| static void reset_registers() noexcept { _mm256_zeroupper(); } _ZN5Botan9SIMD_8x3214zero_registersEv: 388| 3.77k| static void zero_registers() noexcept { _mm256_zeroall(); } _ZNK5Botan9SIMD_8x323rawEv: 390| 133k| __m256i BOTAN_FN_ISA_SIMD_8X32 raw() const noexcept { return m_avx2; } _ZN5Botan9SIMD_8x32C2EDv4_x: 393| 1.39M| explicit SIMD_8x32(__m256i x) noexcept : m_avx2(x) {} _ZN5Botan9SIMD_8x329swap_topsERS0_S1_: 397| 30.2k| static void swap_tops(SIMD_8x32& A, SIMD_8x32& B) { 398| 30.2k| const auto T0 = SIMD_8x32(_mm256_permute2x128_si256(A.raw(), B.raw(), 0 + (2 << 4))); 399| | const auto T1 = SIMD_8x32(_mm256_permute2x128_si256(A.raw(), B.raw(), 1 + (3 << 4))); 400| 30.2k| A = T0; 401| 30.2k| B = T1; 402| 30.2k| } _ZNK5Botan9SIMD_8x324rotlILm7EEES0_vQaagtT_Li0EltT_Li32E: 128| 302k| { 129| |#if defined(__AVX512VL__) 130| | return SIMD_8x32(_mm256_rol_epi32(m_avx2, ROT)); 131| |#else 132| | if constexpr(ROT == 8) { 133| | const __m256i shuf_rotl_8 = 134| | _mm256_set_epi64x(0x0e0d0c0f'0a09080b, 0x06050407'02010003, 0x0e0d0c0f'0a09080b, 0x06050407'02010003); 135| | 136| | return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_8)); 137| | } else if constexpr(ROT == 16) { 138| | const __m256i shuf_rotl_16 = 139| | _mm256_set_epi64x(0x0d0c0f0e'09080b0a, 0x05040706'01000302, 0x0d0c0f0e'09080b0a, 0x05040706'01000302); 140| | 141| | return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_16)); 142| | } else if constexpr(ROT == 24) { 143| | const __m256i shuf_rotl_24 = 144| | _mm256_set_epi64x(0x0c0f0e0d'080b0a09, 0x04070605'00030201, 0x0c0f0e0d'080b0a09, 0x04070605'00030201); 145| | 146| | return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_24)); 147| 302k| } else { 148| 302k| return SIMD_8x32(_mm256_xor_si256(_mm256_slli_epi32(m_avx2, static_cast(ROT)), 149| 302k| _mm256_srli_epi32(m_avx2, static_cast(32 - ROT)))); 150| 302k| } 151| 302k|#endif 152| 302k| } _ZNK5Botan9SIMD_8x324rotlILm16EEES0_vQaagtT_Li0EltT_Li32E: 128| 302k| { 129| |#if defined(__AVX512VL__) 130| | return SIMD_8x32(_mm256_rol_epi32(m_avx2, ROT)); 131| |#else 132| | if constexpr(ROT == 8) { 133| | const __m256i shuf_rotl_8 = 134| | _mm256_set_epi64x(0x0e0d0c0f'0a09080b, 0x06050407'02010003, 0x0e0d0c0f'0a09080b, 0x06050407'02010003); 135| | 136| | return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_8)); 137| 302k| } else if constexpr(ROT == 16) { 138| 302k| const __m256i shuf_rotl_16 = 139| 302k| _mm256_set_epi64x(0x0d0c0f0e'09080b0a, 0x05040706'01000302, 0x0d0c0f0e'09080b0a, 0x05040706'01000302); 140| | 141| 302k| return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_16)); 142| | } else if constexpr(ROT == 24) { 143| | const __m256i shuf_rotl_24 = 144| | _mm256_set_epi64x(0x0c0f0e0d'080b0a09, 0x04070605'00030201, 0x0c0f0e0d'080b0a09, 0x04070605'00030201); 145| | 146| | return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_24)); 147| | } else { 148| | return SIMD_8x32(_mm256_xor_si256(_mm256_slli_epi32(m_avx2, static_cast(ROT)), 149| | _mm256_srli_epi32(m_avx2, static_cast(32 - ROT)))); 150| | } 151| 302k|#endif 152| 302k| } _ZNK5Botan9SIMD_8x324rotlILm12EEES0_vQaagtT_Li0EltT_Li32E: 128| 302k| { 129| |#if defined(__AVX512VL__) 130| | return SIMD_8x32(_mm256_rol_epi32(m_avx2, ROT)); 131| |#else 132| | if constexpr(ROT == 8) { 133| | const __m256i shuf_rotl_8 = 134| | _mm256_set_epi64x(0x0e0d0c0f'0a09080b, 0x06050407'02010003, 0x0e0d0c0f'0a09080b, 0x06050407'02010003); 135| | 136| | return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_8)); 137| | } else if constexpr(ROT == 16) { 138| | const __m256i shuf_rotl_16 = 139| | _mm256_set_epi64x(0x0d0c0f0e'09080b0a, 0x05040706'01000302, 0x0d0c0f0e'09080b0a, 0x05040706'01000302); 140| | 141| | return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_16)); 142| | } else if constexpr(ROT == 24) { 143| | const __m256i shuf_rotl_24 = 144| | _mm256_set_epi64x(0x0c0f0e0d'080b0a09, 0x04070605'00030201, 0x0c0f0e0d'080b0a09, 0x04070605'00030201); 145| | 146| | return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_24)); 147| 302k| } else { 148| 302k| return SIMD_8x32(_mm256_xor_si256(_mm256_slli_epi32(m_avx2, static_cast(ROT)), 149| 302k| _mm256_srli_epi32(m_avx2, static_cast(32 - ROT)))); 150| 302k| } 151| 302k|#endif 152| 302k| } _ZNK5Botan9SIMD_8x324rotlILm8EEES0_vQaagtT_Li0EltT_Li32E: 128| 302k| { 129| |#if defined(__AVX512VL__) 130| | return SIMD_8x32(_mm256_rol_epi32(m_avx2, ROT)); 131| |#else 132| 302k| if constexpr(ROT == 8) { 133| 302k| const __m256i shuf_rotl_8 = 134| 302k| _mm256_set_epi64x(0x0e0d0c0f'0a09080b, 0x06050407'02010003, 0x0e0d0c0f'0a09080b, 0x06050407'02010003); 135| | 136| 302k| return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_8)); 137| | } else if constexpr(ROT == 16) { 138| | const __m256i shuf_rotl_16 = 139| | _mm256_set_epi64x(0x0d0c0f0e'09080b0a, 0x05040706'01000302, 0x0d0c0f0e'09080b0a, 0x05040706'01000302); 140| | 141| | return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_16)); 142| | } else if constexpr(ROT == 24) { 143| | const __m256i shuf_rotl_24 = 144| | _mm256_set_epi64x(0x0c0f0e0d'080b0a09, 0x04070605'00030201, 0x0c0f0e0d'080b0a09, 0x04070605'00030201); 145| | 146| | return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_24)); 147| | } else { 148| | return SIMD_8x32(_mm256_xor_si256(_mm256_slli_epi32(m_avx2, static_cast(ROT)), 149| | _mm256_srli_epi32(m_avx2, static_cast(32 - ROT)))); 150| | } 151| 302k|#endif 152| 302k| } _ZNK5Botan23Gf2AffineTransformation16affine_transformENS_9SIMD_4x32E: 194| 218k| inline SIMD_4x32 BOTAN_FN_ISA_HWAES affine_transform(SIMD_4x32 x) const { 195| 218k| const SIMD_4x32 tbl_lo(lo[0], lo[1], lo[2], lo[3]); 196| 218k| const SIMD_4x32 tbl_hi(hi[0], hi[1], hi[2], hi[3]); 197| 218k| const auto lo_mask = SIMD_4x32::splat_u8(0x0F); 198| | 199| 218k| return SIMD_4x32::byte_shuffle(tbl_lo, lo_mask & x) ^ SIMD_4x32::byte_shuffle(tbl_hi, lo_mask & x.shr<4>()); 200| 218k| } _ZN5Botan11hw_aes_sboxENS_9SIMD_4x32E: 27| 69.4k|inline SIMD_4x32 BOTAN_FN_ISA_HWAES hw_aes_sbox(SIMD_4x32 x) { 28| |#if defined(BOTAN_TARGET_ARCH_IS_PPC64) 29| | // vsbox is SubBytes alone so no shuffle is required 30| | #if defined(__clang__) 31| | return SIMD_4x32(reinterpret_cast<__vector unsigned int>( 32| | __builtin_crypto_vsbox(reinterpret_cast<__vector unsigned char>(x.raw())))); 33| | #else 34| | return SIMD_4x32(reinterpret_cast<__vector unsigned int>( 35| | __builtin_crypto_vsbox(reinterpret_cast<__vector unsigned long long>(x.raw())))); 36| | #endif 37| |#else 38| | // Undo the ShiftRows with a byte shuffle implementing InvShiftRows 39| 69.4k| const auto inv_sr = SIMD_4x32(0x070A0D00, 0x0B0E0104, 0x0F020508, 0x0306090C); 40| | 41| 69.4k| #if defined(BOTAN_TARGET_ARCH_IS_X86_FAMILY) 42| 69.4k| const auto enc = SIMD_4x32(_mm_aesenclast_si128(x.raw(), _mm_setzero_si128())); 43| | #elif defined(BOTAN_TARGET_ARCH_IS_ARM64) 44| | const auto enc = SIMD_4x32(vreinterpretq_u32_u8(vaeseq_u8(vreinterpretq_u8_u32(x.raw()), vdupq_n_u8(0)))); 45| | #else 46| | #error "hw_aes_sbox not implemented for this architecture" 47| | #endif 48| | 49| 69.4k| return SIMD_4x32::byte_shuffle(enc, inv_sr); 50| 69.4k|#endif 51| 69.4k|} _ZN5Botan15hw_aes_inv_sboxENS_9SIMD_4x32E: 56| 32.2k|inline SIMD_4x32 BOTAN_FN_ISA_HWAES hw_aes_inv_sbox(SIMD_4x32 x) { 57| |#if defined(BOTAN_TARGET_ARCH_IS_PPC64) 58| | /* 59| | * Undo the InvShiftRows with a byte shuffle implementing ShiftRows. POWER 60| | * numbers the AES state bytes starting from the most significant byte of the 61| | * register, so the indices differ from x86/ARM and depend on endianness. 62| | */ 63| | const auto sr = (std::endian::native == std::endian::little) 64| | ? SIMD_4x32(0x030E0904, 0x07020D08, 0x0B06010C, 0x0F0A0500) 65| | : SIMD_4x32(0x0306090C, 0x070A0D00, 0x0B0E0104, 0x0F020508); 66| |#else 67| | // Undo the InvShiftRows with a byte shuffle implementing ShiftRows 68| 32.2k| const auto sr = SIMD_4x32(0x0F0A0500, 0x030E0904, 0x07020D08, 0x0B06010C); 69| 32.2k|#endif 70| | 71| 32.2k|#if defined(BOTAN_TARGET_ARCH_IS_X86_FAMILY) 72| 32.2k| const auto dec = SIMD_4x32(_mm_aesdeclast_si128(x.raw(), _mm_setzero_si128())); 73| |#elif defined(BOTAN_TARGET_ARCH_IS_ARM64) 74| | const auto dec = SIMD_4x32(vreinterpretq_u32_u8(vaesdq_u8(vreinterpretq_u8_u32(x.raw()), vdupq_n_u8(0)))); 75| |#elif defined(BOTAN_TARGET_ARCH_IS_PPC64) 76| | #if defined(__clang__) 77| | const auto dec = SIMD_4x32(reinterpret_cast<__vector unsigned int>(__builtin_crypto_vncipherlast( 78| | reinterpret_cast<__vector unsigned char>(x.raw()), reinterpret_cast<__vector unsigned char>(SIMD_4x32().raw())))); 79| | #else 80| | const auto dec = SIMD_4x32(reinterpret_cast<__vector unsigned int>( 81| | __builtin_crypto_vncipherlast(reinterpret_cast<__vector unsigned long long>(x.raw()), 82| | reinterpret_cast<__vector unsigned long long>(SIMD_4x32().raw())))); 83| | #endif 84| |#else 85| | #error "hw_aes_inv_sbox not implemented for this architecture" 86| |#endif 87| | 88| 32.2k| return SIMD_4x32::byte_shuffle(dec, sr); 89| 32.2k|} _ZN5Botan12value_existsINSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EEEEbRKNS1_6vectorIT_NS5_ISB_EEEERKT0_: 44| 158k|bool value_exists(const std::vector& vec, const V& val) { 45| 277k| for(const auto& elem : vec) { ------------------ | Branch (45:25): [True: 277k, False: 0] ------------------ 46| 277k| if(elem == val) { ------------------ | Branch (46:10): [True: 158k, False: 119k] ------------------ 47| 158k| return true; 48| 158k| } 49| 277k| } 50| 0| return false; 51| 158k|} _ZN5Botan12value_existsINS_3TLS12Group_ParamsES2_EEbRKNSt3__16vectorIT_NS3_9allocatorIS5_EEEERKT0_: 44| 5.63k|bool value_exists(const std::vector& vec, const V& val) { 45| 8.56k| for(const auto& elem : vec) { ------------------ | Branch (45:25): [True: 8.56k, False: 4.42k] ------------------ 46| 8.56k| if(elem == val) { ------------------ | Branch (46:10): [True: 1.21k, False: 7.35k] ------------------ 47| 1.21k| return true; 48| 1.21k| } 49| 8.56k| } 50| 4.42k| return false; 51| 5.63k|} tls_channel_impl_12.cpp:_ZN5Botan13map_remove_ifINSt3__13mapItNS1_10shared_ptrINS_3TLS23Connection_Cipher_StateEEENS1_4lessItEENS1_9allocatorINS1_4pairIKtS6_EEEEEEZNS4_15Channel_Impl_1216activate_sessionEvE3$_0EEvT0_RT_: 54| 8|void map_remove_if(Pred pred, T& assoc) { 55| 8| auto i = assoc.begin(); 56| 24| while(i != assoc.end()) { ------------------ | Branch (56:10): [True: 16, False: 8] ------------------ 57| 16| if(pred(i->first)) { ------------------ | Branch (57:10): [True: 8, False: 8] ------------------ 58| 8| assoc.erase(i++); 59| 8| } else { 60| 8| i++; 61| 8| } 62| 16| } 63| 8|} tls_channel_impl_12.cpp:_ZN5Botan13map_remove_ifINSt3__13mapItNS_3TLS15Channel_Impl_1226Retained_Read_Cipher_StateENS1_4lessItEENS1_9allocatorINS1_4pairIKtS5_EEEEEEZNS4_16activate_sessionEvE3$_0EEvT0_RT_: 54| 8|void map_remove_if(Pred pred, T& assoc) { 55| 8| auto i = assoc.begin(); 56| 24| while(i != assoc.end()) { ------------------ | Branch (56:10): [True: 16, False: 8] ------------------ 57| 16| if(pred(i->first)) { ------------------ | Branch (57:10): [True: 8, False: 8] ------------------ 58| 8| assoc.erase(i++); 59| 8| } else { 60| 8| i++; 61| 8| } 62| 16| } 63| 8|} _ZN5Botan11Thread_PoolD2Ev: 93| 1| ~Thread_Pool() { shutdown(); } _ZN5Botan14Joining_FutureIbEC2EOS1_: 40| 316| Joining_Future(Joining_Future&&) noexcept = default; primality.cpp:_ZN5Botan11Thread_Pool3runIZNS_12_GLOBAL__N_123miller_rabin_lucas_testERKNS_6BigIntERKNS_17Montgomery_ParamsERNS_21RandomNumberGeneratorEmbE3$_0JEEENS_14Joining_FutureINSt3__120__invoke_result_implIvJT_DpT0_EE4typeEEEOSF_DpOSG_: 137| 316| auto run(F&& f, Args&&... args) -> Joining_Future> { 138| 316| using return_type = std::invoke_result_t; 139| | 140| 316| const auto future_work = std::bind(std::forward(f), std::forward(args)...); // NOLINT(*-avoid-bind) 141| 316| const auto task = std::make_shared>(future_work); 142| 316| auto future_result = task->get_future(); 143| 316| queue_thunk([task]() { (*task)(); }); 144| | // Wrapped only once queued; otherwise unwinding would wait on a task 145| | // still owned by this frame 146| 316| return Joining_Future(std::move(future_result)); 147| 316| } primality.cpp:_ZZN5Botan11Thread_Pool3runIZNS_12_GLOBAL__N_123miller_rabin_lucas_testERKNS_6BigIntERKNS_17Montgomery_ParamsERNS_21RandomNumberGeneratorEmbE3$_0JEEENS_14Joining_FutureINSt3__120__invoke_result_implIvJT_DpT0_EE4typeEEEOSF_DpOSG_ENKUlvE_clEv: 143| 316| queue_thunk([task]() { (*task)(); }); _ZN5Botan14Joining_FutureIbEC2ENSt3__16futureIbEE: 29| 316| explicit Joining_Future(std::future future) : m_future(std::move(future)) {} _ZN5Botan14Joining_FutureIbED2Ev: 31| 632| ~Joining_Future() { 32| 632| if(m_future.valid()) { ------------------ | Branch (32:13): [True: 0, False: 632] ------------------ 33| 0| m_future.wait(); 34| 0| } 35| 632| } _ZN5Botan14Joining_FutureIbE3getEv: 52| 316| decltype(auto) get() { return m_future.get(); } _ZNK5Botan3TLS22TLS_CBC_HMAC_AEAD_Mode8tag_sizeEv: 43| 2.29k| size_t tag_size() const final { return m_tag_size; } _ZNK5Botan3TLS22TLS_CBC_HMAC_AEAD_Mode7iv_sizeEv: 74| 157| size_t iv_size() const { return m_iv_size; } _ZNK5Botan3TLS22TLS_CBC_HMAC_AEAD_Mode10block_sizeEv: 76| 2.40k| size_t block_size() const { return m_block_size; } _ZNK5Botan3TLS22TLS_CBC_HMAC_AEAD_Mode20use_encrypt_then_macEv: 78| 1.74k| bool use_encrypt_then_mac() const { return m_use_encrypt_then_mac; } _ZNK5Botan3TLS22TLS_CBC_HMAC_AEAD_Mode20is_datagram_protocolEv: 80| 78| bool is_datagram_protocol() const { return m_is_datagram; } _ZNK5Botan3TLS22TLS_CBC_HMAC_AEAD_Mode3cbcEv: 82| 1.05k| Cipher_Mode& cbc() const { return *m_cbc; } _ZNK5Botan3TLS22TLS_CBC_HMAC_AEAD_Mode3macEv: 84| 1.61k| MessageAuthenticationCode& mac() const { return *m_mac; } _ZN5Botan3TLS22TLS_CBC_HMAC_AEAD_Mode9cbc_stateEv: 86| 791| secure_vector& cbc_state() { return m_cbc_state; } _ZN5Botan3TLS22TLS_CBC_HMAC_AEAD_Mode10assoc_dataEv: 88| 335| std::vector& assoc_data() { return m_ad; } _ZN5Botan3TLS22TLS_CBC_HMAC_AEAD_Mode3msgEv: 90| 810| secure_vector& msg() { return m_msg; } _ZNK5Botan3TLS28TLS_CBC_HMAC_AEAD_Decryption18minimum_final_sizeEv: 159| 92| size_t minimum_final_size() const override { return tag_size(); } _ZNK5Botan3TLS12Channel_Impl14is_downgradingEv: 306| 630| bool is_downgrading() const { 307| 630|#if defined(BOTAN_HAS_TLS_DOWNGRADE_SUPPORT) 308| 630| return m_downgrade_info && m_downgrade_info->will_downgrade; ------------------ | Branch (308:17): [True: 0, False: 630] | Branch (308:37): [True: 0, False: 0] ------------------ 309| |#else 310| | return false; 311| |#endif 312| 630| } _ZN5Botan3TLS12Channel_Impl18send_warning_alertENS0_9AlertTypeE: 80| 301| void send_warning_alert(Alert::Type type) { send_alert(Alert(type, false)); } _ZN5Botan3TLS12Channel_Impl16send_fatal_alertENS0_9AlertTypeE: 85| 5.94k| void send_fatal_alert(Alert::Type type) { send_alert(Alert(type, true)); } _ZN5Botan3TLS12Channel_Impl21reset_useless_recordsEv: 211| 17.3k| void reset_useless_records() { m_useless_records = 0; } _ZN5Botan3TLS12Channel_ImplC2Ev: 199| 6.57k| Channel_Impl() = default; _ZN5Botan3TLS12Channel_ImplD2Ev: 50| 6.57k| virtual ~Channel_Impl() = default; _ZNK5Botan3TLS15Channel_Impl_1212active_stateEv: 154| 7.12k| const std::optional& active_state() const { return m_active_state; } _ZN5Botan3TLS15Channel_Impl_123rngEv: 194| 9.26k| RandomNumberGenerator& rng() { return *m_rng; } _ZN5Botan3TLS15Channel_Impl_1215session_managerEv: 196| 6.57k| Session_Manager& session_manager() { return *m_session_manager; } _ZNK5Botan3TLS15Channel_Impl_126policyEv: 198| 56.0k| const Policy& policy() const { return *m_policy; } _ZNK5Botan3TLS15Channel_Impl_129callbacksEv: 200| 41.2k| Callbacks& callbacks() const { return *m_callbacks; } _ZNK5Botan3TLS15Channel_Impl_1213pending_stateEv: 240| 43.4k| const Handshake_State* pending_state() const { return m_pending_state.get(); } _ZN5Botan3TLS14Client_Impl_12C2ENS0_12Channel_Impl7PrivateERKNSt3__110shared_ptrINS0_9CallbacksEEERKNS5_INS0_15Session_ManagerEEERKNS5_INS_19Credentials_ManagerEEERKNS5_IKNS0_6PolicyEEERKNS5_INS_21RandomNumberGeneratorEEENS0_18Server_InformationENS0_10TLS_FlavorEm: 68| 6.57k| Channel_Impl_12(callbacks, session_manager, rng, policy, false, flavor, reserved_io_buffer_size), 69| 6.57k| m_creds(creds), 70| 6.57k| m_info(std::move(server_info)) {} _ZNK5Botan3TLS14Client_Impl_1220application_protocolEv: 92| 8| std::string application_protocol() const override { return m_application_protocol; } _ZNK5Botan3TLS26Active_Connection_State_127versionEv: 48| 4| Protocol_Version version() const { return m_version; } _ZNK5Botan3TLS26Active_Connection_State_1210session_idEv: 62| 4| const Session_ID& session_id() const { return m_session_id; } _ZN5Botan3TLS14Handshake_Hash6updateERKNSt3__16vectorIhNS2_9allocatorIhEEEE: 23| 20.8k| void update(const std::vector& in) { m_data += in; } _ZN5Botan3TLS19Stream_Handshake_IOC2ENSt3__18functionIFvNS0_11Record_TypeERKNS2_6vectorIhNS2_9allocatorIhEEEEEEE: 94| 6.57k| explicit Stream_Handshake_IO(writer_fn writer) : m_send_hs(std::move(writer)) {} _ZNK5Botan3TLS19Stream_Handshake_IO14have_more_dataEv: 102| 1.61k| bool have_more_data() const override { return !m_queue.empty(); } _ZN5Botan3TLS12Handshake_IOD2Ev: 84| 6.57k| virtual ~Handshake_IO() = default; _ZN5Botan3TLS12Handshake_IOC2Ev: 77| 6.57k| Handshake_IO() = default; _ZN5Botan3TLS15Handshake_State12handshake_ioEv: 71| 41.4k| Handshake_IO& handshake_io() { return *m_handshake_io; } _ZN5Botan3TLS15Handshake_State4hashEv: 177| 20.8k| Handshake_Hash& hash() { return m_handshake_hash; } _ZNK5Botan3TLS15Handshake_State12client_helloEv: 135| 36.1k| const Client_Hello_12* client_hello() const { return m_client_hello.get(); } _ZNK5Botan3TLS15Handshake_State7versionEv: 110| 49.4k| Protocol_Version version() const { return m_version; } _ZNK5Botan3TLS15Handshake_State12server_helloEv: 137| 114k| const Server_Hello_12* server_hello() const { return m_server_hello.get(); } _ZNK5Botan3TLS15Handshake_State12session_keysEv: 169| 1.75k| const Session_Keys& session_keys() const { return m_session_keys; } _ZNK5Botan3TLS15Handshake_State12server_certsEv: 139| 3.94k| const Certificate_12* server_certs() const { return m_server_certs.get(); } _ZNK5Botan3TLS15Handshake_State10server_kexEv: 141| 3.37k| const Server_Key_Exchange* server_kex() const { return m_server_kex.get(); } _ZNK5Botan3TLS15Handshake_State18server_cert_statusEv: 155| 1| const Certificate_Status* server_cert_status() const { return m_server_cert_status.get(); } _ZNK5Botan3TLS15Handshake_State15server_finishedEv: 159| 16| const Finished_12* server_finished() const { return m_server_finished.get(); } _ZNK5Botan3TLS15Handshake_State15client_finishedEv: 161| 16| const Finished_12* client_finished() const { return m_client_finished.get(); } _ZNK5Botan3TLS15Handshake_State18new_session_ticketEv: 157| 24| const New_Session_Ticket_12* new_session_ticket() const { return m_new_session_ticket.get(); } _ZNK5Botan3TLS15Handshake_State10client_kexEv: 149| 1.39k| const Client_Key_Exchange* client_kex() const { return m_client_kex.get(); } _ZNK5Botan3TLS15Handshake_State9callbacksEv: 171| 2.41k| Callbacks& callbacks() const { return m_callbacks; } _ZNK5Botan3TLS15Handshake_State4hashEv: 179| 1.40k| const Handshake_Hash& hash() const { return m_handshake_hash; } _ZNK5Botan3TLS21Client_Hello_Internal14legacy_versionEv: 87| 49.0k| Protocol_Version legacy_version() const { return m_legacy_version; } _ZNK5Botan3TLS21Client_Hello_Internal6randomEv: 91| 7.85k| const std::vector& random() const { return m_random; } _ZNK5Botan3TLS21Client_Hello_Internal10session_idEv: 89| 6.61k| const Session_ID& session_id() const { return m_session_id; } _ZNK5Botan3TLS21Client_Hello_Internal12comp_methodsEv: 95| 6.57k| const std::vector& comp_methods() const { return m_comp_methods; } _ZNK5Botan3TLS21Client_Hello_Internal12ciphersuitesEv: 93| 21.8k| const std::vector& ciphersuites() const { return m_suites; } _ZN5Botan3TLS21Client_Hello_Internal10extensionsEv: 103| 98.3k| Extensions& extensions() { return m_extensions; } _ZN5Botan3TLS21Client_Hello_InternalC2Ev: 72| 6.57k| Client_Hello_Internal() : m_comp_methods({0}) {} _ZNK5Botan3TLS21Server_Hello_Internal14legacy_versionEv: 145| 19.9k| Protocol_Version legacy_version() const { return m_legacy_version; } _ZNK5Botan3TLS21Server_Hello_Internal10session_idEv: 147| 4.84k| const Session_ID& session_id() const { return m_session_id; } _ZNK5Botan3TLS21Server_Hello_Internal6randomEv: 149| 6.31k| const std::vector& random() const { return m_random; } _ZNK5Botan3TLS21Server_Hello_Internal11ciphersuiteEv: 151| 20.3k| uint16_t ciphersuite() const { return m_ciphersuite; } _ZNK5Botan3TLS21Server_Hello_Internal11comp_methodEv: 153| 6.08k| uint8_t comp_method() const { return m_comp_method; } _ZNK5Botan3TLS21Server_Hello_Internal10extensionsEv: 157| 5.26k| const Extensions& extensions() const { return m_extensions; } _ZN5Botan3TLS21Server_Hello_Internal10extensionsEv: 159| 47.0k| Extensions& extensions() { return m_extensions; } _ZN5Botan3TLS15TLS_Data_ReaderC2EPKcNSt3__14spanIKhLm18446744073709551615EEE: 27| 27.5k| m_typename(type), m_buf(buf_in), m_offset(0) {} _ZN5Botan3TLS15TLS_Data_Reader8get_byteEv: 83| 39.0k| uint8_t get_byte() { 84| 39.0k| assert_at_least(1); 85| 39.0k| const uint8_t result = m_buf[m_offset]; 86| 39.0k| m_offset += 1; 87| 39.0k| return result; 88| 39.0k| } _ZN5Botan3TLS15TLS_Data_Reader9get_fixedIhEENSt3__16vectorIT_NS3_9allocatorIS5_EEEEm: 129| 28.6k| std::vector get_fixed(size_t size) { 130| 28.6k| return get_elem>(size); 131| 28.6k| } _ZN5Botan3TLS15TLS_Data_Reader8get_elemIhNSt3__16vectorIhNS3_9allocatorIhEEEEEET0_m: 91| 55.8k| Container get_elem(size_t num_elems) { 92| 55.8k| assert_at_least(num_elems * sizeof(T)); 93| | 94| 55.8k| Container result(num_elems); 95| | 96| 2.06M| for(size_t i = 0; i != num_elems; ++i) { ------------------ | Branch (96:28): [True: 2.01M, False: 55.8k] ------------------ 97| 2.01M| result[i] = load_be(&m_buf[m_offset], i); 98| 2.01M| } 99| | 100| 55.8k| m_offset += num_elems * sizeof(T); 101| | 102| 55.8k| return result; 103| 55.8k| } _ZN5Botan3TLS15TLS_Data_Reader16get_range_vectorIhEENSt3__16vectorIT_NS3_9allocatorIS5_EEEEmmm: 117| 6.40k| std::vector get_range_vector(size_t len_bytes, size_t min_elems, size_t max_elems) { 118| 6.40k| const size_t num_elems = get_num_elems(len_bytes, sizeof(T), min_elems, max_elems); 119| | 120| 6.40k| return get_elem>(num_elems); 121| 6.40k| } _ZN5Botan3TLS15TLS_Data_Reader13get_num_elemsEmmmm: 148| 23.0k| size_t get_num_elems(size_t len_bytes, size_t T_size, size_t min_elems, size_t max_elems) { 149| 23.0k| const size_t byte_length = get_length_field(len_bytes); 150| | 151| 23.0k| if(byte_length % T_size != 0) { ------------------ | Branch (151:13): [True: 1, False: 22.9k] ------------------ 152| 1| throw_decode_error("Size isn't multiple of T"); 153| 1| } 154| | 155| 23.0k| const size_t num_elems = byte_length / T_size; 156| | 157| 23.0k| if(num_elems < min_elems || num_elems > max_elems) { ------------------ | Branch (157:13): [True: 21, False: 22.9k] | Branch (157:38): [True: 28, False: 22.9k] ------------------ 158| 43| throw_decode_error("Length field outside parameters"); 159| 43| } 160| | 161| 23.0k| return num_elems; 162| 23.0k| } _ZN5Botan3TLS15TLS_Data_Reader16get_length_fieldEm: 134| 23.0k| size_t get_length_field(size_t len_bytes) { 135| 23.0k| assert_at_least(len_bytes); 136| | 137| 23.0k| if(len_bytes == 1) { ------------------ | Branch (137:13): [True: 16.9k, False: 6.08k] ------------------ 138| 16.9k| return get_byte(); 139| 16.9k| } else if(len_bytes == 2) { ------------------ | Branch (139:20): [True: 6.07k, False: 5] ------------------ 140| 6.07k| return get_uint16_t(); 141| 6.07k| } else if(len_bytes == 3) { ------------------ | Branch (141:20): [True: 0, False: 5] ------------------ 142| 0| return get_uint24_t(); 143| 0| } 144| | 145| 5| throw_decode_error("Bad length size"); 146| 5| } _ZN5Botan3TLS15TLS_Data_Reader12get_uint16_tEv: 71| 63.5k| uint16_t get_uint16_t() { 72| 63.5k| assert_at_least(2); 73| 63.5k| const uint16_t result = make_uint16(m_buf[m_offset], m_buf[m_offset + 1]); 74| 63.5k| m_offset += 2; 75| 63.5k| return result; 76| 63.5k| } _ZN5Botan3TLS15TLS_Data_Reader9get_rangeIhEENSt3__16vectorIT_NS3_9allocatorIS5_EEEEmmm: 110| 16.5k| std::vector get_range(size_t len_bytes, size_t min_elems, size_t max_elems) { 111| 16.5k| const size_t num_elems = get_num_elems(len_bytes, sizeof(T), min_elems, max_elems); 112| | 113| 16.5k| return get_elem>(num_elems); 114| 16.5k| } _ZN5Botan3TLS15TLS_Data_Reader8get_elemItNSt3__16vectorItNS3_9allocatorItEEEEEET0_m: 91| 29| Container get_elem(size_t num_elems) { 92| 29| assert_at_least(num_elems * sizeof(T)); 93| | 94| 29| Container result(num_elems); 95| | 96| 697| for(size_t i = 0; i != num_elems; ++i) { ------------------ | Branch (96:28): [True: 668, False: 29] ------------------ 97| 668| result[i] = load_be(&m_buf[m_offset], i); 98| 668| } 99| | 100| 29| m_offset += num_elems * sizeof(T); 101| | 102| 29| return result; 103| 29| } _ZN5Botan3TLS23append_tls_length_valueIhNSt3__19allocatorIhEES4_EEvRNS2_6vectorIhT0_EERKNS5_IT_T1_EEm: 209| 20.0k| size_t tag_size) { 210| 20.0k| append_tls_length_value(buf, std::span{vals}, tag_size); 211| 20.0k|} _ZN5Botan3TLS23append_tls_length_valueIhNSt3__19allocatorIhEEEEvRNS2_6vectorIhT0_EENS2_4spanIKT_Lm18446744073709551615EEEm: 202| 21.0k|inline void append_tls_length_value(std::vector& buf, std::span vals, size_t tag_size) { 203| 21.0k| append_tls_length_value(buf, vals.data(), vals.size(), tag_size); 204| 21.0k|} _ZN5Botan3TLS23append_tls_length_valueIhNSt3__19allocatorIhEEEEvRNS2_6vectorIhT0_EEPKT_mm: 180| 21.0k| size_t tag_size) { 181| 21.0k| const size_t T_size = sizeof(T); 182| 21.0k| const size_t val_bytes = T_size * vals_size; 183| | 184| 21.0k| BOTAN_ARG_CHECK(tag_size == 1 || tag_size == 2 || tag_size == 3, "Invalid TLS tag size"); ------------------ | | 35| 21.0k| do { \ | | 36| 21.0k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 43.4k| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 19.7k, False: 1.33k] | | | Branch (37:12): [True: 1.33k, False: 0] | | | Branch (37:12): [True: 0, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 21.0k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 21.0k] | | ------------------ ------------------ 185| | 186| 21.0k| const size_t max_possible_size = (1 << (8 * tag_size)) - 1; 187| | 188| 21.0k| BOTAN_ARG_CHECK(val_bytes <= max_possible_size, "Value too large to encode"); ------------------ | | 35| 21.0k| do { \ | | 36| 21.0k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 21.0k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 21.0k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 21.0k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 21.0k] | | ------------------ ------------------ 189| | 190| 43.4k| for(size_t i = 0; i != tag_size; ++i) { ------------------ | Branch (190:22): [True: 22.3k, False: 21.0k] ------------------ 191| 22.3k| buf.push_back(get_byte_var(sizeof(val_bytes) - tag_size + i, val_bytes)); 192| 22.3k| } 193| | 194| 140k| for(size_t i = 0; i != vals_size; ++i) { ------------------ | Branch (194:22): [True: 119k, False: 21.0k] ------------------ 195| 238k| for(size_t j = 0; j != T_size; ++j) { ------------------ | Branch (195:25): [True: 119k, False: 119k] ------------------ 196| 119k| buf.push_back(get_byte_var(j, vals[i])); 197| 119k| } 198| 119k| } 199| 21.0k|} _ZN5Botan3TLS23append_tls_length_valueItNSt3__19allocatorIhEENS3_ItEEEEvRNS2_6vectorIhT0_EERKNS6_IT_T1_EEm: 209| 6.57k| size_t tag_size) { 210| 6.57k| append_tls_length_value(buf, std::span{vals}, tag_size); 211| 6.57k|} _ZN5Botan3TLS23append_tls_length_valueItNSt3__19allocatorIhEEEEvRNS2_6vectorIhT0_EENS2_4spanIKT_Lm18446744073709551615EEEm: 202| 6.57k|inline void append_tls_length_value(std::vector& buf, std::span vals, size_t tag_size) { 203| 6.57k| append_tls_length_value(buf, vals.data(), vals.size(), tag_size); 204| 6.57k|} _ZN5Botan3TLS23append_tls_length_valueItNSt3__19allocatorIhEEEEvRNS2_6vectorIhT0_EEPKT_mm: 180| 6.57k| size_t tag_size) { 181| 6.57k| const size_t T_size = sizeof(T); 182| 6.57k| const size_t val_bytes = T_size * vals_size; 183| | 184| 6.57k| BOTAN_ARG_CHECK(tag_size == 1 || tag_size == 2 || tag_size == 3, "Invalid TLS tag size"); ------------------ | | 35| 6.57k| do { \ | | 36| 6.57k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 19.7k| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 0, False: 6.57k] | | | Branch (37:12): [True: 6.57k, False: 0] | | | Branch (37:12): [True: 0, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 6.57k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 6.57k] | | ------------------ ------------------ 185| | 186| 6.57k| const size_t max_possible_size = (1 << (8 * tag_size)) - 1; 187| | 188| 6.57k| BOTAN_ARG_CHECK(val_bytes <= max_possible_size, "Value too large to encode"); ------------------ | | 35| 6.57k| do { \ | | 36| 6.57k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 6.57k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 6.57k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 6.57k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 6.57k] | | ------------------ ------------------ 189| | 190| 19.7k| for(size_t i = 0; i != tag_size; ++i) { ------------------ | Branch (190:22): [True: 13.1k, False: 6.57k] ------------------ 191| 13.1k| buf.push_back(get_byte_var(sizeof(val_bytes) - tag_size + i, val_bytes)); 192| 13.1k| } 193| | 194| 592k| for(size_t i = 0; i != vals_size; ++i) { ------------------ | Branch (194:22): [True: 585k, False: 6.57k] ------------------ 195| 1.75M| for(size_t j = 0; j != T_size; ++j) { ------------------ | Branch (195:25): [True: 1.17M, False: 585k] ------------------ 196| 1.17M| buf.push_back(get_byte_var(j, vals[i])); 197| 1.17M| } 198| 585k| } 199| 6.57k|} _ZNK5Botan3TLS15TLS_Data_Reader11assert_doneEv: 29| 19.6k| void assert_done() const { 30| 19.6k| if(has_remaining()) { ------------------ | Branch (30:13): [True: 48, False: 19.6k] ------------------ 31| 48| throw_decode_error("Extra bytes at end of message"); 32| 48| } 33| 19.6k| } _ZNK5Botan3TLS15TLS_Data_Reader11read_so_farEv: 35| 1.27k| size_t read_so_far() const { return m_offset; } _ZNK5Botan3TLS15TLS_Data_Reader15remaining_bytesEv: 37| 258k| size_t remaining_bytes() const { return m_buf.size() - m_offset; } _ZNK5Botan3TLS15TLS_Data_Reader13has_remainingEv: 39| 50.4k| bool has_remaining() const { return (remaining_bytes() > 0); } _ZN5Botan3TLS15TLS_Data_Reader12discard_nextEm: 51| 595| void discard_next(size_t bytes) { 52| 595| assert_at_least(bytes); 53| 595| m_offset += bytes; 54| 595| } _ZN5Botan3TLS15TLS_Data_Reader12get_uint32_tEv: 56| 14| uint32_t get_uint32_t() { 57| 14| assert_at_least(4); 58| 14| const uint32_t result = 59| 14| make_uint32(m_buf[m_offset], m_buf[m_offset + 1], m_buf[m_offset + 2], m_buf[m_offset + 3]); 60| 14| m_offset += 4; 61| 14| return result; 62| 14| } _ZN5Botan3TLS15TLS_Data_Reader10get_stringEmmm: 123| 6.25k| std::string get_string(size_t len_bytes, size_t min_bytes, size_t max_bytes) { 124| 6.25k| std::vector v = get_range_vector(len_bytes, min_bytes, max_bytes); 125| 6.25k| return bytes_to_string(v); 126| 6.25k| } _ZN5Botan3TLS15TLS_Data_Reader9get_rangeItEENSt3__16vectorIT_NS3_9allocatorIS5_EEEEmmm: 110| 49| std::vector get_range(size_t len_bytes, size_t min_elems, size_t max_elems) { 111| 49| const size_t num_elems = get_num_elems(len_bytes, sizeof(T), min_elems, max_elems); 112| | 113| 49| return get_elem>(num_elems); 114| 49| } _ZN5Botan3TLS23append_tls_length_valueIhNS_16secure_allocatorIhEENSt3__19allocatorIhEEEEvRNS4_6vectorIhT0_EERKNS7_IT_T1_EEm: 209| 391| size_t tag_size) { 210| 391| append_tls_length_value(buf, std::span{vals}, tag_size); 211| 391|} _ZN5Botan3TLS23append_tls_length_valueIhNS_16secure_allocatorIhEEEEvRNSt3__16vectorIhT0_EENS4_4spanIKT_Lm18446744073709551615EEEm: 202| 782|inline void append_tls_length_value(std::vector& buf, std::span vals, size_t tag_size) { 203| 782| append_tls_length_value(buf, vals.data(), vals.size(), tag_size); 204| 782|} _ZN5Botan3TLS23append_tls_length_valueIhNS_16secure_allocatorIhEEEEvRNSt3__16vectorIhT0_EEPKT_mm: 180| 782| size_t tag_size) { 181| 782| const size_t T_size = sizeof(T); 182| 782| const size_t val_bytes = T_size * vals_size; 183| | 184| 782| BOTAN_ARG_CHECK(tag_size == 1 || tag_size == 2 || tag_size == 3, "Invalid TLS tag size"); ------------------ | | 35| 782| do { \ | | 36| 782| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 2.34k| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 0, False: 782] | | | Branch (37:12): [True: 782, False: 0] | | | Branch (37:12): [True: 0, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 782| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 782] | | ------------------ ------------------ 185| | 186| 782| const size_t max_possible_size = (1 << (8 * tag_size)) - 1; 187| | 188| 782| BOTAN_ARG_CHECK(val_bytes <= max_possible_size, "Value too large to encode"); ------------------ | | 35| 782| do { \ | | 36| 782| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 782| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 782] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 782| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 782] | | ------------------ ------------------ 189| | 190| 2.34k| for(size_t i = 0; i != tag_size; ++i) { ------------------ | Branch (190:22): [True: 1.56k, False: 782] ------------------ 191| 1.56k| buf.push_back(get_byte_var(sizeof(val_bytes) - tag_size + i, val_bytes)); 192| 1.56k| } 193| | 194| 13.2k| for(size_t i = 0; i != vals_size; ++i) { ------------------ | Branch (194:22): [True: 12.5k, False: 782] ------------------ 195| 25.0k| for(size_t j = 0; j != T_size; ++j) { ------------------ | Branch (195:25): [True: 12.5k, False: 12.5k] ------------------ 196| 12.5k| buf.push_back(get_byte_var(j, vals[i])); 197| 12.5k| } 198| 12.5k| } 199| 782|} _ZN5Botan3TLS23append_tls_length_valueIhNS_16secure_allocatorIhEES3_EEvRNSt3__16vectorIhT0_EERKNS5_IT_T1_EEm: 209| 391| size_t tag_size) { 210| 391| append_tls_length_value(buf, std::span{vals}, tag_size); 211| 391|} _ZN5Botan3TLS12Record_NonceC2Em: 47| 1.38k| explicit Record_Nonce(size_t len) : m_len(len) { BOTAN_ARG_CHECK(len <= MAX_NONCE_LEN, "Nonce is too long"); } ------------------ | | 35| 1.38k| do { \ | | 36| 1.38k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 1.38k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 1.38k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 1.38k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 1.38k] | | ------------------ ------------------ _ZN5Botan3TLS12Record_Nonce3getEv: 49| 2.36k| std::span get() { return std::span{m_nonce}.first(m_len); } _ZNK5Botan3TLS12Record_Nonce3getEv: 51| 2.28k| std::span get() const { return std::span{m_nonce}.first(m_len); } _ZN5Botan3TLS23Connection_Cipher_State4aeadEv: 81| 1.38k| AEAD_Mode& aead() { 82| 1.38k| BOTAN_ASSERT_NONNULL(m_aead.get()); ------------------ | | 123| 1.38k| do { \ | | 124| 1.38k| if((ptr) == nullptr) { \ | | ------------------ | | | Branch (124:10): [True: 0, False: 1.38k] | | ------------------ | | 125| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 126| 0| Botan::assertion_failure(#ptr " is not null", "", __func__, __FILE__, __LINE__); \ | | 127| 0| } \ | | 128| 1.38k| } while(0) | | ------------------ | | | Branch (128:12): [Folded, False: 1.38k] | | ------------------ ------------------ 83| 1.38k| return *m_aead; 84| 1.38k| } _ZNK5Botan3TLS23Connection_Cipher_State26nonce_bytes_from_handshakeEv: 95| 721| size_t nonce_bytes_from_handshake() const { return m_nonce_bytes_from_handshake; } _ZNK5Botan3TLS23Connection_Cipher_State23nonce_bytes_from_recordEv: 97| 3.91k| size_t nonce_bytes_from_record() const { return m_nonce_bytes_from_record; } _ZNK5Botan3TLS23Connection_Cipher_State12nonce_formatEv: 99| 2.70k| Nonce_Format nonce_format() const { return m_nonce_format; } _ZN5Botan3TLS13Record_HeaderC2EmNS0_16Protocol_VersionENS0_11Record_TypeE: 113| 18.2k| m_needed(0), m_sequence(sequence), m_version(version), m_type(type) {} _ZN5Botan3TLS13Record_HeaderC2Em: 115| 376| explicit Record_Header(size_t needed) : m_needed(needed), m_sequence(0), m_type(Record_Type::Invalid) {} _ZNK5Botan3TLS13Record_Header6neededEv: 117| 18.6k| size_t needed() const { return m_needed; } _ZNK5Botan3TLS13Record_Header7versionEv: 119| 24.1k| Protocol_Version version() const { 120| 24.1k| BOTAN_ASSERT_NOMSG(m_needed == 0); ------------------ | | 84| 24.1k| do { \ | | 85| 24.1k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 24.1k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 24.1k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 24.1k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 24.1k] | | ------------------ ------------------ 121| 24.1k| return m_version; 122| 24.1k| } _ZNK5Botan3TLS13Record_Header8sequenceEv: 124| 17.3k| uint64_t sequence() const { 125| 17.3k| BOTAN_ASSERT_NOMSG(m_needed == 0); ------------------ | | 84| 17.3k| do { \ | | 85| 17.3k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 17.3k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 17.3k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 17.3k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 17.3k] | | ------------------ ------------------ 126| 17.3k| return m_sequence; 127| 17.3k| } _ZNK5Botan3TLS13Record_Header4typeEv: 131| 75.4k| Record_Type type() const { 132| 75.4k| BOTAN_ASSERT_NOMSG(m_needed == 0); ------------------ | | 84| 75.4k| do { \ | | 85| 75.4k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 75.4k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 75.4k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 75.4k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 75.4k] | | ------------------ ------------------ 133| 75.4k| return m_type; 134| 75.4k| } _ZN5Botan3TLS27Connection_Sequence_NumbersD2Ev: 20| 6.57k| virtual ~Connection_Sequence_Numbers() = default; _ZN5Botan3TLS23Stream_Sequence_NumbersC2Ev: 39| 6.57k| Stream_Sequence_Numbers() : m_write_seq_no(0), m_read_seq_no(0), m_read_epoch(0), m_write_epoch(0) {} _ZN5Botan3TLS23Stream_Sequence_Numbers21new_read_cipher_stateEv: 48| 336| void new_read_cipher_state() override { 49| 336| m_read_seq_no = 0; 50| 336| m_read_epoch++; 51| 336| } _ZN5Botan3TLS23Stream_Sequence_Numbers22new_write_cipher_stateEv: 53| 699| void new_write_cipher_state() override { 54| 699| m_write_seq_no = 0; 55| 699| m_write_epoch++; 56| 699| } _ZNK5Botan3TLS23Stream_Sequence_Numbers18current_read_epochEv: 58| 25.4k| uint16_t current_read_epoch() const override { return m_read_epoch; } _ZNK5Botan3TLS23Stream_Sequence_Numbers19current_write_epochEv: 60| 21.9k| uint16_t current_write_epoch() const override { return m_write_epoch; } _ZN5Botan3TLS23Stream_Sequence_Numbers19next_write_sequenceEt: 62| 14.6k| uint64_t next_write_sequence(uint16_t /*epoch*/) override { 63| 14.6k| if(m_write_seq_no == std::numeric_limits::max()) { ------------------ | Branch (63:13): [True: 0, False: 14.6k] ------------------ 64| 0| throw Invalid_State("TLS 1.2 write sequence number overflow"); 65| 0| } 66| 14.6k| return m_write_seq_no++; 67| 14.6k| } _ZN5Botan3TLS23Stream_Sequence_Numbers18next_read_sequenceEv: 69| 18.5k| uint64_t next_read_sequence() override { return m_read_seq_no; } _ZNK5Botan3TLS12Session_Keys13master_secretEv: 46| 723| const secure_vector& master_secret() const { return m_master_sec; } _ZNK5Botan3TLS12Session_Keys15client_aead_keyEv: 26| 699| const secure_vector& client_aead_key() const { return m_c_aead; } _ZNK5Botan3TLS12Session_Keys15server_aead_keyEv: 31| 336| const secure_vector& server_aead_key() const { return m_s_aead; } _ZNK5Botan3TLS12Session_Keys12client_nonceEv: 36| 699| const std::vector& client_nonce() const { return m_c_nonce; } _ZNK5Botan3TLS12Session_Keys12server_nonceEv: 41| 336| const std::vector& server_nonce() const { return m_s_nonce; } _ZNK5Botan3TLS12Session_Keys8aead_keyENS0_15Connection_SideE: 48| 1.03k| const secure_vector& aead_key(Connection_Side side) const { 49| 1.03k| return (side == Connection_Side::Client) ? client_aead_key() : server_aead_key(); ------------------ | Branch (49:17): [True: 699, False: 336] ------------------ 50| 1.03k| } _ZNK5Botan3TLS12Session_Keys5nonceENS0_15Connection_SideE: 52| 1.03k| const std::vector& nonce(Connection_Side side) const { 53| 1.03k| return (side == Connection_Side::Client) ? client_nonce() : server_nonce(); ------------------ | Branch (53:17): [True: 699, False: 336] ------------------ 54| 1.03k| } _ZN5Botan3TLS12Session_KeysC2Ev: 56| 6.57k| Session_Keys() = default; _ZN5Botan2CT13value_barrierITkNSt3__117unsigned_integralEhQntsr3stdE7same_asIbT_EEES3_S3_: 43| 495k|constexpr inline T value_barrier(T x) { 44| 495k| if(std::is_constant_evaluated()) { ------------------ | Branch (44:7): [Folded, False: 495k] ------------------ 45| 0| return x; 46| 495k| } else { 47| 495k|#if defined(BOTAN_CT_VALUE_BARRIER_USE_ASM) 48| | /* 49| | * We may want a "stronger" statement such as 50| | * asm volatile("" : "+r,m"(x) : : "memory); 51| | * (see https://theunixzoo.co.uk/blog/2021-10-14-preventing-optimisations.html) 52| | * however the current approach seems sufficient with current compilers, 53| | * and is minimally damaging with regards to degrading code generation. 54| | */ 55| 495k| asm("" : "+r"(x) : /* no input */); // NOLINT(*-no-assembler) 56| 495k| return x; 57| |#elif defined(BOTAN_CT_VALUE_BARRIER_USE_VOLATILE) 58| | volatile T vx = x; 59| | return vx; 60| |#else 61| | return x; 62| |#endif 63| 495k| } 64| 495k|} _ZN5Botan2CT13value_barrierITkNSt3__117unsigned_integralEmQntsr3stdE7same_asIbT_EEES3_S3_: 43| 860M|constexpr inline T value_barrier(T x) { 44| 860M| if(std::is_constant_evaluated()) { ------------------ | Branch (44:7): [Folded, False: 860M] ------------------ 45| 0| return x; 46| 860M| } else { 47| 860M|#if defined(BOTAN_CT_VALUE_BARRIER_USE_ASM) 48| | /* 49| | * We may want a "stronger" statement such as 50| | * asm volatile("" : "+r,m"(x) : : "memory); 51| | * (see https://theunixzoo.co.uk/blog/2021-10-14-preventing-optimisations.html) 52| | * however the current approach seems sufficient with current compilers, 53| | * and is minimally damaging with regards to degrading code generation. 54| | */ 55| 860M| asm("" : "+r"(x) : /* no input */); // NOLINT(*-no-assembler) 56| 860M| return x; 57| |#elif defined(BOTAN_CT_VALUE_BARRIER_USE_VOLATILE) 58| | volatile T vx = x; 59| | return vx; 60| |#else 61| | return x; 62| |#endif 63| 860M| } 64| 860M|} _ZN5Botan2CT13value_barrierITkNSt3__117unsigned_integralEjQntsr3stdE7same_asIbT_EEES3_S3_: 43| 32.4k|constexpr inline T value_barrier(T x) { 44| 32.4k| if(std::is_constant_evaluated()) { ------------------ | Branch (44:7): [Folded, False: 32.4k] ------------------ 45| 0| return x; 46| 32.4k| } else { 47| 32.4k|#if defined(BOTAN_CT_VALUE_BARRIER_USE_ASM) 48| | /* 49| | * We may want a "stronger" statement such as 50| | * asm volatile("" : "+r,m"(x) : : "memory); 51| | * (see https://theunixzoo.co.uk/blog/2021-10-14-preventing-optimisations.html) 52| | * however the current approach seems sufficient with current compilers, 53| | * and is minimally damaging with regards to degrading code generation. 54| | */ 55| 32.4k| asm("" : "+r"(x) : /* no input */); // NOLINT(*-no-assembler) 56| 32.4k| return x; 57| |#elif defined(BOTAN_CT_VALUE_BARRIER_USE_VOLATILE) 58| | volatile T vx = x; 59| | return vx; 60| |#else 61| | return x; 62| |#endif 63| 32.4k| } 64| 32.4k|} _ZN5Botan2CT13value_barrierITkNSt3__117unsigned_integralEtQntsr3stdE7same_asIbT_EEES3_S3_: 43| 164k|constexpr inline T value_barrier(T x) { 44| 164k| if(std::is_constant_evaluated()) { ------------------ | Branch (44:7): [Folded, False: 164k] ------------------ 45| 0| return x; 46| 164k| } else { 47| 164k|#if defined(BOTAN_CT_VALUE_BARRIER_USE_ASM) 48| | /* 49| | * We may want a "stronger" statement such as 50| | * asm volatile("" : "+r,m"(x) : : "memory); 51| | * (see https://theunixzoo.co.uk/blog/2021-10-14-preventing-optimisations.html) 52| | * however the current approach seems sufficient with current compilers, 53| | * and is minimally damaging with regards to degrading code generation. 54| | */ 55| 164k| asm("" : "+r"(x) : /* no input */); // NOLINT(*-no-assembler) 56| 164k| return x; 57| |#elif defined(BOTAN_CT_VALUE_BARRIER_USE_VOLATILE) 58| | volatile T vx = x; 59| | return vx; 60| |#else 61| | return x; 62| |#endif 63| 164k| } 64| 164k|} _ZN5Botan17is_sub_element_ofERKNS_3OIDESt16initializer_listIjE: 22| 18.8k|inline std::optional is_sub_element_of(const OID& oid, std::initializer_list prefix) { 23| 18.8k| const auto& c = oid.get_components(); 24| | 25| 18.8k| if(c.size() != prefix.size() + 1) { ------------------ | Branch (25:7): [True: 4.94k, False: 13.9k] ------------------ 26| 4.94k| return {}; 27| 4.94k| } 28| | 29| 13.9k| if(!std::equal(c.begin(), c.end() - 1, prefix.begin(), prefix.end())) { ------------------ | Branch (29:7): [True: 1.95k, False: 11.9k] ------------------ 30| 1.95k| return {}; 31| 1.95k| } 32| | 33| 11.9k| return c[c.size() - 1]; 34| 13.9k|} _ZN5Botan9AEAD_Mode19set_associated_dataENSt3__14spanIKhLm18446744073709551615EEE: 59| 1.37k| void set_associated_data(std::span ad) { set_associated_data_n(0, ad); } _ZN5Botan21Allocator_InitializerC2Ev: 57| 1| Allocator_Initializer() { initialize_allocator(); } _ZNK5Botan14ASN1_BitString5bytesEv: 206| 19.9k| std::span bytes() const { return std::span{m_bytes}; } _ZNK5Botan14ASN1_BitString11unused_bitsEv: 211| 9.67k| size_t unused_bits() const { return m_unused_bits; } _ZNK5Botan10BER_Object6is_setEv: 267| 619k| bool is_set() const { return m_type_tag != ASN1_Type::NoObject; } _ZNK5Botan10BER_Object7taggingEv: 272| 261k| uint32_t tagging() const { return type_tag() | class_tag(); } _ZNK5Botan10BER_Object8type_tagEv: 277| 263k| ASN1_Type type_tag() const { return m_type_tag; } _ZNK5Botan10BER_Object9class_tagEv: 282| 300k| ASN1_Class class_tag() const { return m_class_tag; } _ZNK5Botan10BER_Object4typeEv: 287| 45.6k| ASN1_Type type() const { return m_type_tag; } _ZNK5Botan10BER_Object9get_classEv: 292| 23.5k| ASN1_Class get_class() const { return m_class_tag; } _ZNK5Botan10BER_Object4bitsEv: 298| 665k| const uint8_t* bits() const { return m_value.data(); } _ZNK5Botan10BER_Object6lengthEv: 303| 1.66M| size_t length() const { return m_value.size(); } _ZNK5Botan10BER_Object4dataEv: 308| 85.6k| std::span data() const { return std::span{m_value}; } _ZN5Botan10BER_Object12mutable_bitsEm: 344| 216k| uint8_t* mutable_bits(size_t length) { 345| 216k| m_value.resize(length); 346| 216k| return m_value.data(); 347| 216k| } _ZNK5Botan3OID5emptyEv: 468| 5.51k| bool empty() const { return m_id.empty(); } _ZNK5Botan3OID9has_valueEv: 474| 4.89k| bool has_value() const { return !empty(); } _ZNK5Botan3OIDeqERKS0_: 510| 20.0k| bool operator==(const OID& other) const { return m_id == other.m_id; } _ZNK5Botan3OID14get_componentsEv: 530| 350k| const std::vector& get_components() const { 531| 350k| return m_id; 532| 350k| } _ZNK5Botan11ASN1_String7taggingEv: 585| 13| ASN1_Type tagging() const { return m_tag; } _ZNK5Botan11ASN1_String5valueEv: 590| 15.4k| const std::string& value() const { return m_utf8_str; } _ZNK5Botan19AlgorithmIdentifier3oidEv: 688| 14.2k| const OID& oid() const { return m_oid; } _ZNK5Botan19AlgorithmIdentifier10parametersEv: 693| 9.96k| const std::vector& parameters() const { return m_parameters; } _ZNK5Botan19AlgorithmIdentifier20parameters_are_emptyEv: 715| 14.0k| bool parameters_are_empty() const { return m_parameters.empty(); } _ZNK5Botan19AlgorithmIdentifier28parameters_are_null_or_emptyEv: 720| 14.0k| bool parameters_are_null_or_empty() const { return parameters_are_empty() || parameters_are_null(); } ------------------ | Branch (720:58): [True: 2.76k, False: 11.2k] | Branch (720:84): [True: 9.35k, False: 1.89k] ------------------ _ZN5BotanorENS_10ASN1_ClassES0_: 91| 116k|inline ASN1_Class operator|(ASN1_Class x, ASN1_Class y) { 92| 116k| return static_cast(static_cast(x) | static_cast(y)); 93| 116k|} _ZN5BotanorENS_9ASN1_TypeENS_10ASN1_ClassE: 98| 261k|inline uint32_t operator|(ASN1_Type x, ASN1_Class y) { 99| 261k| return static_cast(x) | static_cast(y); 100| 261k|} _ZN5BotanorENS_10ASN1_ClassENS_9ASN1_TypeE: 105| 45.4k|inline uint32_t operator|(ASN1_Class x, ASN1_Type y) { 106| 45.4k| return static_cast(x) | static_cast(y); 107| 45.4k|} _ZN5BotanneERKNS_3OIDES2_: 561| 414|inline bool operator!=(const OID& a, const OID& b) { 562| 414| return !(a == b); 563| 414|} _ZNKSt3__14hashIN5Botan3OIDEEclERKS2_: 761| 936| size_t operator()(const Botan::OID& oid) const noexcept { return static_cast(oid.hash_code()); } _ZN5Botan11ASN1_ObjectD2Ev: 168| 302k| virtual ~ASN1_Object() = default; _ZN5Botan11ASN1_ObjectC2EOS0_: 161| 81.4k| ASN1_Object(ASN1_Object&&) = default; _ZN5Botan11ASN1_ObjectC2ERKS0_: 151| 47.1k| ASN1_Object(const ASN1_Object&) = default; _ZN5Botan11ASN1_ObjectaSERKS0_: 156| 369| ASN1_Object& operator=(const ASN1_Object&) = default; _ZN5Botan11ASN1_ObjectC2Ev: 146| 173k| ASN1_Object() = default; _ZN5Botan19AlgorithmIdentifierC2Ev: 655| 13.7k| AlgorithmIdentifier() = default; _ZN5Botan3OIDC2Ev: 423| 47.1k| explicit OID() = default; _ZN5Botan11ASN1_ObjectaSEOS0_: 166| 10.6k| ASN1_Object& operator=(ASN1_Object&&) = default; _ZN5Botan10BER_ObjectC2Ev: 239| 387k| BER_Object() = default; _ZN5Botan10BER_ObjectaSEOS0_: 259| 82.3k| BER_Object& operator=(BER_Object&& other) = default; _ZN5Botan14ASN1_BitStringC2Ev: 179| 11.6k| ASN1_BitString() = default; _ZN5Botan10BER_ObjectC2EOS0_: 249| 116k| BER_Object(BER_Object&& other) = default; _ZN5Botan10BER_ObjectC2ERKS0_: 244| 126| BER_Object(const BER_Object& other) = default; _ZN5Botan9ASN1_TimeC2Ev: 42| 7.47k| ASN1_Time() = default; _ZN5Botan13ignore_paramsIJNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEEEEvDpRKT_: 149| 767|constexpr void ignore_params([[maybe_unused]] const T&... args) {} _ZN5Botan13ignore_paramsIJNS_3TLS15Session_SummaryEEEEvDpRKT_: 149| 8|constexpr void ignore_params([[maybe_unused]] const T&... args) {} _ZN5Botan13ignore_paramsIJNS_3TLS16Protocol_VersionEEEEvDpRKT_: 149| 2.33k|constexpr void ignore_params([[maybe_unused]] const T&... args) {} _ZN5Botan13ignore_paramsIJmEEEvDpRKT_: 149| 486|constexpr void ignore_params([[maybe_unused]] const T&... args) {} _ZN5Botan13ignore_paramsIJPKhmEEEvDpRKT_: 149| 26.0k|constexpr void ignore_params([[maybe_unused]] const T&... args) {} _ZN5Botan13ignore_paramsIJbEEEvDpRKT_: 149| 1.10k|constexpr void ignore_params([[maybe_unused]] const T&... args) {} _ZN5Botan13ignore_paramsIJjEEEvDpRKT_: 149| 78.7k|constexpr void ignore_params([[maybe_unused]] const T&... args) {} _ZN5Botan13ignore_paramsIJPKtmEEEvDpRKT_: 149| 234|constexpr void ignore_params([[maybe_unused]] const T&... args) {} _ZN5Botan13ignore_paramsIJPKmmEEEvDpRKT_: 149| 2.88M|constexpr void ignore_params([[maybe_unused]] const T&... args) {} _ZN5Botan13ignore_paramsIJNS_21RandomNumberGeneratorEEEEvDpRKT_: 149| 36|constexpr void ignore_params([[maybe_unused]] const T&... args) {} _ZN5Botan13ignore_paramsIJNS_3TLS16Protocol_VersionENS1_6PolicyEEEEvDpRKT_: 149| 6.57k|constexpr void ignore_params([[maybe_unused]] const T&... args) {} _ZN5Botan11BER_Decoder6Limits3DEREv: 44| 29.4k| static Limits DER() { return Limits(false, 0, false, DefaultMaxObjectSize, false); } _ZN5Botan11BER_Decoder6LimitsC2EbmbNSt3__18optionalImEEb: 135| 29.4k| m_allow_ber(allow_ber), 136| 29.4k| m_max_nested_indef(max_nested_indef), 137| 29.4k| m_allow_standalone_eoc(allow_standalone_eoc), 138| 29.4k| m_max_object_size(max_object_size), 139| 29.4k| m_reject_default_value_encoding(reject_default_value_encoding) {} _ZN5Botan11BER_Decoder14start_sequenceEv: 277| 76.0k| BER_Decoder start_sequence() { return start_cons(ASN1_Type::Sequence, ASN1_Class::Universal); } _ZN5Botan11BER_Decoder6decodeERm: 364| 3.74k| BER_Decoder& decode(size_t& out) { return decode(out, ASN1_Type::Integer, ASN1_Class::Universal); } _ZN5Botan11BER_Decoder6decodeINSt3__16vectorIhNS2_9allocatorIhEEEEQsr8conceptsE20ordinary_byte_vectorINS_6detail19wrapped_type_helperIu14__remove_cvrefIT_EE4typeEEEERS0_RS9_NS_9ASN1_TypeE: 388| 15.2k| BER_Decoder& decode(T& out, ASN1_Type real_type) { 389| 15.2k| return decode(unwrap_strong_type(out), real_type, real_type, ASN1_Class::Universal); 390| 15.2k| } _ZN5Botan11BER_Decoder6decodeINSt3__16vectorIhNS2_9allocatorIhEEEEQsr8conceptsE20ordinary_byte_vectorINS_6detail19wrapped_type_helperIu14__remove_cvrefIT_EE4typeEEEERS0_RS9_NS_9ASN1_TypeESF_NS_10ASN1_ClassE: 405| 15.3k| ASN1_Class class_tag = ASN1_Class::ContextSpecific) { 406| 15.3k| return decode_into_byte_vector(unwrap_strong_type(v), real_type, type_tag, class_tag); 407| 15.3k| } _ZN5Botan11BER_Decoder16decode_and_checkImEERS0_RKT_NSt3__117basic_string_viewIcNS6_11char_traitsIcEEEE: 696| 5| BER_Decoder& decode_and_check(const T& expected, std::string_view error_msg) { 697| 5| T actual; 698| 5| decode(actual); 699| | 700| 5| if(actual != expected) { ------------------ | Branch (700:13): [True: 1, False: 4] ------------------ 701| 1| throw Decoding_Error(error_msg); 702| 1| } 703| | 704| 4| return (*this); 705| 5| } _ZNK5Botan11BER_Decoder6Limits18allow_ber_encodingEv: 58| 560k| bool allow_ber_encoding() const { return m_allow_ber; } _ZNK5Botan11BER_Decoder6Limits20require_der_encodingEv: 63| 340k| bool require_der_encoding() const { return !allow_ber_encoding(); } _ZNK5Botan11BER_Decoder6Limits15max_object_sizeEv: 82| 218k| std::optional max_object_size() const { return m_max_object_size; } _ZN5Botan11BER_DecoderC2ERKNS_10BER_ObjectENS0_6LimitsE: 169| 7.10k| BER_Decoder(obj.data(), limits) {} _ZNK5Botan11BER_Decoder6limitsEv: 199| 100k| Limits limits() const { return m_limits; } _ZN5Botan11BER_Decoder8get_nextERNS_10BER_ObjectE: 212| 6.81k| BER_Decoder& get_next(BER_Object& ber) { 213| 6.81k| ber = get_next_object(); 214| 6.81k| return (*this); 215| 6.81k| } _ZN5Botan11BER_Decoder9start_setEv: 283| 16.0k| BER_Decoder start_set() { return start_cons(ASN1_Type::Set, ASN1_Class::Universal); } _ZN5Botan11BER_Decoder22start_context_specificEj: 292| 368| BER_Decoder start_context_specific(uint32_t tag) { 293| 368| return start_cons(ASN1_Type(tag), ASN1_Class::ContextSpecific); 294| 368| } _ZN5Botan11BER_Decoder6decodeERNS_6BigIntE: 369| 5.60k| BER_Decoder& decode(BigInt& out) { return decode(out, ASN1_Type::Integer, ASN1_Class::Universal); } _ZN5Botan11BER_Decoder9raw_bytesINSt3__16vectorIhNS2_9allocatorIhEEEEQsr8conceptsE20ordinary_byte_vectorINS_6detail19wrapped_type_helperIu14__remove_cvrefIT_EE4typeEEEERS0_RS9_: 341| 24.3k| BER_Decoder& raw_bytes(T& out_wrapped) { 342| 24.3k| auto& out = unwrap_strong_type(out_wrapped); 343| 24.3k| out.clear(); 344| 24.3k| uint8_t buf[64]; 345| 78.9k| while(const size_t got = this->read_bytes(std::span{buf})) { ------------------ | Branch (345:29): [True: 54.6k, False: 24.3k] ------------------ 346| 54.6k| out.insert(out.end(), buf, buf + got); 347| 54.6k| } 348| 24.3k| return (*this); 349| 24.3k| } _ZN5Botan11BER_Decoder30decode_octet_aligned_bitstringINSt3__16vectorIhNS2_9allocatorIhEEEEQsr8conceptsE20ordinary_byte_vectorINS_6detail19wrapped_type_helperIu14__remove_cvrefIT_EE4typeEEEERS0_RS9_NS_9ASN1_TypeENS_10ASN1_ClassE: 458| 9.39k| ASN1_Class class_tag = ASN1_Class::Universal) { 459| 9.39k| auto& out = unwrap_strong_type(out_wrapped); 460| 9.39k| ASN1_BitString bits; 461| 9.39k| decode_bitstring(bits, type_tag, class_tag); 462| | 463| 9.39k| if(bits.unused_bits() != 0) { ------------------ | Branch (463:13): [True: 1, False: 9.39k] ------------------ 464| 1| throw Decoding_Error("Expected octet-aligned BIT STRING"); 465| 1| } 466| | 467| 9.39k| out.assign(bits.bytes().begin(), bits.bytes().end()); 468| 9.39k| return (*this); 469| 9.39k| } _ZN5Botan11BER_Decoder15decode_optionalImEERS0_RT_NS_9ASN1_TypeENS_10ASN1_ClassERKS3_: 548| 3.82k| BER_Decoder& decode_optional(T& out, ASN1_Type type_tag, ASN1_Class class_tag, const T& default_value = T()) { 549| 3.82k| std::optional optval; 550| 3.82k| this->decode_optional(optval, type_tag, class_tag); 551| 3.82k| out = optval ? *optval : default_value; ------------------ | Branch (551:16): [True: 3.73k, False: 88] ------------------ 552| 3.82k| return (*this); 553| 3.82k| } _ZN5Botan11BER_Decoder15decode_optionalImEERS0_RNSt3__18optionalIT_EENS_9ASN1_TypeENS_10ASN1_ClassE: 840| 5.47k|BER_Decoder& BER_Decoder::decode_optional(std::optional& optval, ASN1_Type type_tag, ASN1_Class class_tag) { 841| 5.47k| BER_Object obj = get_next_object(); 842| | 843| 5.47k| if(obj.is_a(type_tag, class_tag)) { ------------------ | Branch (843:7): [True: 3.75k, False: 1.71k] ------------------ 844| 3.75k| T out{}; 845| 3.75k| if(class_tag == ASN1_Class::ExplicitContextSpecific) { ------------------ | Branch (845:10): [True: 3.73k, False: 23] ------------------ 846| 3.73k| BER_Decoder(obj, m_limits).decode(out).verify_end(); 847| 3.73k| } else { 848| 23| this->push_back(std::move(obj)); 849| | if constexpr(std::is_base_of_v) { 850| | // Object types check the tag in decode_from; a re-tagging 851| | // implicit override of an object is not supported here 852| | this->decode(out); 853| 23| } else { 854| 23| this->decode(out, type_tag, class_tag); 855| 23| } 856| 23| } 857| 3.75k| optval = std::move(out); 858| 3.75k| } else { 859| 1.71k| this->push_back(std::move(obj)); 860| 1.71k| optval = std::nullopt; 861| 1.71k| } 862| | 863| 5.47k| return (*this); 864| 5.47k|} _ZN5Botan11BER_Decoder22decode_optional_stringINSt3__16vectorIhNS2_9allocatorIhEEEEQsr8conceptsE20ordinary_byte_vectorINS_6detail19wrapped_type_helperIu14__remove_cvrefIT_EE4typeEEEERS0_RS9_NS_9ASN1_TypeEjNS_10ASN1_ClassE: 720| 6.81k| ASN1_Class class_tag = ASN1_Class::ContextSpecific) { 721| 6.81k| BER_Object obj = get_next_object(); 722| 6.81k| auto& out = unwrap_strong_type(out_wrapped); 723| | 724| 6.81k| const ASN1_Type type_tag = static_cast(expected_tag); 725| | 726| 6.81k| if(obj.is_a(type_tag, class_tag)) { ------------------ | Branch (726:13): [True: 14, False: 6.80k] ------------------ 727| 14| if(class_tag == ASN1_Class::ExplicitContextSpecific) { ------------------ | Branch (727:16): [True: 0, False: 14] ------------------ 728| 0| BER_Decoder(obj, m_limits).decode(out, real_type).verify_end(); 729| 14| } else { 730| 14| push_back(std::move(obj)); 731| 14| decode(out, real_type, type_tag, class_tag); 732| 14| } 733| 6.80k| } else { 734| 6.80k| out.clear(); 735| 6.80k| push_back(std::move(obj)); 736| 6.80k| } 737| | 738| 6.81k| return (*this); 739| 6.81k| } _ZN5Botan11BER_Decoder15decode_optionalIbEERS0_RT_NS_9ASN1_TypeENS_10ASN1_ClassERKS3_: 548| 16.2k| BER_Decoder& decode_optional(T& out, ASN1_Type type_tag, ASN1_Class class_tag, const T& default_value = T()) { 549| 16.2k| std::optional optval; 550| 16.2k| this->decode_optional(optval, type_tag, class_tag); 551| 16.2k| out = optval ? *optval : default_value; ------------------ | Branch (551:16): [True: 5.13k, False: 11.0k] ------------------ 552| 16.2k| return (*this); 553| 16.2k| } _ZN5Botan11BER_Decoder15decode_optionalIbEERS0_RNSt3__18optionalIT_EENS_9ASN1_TypeENS_10ASN1_ClassE: 840| 16.2k|BER_Decoder& BER_Decoder::decode_optional(std::optional& optval, ASN1_Type type_tag, ASN1_Class class_tag) { 841| 16.2k| BER_Object obj = get_next_object(); 842| | 843| 16.2k| if(obj.is_a(type_tag, class_tag)) { ------------------ | Branch (843:7): [True: 5.15k, False: 11.0k] ------------------ 844| 5.15k| T out{}; 845| 5.15k| if(class_tag == ASN1_Class::ExplicitContextSpecific) { ------------------ | Branch (845:10): [True: 0, False: 5.15k] ------------------ 846| 0| BER_Decoder(obj, m_limits).decode(out).verify_end(); 847| 5.15k| } else { 848| 5.15k| this->push_back(std::move(obj)); 849| | if constexpr(std::is_base_of_v) { 850| | // Object types check the tag in decode_from; a re-tagging 851| | // implicit override of an object is not supported here 852| | this->decode(out); 853| 5.15k| } else { 854| 5.15k| this->decode(out, type_tag, class_tag); 855| 5.15k| } 856| 5.15k| } 857| 5.15k| optval = std::move(out); 858| 11.0k| } else { 859| 11.0k| this->push_back(std::move(obj)); 860| 11.0k| optval = std::nullopt; 861| 11.0k| } 862| | 863| 16.2k| return (*this); 864| 16.2k|} x509_ext.cpp:_ZN5Botan11BER_Decoder21decode_optional_fieldIZNS_14Cert_Extension16Authority_Key_ID12decode_innerERKNSt3__16vectorIhNS4_9allocatorIhEEEEE3$_0EERS0_jNS_10ASN1_ClassEOT_: 621| 316| BER_Decoder& decode_optional_field(uint32_t tag_no, ASN1_Class class_tag, F&& fn) { 622| 316| if(peek_next_object().is_a(tag_no, class_tag)) { ------------------ | Branch (622:13): [True: 79, False: 237] ------------------ 623| 79| std::forward(fn)(*this); 624| 79| } 625| 316| return (*this); 626| 316| } _ZN5Botan11BER_Decoder15decode_implicitINS_15AlternativeNameEEERS0_RT_NS_9ASN1_TypeENS_10ASN1_ClassES6_S7_: 658| 302| T& out, ASN1_Type type_tag, ASN1_Class class_tag, ASN1_Type real_type, ASN1_Class real_class) { 659| 302| BER_Object obj = get_next_object(); 660| 302| obj.assert_is_a(type_tag, class_tag); 661| 302| return decode_implicit(std::move(obj), out, real_type, real_class); 662| 302| } _ZN5Botan11BER_Decoder15decode_implicitINS_15AlternativeNameEEERS0_NS_10BER_ObjectERT_NS_9ASN1_TypeENS_10ASN1_ClassE: 635| 302| BER_Decoder& decode_implicit(BER_Object obj, T& out, ASN1_Type real_type, ASN1_Class real_class) { 636| 302| obj.set_tagging(real_type, real_class); 637| 302| push_back(std::move(obj)); 638| 302| if constexpr(std::is_base_of_v) { 639| | // The object was re-tagged above; decode_from checks the real tag itself 640| 302| return decode(out); 641| | } else { 642| | return decode(out, real_type, real_class); 643| | } 644| 302| } x509_ext.cpp:_ZN5Botan11BER_Decoder21decode_optional_fieldIZNS_14Cert_Extension16Authority_Key_ID12decode_innerERKNSt3__16vectorIhNS4_9allocatorIhEEEEE3$_1EERS0_jNS_10ASN1_ClassEOT_: 621| 252| BER_Decoder& decode_optional_field(uint32_t tag_no, ASN1_Class class_tag, F&& fn) { 622| 252| if(peek_next_object().is_a(tag_no, class_tag)) { ------------------ | Branch (622:13): [True: 15, False: 237] ------------------ 623| 15| std::forward(fn)(*this); 624| 15| } 625| 252| return (*this); 626| 252| } x509_ext.cpp:_ZN5Botan11BER_Decoder21decode_optional_fieldIZNS_14Cert_Extension16Authority_Key_ID12decode_innerERKNSt3__16vectorIhNS4_9allocatorIhEEEEE3$_2EERS0_jNS_10ASN1_ClassEOT_: 621| 239| BER_Decoder& decode_optional_field(uint32_t tag_no, ASN1_Class class_tag, F&& fn) { 622| 239| if(peek_next_object().is_a(tag_no, class_tag)) { ------------------ | Branch (622:13): [True: 17, False: 222] ------------------ 623| 17| std::forward(fn)(*this); 624| 17| } 625| 239| return (*this); 626| 239| } _ZN5Botan11BER_Decoder15decode_implicitINS_18X509_Serial_NumberEEERS0_RT_NS_9ASN1_TypeENS_10ASN1_ClassES6_S7_: 658| 17| T& out, ASN1_Type type_tag, ASN1_Class class_tag, ASN1_Type real_type, ASN1_Class real_class) { 659| 17| BER_Object obj = get_next_object(); 660| 17| obj.assert_is_a(type_tag, class_tag); 661| 17| return decode_implicit(std::move(obj), out, real_type, real_class); 662| 17| } _ZN5Botan11BER_Decoder15decode_implicitINS_18X509_Serial_NumberEEERS0_NS_10BER_ObjectERT_NS_9ASN1_TypeENS_10ASN1_ClassE: 635| 17| BER_Decoder& decode_implicit(BER_Object obj, T& out, ASN1_Type real_type, ASN1_Class real_class) { 636| 17| obj.set_tagging(real_type, real_class); 637| 17| push_back(std::move(obj)); 638| 17| if constexpr(std::is_base_of_v) { 639| | // The object was re-tagged above; decode_from checks the real tag itself 640| 17| return decode(out); 641| | } else { 642| | return decode(out, real_type, real_class); 643| | } 644| 17| } _ZN5Botan11BER_Decoder11decode_listINS_3OIDEEERS0_RNSt3__16vectorIT_NS4_9allocatorIS6_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 893| 1.97k|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 894| 1.97k| BER_Decoder list = start_cons(type_tag, class_tag); 895| | 896| 3.78k| while(list.more_items()) { ------------------ | Branch (896:10): [True: 1.81k, False: 1.97k] ------------------ 897| 1.81k| T value; 898| 1.81k| list.decode(value); 899| 1.81k| vec.push_back(std::move(value)); 900| 1.81k| } 901| | 902| 1.97k| list.end_cons(); 903| | 904| 1.97k| return (*this); 905| 1.97k|} _ZN5Botan11BER_Decoder20decode_optional_listINS_14GeneralSubtreeEEEbRNSt3__16vectorIT_NS3_9allocatorIS5_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 911| 98|bool BER_Decoder::decode_optional_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 912| 98| if(peek_next_object().is_a(type_tag, class_tag)) { ------------------ | Branch (912:7): [True: 48, False: 50] ------------------ 913| 48| decode_list(vec, type_tag, class_tag); 914| 48| return true; 915| 48| } 916| | 917| 50| return false; 918| 98|} _ZN5Botan11BER_Decoder11decode_listINS_14GeneralSubtreeEEERS0_RNSt3__16vectorIT_NS4_9allocatorIS6_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 893| 48|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 894| 48| BER_Decoder list = start_cons(type_tag, class_tag); 895| | 896| 157| while(list.more_items()) { ------------------ | Branch (896:10): [True: 109, False: 48] ------------------ 897| 109| T value; 898| 109| list.decode(value); 899| 109| vec.push_back(std::move(value)); 900| 109| } 901| | 902| 48| list.end_cons(); 903| | 904| 48| return (*this); 905| 48|} x509_ext.cpp:_ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension12_GLOBAL__N_118Policy_InformationEEERS0_RNSt3__16vectorIT_NS6_9allocatorIS8_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 893| 446|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 894| 446| BER_Decoder list = start_cons(type_tag, class_tag); 895| | 896| 597| while(list.more_items()) { ------------------ | Branch (896:10): [True: 151, False: 446] ------------------ 897| 151| T value; 898| 151| list.decode(value); 899| 151| vec.push_back(std::move(value)); 900| 151| } 901| | 902| 446| list.end_cons(); 903| | 904| 446| return (*this); 905| 446|} _ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension23CRL_Distribution_Points18Distribution_PointEEERS0_RNSt3__16vectorIT_NS6_9allocatorIS8_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 893| 475|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 894| 475| BER_Decoder list = start_cons(type_tag, class_tag); 895| | 896| 926| while(list.more_items()) { ------------------ | Branch (896:10): [True: 451, False: 475] ------------------ 897| 451| T value; 898| 451| list.decode(value); 899| 451| vec.push_back(std::move(value)); 900| 451| } 901| | 902| 475| list.end_cons(); 903| | 904| 475| return (*this); 905| 475|} x509_ext.cpp:_ZN5Botan11BER_Decoder21decode_optional_fieldIZNS_14Cert_Extension23CRL_Distribution_Points18Distribution_Point11decode_fromERS0_E3$_0EES5_jNS_10ASN1_ClassEOT_: 621| 417| BER_Decoder& decode_optional_field(uint32_t tag_no, ASN1_Class class_tag, F&& fn) { 622| 417| if(peek_next_object().is_a(tag_no, class_tag)) { ------------------ | Branch (622:13): [True: 368, False: 49] ------------------ 623| 368| std::forward(fn)(*this); 624| 368| } 625| 417| return (*this); 626| 417| } x509_ext.cpp:_ZN5Botan11BER_Decoder21decode_optional_fieldIZNS_14Cert_Extension23CRL_Distribution_Points18Distribution_Point11decode_fromERS0_E3$_1EES5_jNS_10ASN1_ClassEOT_: 621| 108| BER_Decoder& decode_optional_field(uint32_t tag_no, ASN1_Class class_tag, F&& fn) { 622| 108| if(peek_next_object().is_a(tag_no, class_tag)) { ------------------ | Branch (622:13): [True: 12, False: 96] ------------------ 623| 12| std::forward(fn)(*this); 624| 12| } 625| 108| return (*this); 626| 108| } x509_ext.cpp:_ZN5Botan11BER_Decoder21decode_optional_fieldIZNS_14Cert_Extension23CRL_Distribution_Points18Distribution_Point11decode_fromERS0_E3$_2EES5_jNS_10ASN1_ClassEOT_: 621| 94| BER_Decoder& decode_optional_field(uint32_t tag_no, ASN1_Class class_tag, F&& fn) { 622| 94| if(peek_next_object().is_a(tag_no, class_tag)) { ------------------ | Branch (622:13): [True: 8, False: 86] ------------------ 623| 8| std::forward(fn)(*this); 624| 8| } 625| 94| return (*this); 626| 94| } _ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension10TNAuthList5EntryEEERS0_RNSt3__16vectorIT_NS6_9allocatorIS8_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 893| 257|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 894| 257| BER_Decoder list = start_cons(type_tag, class_tag); 895| | 896| 494| while(list.more_items()) { ------------------ | Branch (896:10): [True: 237, False: 257] ------------------ 897| 237| T value; 898| 237| list.decode(value); 899| 237| vec.push_back(std::move(value)); 900| 237| } 901| | 902| 257| list.end_cons(); 903| | 904| 257| return (*this); 905| 257|} _ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension15IPAddressBlocks15IPAddressFamilyEEERS0_RNSt3__16vectorIT_NS6_9allocatorIS8_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 893| 145|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 894| 145| BER_Decoder list = start_cons(type_tag, class_tag); 895| | 896| 303| while(list.more_items()) { ------------------ | Branch (896:10): [True: 158, False: 145] ------------------ 897| 158| T value; 898| 158| list.decode(value); 899| 158| vec.push_back(std::move(value)); 900| 158| } 901| | 902| 145| list.end_cons(); 903| | 904| 145| return (*this); 905| 145|} _ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS3_7VersionE4EEEEERS0_RNSt3__16vectorIT_NS8_9allocatorISA_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 893| 47|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 894| 47| BER_Decoder list = start_cons(type_tag, class_tag); 895| | 896| 131| while(list.more_items()) { ------------------ | Branch (896:10): [True: 84, False: 47] ------------------ 897| 84| T value; 898| 84| list.decode(value); 899| 84| vec.push_back(std::move(value)); 900| 84| } 901| | 902| 47| list.end_cons(); 903| | 904| 47| return (*this); 905| 47|} _ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS3_7VersionE16EEEEERS0_RNSt3__16vectorIT_NS8_9allocatorISA_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 893| 63|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 894| 63| BER_Decoder list = start_cons(type_tag, class_tag); 895| | 896| 221| while(list.more_items()) { ------------------ | Branch (896:10): [True: 158, False: 63] ------------------ 897| 158| T value; 898| 158| list.decode(value); 899| 158| vec.push_back(std::move(value)); 900| 158| } 901| | 902| 63| list.end_cons(); 903| | 904| 63| return (*this); 905| 63|} _ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension8ASBlocks11ASIdOrRangeEEERS0_RNSt3__16vectorIT_NS6_9allocatorIS8_EEEENS_9ASN1_TypeENS_10ASN1_ClassE: 893| 11|BER_Decoder& BER_Decoder::decode_list(std::vector& vec, ASN1_Type type_tag, ASN1_Class class_tag) { 894| 11| BER_Decoder list = start_cons(type_tag, class_tag); 895| | 896| 13| while(list.more_items()) { ------------------ | Branch (896:10): [True: 2, False: 11] ------------------ 897| 2| T value; 898| 2| list.decode(value); 899| 2| vec.push_back(std::move(value)); 900| 2| } 901| | 902| 11| list.end_cons(); 903| | 904| 11| return (*this); 905| 11|} _ZN5Botan11BER_Decoder15decode_implicitINS_3OIDEEERS0_NS_10BER_ObjectERT_NS_9ASN1_TypeENS_10ASN1_ClassE: 635| 126| BER_Decoder& decode_implicit(BER_Object obj, T& out, ASN1_Type real_type, ASN1_Class real_class) { 636| 126| obj.set_tagging(real_type, real_class); 637| 126| push_back(std::move(obj)); 638| 126| if constexpr(std::is_base_of_v) { 639| | // The object was re-tagged above; decode_from checks the real tag itself 640| 126| return decode(out); 641| | } else { 642| | return decode(out, real_type, real_class); 643| | } 644| 126| } _ZN5BotanleERKNS_6BigIntEm: 1393| 2.92k|inline bool operator<=(const BigInt& a, word b) { 1394| 2.92k| return (a.cmp_word(b) <= 0); 1395| 2.92k|} _ZN5BotangeERKNS_6BigIntES2_: 1343| 9.46k|inline bool operator>=(const BigInt& a, const BigInt& b) { 1344| 9.46k| return (a.cmp(b) >= 0); 1345| 9.46k|} _ZN5BotanmiERKNS_6BigIntEm: 1229| 2.04k|inline BigInt operator-(const BigInt& x, word y) { 1230| 2.04k| return BigInt::add2(x, &y, 1, BigInt::Negative); 1231| 2.04k|} _ZN5Botan6BigIntD2Ev: 185| 202k| ~BigInt() { _const_time_unpoison(); } _ZN5Botan6BigInt4zeroEv: 50| 3.06k| static BigInt zero() { return BigInt(); } _ZN5Botan6BigIntC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 98| 662| explicit BigInt(std::string_view str) { *this = BigInt::from_string(str); } _ZN5Botan6BigIntC2EPKhm: 133| 396| BigInt(const uint8_t buf[], size_t length) { assign_from_bytes(std::span{buf, length}); } _ZN5Botan6BigIntC2ENSt3__14spanIKhLm18446744073709551615EEE: 139| 36| explicit BigInt(std::span bytes) { assign_from_bytes(bytes); } _ZN5Botan6BigIntC2EOS0_: 183| 10.9k| BigInt(BigInt&& other) noexcept { this->swap(other); } _ZN5Botan6BigIntaSEOS0_: 190| 50.1k| BigInt& operator=(BigInt&& other) noexcept { 191| 50.1k| if(this != &other) { ------------------ | Branch (191:13): [True: 50.1k, False: 0] ------------------ 192| 50.1k| this->swap(other); 193| 50.1k| } 194| | 195| 50.1k| return (*this); 196| 50.1k| } _ZN5Botan6BigInt4swapERS0_: 207| 72.5k| void swap(BigInt& other) noexcept { 208| 72.5k| m_data.swap(other.m_data); 209| 72.5k| std::swap(m_signedness, other.m_signedness); 210| 72.5k| } _ZN5Botan6BigInt8swap_regERNSt3__16vectorImNS_16secure_allocatorImEEEE: 218| 7.18k| BOTAN_DEPRECATED("Deprecated no replacement") void swap_reg(secure_vector& reg) { 219| 7.18k| m_data.swap(reg); 220| | // sign left unchanged 221| 7.18k| } _ZN5Botan6BigIntmIEm: 245| 606| BigInt& operator-=(word y) { return sub(&y, 1, Positive); } _ZN5Botan6BigInt3subEPKmmNS0_4SignE: 358| 606| BigInt& sub(const word y[], size_t y_words, Sign sign) { 359| 606| return add(y, y_words, sign == Positive ? Negative : Positive); ------------------ | Branch (359:33): [True: 606, False: 0] ------------------ 360| 606| } _ZN5Botan6BigInt5clearEv: 441| 18.5k| void clear() { 442| 18.5k| m_data.set_to_zero(); 443| 18.5k| m_signedness = Positive; 444| 18.5k| } _ZNK5Botan6BigInt7is_evenEv: 481| 6.48k| bool is_even() const { return !get_bit(0); } _ZNK5Botan6BigInt6is_oddEv: 487| 4.98k| bool is_odd() const { return get_bit(0); } _ZNK5Botan6BigInt6signumEv: 493| 331k| int signum() const { 494| 331k| if(sig_words() == 0) { ------------------ | Branch (494:13): [True: 23.9k, False: 307k] ------------------ 495| 23.9k| return 0; 496| 23.9k| } 497| 307k| return (sign() == Negative) ? -1 : 1; ------------------ | Branch (497:17): [True: 2.18k, False: 305k] ------------------ 498| 331k| } _ZNK5Botan6BigInt7is_zeroEv: 510| 14.8k| bool is_zero() const { return sig_words() == 0; } _ZN5Botan6BigInt7set_bitEm: 516| 4.91k| void set_bit(size_t n) { conditionally_set_bit(n, true); } _ZN5Botan6BigInt21conditionally_set_bitEmb: 526| 4.91k| void conditionally_set_bit(size_t n, bool set_it) { 527| 4.91k| const size_t which = n / (sizeof(word) * 8); 528| 4.91k| const word mask = static_cast(set_it) << (n % (sizeof(word) * 8)); 529| 4.91k| m_data.set_word_at(which, word_at(which) | mask); 530| 4.91k| } _ZNK5Botan6BigInt7get_bitEm: 549| 880k| bool get_bit(size_t n) const { return ((word_at(n / (sizeof(word) * 8)) >> (n % (sizeof(word) * 8))) & 1) == 1; } _ZNK5Botan6BigInt7word_atEm: 601| 2.35M| word word_at(size_t n) const { return m_data.get_word_at(n); } _ZN5Botan6BigInt11set_word_atEmm: 608| 40.9k| BOTAN_DEPRECATED("Deprecated no replacement") void set_word_at(size_t i, word w) { m_data.set_word_at(i, w); } _ZN5Botan6BigInt9set_wordsEPKmm: 615| 486| BOTAN_DEPRECATED("Deprecated no replacement") void set_words(const word w[], size_t len) { 616| 486| m_data.set_words(w, len); 617| 486| } _ZNK5Botan6BigInt4signEv: 641| 347k| Sign sign() const { return (m_signedness); } _ZNK5Botan6BigInt12reverse_signEv: 647| 2.98k| Sign reverse_sign() const { 648| 2.98k| if(sign() == Positive) { ------------------ | Branch (648:13): [True: 2.98k, False: 0] ------------------ 649| 2.98k| return Negative; 650| 2.98k| } 651| 0| return Positive; 652| 2.98k| } _ZN5Botan6BigInt8set_signENS0_4SignE: 663| 20.9k| void set_sign(Sign sign) { 664| 20.9k| if(sign == Negative && is_zero()) { ------------------ | Branch (664:13): [True: 2.15k, False: 18.8k] | Branch (664:33): [True: 606, False: 1.54k] ------------------ 665| 606| sign = Positive; 666| 606| } 667| | 668| 20.9k| m_signedness = sign; 669| 20.9k| } _ZNK5Botan6BigInt4sizeEv: 681| 530k| size_t size() const { return m_data.size(); } _ZNK5Botan6BigInt9sig_wordsEv: 687| 631k| size_t sig_words() const { return m_data.sig_words(); } _ZN5Botan6BigInt12mutable_dataEv: 712| 148k| BOTAN_DEPRECATED("Deprecated no replacement") word* mutable_data() { return m_data.mutable_data(); } _ZNK5Botan6BigInt4dataEv: 718| 10.0k| BOTAN_DEPRECATED("Deprecated no replacement") const word* data() const { return m_data.const_data(); } _ZN5Botan6BigInt15get_word_vectorEv: 723| 5.02k| BOTAN_DEPRECATED("Deprecated no replacement") secure_vector& get_word_vector() { 724| 5.02k| return m_data.mutable_vector(); 725| 5.02k| } _ZNK5Botan6BigInt7grow_toEm: 738| 61.2k| BOTAN_DEPRECATED("Deprecated no replacement") void grow_to(size_t n) const { m_data.grow_to(n); } _ZN5Botan6BigInt10power_of_2Em: 906| 4.91k| static BigInt power_of_2(size_t n) { 907| 4.91k| BigInt b; 908| 4.91k| b.set_bit(n); 909| 4.91k| return b; 910| 4.91k| } _ZN5Botan6BigInt6decodeEPKhm: 943| 254| BOTAN_DEPRECATED("Use BigInt::from_bytes") static BigInt decode(const uint8_t buf[], size_t length) { 944| 254| return BigInt::from_bytes(std::span{buf, length}); 945| 254| } _ZNK5Botan6BigInt8_as_spanEv: 1023| 15.9k| std::span _as_span() const { return m_data.const_span(); } _ZNK5Botan6BigInt5_dataEv: 1033| 36.2M| const word* _data() const { return m_data.const_data(); } _ZN5Botan6BigInt18_assign_from_bytesENSt3__14spanIKhLm18446744073709551615EEE: 1044| 9.47k| void _assign_from_bytes(std::span bytes) { assign_from_bytes(bytes); } _ZN5Botan6BigInt11_from_wordsERNSt3__16vectorImNS_16secure_allocatorImEEEE: 1052| 48.0k| static BigInt _from_words(secure_vector& words) { 1053| 48.0k| BigInt bn; 1054| 48.0k| bn.m_data.swap(words); 1055| 48.0k| return bn; 1056| 48.0k| } _ZN5Botan6BigInt4Data12mutable_dataEv: 1083| 152k| word* mutable_data() { 1084| 152k| invalidate_sig_words(); 1085| 152k| return m_reg.data(); 1086| 152k| } _ZNK5Botan6BigInt4Data10const_dataEv: 1088| 36.5M| const word* const_data() const { return m_reg.data(); } _ZNK5Botan6BigInt4Data10const_spanEv: 1090| 15.9k| std::span const_span() const { return std::span{m_reg}; } _ZN5Botan6BigInt4Data14mutable_vectorEv: 1092| 5.02k| secure_vector& mutable_vector() { 1093| 5.02k| invalidate_sig_words(); 1094| 5.02k| return m_reg; 1095| 5.02k| } _ZNK5Botan6BigInt4Data11get_word_atEm: 1099| 2.35M| word get_word_at(size_t n) const { 1100| 2.35M| if(n < m_reg.size()) { ------------------ | Branch (1100:19): [True: 2.34M, False: 8.40k] ------------------ 1101| 2.34M| return m_reg[n]; 1102| 2.34M| } 1103| 8.40k| return 0; 1104| 2.35M| } _ZN5Botan6BigInt4Data11set_word_atEmm: 1106| 45.8k| void set_word_at(size_t i, word w) { 1107| 45.8k| invalidate_sig_words(); 1108| 45.8k| if(i >= m_reg.size()) { ------------------ | Branch (1108:19): [True: 45.8k, False: 0] ------------------ 1109| 45.8k| if(w == 0) { ------------------ | Branch (1109:22): [True: 4.27k, False: 41.6k] ------------------ 1110| 4.27k| return; 1111| 4.27k| } 1112| 41.6k| grow_to(i + 1); 1113| 41.6k| } 1114| 41.6k| m_reg[i] = w; 1115| 41.6k| } _ZN5Botan6BigInt4Data9set_wordsEPKmm: 1117| 486| void set_words(const word w[], size_t len) { 1118| 486| invalidate_sig_words(); 1119| 486| m_reg.assign(w, w + len); 1120| 486| } _ZNK5Botan6BigInt4Data7grow_toEm: 1126| 102k| void grow_to(size_t n) const { 1127| 102k| if(n > size()) { ------------------ | Branch (1127:19): [True: 71.4k, False: 31.4k] ------------------ 1128| 71.4k| if(n <= m_reg.capacity()) { ------------------ | Branch (1128:22): [True: 486, False: 70.9k] ------------------ 1129| 486| m_reg.resize(n); 1130| 70.9k| } else { 1131| 70.9k| m_reg.resize(n + (8 - (n % 8))); 1132| 70.9k| } 1133| 71.4k| } 1134| 102k| } _ZNK5Botan6BigInt4Data4sizeEv: 1136| 839k| size_t size() const { return m_reg.size(); } _ZN5Botan6BigInt4Data4swapERS1_: 1151| 72.5k| void swap(Data& other) noexcept { 1152| 72.5k| m_reg.swap(other.m_reg); 1153| 72.5k| std::swap(m_sig_words, other.m_sig_words); 1154| 72.5k| } _ZN5Botan6BigInt4Data4swapERNSt3__16vectorImNS_16secure_allocatorImEEEE: 1156| 73.7k| void swap(secure_vector& reg) noexcept { 1157| 73.7k| m_reg.swap(reg); 1158| 73.7k| invalidate_sig_words(); 1159| 73.7k| } _ZNK5Botan6BigInt4Data20invalidate_sig_wordsEv: 1161| 277k| void invalidate_sig_words() const noexcept { m_sig_words = sig_words_npos; } _ZNK5Botan6BigInt4Data9sig_wordsEv: 1163| 631k| size_t sig_words() const { 1164| 631k| if(m_sig_words == sig_words_npos) { ------------------ | Branch (1164:19): [True: 163k, False: 468k] ------------------ 1165| 163k| m_sig_words = calc_sig_words(); 1166| 163k| } 1167| 631k| return m_sig_words; 1168| 631k| } _ZN5BotanplERKNS_6BigIntES2_: 1189| 3.41k|inline BigInt operator+(const BigInt& x, const BigInt& y) { 1190| 3.41k| return BigInt::add2(x, y._data(), y.sig_words(), y.sign()); 1191| 3.41k|} _ZN5BotanplERKNS_6BigIntEm: 1199| 320|inline BigInt operator+(const BigInt& x, word y) { 1200| 320| return BigInt::add2(x, &y, 1, BigInt::Positive); 1201| 320|} _ZN5BotanmiERKNS_6BigIntES2_: 1219| 2.98k|inline BigInt operator-(const BigInt& x, const BigInt& y) { 1220| 2.98k| return BigInt::add2(x, y._data(), y.sig_words(), y.reverse_sign()); 1221| 2.98k|} _ZN5BotanmlEmRKNS_6BigIntE: 1255| 687|inline BigInt operator*(word x, const BigInt& y) { 1256| 687| return y * x; 1257| 687|} _ZN5BotaneqERKNS_6BigIntES2_: 1313| 508|inline bool operator==(const BigInt& a, const BigInt& b) { 1314| 508| return a.is_equal(b); 1315| 508|} _ZN5BotanneERKNS_6BigIntES2_: 1323| 139|inline bool operator!=(const BigInt& a, const BigInt& b) { 1324| 139| return !a.is_equal(b); 1325| 139|} _ZN5BotanleERKNS_6BigIntES2_: 1333| 4.75k|inline bool operator<=(const BigInt& a, const BigInt& b) { 1334| 4.75k| return (a.cmp(b) <= 0); 1335| 4.75k|} _ZN5BotanltERKNS_6BigIntES2_: 1353| 20.2k|inline bool operator<(const BigInt& a, const BigInt& b) { 1354| 20.2k| return a.is_less_than(b); 1355| 20.2k|} _ZN5BotaneqERKNS_6BigIntEm: 1373| 46.4k|inline bool operator==(const BigInt& a, word b) { 1374| 46.4k| return (a.cmp_word(b) == 0); 1375| 46.4k|} _ZN5BotanneERKNS_6BigIntEm: 1383| 329|inline bool operator!=(const BigInt& a, word b) { 1384| 329| return (a.cmp_word(b) != 0); 1385| 329|} _ZN5BotangeERKNS_6BigIntEm: 1403| 2.12k|inline bool operator>=(const BigInt& a, word b) { 1404| 2.12k| return (a.cmp_word(b) >= 0); 1405| 2.12k|} _ZN5BotanltERKNS_6BigIntEm: 1413| 8.02k|inline bool operator<(const BigInt& a, word b) { 1414| 8.02k| return (a.cmp_word(b) < 0); 1415| 8.02k|} _ZN5BotangtERKNS_6BigIntEm: 1423| 5.03k|inline bool operator>(const BigInt& a, word b) { 1424| 5.03k| return (a.cmp_word(b) > 0); 1425| 5.03k|} _ZNK5Botan6BigInt9serializeINSt3__16vectorIhNS2_9allocatorIhEEEEEET_m: 790| 4.72k| T serialize(size_t len) const { 791| | // TODO this supports std::vector and secure_vector 792| | // it would be nice if this also could work with std::array as in 793| | // bn.serialize_to>(32); 794| 4.72k| T out(len); 795| 4.72k| this->serialize_to(out); 796| 4.72k| return out; 797| 4.72k| } _ZNK5Botan6BigInt9serializeINSt3__16vectorIhNS_16secure_allocatorIhEEEEEET_m: 790| 272| T serialize(size_t len) const { 791| | // TODO this supports std::vector and secure_vector 792| | // it would be nice if this also could work with std::array as in 793| | // bn.serialize_to>(32); 794| 272| T out(len); 795| 272| this->serialize_to(out); 796| 272| return out; 797| 272| } _ZNK5Botan6BigInt9serializeINSt3__16vectorIhNS2_9allocatorIhEEEEEET_v: 803| 495| T serialize() const { 804| 495| return serialize(this->bytes()); 805| 495| } _ZN5Botan6BigIntC2Ev: 45| 174k| BigInt() = default; _ZN5Botan6BigIntC2ERKS0_: 88| 15.1k| BigInt(const BigInt& other) = default; _ZN5Botan6BigIntaSERKS0_: 201| 9.47k| BigInt& operator=(const BigInt&) = default; _ZNK5Botan11BlockCipher14parallel_bytesEv: 71| 1.33k| size_t parallel_bytes() const { return parallelism() * block_size() * BlockCipher::ParallelismMult; } _ZNK5Botan11BlockCipher7encryptEPh: 104| 1.20k| void encrypt(uint8_t block[]) const { encrypt_n(block, block, 1); } _ZNK5Botan11BlockCipher7encryptENSt3__14spanIhLm18446744073709551615EEE: 118| 2.87k| void encrypt(std::span block) const { 119| 2.87k| return encrypt_n(block.data(), block.data(), block.size() / block_size()); 120| 2.87k| } _ZNK5Botan11BlockCipher7encryptENSt3__14spanIKhLm18446744073709551615EEENS2_IhLm18446744073709551615EEE: 135| 2.61k| void encrypt(std::span in, std::span out) const { 136| 2.61k| return encrypt_n(in.data(), out.data(), in.size() / block_size()); 137| 2.61k| } _ZNK5Botan25Block_Cipher_Fixed_ParamsILm16ELm16ELm0ELm1ENS_11BlockCipherEE8key_specEv: 246| 589| Key_Length_Specification key_spec() const final { return Key_Length_Specification(KMIN, KMAX, KMOD); } _ZNK5Botan25Block_Cipher_Fixed_ParamsILm16ELm16ELm0ELm1ENS_11BlockCipherEE10block_sizeEv: 240| 3.46k| size_t block_size() const final { return BS; } _ZNK5Botan25Block_Cipher_Fixed_ParamsILm16ELm32ELm0ELm1ENS_11BlockCipherEE8key_specEv: 246| 1.61k| Key_Length_Specification key_spec() const final { return Key_Length_Specification(KMIN, KMAX, KMOD); } _ZNK5Botan25Block_Cipher_Fixed_ParamsILm16ELm32ELm0ELm1ENS_11BlockCipherEE10block_sizeEv: 240| 5.03k| size_t block_size() const final { return BS; } _ZNK5Botan25Block_Cipher_Fixed_ParamsILm8ELm16ELm24ELm8ENS_11BlockCipherEE8key_specEv: 246| 450| Key_Length_Specification key_spec() const final { return Key_Length_Specification(KMIN, KMAX, KMOD); } _ZNK5Botan25Block_Cipher_Fixed_ParamsILm8ELm16ELm24ELm8ENS_11BlockCipherEE10block_sizeEv: 240| 353| size_t block_size() const final { return BS; } _ZN5Botan20Buffered_Computation6updateEPKhm: 35| 1.49k| void update(const uint8_t in[], size_t length) { add_data({in, length}); } _ZN5Botan20Buffered_Computation6updateENSt3__14spanIKhLm18446744073709551615EEE: 41| 84.7k| void update(std::span in) { add_data(in); } _ZN5Botan20Buffered_Computation5finalEPh: 97| 782| void final(uint8_t out[]) { final_result({out, output_length()}); } _ZN5Botan20Buffered_Computation12final_stdvecEv: 114| 9.11k| std::vector final_stdvec() { return final>(); } _ZN5Botan20Buffered_Computation5finalITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS3_9allocatorIhEEEEEET_v: 104| 9.11k| T final() { 105| 9.11k| T output(output_length()); 106| 9.11k| final_result(output); 107| 9.11k| return output; 108| 9.11k| } _ZN5Botan20Buffered_Computation5finalITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS_16secure_allocatorIhEEEEEET_v: 104| 4.88k| T final() { 105| 4.88k| T output(output_length()); 106| 4.88k| final_result(output); 107| 4.88k| return output; 108| 4.88k| } _ZN5Botan20Buffered_ComputationD2Ev: 169| 18.2k| virtual ~Buffered_Computation() = default; _ZN5Botan20Buffered_Computation5finalITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS_16secure_allocatorIhEEEEEEvRT_: 127| 3.47k| void final(T& out) { 128| 3.47k| out.resize(output_length()); 129| 3.47k| final_result(out); 130| 3.47k| } _ZN5Botan20Buffered_Computation7processITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS_16secure_allocatorIhEEEEEET_NS3_4spanIKhLm18446744073709551615EEE: 164| 3.47k| T process(std::span in) { 165| 3.47k| update(in); 166| 3.47k| return final(); 167| 3.47k| } _ZN5Botan20Buffered_Computation5finalITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS3_9allocatorIhEEEEEEvRT_: 127| 6.61k| void final(T& out) { 128| 6.61k| out.resize(output_length()); 129| 6.61k| final_result(out); 130| 6.61k| } _ZNK5Botan10ChaCha_RNG31max_number_of_bytes_per_requestEv: 120| 19.9k| size_t max_number_of_bytes_per_request() const override { return 0; } _ZN5Botan11Cipher_Mode5startENSt3__14spanIKhLm18446744073709551615EEE: 98| 1.77k| void start(std::span nonce) { start_msg(nonce.data(), nonce.size()); } _ZN5Botan11Cipher_Mode6finishERNSt3__16vectorIhNS_16secure_allocatorIhEEEEm: 185| 1.37k| void finish(secure_vector& final_block, size_t offset = 0) { finish_msg(final_block, offset); } _ZN5Botan11Cipher_Mode7processENSt3__14spanIhLm18446744073709551615EEE: 132| 486| size_t process(std::span msg) { return this->process_msg(msg.data(), msg.size()); } _ZN5Botan11Cipher_Mode7processEPhm: 140| 393| size_t process(uint8_t msg[], size_t msg_len) { return this->process_msg(msg, msg_len); } _ZN5Botan11Cipher_Mode6updateITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS_16secure_allocatorIhEEEEEEvRT_m: 155| 486| void update(T& buffer, size_t offset = 0) { 156| 486| const size_t written = process(std::span(buffer).subspan(offset)); 157| 486| buffer.resize(offset + written); 158| 486| } _ZN5Botan19Credentials_ManagerD2Ev: 42| 6.57k| virtual ~Credentials_Manager() = default; _ZN5Botan8CurveGFp4swapERS0_: 82| 2.74k| void swap(CurveGFp& other) noexcept { std::swap(m_group, other.m_group); } _ZNK5Botan8CurveGFpeqERKS0_: 84| 1.42k| bool operator==(const CurveGFp& other) const { return (m_group == other.m_group); } _ZN5Botan8CurveGFpC2Ev: 75| 3.12k| CurveGFp() = default; _ZN5Botan17DataSource_MemoryC2ERKNSt3__16vectorIhNS1_9allocatorIhEEEE: 192| 2.32k| explicit DataSource_Memory(const std::vector& in) : DataSource_Memory(std::span(in)) {} _ZN5Botan17DataSource_MemoryC2ENSt3__14spanIKhLm18446744073709551615EEE: 181| 40.7k| explicit DataSource_Memory(std::span in) : m_offset(0) { 182| | // Guard against forming a range from a null pointer (eg an empty span) 183| 40.7k| if(!in.empty()) { ------------------ | Branch (183:13): [True: 40.6k, False: 71] ------------------ 184| 40.6k| m_source.assign(in.begin(), in.end()); 185| 40.6k| } 186| 40.7k| } _ZN5Botan10DataSourceC2Ev: 107| 153k| DataSource() = default; _ZN5Botan10DataSourceD2Ev: 109| 133k| virtual ~DataSource() = default; _ZN5Botan17DataSource_MemoryC2EPKhm: 169| 4.03k| DataSource_Memory(const uint8_t in[], size_t length) : DataSource_Memory(std::span(in, length)) {} _ZN5Botan11DER_Encoder14start_sequenceEv: 86| 8.70k| DER_Encoder& start_sequence() { return start_cons(ASN1_Type::Sequence, ASN1_Class::Universal); } _ZN5Botan11DER_Encoder12DER_SequenceD2Ev: 504| 28.9k| ~DER_Sequence() = default; _ZN5Botan11DER_Encoder9raw_bytesENSt3__14spanIKhLm18446744073709551615EEE: 154| 5.69k| DER_Encoder& raw_bytes(std::span val) { return raw_bytes(val.data(), val.size()); } _ZN5Botan11DER_Encoder30encode_octet_aligned_bitstringENSt3__14spanIKhLm18446744073709551615EEENS_9ASN1_TypeENS_10ASN1_ClassE: 212| 2.84k| ASN1_Class class_tag = ASN1_Class::Universal) { 213| 2.84k| return encode_bitstring(bytes, 0, type_tag, class_tag); 214| 2.84k| } _ZN5Botan11DER_Encoder10add_objectENS_9ASN1_TypeENS_10ASN1_ClassENSt3__14spanIKhLm18446744073709551615EEE: 410| 21.3k| DER_Encoder& add_object(ASN1_Type type_tag, ASN1_Class class_tag, std::span rep) { 411| 21.3k| return add_object(type_tag, class_tag, rep.data(), rep.size()); 412| 21.3k| } _ZN5Botan11DER_Encoder10add_objectENS_9ASN1_TypeENS_10ASN1_ClassERKNSt3__16vectorIhNS3_9allocatorIhEEEE: 421| 18.3k| DER_Encoder& add_object(ASN1_Type type_tag, ASN1_Class class_tag, const std::vector& rep) { 422| 18.3k| return add_object(type_tag, class_tag, std::span{rep}); 423| 18.3k| } _ZN5Botan11DER_Encoder10add_objectENS_9ASN1_TypeENS_10ASN1_ClassERKNSt3__16vectorIhNS_16secure_allocatorIhEEEE: 432| 2.84k| DER_Encoder& add_object(ASN1_Type type_tag, ASN1_Class class_tag, const secure_vector& rep) { 433| 2.84k| return add_object(type_tag, class_tag, std::span{rep}); 434| 2.84k| } _ZN5Botan11DER_Encoder12DER_SequenceC2EOS1_: 487| 20.2k| m_type_tag(seq.m_type_tag), 488| 20.2k| m_class_tag(seq.m_class_tag), 489| 20.2k| m_sort_contents(seq.m_sort_contents), 490| 20.2k| m_contents(std::move(seq.m_contents)), 491| 20.2k| m_set_contents(std::move(seq.m_set_contents)) {} _ZNK5Botan12DH_PublicKey9algo_nameEv: 55| 816| std::string algo_name() const override { return "DH"; } _ZN5Botan12DH_PublicKeyC2Ev: 68| 316| DH_PublicKey() = default; _ZN5Botan8DL_GroupC2ENSt3__110shared_ptrINS_13DL_Group_DataEEE: 390| 292| explicit DL_Group(std::shared_ptr data) : m_data(std::move(data)) {} _ZNK5Botan7DNSName9to_stringEv: 51| 7| const std::string& to_string() const { return m_name; } _ZN5Botan7DNSNameC2ENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEE: 101| 7.25k| explicit DNSName(std::string canonical) : m_name(std::move(canonical)) {} _ZNK5Botan7DNSNamessERKS0_: 84| 494| auto operator<=>(const DNSName&) const = default; _ZNK5Botan14EC_AffinePoint5innerEv: 357| 1.20k| const EC_AffinePoint_Data& inner() const { return *m_point; } _ZNK5Botan8EC_Group5_dataEv: 604| 4.23k| const std::shared_ptr& _data() const { return m_data; } _ZN5Botan8EC_GroupC2EOS0_: 297| 1.19k| EC_Group(EC_Group&&) = default; _ZN5Botan8EC_PointaSEOS0_: 75| 2.39k| EC_Point& operator=(EC_Point&& other) noexcept { 76| 2.39k| if(this != &other) { ------------------ | Branch (76:13): [True: 2.39k, False: 0] ------------------ 77| 2.39k| this->swap(other); 78| 2.39k| } 79| 2.39k| return (*this); 80| 2.39k| } _ZNK5Botan8EC_Point7is_zeroEv: 170| 5.10k| bool is_zero() const { return m_z.is_zero(); } _ZNK5Botan8EC_Point5get_xEv: 248| 2.49k| BOTAN_DEPRECATED("Use affine coordinates only") const BigInt& get_x() const { return m_x; } _ZNK5Botan8EC_Point5get_yEv: 255| 2.49k| BOTAN_DEPRECATED("Use affine coordinates only") const BigInt& get_y() const { return m_y; } _ZNK5Botan8EC_Point4plusERKS0_RNSt3__16vectorINS_6BigIntENS3_9allocatorIS5_EEEE: 357| 1.42k| EC_Point plus(const EC_Point& other, std::vector& workspace) const { 358| 1.42k| EC_Point x = (*this); 359| 1.42k| x.add(other, workspace); 360| 1.42k| return x; 361| 1.42k| } _ZNK5Botan8EC_Point9get_curveEv: 380| 4| BOTAN_DEPRECATED("Deprecated no replacement") const CurveGFp& get_curve() const { return m_curve; } _ZN5Botan8EC_PointD2Ev: 82| 5.27k| ~EC_Point() = default; _ZN5Botan8EC_PointC2Ev: 49| 3.11k| EC_Point() = default; _ZN5Botan8EC_PointC2ERKS0_: 60| 1.42k| EC_Point(const EC_Point&) = default; _ZN5Botan8EC_PointaSERKS0_: 70| 1.42k| EC_Point& operator=(const EC_Point&) = default; _ZNK5Botan9EC_Scalar6_innerEv: 282| 596| const EC_Scalar_Data& _inner() const { return inner(); } _ZNK5Botan9EC_Scalar5innerEv: 296| 2.38k| const EC_Scalar_Data& inner() const { return *m_scalar; } _ZN5Botan12EC_PublicKeyC2Ev: 140| 596| EC_PublicKey() = default; _ZN5Botan12EC_PublicKeyD2Ev: 42| 600| ~EC_PublicKey() override = default; _ZN5Botan13EC_PrivateKeyD2Ev: 173| 596| ~EC_PrivateKey() override = default; _ZN5Botan15ECDH_PrivateKeyC1ERNS_21RandomNumberGeneratorERKNS_8EC_GroupE: 101| 596| ECDH_PrivateKey(RandomNumberGenerator& rng, const EC_Group& group) : EC_PrivateKey(rng, group) {} _ZN5Botan14ECDH_PublicKeyC2Ev: 67| 596| ECDH_PublicKey() = default; _ZN5Botan15ECDSA_PublicKeyC1ERKNS_19AlgorithmIdentifierENSt3__14spanIKhLm18446744073709551615EEE: 44| 401| EC_PublicKey(assert_algorithm_identifier(alg_id, "ECDSA"), key_bits) {} _ZNK5Botan15ECDSA_PublicKey9algo_nameEv: 62| 4| std::string algo_name() const override { return "ECDSA"; } _ZN5Botan12EmailAddressC2ENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS_7DNSNameE: 69| 3| m_local_part(std::move(local_part)), m_domain(std::move(domain)) {} _ZNK5Botan9Exception4whatEv: 94| 5.88k| const char* what() const noexcept override { return m_msg.c_str(); } _ZN5Botan10hex_encodeENSt3__14spanIKhLm18446744073709551615EEEb: 43| 5.69k|inline std::string hex_encode(std::span input, bool uppercase = true) { 44| 5.69k| return hex_encode(input.data(), input.size(), uppercase); 45| 5.69k|} _ZN5Botan11IPv4AddressC2Ej: 29| 166| explicit IPv4Address(uint32_t ip) : m_ip(ip) {} _ZN5Botan11IPv4AddressC2ENSt3__15arrayIhLm4EEE: 41| 4| explicit IPv4Address(std::array ip) : IPv4Address(std::span(ip)) {} _ZNK5Botan11IPv4AddressssERKS0_: 73| 506| auto operator<=>(const IPv4Address&) const = default; _ZN5Botan11IPv6AddressC2ENSt3__15arrayIhLm16EEE: 37| 26| explicit IPv6Address(std::array ip) : m_ip(ip) {} _ZNK5Botan11IPv6Address8to_bytesEv: 82| 14| std::array to_bytes() const { return m_ip; } _ZNK5Botan11IPv6AddressssERKS0_: 73| 398| auto operator<=>(const IPv6Address&) const = default; _ZN5Botan3KDFD2Ev: 27| 1.40k| virtual ~KDF() = default; _ZNK5Botan3KDF10derive_keyITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS_16secure_allocatorIhEEEEEET_mNS3_4spanIKhLm18446744073709551615EEESB_SB_: 145| 2.10k| std::span label) const { 146| 2.10k| T key(key_len); 147| 2.10k| perform_kdf(key, secret, salt, label); 148| 2.10k| return key; 149| 2.10k| } _ZNK5Botan3KDF10derive_keyITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS_16secure_allocatorIhEEEEEET_mPKhmSA_mSA_m: 99| 699| size_t label_len = 0) const { 100| 699| return derive_key(key_len, {secret, secret_len}, {salt, salt_len}, {label, label_len}); 101| 699| } _ZN5Botan9clear_memIhEEvPT_m: 118| 7.15k|inline constexpr void clear_mem(T* ptr, size_t n) { 119| 7.15k| clear_bytes(ptr, sizeof(T) * n); 120| 7.15k|} _ZN5Botan11clear_bytesEPvm: 101| 10.4M|inline constexpr void clear_bytes(void* ptr, size_t bytes) { 102| 10.4M| if(bytes > 0) { ------------------ | Branch (102:7): [True: 10.3M, False: 18.5k] ------------------ 103| 10.3M| std::memset(ptr, 0, bytes); 104| 10.3M| } 105| 10.4M|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERNSt3__15arrayImLm4EEETkNS1_16contiguous_rangeENS2_4spanIhLm32EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS8_IXsr21__is_primary_templateINS9_Iu14__remove_cvrefIDTclL_ZNSB_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSH_ISP_EESQ_E4type10value_typeEEEEvOSM_RKSC_: 176| 7.72k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 7.72k| ranges::assert_equal_byte_lengths(out, in); 178| 7.72k| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 7.72k|} _ZN5Botan13typecast_copyINSt3__15arrayImLm4EEETkNS_6ranges16contiguous_rangeENS1_4spanIhLm32EEEQaaaasr3stdE26is_default_constructible_vIT_Esr3stdE23is_trivially_copyable_vIS7_Esr3stdE23is_trivially_copyable_vINS1_11conditionalIXsr21__is_primary_templateINS1_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS1_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS1_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEEES7_RKSC_: 210| 7.72k|inline constexpr ToT typecast_copy(const FromR& src) { 211| 7.72k| ToT dst; // NOLINT(*-member-init) 212| 7.72k| typecast_copy(dst, src); 213| 7.72k| return dst; 214| 7.72k|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERNSt3__15arrayImLm4EEETkNS1_16contiguous_rangeENS2_4spanIKhLm32EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISG_EESH_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS9_IXsr21__is_primary_templateINSA_Iu14__remove_cvrefIDTclL_ZNSC_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSI_ISQ_EESR_E4type10value_typeEEEEvOSN_RKSD_: 176| 10.3k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 10.3k| ranges::assert_equal_byte_lengths(out, in); 178| 10.3k| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 10.3k|} _ZN5Botan13typecast_copyINSt3__15arrayImLm4EEETkNS_6ranges16contiguous_rangeENS1_4spanIKhLm32EEEQaaaasr3stdE26is_default_constructible_vIT_Esr3stdE23is_trivially_copyable_vIS8_Esr3stdE23is_trivially_copyable_vINS1_11conditionalIXsr21__is_primary_templateINS1_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS1_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS1_26indirectly_readable_traitsISG_EESH_E4type10value_typeEEEES8_RKSD_: 210| 10.3k|inline constexpr ToT typecast_copy(const FromR& src) { 211| 10.3k| ToT dst; // NOLINT(*-member-init) 212| 10.3k| typecast_copy(dst, src); 213| 10.3k| return dst; 214| 10.3k|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeENSt3__14spanIhLm32EEETkNS1_16contiguous_rangeENS2_5arrayImLm4EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEEEvOSL_RKSB_: 176| 9.02k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 9.02k| ranges::assert_equal_byte_lengths(out, in); 178| 9.02k| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 9.02k|} _ZN5Botan7xor_bufITkNS_6ranges23contiguous_output_rangeIhEENSt3__14spanIhLm18446744073709551615EEETkNS1_16contiguous_rangeIhEENS4_IKhLm18446744073709551615EEEEEvOT_OT0_: 404| 11.3k| ranges::contiguous_range auto&& in) { 405| 11.3k| ranges::assert_equal_byte_lengths(out, in); 406| | 407| 11.3k| std::span o(out); 408| 11.3k| std::span i(in); 409| | 410| 19.0k| for(; o.size_bytes() >= 32; o = o.subspan(32), i = i.subspan(32)) { ------------------ | Branch (410:10): [True: 7.69k, False: 11.3k] ------------------ 411| 7.69k| auto x = typecast_copy>(o.template first<32>()); 412| 7.69k| const auto y = typecast_copy>(i.template first<32>()); 413| | 414| 7.69k| x[0] ^= y[0]; 415| 7.69k| x[1] ^= y[1]; 416| 7.69k| x[2] ^= y[2]; 417| 7.69k| x[3] ^= y[3]; 418| | 419| 7.69k| typecast_copy(o.template first<32>(), x); 420| 7.69k| } 421| | 422| 172k| for(size_t off = 0; off != o.size_bytes(); ++off) { ------------------ | Branch (422:24): [True: 161k, False: 11.3k] ------------------ 423| 161k| o[off] ^= i[off]; 424| 161k| } 425| 11.3k|} _ZN5Botan7xor_bufITkNS_6ranges23contiguous_output_rangeIhEENSt3__14spanIhLm18446744073709551615EEETkNS1_16contiguous_rangeIhEENS4_IKhLm18446744073709551615EEETkNS6_IhEES8_EEvOT_OT0_OT1_: 435| 3.27k| ranges::contiguous_range auto&& in2) { 436| 3.27k| ranges::assert_equal_byte_lengths(out, in1, in2); 437| | 438| 3.27k| std::span o{out}; 439| 3.27k| std::span i1{in1}; 440| 3.27k| std::span i2{in2}; 441| | 442| 4.57k| for(; o.size_bytes() >= 32; o = o.subspan(32), i1 = i1.subspan(32), i2 = i2.subspan(32)) { ------------------ | Branch (442:10): [True: 1.29k, False: 3.27k] ------------------ 443| 1.29k| auto x = typecast_copy>(i1.template first<32>()); 444| 1.29k| const auto y = typecast_copy>(i2.template first<32>()); 445| | 446| 1.29k| x[0] ^= y[0]; 447| 1.29k| x[1] ^= y[1]; 448| 1.29k| x[2] ^= y[2]; 449| 1.29k| x[3] ^= y[3]; 450| | 451| 1.29k| typecast_copy(o.template first<32>(), x); 452| 1.29k| } 453| | 454| 52.8k| for(size_t off = 0; off != o.size_bytes(); ++off) { ------------------ | Branch (454:24): [True: 49.6k, False: 3.27k] ------------------ 455| 49.6k| o[off] = i1[off] ^ i2[off]; 456| 49.6k| } 457| 3.27k|} _ZN5Botan7xor_bufEPhPKhm: 465| 11.3k|inline void xor_buf(uint8_t out[], const uint8_t in[], size_t length) { 466| | // simply assumes that *out and *in point to "length" allocated bytes at least 467| 11.3k| xor_buf(std::span{out, length}, std::span{in, length}); 468| 11.3k|} _ZN5Botan7xor_bufEPhPKhS2_m: 477| 3.27k|inline void xor_buf(uint8_t out[], const uint8_t in[], const uint8_t in2[], size_t length) { 478| | // simply assumes that *out, *in, and *in2 point to "length" allocated bytes at least 479| 3.27k| xor_buf(std::span{out, length}, std::span{in, length}, std::span{in2, length}); 480| 3.27k|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERKNSt3__14spanIhLm8EEEmQaaaasr3stdE23is_trivially_copyable_vIT0_Entsr3std6rangesE5rangeIS7_Esr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEEEvOSC_RKS7_: 199| 179k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromT& in) { 200| 179k| typecast_copy(out, std::span(&in, 1)); 201| 179k|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERKNSt3__14spanIhLm8EEETkNS1_16contiguous_rangeENS3_IKmLm1EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISG_EESH_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS9_IXsr21__is_primary_templateINSA_Iu14__remove_cvrefIDTclL_ZNSC_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSI_ISQ_EESR_E4type10value_typeEEEEvOSN_RKSD_: 176| 179k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 179k| ranges::assert_equal_byte_lengths(out, in); 178| 179k| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 179k|} _ZN5Botan13typecast_copyImTkNS_6ranges16contiguous_rangeENSt3__14spanIKhLm8EEEQaaaasr3stdE26is_default_constructible_vIT_Esr3stdE23is_trivially_copyable_vIS6_Esr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEEES6_RKSB_: 210| 358k|inline constexpr ToT typecast_copy(const FromR& src) { 211| 358k| ToT dst; // NOLINT(*-member-init) 212| 358k| typecast_copy(dst, src); 213| 358k| return dst; 214| 358k|} _ZN5Botan13typecast_copyImTkNS_6ranges16contiguous_rangeENSt3__14spanIKhLm8EEEQaaaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIT_Entsr3std6rangesE5rangeISK_EEEvRSK_RKSA_: 188| 358k|inline constexpr void typecast_copy(ToT& out, const FromR& in) { 189| 358k| typecast_copy(std::span(&out, 1), in); 190| 358k|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeENSt3__14spanImLm1EEETkNS1_16contiguous_rangeENS3_IKhLm8EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEEEvOSL_RKSB_: 176| 358k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 358k| ranges::assert_equal_byte_lengths(out, in); 178| 358k| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 358k|} _ZN5Botan13typecast_copyItTkNS_6ranges16contiguous_rangeENSt3__14spanIKhLm2EEEQaaaasr3stdE26is_default_constructible_vIT_Esr3stdE23is_trivially_copyable_vIS6_Esr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEEES6_RKSB_: 210| 1.48k|inline constexpr ToT typecast_copy(const FromR& src) { 211| 1.48k| ToT dst; // NOLINT(*-member-init) 212| 1.48k| typecast_copy(dst, src); 213| 1.48k| return dst; 214| 1.48k|} _ZN5Botan13typecast_copyItTkNS_6ranges16contiguous_rangeENSt3__14spanIKhLm2EEEQaaaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIT_Entsr3std6rangesE5rangeISK_EEEvRSK_RKSA_: 188| 1.48k|inline constexpr void typecast_copy(ToT& out, const FromR& in) { 189| 1.48k| typecast_copy(std::span(&out, 1), in); 190| 1.48k|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeENSt3__14spanItLm1EEETkNS1_16contiguous_rangeENS3_IKhLm2EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEEEvOSL_RKSB_: 176| 1.48k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 1.48k| ranges::assert_equal_byte_lengths(out, in); 178| 1.48k| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 1.48k|} _ZN5Botan13typecast_copyIjTkNS_6ranges16contiguous_rangeENSt3__14spanIKhLm4EEEQaaaasr3stdE26is_default_constructible_vIT_Esr3stdE23is_trivially_copyable_vIS6_Esr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEEES6_RKSB_: 210| 2.51k|inline constexpr ToT typecast_copy(const FromR& src) { 211| 2.51k| ToT dst; // NOLINT(*-member-init) 212| 2.51k| typecast_copy(dst, src); 213| 2.51k| return dst; 214| 2.51k|} _ZN5Botan13typecast_copyIjTkNS_6ranges16contiguous_rangeENSt3__14spanIKhLm4EEEQaaaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIT_Entsr3std6rangesE5rangeISK_EEEvRSK_RKSA_: 188| 2.51k|inline constexpr void typecast_copy(ToT& out, const FromR& in) { 189| 2.51k| typecast_copy(std::span(&out, 1), in); 190| 2.51k|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeENSt3__14spanIjLm1EEETkNS1_16contiguous_rangeENS3_IKhLm4EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEEEvOSL_RKSB_: 176| 2.51k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 2.51k| ranges::assert_equal_byte_lengths(out, in); 178| 2.51k| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 2.51k|} _ZN5Botan8copy_memIhQsr3stdE12is_trivial_vIu7__decayIT_EEEEvPS1_PKS1_m: 144| 914k|inline constexpr void copy_mem(T* out, const T* in, size_t n) { 145| 914k| BOTAN_ASSERT_IMPLICATION(n > 0, in != nullptr && out != nullptr, "If n > 0 then args are not null"); ------------------ | | 110| 914k| do { \ | | 111| 914k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 112| 1.76M| if((expr1) && !(expr2)) { \ | | ------------------ | | | Branch (112:10): [True: 883k, False: 31.6k] | | | Branch (112:23): [True: 883k, False: 0] | | | Branch (112:23): [True: 883k, False: 0] | | ------------------ | | 113| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 114| 0| Botan::assertion_failure(#expr1 " implies " #expr2, msg, __func__, __FILE__, __LINE__); \ | | 115| 0| } \ | | 116| 914k| } while(0) | | ------------------ | | | Branch (116:12): [Folded, False: 914k] | | ------------------ ------------------ 146| | 147| 914k| if(in != nullptr && out != nullptr && n > 0) { ------------------ | Branch (147:7): [True: 911k, False: 3.17k] | Branch (147:24): [True: 909k, False: 2.09k] | Branch (147:42): [True: 883k, False: 26.3k] ------------------ 148| 883k| std::memmove(out, in, sizeof(T) * n); 149| 883k| } 150| 914k|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERNSt3__15arrayIhLm8EEETkNS1_16contiguous_rangeENS3_ImLm1EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEEEvOSL_RKSB_: 176| 46.3k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 46.3k| ranges::assert_equal_byte_lengths(out, in); 178| 46.3k| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 46.3k|} _ZN5Botan19secure_scrub_memoryITkNS_6ranges23contiguous_output_rangeERNSt3__16vectorIhNS2_9allocatorIhEEEEEEvOT_: 59| 505k|void secure_scrub_memory(ranges::contiguous_output_range auto&& data) { 60| 505k| secure_scrub_memory(std::ranges::data(data), ranges::size_bytes(data)); 61| 505k|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERKNSt3__14spanIhLm4EEEjQaaaasr3stdE23is_trivially_copyable_vIT0_Entsr3std6rangesE5rangeIS7_Esr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEEEvOSC_RKS7_: 199| 303k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromT& in) { 200| 303k| typecast_copy(out, std::span(&in, 1)); 201| 303k|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERKNSt3__14spanIhLm4EEETkNS1_16contiguous_rangeENS3_IKjLm1EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISG_EESH_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS9_IXsr21__is_primary_templateINSA_Iu14__remove_cvrefIDTclL_ZNSC_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSI_ISQ_EESR_E4type10value_typeEEEEvOSN_RKSD_: 176| 303k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 303k| ranges::assert_equal_byte_lengths(out, in); 178| 303k| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 303k|} _ZN5Botan9clear_memIjEEvPT_m: 118| 6|inline constexpr void clear_mem(T* ptr, size_t n) { 119| 6| clear_bytes(ptr, sizeof(T) * n); 120| 6|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERNSt3__14spanImLm18446744073709551615EEETkNS1_16contiguous_rangeENS3_IKhLm18446744073709551615EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS8_IXsr21__is_primary_templateINS9_Iu14__remove_cvrefIDTclL_ZNSB_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSH_ISP_EESQ_E4type10value_typeEEEEvOSM_RKSC_: 176| 596|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 596| ranges::assert_equal_byte_lengths(out, in); 178| 596| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 596|} _ZN5Botan8copy_memImQsr3stdE12is_trivial_vIu7__decayIT_EEEEvPS1_PKS1_m: 144| 1.15M|inline constexpr void copy_mem(T* out, const T* in, size_t n) { 145| 1.15M| BOTAN_ASSERT_IMPLICATION(n > 0, in != nullptr && out != nullptr, "If n > 0 then args are not null"); ------------------ | | 110| 1.15M| do { \ | | 111| 1.15M| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 112| 2.31M| if((expr1) && !(expr2)) { \ | | ------------------ | | | Branch (112:10): [True: 1.15M, False: 0] | | | Branch (112:23): [True: 1.15M, False: 0] | | | Branch (112:23): [True: 1.15M, False: 0] | | ------------------ | | 113| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 114| 0| Botan::assertion_failure(#expr1 " implies " #expr2, msg, __func__, __FILE__, __LINE__); \ | | 115| 0| } \ | | 116| 1.15M| } while(0) | | ------------------ | | | Branch (116:12): [Folded, False: 1.15M] | | ------------------ ------------------ 146| | 147| 1.15M| if(in != nullptr && out != nullptr && n > 0) { ------------------ | Branch (147:7): [True: 1.15M, False: 0] | Branch (147:24): [True: 1.15M, False: 0] | Branch (147:42): [True: 1.15M, False: 0] ------------------ 148| 1.15M| std::memmove(out, in, sizeof(T) * n); 149| 1.15M| } 150| 1.15M|} _ZN5Botan9clear_memImEEvPT_m: 118| 10.3M|inline constexpr void clear_mem(T* ptr, size_t n) { 119| 10.3M| clear_bytes(ptr, sizeof(T) * n); 120| 10.3M|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanIhLm18446744073709551615EEETkNS1_16contiguous_rangeENS3_IKhLm18446744073709551615EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeENS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIST_EEEvOSB_RKSL_: 160| 14.4k|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 14.4k| ranges::assert_equal_byte_lengths(out, in); 162| 14.4k| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 14.4k] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 14.4k| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 14.4k, False: 0] ------------------ 165| 14.4k| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 14.4k| } 167| 14.4k|} _ZN5Botan13typecast_copyImTkNS_6ranges16contiguous_rangeENSt3__14spanIhLm8EEEQaaaasr3stdE26is_default_constructible_vIT_Esr3stdE23is_trivially_copyable_vIS5_Esr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEEES5_RKSA_: 210| 12.0k|inline constexpr ToT typecast_copy(const FromR& src) { 211| 12.0k| ToT dst; // NOLINT(*-member-init) 212| 12.0k| typecast_copy(dst, src); 213| 12.0k| return dst; 214| 12.0k|} _ZN5Botan13typecast_copyImTkNS_6ranges16contiguous_rangeENSt3__14spanIhLm8EEEQaaaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISC_EESD_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIT_Entsr3std6rangesE5rangeISJ_EEEvRSJ_RKS9_: 188| 12.0k|inline constexpr void typecast_copy(ToT& out, const FromR& in) { 189| 12.0k| typecast_copy(std::span(&out, 1), in); 190| 12.0k|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeENSt3__14spanImLm1EEETkNS1_16contiguous_rangeENS3_IhLm8EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS6_IXsr21__is_primary_templateINS7_Iu14__remove_cvrefIDTclL_ZNS9_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSF_ISN_EESO_E4type10value_typeEEEEvOSK_RKSA_: 176| 12.0k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 12.0k| ranges::assert_equal_byte_lengths(out, in); 178| 12.0k| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 12.0k|} _ZN5Botan9clear_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanIhLm18446744073709551615EEEEEvOT_Qsr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRS5_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISD_EESE_E4type10value_typeEE: 132| 206|{ 133| 206| clear_bytes(std::ranges::data(mem), ranges::size_bytes(mem)); 134| 206|} _ZN5BotaneOINS_16secure_allocatorIhEES2_EERNSt3__16vectorIhT_EES7_RKNS4_IhT0_EE: 532| 645|std::vector& operator^=(std::vector& out, const std::vector& in) { 533| 645| if(out.size() < in.size()) { ------------------ | Branch (533:7): [True: 0, False: 645] ------------------ 534| 0| out.resize(in.size()); 535| 0| } 536| | 537| 645| xor_buf(std::span{out}.first(in.size()), in); 538| 645| return out; 539| 645|} _ZN5Botan7xor_bufITkNS_6ranges23contiguous_output_rangeIhEENSt3__14spanIhLm18446744073709551615EEETkNS1_16contiguous_rangeIhEERKNS3_6vectorIhNS_16secure_allocatorIhEEEEEEvOT_OT0_: 404| 645| ranges::contiguous_range auto&& in) { 405| 645| ranges::assert_equal_byte_lengths(out, in); 406| | 407| 645| std::span o(out); 408| 645| std::span i(in); 409| | 410| 645| for(; o.size_bytes() >= 32; o = o.subspan(32), i = i.subspan(32)) { ------------------ | Branch (410:10): [True: 0, False: 645] ------------------ 411| 0| auto x = typecast_copy>(o.template first<32>()); 412| 0| const auto y = typecast_copy>(i.template first<32>()); 413| | 414| 0| x[0] ^= y[0]; 415| 0| x[1] ^= y[1]; 416| 0| x[2] ^= y[2]; 417| 0| x[3] ^= y[3]; 418| | 419| 0| typecast_copy(o.template first<32>(), x); 420| 0| } 421| | 422| 10.9k| for(size_t off = 0; off != o.size_bytes(); ++off) { ------------------ | Branch (422:24): [True: 10.3k, False: 645] ------------------ 423| 10.3k| o[off] ^= i[off]; 424| 10.3k| } 425| 645|} _ZN5Botan19secure_scrub_memoryITkNS_6ranges23contiguous_output_rangeERNSt3__15arrayIhLm16EEEEEvOT_: 59| 1.59k|void secure_scrub_memory(ranges::contiguous_output_range auto&& data) { 60| 1.59k| secure_scrub_memory(std::ranges::data(data), ranges::size_bytes(data)); 61| 1.59k|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeERNSt3__15arrayIhLm32EEETkNS1_16contiguous_rangeENS2_4spanIKhLm32EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISG_EESH_E4type10value_typeENS9_IXsr21__is_primary_templateINSA_Iu14__remove_cvrefIDTclL_ZNSC_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSI_ISQ_EESR_E4type10value_typeEEsr3stdE23is_trivially_copyable_vISV_EEEvOSD_RKSN_: 160| 10|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 10| ranges::assert_equal_byte_lengths(out, in); 162| 10| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 10] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 10| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 10, False: 0] ------------------ 165| 10| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 10| } 167| 10|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeERNSt3__14spanIhLm56EEETkNS1_16contiguous_rangeENS2_6vectorIhNS_16secure_allocatorIhEEEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISH_EESI_E4type10value_typeENSA_IXsr21__is_primary_templateINSB_Iu14__remove_cvrefIDTclL_ZNSD_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSJ_ISR_EESS_E4type10value_typeEEsr3stdE23is_trivially_copyable_vISW_EEEvOSE_RKSO_: 160| 1|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 1| ranges::assert_equal_byte_lengths(out, in); 162| 1| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 1] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 1| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 1, False: 0] ------------------ 165| 1| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 1| } 167| 1|} _ZN5Botan13typecast_copyINS_6StrongINSt3__15arrayIhLm56EEENS_11ScalarX448_EJEEETkNS_6ranges16contiguous_rangeENS2_4spanIKhLm18446744073709551615EEEQaaaasr3stdE26is_default_constructible_vIT_Esr3stdE23is_trivially_copyable_vISB_Esr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEESB_RKSG_: 210| 1|inline constexpr ToT typecast_copy(const FromR& src) { 211| 1| ToT dst; // NOLINT(*-member-init) 212| 1| typecast_copy(dst, src); 213| 1| return dst; 214| 1|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERNS_6StrongINSt3__15arrayIhLm56EEENS_11ScalarX448_EJEEETkNS1_16contiguous_rangeENS3_4spanIKhLm18446744073709551615EEEQaasr3stdE23is_trivially_copyable_vINS3_11conditionalIXsr21__is_primary_templateINS3_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS3_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS3_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINSC_IXsr21__is_primary_templateINSD_Iu14__remove_cvrefIDTclL_ZNSF_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSL_IST_EESU_E4type10value_typeEEEEvOSQ_RKSG_: 176| 1|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 1| ranges::assert_equal_byte_lengths(out, in); 178| 1| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 1|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERNSt3__14spanIjLm18446744073709551615EEETkNS1_16contiguous_rangeENS3_IKhLm18446744073709551615EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS8_IXsr21__is_primary_templateINS9_Iu14__remove_cvrefIDTclL_ZNSB_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSH_ISP_EESQ_E4type10value_typeEEEEvOSM_RKSC_: 176| 84|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 84| ranges::assert_equal_byte_lengths(out, in); 178| 84| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 84|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeERNSt3__15arrayIhLm16EEETkNS1_16contiguous_rangeENS2_4spanIKhLm18446744073709551615EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISG_EESH_E4type10value_typeENS9_IXsr21__is_primary_templateINSA_Iu14__remove_cvrefIDTclL_ZNSC_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSI_ISQ_EESR_E4type10value_typeEEsr3stdE23is_trivially_copyable_vISV_EEEvOSD_RKSN_: 160| 561|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 561| ranges::assert_equal_byte_lengths(out, in); 162| 561| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 561] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 561| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 561, False: 0] ------------------ 165| 561| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 561| } 167| 561|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeERNSt3__15arrayIhLm16EEETkNS1_16contiguous_rangeES4_Qaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISD_EESE_E4type10value_typeENS6_IXsr21__is_primary_templateINS7_Iu14__remove_cvrefIDTclL_ZNS9_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSF_ISN_EESO_E4type10value_typeEEsr3stdE23is_trivially_copyable_vISS_EEEvOSA_RKSK_: 160| 561|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 561| ranges::assert_equal_byte_lengths(out, in); 162| 561| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 561] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 561| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 561, False: 0] ------------------ 165| 561| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 561| } 167| 561|} _ZN5Botan7xor_bufITkNS_6ranges23contiguous_output_rangeIhEERNSt3__14spanIhLm18446744073709551615EEETkNS1_16contiguous_rangeIhEES5_TkNS7_IhEES5_EEvOT_OT0_OT1_: 435| 561| ranges::contiguous_range auto&& in2) { 436| 561| ranges::assert_equal_byte_lengths(out, in1, in2); 437| | 438| 561| std::span o{out}; 439| 561| std::span i1{in1}; 440| 561| std::span i2{in2}; 441| | 442| 561| for(; o.size_bytes() >= 32; o = o.subspan(32), i1 = i1.subspan(32), i2 = i2.subspan(32)) { ------------------ | Branch (442:10): [True: 0, False: 561] ------------------ 443| 0| auto x = typecast_copy>(i1.template first<32>()); 444| 0| const auto y = typecast_copy>(i2.template first<32>()); 445| | 446| 0| x[0] ^= y[0]; 447| 0| x[1] ^= y[1]; 448| 0| x[2] ^= y[2]; 449| 0| x[3] ^= y[3]; 450| | 451| 0| typecast_copy(o.template first<32>(), x); 452| 0| } 453| | 454| 9.53k| for(size_t off = 0; off != o.size_bytes(); ++off) { ------------------ | Branch (454:24): [True: 8.97k, False: 561] ------------------ 455| 8.97k| o[off] = i1[off] ^ i2[off]; 456| 8.97k| } 457| 561|} _ZN5Botan9clear_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanImLm18446744073709551615EEEEEvOT_Qsr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRS5_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISD_EESE_E4type10value_typeEE: 132| 7.82k|{ 133| 7.82k| clear_bytes(std::ranges::data(mem), ranges::size_bytes(mem)); 134| 7.82k|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanImLm18446744073709551615EEETkNS1_16contiguous_rangeENS3_IKmLm18446744073709551615EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeENS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIST_EEEvOSB_RKSL_: 160| 8.59k|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 8.59k| ranges::assert_equal_byte_lengths(out, in); 162| 8.59k| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 8.59k] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 8.59k| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 8.59k, False: 1] ------------------ 165| 8.59k| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 8.59k| } 167| 8.59k|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanImLm4EEETkNS1_16contiguous_rangeENS2_5arrayImLm4EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeENS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIST_EEEvOSB_RKSL_: 160| 766|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 766| ranges::assert_equal_byte_lengths(out, in); 162| 766| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 766] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 766| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 766, False: 0] ------------------ 165| 766| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 766| } 167| 766|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeERNSt3__15arrayIhLm8EEETkNS1_16contiguous_rangeENS2_4spanIKhLm8EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISG_EESH_E4type10value_typeENS9_IXsr21__is_primary_templateINSA_Iu14__remove_cvrefIDTclL_ZNSC_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSI_ISQ_EESR_E4type10value_typeEEsr3stdE23is_trivially_copyable_vISV_EEEvOSD_RKSN_: 160| 596|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 596| ranges::assert_equal_byte_lengths(out, in); 162| 596| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 596] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 596| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 596, False: 0] ------------------ 165| 596| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 596| } 167| 596|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanIhLm40EEETkNS1_16contiguous_rangeENS3_IKhLm40EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeENS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIST_EEEvOSB_RKSL_: 160| 955|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 955| ranges::assert_equal_byte_lengths(out, in); 162| 955| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 955] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 955| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 955, False: 0] ------------------ 165| 955| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 955| } 167| 955|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanImLm6EEETkNS1_16contiguous_rangeENS2_5arrayImLm6EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeENS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIST_EEEvOSB_RKSL_: 160| 745|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 745| ranges::assert_equal_byte_lengths(out, in); 162| 745| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 745] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 745| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 745, False: 0] ------------------ 165| 745| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 745| } 167| 745|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanIhLm56EEETkNS1_16contiguous_rangeENS3_IKhLm56EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeENS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIST_EEEvOSB_RKSL_: 160| 1.23k|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 1.23k| ranges::assert_equal_byte_lengths(out, in); 162| 1.23k| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 1.23k] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 1.23k| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 1.23k, False: 0] ------------------ 165| 1.23k| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 1.23k| } 167| 1.23k|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanIhLm72EEETkNS1_16contiguous_rangeENS3_IKhLm72EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeENS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIST_EEEvOSB_RKSL_: 160| 445|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 445| ranges::assert_equal_byte_lengths(out, in); 162| 445| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 445] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 445| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 445, False: 0] ------------------ 165| 445| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 445| } 167| 445|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanImLm8EEETkNS1_16contiguous_rangeENS2_5arrayImLm8EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeENS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIST_EEEvOSB_RKSL_: 160| 357|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 357| ranges::assert_equal_byte_lengths(out, in); 162| 357| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 357] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 357| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 357, False: 0] ------------------ 165| 357| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 357| } 167| 357|} _ZN5Botan9clear_memITkNS_6ranges23contiguous_output_rangeERNSt3__15arrayImLm18EEEEEvOT_Qsr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRS6_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEE: 132| 21.8k|{ 133| 21.8k| clear_bytes(std::ranges::data(mem), ranges::size_bytes(mem)); 134| 21.8k|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanImLm9EEETkNS1_16contiguous_rangeENS2_5arrayImLm9EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeENS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIST_EEEvOSB_RKSL_: 160| 140|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 140| ranges::assert_equal_byte_lengths(out, in); 162| 140| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 140] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 140| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 140, False: 0] ------------------ 165| 140| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 140| } 167| 140|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeERNSt3__14spanIhLm28EEETkNS1_16contiguous_rangeENS3_IKhLm28EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISF_EESG_E4type10value_typeENS8_IXsr21__is_primary_templateINS9_Iu14__remove_cvrefIDTclL_ZNSB_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSH_ISP_EESQ_E4type10value_typeEEsr3stdE23is_trivially_copyable_vISU_EEEvOSC_RKSM_: 160| 8|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 8| ranges::assert_equal_byte_lengths(out, in); 162| 8| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 8] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 8| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 8, False: 0] ------------------ 165| 8| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 8| } 167| 8|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanIhLm74EEETkNS1_16contiguous_rangeENS3_IKhLm74EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeENS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIST_EEEvOSB_RKSL_: 160| 350|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 350| ranges::assert_equal_byte_lengths(out, in); 162| 350| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 350] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 350| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 350, False: 0] ------------------ 165| 350| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 350| } 167| 350|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeERNSt3__14spanIhLm66EEETkNS1_16contiguous_rangeENS3_IKhLm66EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISF_EESG_E4type10value_typeENS8_IXsr21__is_primary_templateINS9_Iu14__remove_cvrefIDTclL_ZNSB_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSH_ISP_EESQ_E4type10value_typeEEsr3stdE23is_trivially_copyable_vISU_EEEvOSC_RKSM_: 160| 210|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 210| ranges::assert_equal_byte_lengths(out, in); 162| 210| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 210] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 210| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 210, False: 0] ------------------ 165| 210| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 210| } 167| 210|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERNSt3__15arrayImLm7EEETkNS1_16contiguous_rangeENS2_4spanIKhLm56EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISG_EESH_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS9_IXsr21__is_primary_templateINSA_Iu14__remove_cvrefIDTclL_ZNSC_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSI_ISQ_EESR_E4type10value_typeEEEEvOSN_RKSD_: 176| 2|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 2| ranges::assert_equal_byte_lengths(out, in); 178| 2| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 2|} _ZN5Botan9clear_memITkNS_6ranges23contiguous_output_rangeERNSt3__15arrayImLm7EEEEEvOT_Qsr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRS6_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEE: 132| 8.06k|{ 133| 8.06k| clear_bytes(std::ranges::data(mem), ranges::size_bytes(mem)); 134| 8.06k|} _ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERNSt3__14spanIhLm56EEETkNS1_16contiguous_rangeENS2_5arrayImLm7EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS8_IXsr21__is_primary_templateINS9_Iu14__remove_cvrefIDTclL_ZNSB_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSH_ISP_EESQ_E4type10value_typeEEEEvOSM_RKSC_: 176| 1|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) { 177| 1| ranges::assert_equal_byte_lengths(out, in); 178| 1| std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 179| 1|} _ZN5Botan7xor_bufITkNS_6ranges23contiguous_output_rangeIhEENSt3__14spanIhLm18446744073709551615EEETkNS1_16contiguous_rangeIhEERKNS3_6vectorIhNS3_9allocatorIhEEEEEEvOT_OT0_: 404| 256| ranges::contiguous_range auto&& in) { 405| 256| ranges::assert_equal_byte_lengths(out, in); 406| | 407| 256| std::span o(out); 408| 256| std::span i(in); 409| | 410| 256| for(; o.size_bytes() >= 32; o = o.subspan(32), i = i.subspan(32)) { ------------------ | Branch (410:10): [True: 0, False: 256] ------------------ 411| 0| auto x = typecast_copy>(o.template first<32>()); 412| 0| const auto y = typecast_copy>(i.template first<32>()); 413| | 414| 0| x[0] ^= y[0]; 415| 0| x[1] ^= y[1]; 416| 0| x[2] ^= y[2]; 417| 0| x[3] ^= y[3]; 418| | 419| 0| typecast_copy(o.template first<32>(), x); 420| 0| } 421| | 422| 3.32k| for(size_t off = 0; off != o.size_bytes(); ++off) { ------------------ | Branch (422:24): [True: 3.07k, False: 256] ------------------ 423| 3.07k| o[off] ^= i[off]; 424| 3.07k| } 425| 256|} _ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanIhLm4EEETkNS1_16contiguous_rangeENS2_6vectorIhNS2_9allocatorIhEEEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISG_EESH_E4type10value_typeENS9_IXsr21__is_primary_templateINSA_Iu14__remove_cvrefIDTclL_ZNSC_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSI_ISQ_EESR_E4type10value_typeEEsr3stdE23is_trivially_copyable_vISV_EEEvOSD_RKSN_: 160| 721|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) { 161| 721| ranges::assert_equal_byte_lengths(out, in); 162| 721| if(std::is_constant_evaluated()) { ------------------ | Branch (162:7): [Folded, False: 721] ------------------ 163| 0| std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out)); 164| 721| } else if(ranges::size_bytes(out) > 0) { ------------------ | Branch (164:14): [True: 721, False: 0] ------------------ 165| 721| std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out)); 166| 721| } 167| 721|} _ZN5Botan9clear_memITkNS_6ranges23contiguous_output_rangeERNSt3__14spanIhLm18446744073709551615EEEEEvOT_Qsr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRS6_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEE: 132| 272|{ 133| 272| clear_bytes(std::ranges::data(mem), ranges::size_bytes(mem)); 134| 272|} _ZN5Botan7xor_bufITkNS_6ranges23contiguous_output_rangeIhEENSt3__14spanIhLm18446744073709551615EEETkNS1_16contiguous_rangeIhEES5_EEvOT_OT0_: 404| 33| ranges::contiguous_range auto&& in) { 405| 33| ranges::assert_equal_byte_lengths(out, in); 406| | 407| 33| std::span o(out); 408| 33| std::span i(in); 409| | 410| 68| for(; o.size_bytes() >= 32; o = o.subspan(32), i = i.subspan(32)) { ------------------ | Branch (410:10): [True: 35, False: 33] ------------------ 411| 35| auto x = typecast_copy>(o.template first<32>()); 412| 35| const auto y = typecast_copy>(i.template first<32>()); 413| | 414| 35| x[0] ^= y[0]; 415| 35| x[1] ^= y[1]; 416| 35| x[2] ^= y[2]; 417| 35| x[3] ^= y[3]; 418| | 419| 35| typecast_copy(o.template first<32>(), x); 420| 35| } 421| | 422| 346| for(size_t off = 0; off != o.size_bytes(); ++off) { ------------------ | Branch (422:24): [True: 313, False: 33] ------------------ 423| 313| o[off] ^= i[off]; 424| 313| } 425| 33|} _ZNK5Botan14Asymmetric_Key40_signature_element_size_for_DER_encodingEv: 148| 569| virtual std::optional _signature_element_size_for_DER_encoding() const { return {}; } _ZN5Botan14Asymmetric_KeyD2Ev: 66| 2.56k| virtual ~Asymmetric_Key() = default; _ZN5Botan6PK_Ops10EncryptionD2Ev: 59| 36| virtual ~Encryption() = default; _ZN5Botan6PK_Ops13Key_AgreementD2Ev: 153| 272| virtual ~Key_Agreement() = default; _ZN5Botan6PK_Ops12VerificationD2Ev: 102| 569| virtual ~Verification() = default; _ZN5Botan24PK_Key_Agreement_OptionsC2Ev: 353| 272| PK_Key_Agreement_Options() = default; _ZN5Botan20PK_Signature_OptionsC2ERKS0_: 59| 2.30k| PK_Signature_Options(const PK_Signature_Options&) = default; _ZN5Botan21PK_Encryption_OptionsC2ERKS0_: 226| 72| PK_Encryption_Options(const PK_Encryption_Options&) = default; _ZN5Botan24PK_Key_Agreement_OptionsC2ERKS0_: 358| 272| PK_Key_Agreement_Options(const PK_Key_Agreement_Options&) = default; _ZN5Botan20PK_Signature_OptionsC2Ev: 54| 569| PK_Signature_Options() = default; _ZN5Botan21PK_Encryption_OptionsC2Ev: 221| 36| PK_Encryption_Options() = default; _ZNK5Botan31PK_Key_Agreement_Options_Reader13note_examinedENS0_6OptionE: 369| 816| void note_examined(Option option) const { m_examined |= static_cast(option); } _ZNK5Botan27PK_Signature_Options_Reader13hash_functionEv: 54| 569| const std::optional& hash_function() const { 55| 569| note_examined(Option::Hash); 56| 569| return m_options.m_hash_fn; 57| 569| } _ZNK5Botan27PK_Signature_Options_Reader7paddingEv: 69| 1.13k| const std::optional& padding() const { 70| 1.13k| note_examined(Option::Padding); 71| 1.13k| return m_options.m_padding; 72| 1.13k| } _ZNK5Botan27PK_Signature_Options_Reader9salt_sizeEv: 84| 58| const std::optional& salt_size() const { 85| 58| note_examined(Option::SaltSize); 86| 58| return m_options.m_salt_size; 87| 58| } _ZNK5Botan27PK_Signature_Options_Reader27using_der_encoded_signatureEv: 89| 569| bool using_der_encoded_signature() const { 90| 569| note_examined(Option::DerEncoded); 91| 569| return m_options.m_use_der; 92| 569| } _ZNK5Botan27PK_Signature_Options_Reader29using_deterministic_signatureEv: 94| 569| bool using_deterministic_signature() const { 95| 569| note_examined(Option::Deterministic); 96| 569| return m_options.m_deterministic_sig && m_usage == Usage::Signing; ------------------ | Branch (96:17): [True: 0, False: 569] | Branch (96:50): [True: 0, False: 0] ------------------ 97| 569| } _ZNK5Botan27PK_Signature_Options_Reader10using_hashEv: 104| 569| bool using_hash() const { return hash_function().has_value(); } _ZNK5Botan27PK_Signature_Options_Reader33using_externally_computed_prehashEv: 113| 540| bool using_externally_computed_prehash() const { 114| 540| note_examined(Option::ExternalPrehash); 115| 540| return m_options.m_using_external_prehash; 116| 540| } _ZNK5Botan27PK_Signature_Options_Reader13using_paddingEv: 118| 569| bool using_padding() const { return padding().has_value(); } _ZNK5Botan27PK_Signature_Options_Reader15using_salt_sizeEv: 120| 29| bool using_salt_size() const { return salt_size().has_value(); } _ZN5Botan27PK_Signature_Options_ReaderC2ERKNS_20PK_Signature_OptionsENS0_5UsageE: 140| 569| m_options(options), m_usage(usage) {} _ZNK5Botan27PK_Signature_Options_Reader13note_examinedENS0_6OptionE: 155| 5.15k| void note_examined(Option option) const { m_examined |= static_cast(option); } _ZNK5Botan28PK_Encryption_Options_Reader7paddingEv: 194| 72| const std::optional& padding() const { 195| 72| note_examined(Option::Padding); 196| 72| return m_options.m_padding; 197| 72| } _ZNK5Botan28PK_Encryption_Options_Reader13using_paddingEv: 219| 36| bool using_padding() const { return padding().has_value(); } _ZN5Botan28PK_Encryption_Options_ReaderC2ERKNS_21PK_Encryption_OptionsE: 234| 36| explicit PK_Encryption_Options_Reader(const PK_Encryption_Options& options) : m_options(options) {} _ZNK5Botan28PK_Encryption_Options_Reader13note_examinedENS0_6OptionE: 244| 108| void note_examined(Option option) const { m_examined |= static_cast(option); } _ZNK5Botan31PK_Key_Agreement_Options_Reader3kdfEv: 338| 272| const std::optional& kdf() const { 339| 272| note_examined(Option::Kdf); 340| 272| return m_options.m_kdf; 341| 272| } _ZNK5Botan31PK_Key_Agreement_Options_Reader9using_kdfEv: 343| 272| bool using_kdf() const { return kdf().has_value(); } _ZNK5Botan31PK_Key_Agreement_Options_Reader20using_raw_shared_keyEv: 345| 272| bool using_raw_shared_key() const { 346| 272| note_examined(Option::RawSharedKey); 347| 272| return m_options.m_raw_shared_key; 348| 272| } _ZN5Botan31PK_Key_Agreement_Options_ReaderC2ERKNS_24PK_Key_Agreement_OptionsE: 361| 272| explicit PK_Key_Agreement_Options_Reader(const PK_Key_Agreement_Options& options) : m_options(options) {} _ZN5Botan15Key_ConstraintsC2ENS0_4BitsE: 163| 2.86k| Key_Constraints(Key_Constraints::Bits bits) : m_value(bits) {} _ZN5Botan15Key_ConstraintsC2Ej: 165| 1.57k| explicit Key_Constraints(uint32_t bits) : m_value(bits) {} _ZN5Botan15Key_ConstraintsC2Ev: 167| 3.73k| Key_Constraints() : m_value(0) {} _ZNK5Botan15Key_Constraints8includesENS0_4BitsE: 187| 357| bool includes(Key_Constraints::Bits other) const { return (m_value & other) == other; } _ZNK5Botan15Key_Constraints5emptyEv: 194| 1.77k| bool empty() const { return m_value == 0; } _ZN5Botan11ReasonFlagsC2Et: 248| 10| explicit ReasonFlags(uint16_t bits) : m_value(bits) { 249| 10| if((m_value & static_cast(~DefinedReasonBits)) != 0) { ------------------ | Branch (249:13): [True: 3, False: 7] ------------------ 250| 3| throw Decoding_Error("ReasonFlags contains undefined reason bits"); 251| 3| } 252| 7| if(m_value == 0) { ------------------ | Branch (252:13): [True: 6, False: 1] ------------------ 253| 6| throw Decoding_Error("ReasonFlags must have at least one defined reason"); 254| 6| } 255| 7| } _ZNK5Botan15Key_ConstraintseqERKS0_: 182| 905| bool operator==(const Key_Constraints&) const = default; _ZNK5Botan15Key_Constraints12includes_anyIJNS0_4BitsES2_EEEbDpOT_: 192| 696| bool includes_any(auto&&... bits) const { return (m_value & (bits | ...)) > 0; } _ZN5Botan18X509_Serial_NumberC2Ev: 70| 3.75k| X509_Serial_Number() : m_contents{0x00} {} _ZNK5Botan7X509_DN8get_bitsEv: 198| 6.70k| const std::vector& get_bits() const { return m_dn_bits; } _ZNK5Botan7X509_DN16_canonical_bytesEv: 274| 5.69k| const std::vector& _canonical_bytes() const { return m_canonical_dn_bits; } _ZN5Botan15AlternativeName16add_ipv4_addressEj: 372| 163| BOTAN_DEPRECATED("Use variant taking IPv4Address") void add_ipv4_address(uint32_t ipv4) { 373| 163| this->add_ipv4_address(IPv4Address(ipv4)); 374| 163| } _ZNK5Botan15AlternativeName9uri_namesEv: 389| 68| const std::set& uri_names() const { return m_uri; } _ZNK5Botan15AlternativeName15directory_namesEv: 441| 73| const std::set& directory_names() const { return m_dn_names; } _ZNK5Botan11GeneralName9type_codeEv: 594| 50| NameType type_code() const { return m_type; } _ZN5Botan11GeneralName15EmailConstraintC2ENSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE: 645| 3| explicit EmailConstraint(std::string value) : m_value(std::move(value)) {} _ZN5Botan11GeneralName13DNSConstraintC2ENSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE: 663| 3| explicit DNSConstraint(std::string value) : m_value(std::move(value)) {} _ZNK5Botan14GeneralSubtree4baseEv: 735| 50| const GeneralName& base() const { return m_base; } _ZN5Botan10Extensions15Extensions_InfoC2EbNSt3__16vectorIhNS2_9allocatorIhEEEENS2_10unique_ptrINS_21Certificate_ExtensionENS2_14default_deleteIS8_EEEE: 1049| 14.5k| m_obj(std::move(ext)), m_bits(std::move(encoding)), m_critical(critical) {} _ZN5Botan10ExtensionsC2Ev: 1027| 3.73k| Extensions() = default; _ZN5Botan10ExtensionsD2Ev: 1035| 3.73k| ~Extensions() override = default; _ZN5Botan7X509_DNC2Ev: 159| 7.97k| X509_DN() = default; _ZN5Botan15NameConstraintsC2Ev: 753| 3.80k| NameConstraints() = default; _ZN5Botan21Certificate_ExtensionD2Ev: 856| 20.2k| virtual ~Certificate_Extension() = default; _ZN5Botan15AlternativeNameC2Ev: 336| 9.73k| AlternativeName() = default; _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension17Basic_ConstraintsEEEPKT_RKNS_3OIDE: 882| 2.84k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 883| 2.84k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (883:42): [True: 1.81k, False: 1.02k] ------------------ 884| | // Unknown_Extension oid_name is empty 885| 1.81k| if(extn->oid_name().empty()) { ------------------ | Branch (885:16): [True: 311, False: 1.50k] ------------------ 886| 311| return nullptr; 887| 1.50k| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (887:32): [True: 1.50k, False: 0] ------------------ 888| 1.50k| return extn_as_T; 889| 1.50k| } else { 890| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 891| 0| } 892| 1.81k| } 893| | 894| 1.02k| return nullptr; 895| 2.84k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension28Authority_Information_AccessEEEPKT_RKNS_3OIDE: 882| 2.84k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 883| 2.84k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (883:42): [True: 169, False: 2.67k] ------------------ 884| | // Unknown_Extension oid_name is empty 885| 169| if(extn->oid_name().empty()) { ------------------ | Branch (885:16): [True: 103, False: 66] ------------------ 886| 103| return nullptr; 887| 103| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (887:32): [True: 66, False: 0] ------------------ 888| 66| return extn_as_T; 889| 66| } else { 890| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 891| 0| } 892| 169| } 893| | 894| 2.67k| return nullptr; 895| 2.84k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension9Key_UsageEEEPKT_RKNS_3OIDE: 882| 2.84k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 883| 2.84k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (883:42): [True: 1.76k, False: 1.08k] ------------------ 884| | // Unknown_Extension oid_name is empty 885| 1.76k| if(extn->oid_name().empty()) { ------------------ | Branch (885:16): [True: 333, False: 1.42k] ------------------ 886| 333| return nullptr; 887| 1.42k| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (887:32): [True: 1.42k, False: 0] ------------------ 888| 1.42k| return extn_as_T; 889| 1.42k| } else { 890| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 891| 0| } 892| 1.76k| } 893| | 894| 1.08k| return nullptr; 895| 2.84k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension14Subject_Key_IDEEEPKT_RKNS_3OIDE: 882| 2.84k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 883| 2.84k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (883:42): [True: 431, False: 2.41k] ------------------ 884| | // Unknown_Extension oid_name is empty 885| 431| if(extn->oid_name().empty()) { ------------------ | Branch (885:16): [True: 99, False: 332] ------------------ 886| 99| return nullptr; 887| 332| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (887:32): [True: 332, False: 0] ------------------ 888| 332| return extn_as_T; 889| 332| } else { 890| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 891| 0| } 892| 431| } 893| | 894| 2.41k| return nullptr; 895| 2.84k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension16Authority_Key_IDEEEPKT_RKNS_3OIDE: 882| 2.84k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 883| 2.84k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (883:42): [True: 983, False: 1.86k] ------------------ 884| | // Unknown_Extension oid_name is empty 885| 983| if(extn->oid_name().empty()) { ------------------ | Branch (885:16): [True: 904, False: 79] ------------------ 886| 904| return nullptr; 887| 904| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (887:32): [True: 79, False: 0] ------------------ 888| 79| return extn_as_T; 889| 79| } else { 890| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 891| 0| } 892| 983| } 893| | 894| 1.86k| return nullptr; 895| 2.84k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension16Name_ConstraintsEEEPKT_RKNS_3OIDE: 882| 2.84k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 883| 2.84k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (883:42): [True: 16, False: 2.83k] ------------------ 884| | // Unknown_Extension oid_name is empty 885| 16| if(extn->oid_name().empty()) { ------------------ | Branch (885:16): [True: 11, False: 5] ------------------ 886| 11| return nullptr; 887| 11| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (887:32): [True: 5, False: 0] ------------------ 888| 5| return extn_as_T; 889| 5| } else { 890| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 891| 0| } 892| 16| } 893| | 894| 2.83k| return nullptr; 895| 2.84k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension18Extended_Key_UsageEEEPKT_RKNS_3OIDE: 882| 2.84k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 883| 2.84k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (883:42): [True: 1.70k, False: 1.13k] ------------------ 884| | // Unknown_Extension oid_name is empty 885| 1.70k| if(extn->oid_name().empty()) { ------------------ | Branch (885:16): [True: 740, False: 968] ------------------ 886| 740| return nullptr; 887| 968| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (887:32): [True: 968, False: 0] ------------------ 888| 968| return extn_as_T; 889| 968| } else { 890| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 891| 0| } 892| 1.70k| } 893| | 894| 1.13k| return nullptr; 895| 2.84k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension23Issuer_Alternative_NameEEEPKT_RKNS_3OIDE: 882| 2.84k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 883| 2.84k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (883:42): [True: 148, False: 2.69k] ------------------ 884| | // Unknown_Extension oid_name is empty 885| 148| if(extn->oid_name().empty()) { ------------------ | Branch (885:16): [True: 146, False: 2] ------------------ 886| 146| return nullptr; 887| 146| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (887:32): [True: 2, False: 0] ------------------ 888| 2| return extn_as_T; 889| 2| } else { 890| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 891| 0| } 892| 148| } 893| | 894| 2.69k| return nullptr; 895| 2.84k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension24Subject_Alternative_NameEEEPKT_RKNS_3OIDE: 882| 2.84k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 883| 2.84k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (883:42): [True: 1.55k, False: 1.29k] ------------------ 884| | // Unknown_Extension oid_name is empty 885| 1.55k| if(extn->oid_name().empty()) { ------------------ | Branch (885:16): [True: 1.20k, False: 352] ------------------ 886| 1.20k| return nullptr; 887| 1.20k| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (887:32): [True: 352, False: 0] ------------------ 888| 352| return extn_as_T; 889| 352| } else { 890| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 891| 0| } 892| 1.55k| } 893| | 894| 1.29k| return nullptr; 895| 2.84k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension20Certificate_PoliciesEEEPKT_RKNS_3OIDE: 882| 2.84k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 883| 2.84k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (883:42): [True: 407, False: 2.44k] ------------------ 884| | // Unknown_Extension oid_name is empty 885| 407| if(extn->oid_name().empty()) { ------------------ | Branch (885:16): [True: 384, False: 23] ------------------ 886| 384| return nullptr; 887| 384| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (887:32): [True: 23, False: 0] ------------------ 888| 23| return extn_as_T; 889| 23| } else { 890| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 891| 0| } 892| 407| } 893| | 894| 2.44k| return nullptr; 895| 2.84k| } _ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension23CRL_Distribution_PointsEEEPKT_RKNS_3OIDE: 882| 2.84k| const T* get_extension_object_as(const OID& oid = T::static_oid()) const { 883| 2.84k| if(const Certificate_Extension* extn = get_extension_object(oid)) { ------------------ | Branch (883:42): [True: 394, False: 2.45k] ------------------ 884| | // Unknown_Extension oid_name is empty 885| 394| if(extn->oid_name().empty()) { ------------------ | Branch (885:16): [True: 336, False: 58] ------------------ 886| 336| return nullptr; 887| 336| } else if(const T* extn_as_T = dynamic_cast(extn)) { ------------------ | Branch (887:32): [True: 58, False: 0] ------------------ 888| 58| return extn_as_T; 889| 58| } else { 890| 0| throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed"); 891| 0| } 892| 394| } 893| | 894| 2.45k| return nullptr; 895| 2.84k| } _ZN5Botan11GeneralNameC2Ev: 562| 109| BOTAN_DEPRECATED("Deprecated use NameConstraints") GeneralName() = default; _ZN5Botan11GeneralName15EmailConstraintC2Ev: 636| 109| EmailConstraint() = default; _ZNK5Botan12PK_Encryptor7encryptENSt3__14spanIKhLm18446744073709551615EEERNS_21RandomNumberGeneratorE: 47| 36| std::vector encrypt(std::span in, RandomNumberGenerator& rng) const { 48| 36| return enc(in.data(), in.size(), rng); 49| 36| } _ZN5Botan11PK_Verifier14verify_messageENSt3__14spanIKhLm18446744073709551615EEES4_: 354| 569| bool verify_message(std::span msg, std::span sig) { 355| 569| return verify_message(msg.data(), msg.size(), sig.data(), sig.size()); 356| 569| } _ZN5Botan12PK_EncryptorC2Ev: 62| 36| PK_Encryptor() = default; _ZN5Botan12PK_EncryptorD2Ev: 63| 36| virtual ~PK_Encryptor() = default; _ZN5Botan6ranges24assert_exact_byte_lengthILm32ETkNS0_14spanable_rangeENSt3__14spanIhLm32EEEEEvRKT0_: 77| 7.72k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 7.72k| const std::span s{r}; 79| 7.72k| if constexpr(statically_spanable_range) { 80| 7.72k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 7.72k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__15arrayImLm4EEETpTkNS0_14spanable_rangeEJNS2_4spanIhLm32EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 7.72k|{ 101| 7.72k| const std::span s0{r0}; 102| | 103| 7.72k| if constexpr(statically_spanable_range) { 104| 7.72k| constexpr size_t expected_size = s0.size_bytes(); 105| 7.72k| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 7.72k|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__15arrayImLm4EEEEEmRKT_: 59| 18.0k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 18.0k| return std::span{r}.size_bytes(); 61| 18.0k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm32ETkNS0_14spanable_rangeENSt3__14spanIKhLm32EEEEEvRKT0_: 77| 10.3k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 10.3k| const std::span s{r}; 79| 10.3k| if constexpr(statically_spanable_range) { 80| 10.3k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 10.3k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__15arrayImLm4EEETpTkNS0_14spanable_rangeEJNS2_4spanIKhLm32EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 10.3k|{ 101| 10.3k| const std::span s0{r0}; 102| | 103| 10.3k| if constexpr(statically_spanable_range) { 104| 10.3k| constexpr size_t expected_size = s0.size_bytes(); 105| 10.3k| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 10.3k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm32ETkNS0_14spanable_rangeENSt3__15arrayImLm4EEEEEvRKT0_: 77| 10.3k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 10.3k| const std::span s{r}; 79| 10.3k| if constexpr(statically_spanable_range) { 80| 10.3k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 10.3k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm32EEETpTkNS0_14spanable_rangeEJNS2_5arrayImLm4EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 9.59k|{ 101| 9.59k| const std::span s0{r0}; 102| | 103| 9.59k| if constexpr(statically_spanable_range) { 104| 9.59k| constexpr size_t expected_size = s0.size_bytes(); 105| 9.59k| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 9.59k|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIhLm32EEEEEmRKT_: 59| 9.02k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 9.02k| return std::span{r}.size_bytes(); 61| 9.02k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm18446744073709551615EEETpTkNS0_14spanable_rangeEJNS3_IKhLm18446744073709551615EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 25.7k|{ 101| 25.7k| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 25.7k| } else { 107| 25.7k| const size_t expected_size = s0.size_bytes(); 108| 25.7k| const bool correct_size = 109| 25.7k| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 25.7k| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 25.7k] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 25.7k| } 115| 25.7k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm18446744073709551615EEETpTkNS0_14spanable_rangeEJNS3_IKhLm18446744073709551615EEES6_EEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 3.27k|{ 101| 3.27k| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 3.27k| } else { 107| 3.27k| const size_t expected_size = s0.size_bytes(); 108| 3.27k| const bool correct_size = 109| 6.55k| ((std::span>{rs}.size_bytes() == expected_size) && ...); ------------------ | Branch (109:11): [True: 3.27k, False: 0] | Branch (109:11): [True: 3.27k, False: 0] ------------------ 110| | 111| 3.27k| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 3.27k] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 3.27k| } 115| 3.27k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm8ETkNS0_14spanable_rangeENSt3__14spanIhLm8EEEEEvRKT0_: 77| 267k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 267k| const std::span s{r}; 79| 267k| if constexpr(statically_spanable_range) { 80| 267k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 267k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm8EEETpTkNS0_14spanable_rangeEJNS3_IKmLm1EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 179k|{ 101| 179k| const std::span s0{r0}; 102| | 103| 179k| if constexpr(statically_spanable_range) { 104| 179k| constexpr size_t expected_size = s0.size_bytes(); 105| 179k| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 179k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm8ETkNS0_14spanable_rangeENSt3__14spanIKmLm1EEEEEvRKT0_: 77| 179k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 179k| const std::span s{r}; 79| 179k| if constexpr(statically_spanable_range) { 80| 179k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 179k|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIhLm8EEEEEmRKT_: 59| 179k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 179k| return std::span{r}.size_bytes(); 61| 179k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm8ETkNS0_14spanable_rangeENSt3__14spanIKhLm8EEEEEvRKT0_: 77| 716k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 716k| const std::span s{r}; 79| 716k| if constexpr(statically_spanable_range) { 80| 716k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 716k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanImLm1EEETpTkNS0_14spanable_rangeEJNS3_IKhLm8EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 358k|{ 101| 358k| const std::span s0{r0}; 102| | 103| 358k| if constexpr(statically_spanable_range) { 104| 358k| constexpr size_t expected_size = s0.size_bytes(); 105| 358k| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 358k|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanImLm1EEEEEmRKT_: 59| 370k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 370k| return std::span{r}.size_bytes(); 61| 370k|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanItLm1EEEEEmRKT_: 59| 1.48k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 1.48k| return std::span{r}.size_bytes(); 61| 1.48k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm2ETkNS0_14spanable_rangeENSt3__14spanIKhLm2EEEEEvRKT0_: 77| 2.96k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 2.96k| const std::span s{r}; 79| 2.96k| if constexpr(statically_spanable_range) { 80| 2.96k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 2.96k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanItLm1EEETpTkNS0_14spanable_rangeEJNS3_IKhLm2EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 1.48k|{ 101| 1.48k| const std::span s0{r0}; 102| | 103| 1.48k| if constexpr(statically_spanable_range) { 104| 1.48k| constexpr size_t expected_size = s0.size_bytes(); 105| 1.48k| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 1.48k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm4ETkNS0_14spanable_rangeENSt3__14spanIKhLm4EEEEEvRKT0_: 77| 5.02k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 5.02k| const std::span s{r}; 79| 5.02k| if constexpr(statically_spanable_range) { 80| 5.02k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 5.02k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIjLm1EEETpTkNS0_14spanable_rangeEJNS3_IKhLm4EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 2.51k|{ 101| 2.51k| const std::span s0{r0}; 102| | 103| 2.51k| if constexpr(statically_spanable_range) { 104| 2.51k| constexpr size_t expected_size = s0.size_bytes(); 105| 2.51k| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 2.51k|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIjLm1EEEEEmRKT_: 59| 2.51k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 2.51k| return std::span{r}.size_bytes(); 61| 2.51k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__15arrayIhLm8EEETpTkNS0_14spanable_rangeEJNS3_ImLm1EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 92.7k|{ 101| 92.7k| const std::span s0{r0}; 102| | 103| 92.7k| if constexpr(statically_spanable_range) { 104| 92.7k| constexpr size_t expected_size = s0.size_bytes(); 105| 92.7k| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 92.7k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm8ETkNS0_14spanable_rangeENSt3__15arrayImLm1EEEEEvRKT0_: 77| 92.7k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 92.7k| const std::span s{r}; 79| 92.7k| if constexpr(statically_spanable_range) { 80| 92.7k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 92.7k|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__15arrayIhLm8EEEEEmRKT_: 59| 47.5k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 47.5k| return std::span{r}.size_bytes(); 61| 47.5k|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__16vectorIhNS2_9allocatorIhEEEEEEmRKT_: 59| 505k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 505k| return std::span{r}.size_bytes(); 61| 505k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm4ETkNS0_14spanable_rangeENSt3__14spanIhLm4EEEEEvRKT0_: 77| 579k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 579k| const std::span s{r}; 79| 579k| if constexpr(statically_spanable_range) { 80| 579k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 579k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm4EEETpTkNS0_14spanable_rangeEJNS3_IKjLm1EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 303k|{ 101| 303k| const std::span s0{r0}; 102| | 103| 303k| if constexpr(statically_spanable_range) { 104| 303k| constexpr size_t expected_size = s0.size_bytes(); 105| 303k| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 303k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm4ETkNS0_14spanable_rangeENSt3__14spanIKjLm1EEEEEvRKT0_: 77| 303k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 303k| const std::span s{r}; 79| 303k| if constexpr(statically_spanable_range) { 80| 303k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 303k|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIhLm4EEEEEmRKT_: 59| 305k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 305k| return std::span{r}.size_bytes(); 61| 305k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm16ETkNS0_14spanable_rangeENSt3__14spanIhLm16EEEEEvRKT0_: 77| 117|inline constexpr void assert_exact_byte_length(const R& r) { 78| 117| const std::span s{r}; 79| 117| if constexpr(statically_spanable_range) { 80| 117| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 117|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanImLm18446744073709551615EEETpTkNS0_14spanable_rangeEJNS3_IKhLm18446744073709551615EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 3.08k|{ 101| 3.08k| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 3.08k| } else { 107| 3.08k| const size_t expected_size = s0.size_bytes(); 108| 3.08k| const bool correct_size = 109| 3.08k| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 3.08k| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 3.08k] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 3.08k| } 115| 3.08k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIjLm18446744073709551615EEETpTkNS0_14spanable_rangeEJNS3_IKhLm18446744073709551615EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 168|{ 101| 168| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 168| } else { 107| 168| const size_t expected_size = s0.size_bytes(); 108| 168| const bool correct_size = 109| 168| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 168| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 168] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 168| } 115| 168|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm18446744073709551615EEETpTkNS0_14spanable_rangeEJNS3_IKjLm18446744073709551615EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 38.9k|{ 101| 38.9k| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 38.9k| } else { 107| 38.9k| const size_t expected_size = s0.size_bytes(); 108| 38.9k| const bool correct_size = 109| 38.9k| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 38.9k| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 38.9k] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 38.9k| } 115| 38.9k|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIhLm18446744073709551615EEEEEmRKT_: 59| 29.3k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 29.3k| return std::span{r}.size_bytes(); 61| 29.3k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm18446744073709551615EEETpTkNS0_14spanable_rangeEJNS3_IKmLm18446744073709551615EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 8.27k|{ 101| 8.27k| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 8.27k| } else { 107| 8.27k| const size_t expected_size = s0.size_bytes(); 108| 8.27k| const bool correct_size = 109| 8.27k| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 8.27k| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 8.27k] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 8.27k| } 115| 8.27k|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanImLm18446744073709551615EEEEEmRKT_: 59| 25.6k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 25.6k| return std::span{r}.size_bytes(); 61| 25.6k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm8ETkNS0_14spanable_rangeENSt3__15arrayIhLm8EEEEEvRKT0_: 77| 12.0k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 12.0k| const std::span s{r}; 79| 12.0k| if constexpr(statically_spanable_range) { 80| 12.0k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 12.0k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanImLm1EEETpTkNS0_14spanable_rangeEJNS3_IhLm8EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 12.0k|{ 101| 12.0k| const std::span s0{r0}; 102| | 103| 12.0k| if constexpr(statically_spanable_range) { 104| 12.0k| constexpr size_t expected_size = s0.size_bytes(); 105| 12.0k| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 12.0k|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__15arrayIhLm16EEEEEmRKT_: 59| 3.84k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 3.84k| return std::span{r}.size_bytes(); 61| 3.84k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm18446744073709551615EEETpTkNS0_14spanable_rangeEJNS2_6vectorIhNS_16secure_allocatorIhEEEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 645|{ 101| 645| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 645| } else { 107| 645| const size_t expected_size = s0.size_bytes(); 108| 645| const bool correct_size = 109| 645| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 645| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 645] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 645| } 115| 645|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__15arrayIhLm16EEETpTkNS0_14spanable_rangeEJNS3_ImLm2EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 561|{ 101| 561| const std::span s0{r0}; 102| | 103| 561| if constexpr(statically_spanable_range) { 104| 561| constexpr size_t expected_size = s0.size_bytes(); 105| 561| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 561|} _ZN5Botan6ranges24assert_exact_byte_lengthILm16ETkNS0_14spanable_rangeENSt3__15arrayImLm2EEEEEvRKT0_: 77| 561|inline constexpr void assert_exact_byte_length(const R& r) { 78| 561| const std::span s{r}; 79| 561| if constexpr(statically_spanable_range) { 80| 561| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 561|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__15arrayIhLm32EEETpTkNS0_14spanable_rangeEJNS2_4spanIKhLm32EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 10|{ 101| 10| const std::span s0{r0}; 102| | 103| 10| if constexpr(statically_spanable_range) { 104| 10| constexpr size_t expected_size = s0.size_bytes(); 105| 10| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 10|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__15arrayIhLm32EEEEEmRKT_: 59| 20|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 20| return std::span{r}.size_bytes(); 61| 20|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm56EEETpTkNS0_14spanable_rangeEJNS2_6vectorIhNS_16secure_allocatorIhEEEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 1|{ 101| 1| const std::span s0{r0}; 102| | 103| 1| if constexpr(statically_spanable_range) { 104| 1| constexpr size_t expected_size = s0.size_bytes(); 105| 1| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 1|} _ZN5Botan6ranges24assert_exact_byte_lengthILm56ETkNS0_14spanable_rangeENSt3__16vectorIhNS_16secure_allocatorIhEEEEEEvRKT0_: 77| 1|inline constexpr void assert_exact_byte_length(const R& r) { 78| 1| const std::span s{r}; 79| | if constexpr(statically_spanable_range) { 80| | static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| 1| } else { 82| 1| if(s.size_bytes() != expected) { ------------------ | Branch (82:10): [True: 0, False: 1] ------------------ 83| 0| memory_region_size_violation(); 84| 0| } 85| 1| } 86| 1|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIhLm56EEEEEmRKT_: 59| 2.46k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 2.46k| return std::span{r}.size_bytes(); 61| 2.46k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENS_6StrongINSt3__15arrayIhLm56EEENS_11ScalarX448_EJEEETpTkNS0_14spanable_rangeEJNS3_4spanIKhLm18446744073709551615EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 1|{ 101| 1| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 1| } else { 107| 1| const size_t expected_size = s0.size_bytes(); 108| 1| const bool correct_size = 109| 1| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 1| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 1] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 1| } 115| 1|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENS_6StrongINSt3__15arrayIhLm56EEENS_11ScalarX448_EJEEEEEmRKT_: 59| 1|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 1| return std::span{r}.size_bytes(); 61| 1|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__15arrayImLm7EEEEEmRKT_: 59| 8.07k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 8.07k| return std::span{r}.size_bytes(); 61| 8.07k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm16ETkNS0_14spanable_rangeENSt3__15arrayIhLm16EEEEEvRKT0_: 77| 561|inline constexpr void assert_exact_byte_length(const R& r) { 78| 561| const std::span s{r}; 79| 561| if constexpr(statically_spanable_range) { 80| 561| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 561|} _ZN5Botan6ranges24assert_exact_byte_lengthILm4ETkNS0_14spanable_rangeENSt3__15arrayIhLm4EEEEEvRKT0_: 77| 4|inline constexpr void assert_exact_byte_length(const R& r) { 78| 4| const std::span s{r}; 79| 4| if constexpr(statically_spanable_range) { 80| 4| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 4|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIjLm18446744073709551615EEEEEmRKT_: 59| 84|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 84| return std::span{r}.size_bytes(); 61| 84|} _ZN5Botan6ranges24assert_exact_byte_lengthILm1ETkNS0_14spanable_rangeENSt3__14spanIKhLm1EEEEEvRKT0_: 77| 2.01M|inline constexpr void assert_exact_byte_length(const R& r) { 78| 2.01M| const std::span s{r}; 79| 2.01M| if constexpr(statically_spanable_range) { 80| 2.01M| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 2.01M|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__15arrayIhLm16EEETpTkNS0_14spanable_rangeEJNS2_4spanIKhLm18446744073709551615EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 561|{ 101| 561| const std::span s0{r0}; 102| | 103| 561| if constexpr(statically_spanable_range) { 104| 561| constexpr size_t expected_size = s0.size_bytes(); 105| 561| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 561|} _ZN5Botan6ranges24assert_exact_byte_lengthILm16ETkNS0_14spanable_rangeENSt3__14spanIKhLm18446744073709551615EEEEEvRKT0_: 77| 561|inline constexpr void assert_exact_byte_length(const R& r) { 78| 561| const std::span s{r}; 79| | if constexpr(statically_spanable_range) { 80| | static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| 561| } else { 82| 561| if(s.size_bytes() != expected) { ------------------ | Branch (82:10): [True: 0, False: 561] ------------------ 83| 0| memory_region_size_violation(); 84| 0| } 85| 561| } 86| 561|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__15arrayIhLm16EEETpTkNS0_14spanable_rangeEJS4_EEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 561|{ 101| 561| const std::span s0{r0}; 102| | 103| 561| if constexpr(statically_spanable_range) { 104| 561| constexpr size_t expected_size = s0.size_bytes(); 105| 561| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 561|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm18446744073709551615EEETpTkNS0_14spanable_rangeEJS4_S4_EEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 561|{ 101| 561| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 561| } else { 107| 561| const size_t expected_size = s0.size_bytes(); 108| 561| const bool correct_size = 109| 1.12k| ((std::span>{rs}.size_bytes() == expected_size) && ...); ------------------ | Branch (109:11): [True: 561, False: 0] | Branch (109:11): [True: 561, False: 0] ------------------ 110| | 111| 561| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 561] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 561| } 115| 561|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm18446744073709551615EEETpTkNS0_14spanable_rangeEJS4_EEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 33|{ 101| 33| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 33| } else { 107| 33| const size_t expected_size = s0.size_bytes(); 108| 33| const bool correct_size = 109| 33| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 33| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 33] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 33| } 115| 33|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanImLm18446744073709551615EEETpTkNS0_14spanable_rangeEJNS3_IKmLm18446744073709551615EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 8.59k|{ 101| 8.59k| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 8.59k| } else { 107| 8.59k| const size_t expected_size = s0.size_bytes(); 108| 8.59k| const bool correct_size = 109| 8.59k| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 8.59k| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 8.59k] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 8.59k| } 115| 8.59k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanImLm4EEETpTkNS0_14spanable_rangeEJNS2_5arrayImLm4EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 766|{ 101| 766| const std::span s0{r0}; 102| | 103| 766| if constexpr(statically_spanable_range) { 104| 766| constexpr size_t expected_size = s0.size_bytes(); 105| 766| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 766|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanImLm4EEEEEmRKT_: 59| 1.53k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 1.53k| return std::span{r}.size_bytes(); 61| 1.53k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__15arrayIhLm8EEETpTkNS0_14spanable_rangeEJNS2_4spanIKhLm8EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 596|{ 101| 596| const std::span s0{r0}; 102| | 103| 596| if constexpr(statically_spanable_range) { 104| 596| constexpr size_t expected_size = s0.size_bytes(); 105| 596| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 596|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm40EEETpTkNS0_14spanable_rangeEJNS3_IKhLm40EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 955|{ 101| 955| const std::span s0{r0}; 102| | 103| 955| if constexpr(statically_spanable_range) { 104| 955| constexpr size_t expected_size = s0.size_bytes(); 105| 955| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 955|} _ZN5Botan6ranges24assert_exact_byte_lengthILm40ETkNS0_14spanable_rangeENSt3__14spanIKhLm40EEEEEvRKT0_: 77| 955|inline constexpr void assert_exact_byte_length(const R& r) { 78| 955| const std::span s{r}; 79| 955| if constexpr(statically_spanable_range) { 80| 955| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 955|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIhLm40EEEEEmRKT_: 59| 1.91k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 1.91k| return std::span{r}.size_bytes(); 61| 1.91k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__16vectorIhNS2_9allocatorIhEEEETpTkNS0_14spanable_rangeEJA8_mEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 191|{ 101| 191| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 191| } else { 107| 191| const size_t expected_size = s0.size_bytes(); 108| 191| const bool correct_size = 109| 191| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 191| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 191] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 191| } 115| 191|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanImLm6EEETpTkNS0_14spanable_rangeEJNS2_5arrayImLm6EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 745|{ 101| 745| const std::span s0{r0}; 102| | 103| 745| if constexpr(statically_spanable_range) { 104| 745| constexpr size_t expected_size = s0.size_bytes(); 105| 745| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 745|} _ZN5Botan6ranges24assert_exact_byte_lengthILm48ETkNS0_14spanable_rangeENSt3__15arrayImLm6EEEEEvRKT0_: 77| 1.48k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 1.48k| const std::span s{r}; 79| 1.48k| if constexpr(statically_spanable_range) { 80| 1.48k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 1.48k|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanImLm6EEEEEmRKT_: 59| 1.49k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 1.49k| return std::span{r}.size_bytes(); 61| 1.49k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm56EEETpTkNS0_14spanable_rangeEJNS3_IKhLm56EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 1.23k|{ 101| 1.23k| const std::span s0{r0}; 102| | 103| 1.23k| if constexpr(statically_spanable_range) { 104| 1.23k| constexpr size_t expected_size = s0.size_bytes(); 105| 1.23k| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 1.23k|} _ZN5Botan6ranges24assert_exact_byte_lengthILm56ETkNS0_14spanable_rangeENSt3__14spanIKhLm56EEEEEvRKT0_: 77| 1.23k|inline constexpr void assert_exact_byte_length(const R& r) { 78| 1.23k| const std::span s{r}; 79| 1.23k| if constexpr(statically_spanable_range) { 80| 1.23k| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 1.23k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__16vectorIhNS2_9allocatorIhEEEETpTkNS0_14spanable_rangeEJA12_mEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 246|{ 101| 246| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 246| } else { 107| 246| const size_t expected_size = s0.size_bytes(); 108| 246| const bool correct_size = 109| 246| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 246| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 246] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 246| } 115| 246|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm48EEETpTkNS0_14spanable_rangeEJNS2_5arrayImLm6EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 738|{ 101| 738| const std::span s0{r0}; 102| | 103| 738| if constexpr(statically_spanable_range) { 104| 738| constexpr size_t expected_size = s0.size_bytes(); 105| 738| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 738|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm72EEETpTkNS0_14spanable_rangeEJNS3_IKhLm72EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 445|{ 101| 445| const std::span s0{r0}; 102| | 103| 445| if constexpr(statically_spanable_range) { 104| 445| constexpr size_t expected_size = s0.size_bytes(); 105| 445| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 445|} _ZN5Botan6ranges24assert_exact_byte_lengthILm72ETkNS0_14spanable_rangeENSt3__14spanIKhLm72EEEEEvRKT0_: 77| 445|inline constexpr void assert_exact_byte_length(const R& r) { 78| 445| const std::span s{r}; 79| 445| if constexpr(statically_spanable_range) { 80| 445| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 445|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIhLm72EEEEEmRKT_: 59| 890|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 890| return std::span{r}.size_bytes(); 61| 890|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanImLm8EEETpTkNS0_14spanable_rangeEJNS2_5arrayImLm8EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 357|{ 101| 357| const std::span s0{r0}; 102| | 103| 357| if constexpr(statically_spanable_range) { 104| 357| constexpr size_t expected_size = s0.size_bytes(); 105| 357| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 357|} _ZN5Botan6ranges24assert_exact_byte_lengthILm64ETkNS0_14spanable_rangeENSt3__15arrayImLm8EEEEEvRKT0_: 77| 624|inline constexpr void assert_exact_byte_length(const R& r) { 78| 624| const std::span s{r}; 79| 624| if constexpr(statically_spanable_range) { 80| 624| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 624|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanImLm8EEEEEmRKT_: 59| 714|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 714| return std::span{r}.size_bytes(); 61| 714|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__16vectorIhNS2_9allocatorIhEEEETpTkNS0_14spanable_rangeEJA16_mEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 89|{ 101| 89| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 89| } else { 107| 89| const size_t expected_size = s0.size_bytes(); 108| 89| const bool correct_size = 109| 89| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 89| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 89] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 89| } 115| 89|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm64EEETpTkNS0_14spanable_rangeEJNS2_5arrayImLm8EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 267|{ 101| 267| const std::span s0{r0}; 102| | 103| 267| if constexpr(statically_spanable_range) { 104| 267| constexpr size_t expected_size = s0.size_bytes(); 105| 267| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 267|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__15arrayImLm18EEEEEmRKT_: 59| 21.8k|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 21.8k| return std::span{r}.size_bytes(); 61| 21.8k|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanImLm9EEETpTkNS0_14spanable_rangeEJNS2_5arrayImLm9EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 140|{ 101| 140| const std::span s0{r0}; 102| | 103| 140| if constexpr(statically_spanable_range) { 104| 140| constexpr size_t expected_size = s0.size_bytes(); 105| 140| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 140|} _ZN5Botan6ranges24assert_exact_byte_lengthILm72ETkNS0_14spanable_rangeENSt3__15arrayImLm9EEEEEvRKT0_: 77| 350|inline constexpr void assert_exact_byte_length(const R& r) { 78| 350| const std::span s{r}; 79| 350| if constexpr(statically_spanable_range) { 80| 350| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 350|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanImLm9EEEEEmRKT_: 59| 280|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 280| return std::span{r}.size_bytes(); 61| 280|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__15arrayIhLm72EEETpTkNS0_14spanable_rangeEJNS3_ImLm9EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 210|{ 101| 210| const std::span s0{r0}; 102| | 103| 210| if constexpr(statically_spanable_range) { 104| 210| constexpr size_t expected_size = s0.size_bytes(); 105| 210| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 210|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__15arrayIhLm32EEETpTkNS0_14spanable_rangeEJNS3_ImLm4EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 8|{ 101| 8| const std::span s0{r0}; 102| | 103| 8| if constexpr(statically_spanable_range) { 104| 8| constexpr size_t expected_size = s0.size_bytes(); 105| 8| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 8|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm28EEETpTkNS0_14spanable_rangeEJNS3_IKhLm28EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 8|{ 101| 8| const std::span s0{r0}; 102| | 103| 8| if constexpr(statically_spanable_range) { 104| 8| constexpr size_t expected_size = s0.size_bytes(); 105| 8| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 8|} _ZN5Botan6ranges24assert_exact_byte_lengthILm28ETkNS0_14spanable_rangeENSt3__14spanIKhLm28EEEEEvRKT0_: 77| 8|inline constexpr void assert_exact_byte_length(const R& r) { 78| 8| const std::span s{r}; 79| 8| if constexpr(statically_spanable_range) { 80| 8| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 8|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIhLm28EEEEEmRKT_: 59| 16|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 16| return std::span{r}.size_bytes(); 61| 16|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm74EEETpTkNS0_14spanable_rangeEJNS3_IKhLm74EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 350|{ 101| 350| const std::span s0{r0}; 102| | 103| 350| if constexpr(statically_spanable_range) { 104| 350| constexpr size_t expected_size = s0.size_bytes(); 105| 350| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 350|} _ZN5Botan6ranges24assert_exact_byte_lengthILm74ETkNS0_14spanable_rangeENSt3__14spanIKhLm74EEEEEvRKT0_: 77| 350|inline constexpr void assert_exact_byte_length(const R& r) { 78| 350| const std::span s{r}; 79| 350| if constexpr(statically_spanable_range) { 80| 350| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 350|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIhLm74EEEEEmRKT_: 59| 700|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 700| return std::span{r}.size_bytes(); 61| 700|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__16vectorIhNS2_9allocatorIhEEEETpTkNS0_14spanable_rangeEJA18_mEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 70|{ 101| 70| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 70| } else { 107| 70| const size_t expected_size = s0.size_bytes(); 108| 70| const bool correct_size = 109| 70| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 70| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 70] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 70| } 115| 70|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm66EEETpTkNS0_14spanable_rangeEJNS3_IKhLm66EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 210|{ 101| 210| const std::span s0{r0}; 102| | 103| 210| if constexpr(statically_spanable_range) { 104| 210| constexpr size_t expected_size = s0.size_bytes(); 105| 210| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 210|} _ZN5Botan6ranges24assert_exact_byte_lengthILm66ETkNS0_14spanable_rangeENSt3__14spanIKhLm66EEEEEvRKT0_: 77| 210|inline constexpr void assert_exact_byte_length(const R& r) { 78| 210| const std::span s{r}; 79| 210| if constexpr(statically_spanable_range) { 80| 210| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 210|} _ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIhLm66EEEEEmRKT_: 59| 420|inline constexpr size_t size_bytes(const spanable_range auto& r) { 60| 420| return std::span{r}.size_bytes(); 61| 420|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__15arrayImLm7EEETpTkNS0_14spanable_rangeEJNS2_4spanIKhLm56EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 4|{ 101| 4| const std::span s0{r0}; 102| | 103| 4| if constexpr(statically_spanable_range) { 104| 4| constexpr size_t expected_size = s0.size_bytes(); 105| 4| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 4|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm56EEETpTkNS0_14spanable_rangeEJNS2_5arrayImLm7EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 2|{ 101| 2| const std::span s0{r0}; 102| | 103| 2| if constexpr(statically_spanable_range) { 104| 2| constexpr size_t expected_size = s0.size_bytes(); 105| 2| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 2|} _ZN5Botan6ranges24assert_exact_byte_lengthILm56ETkNS0_14spanable_rangeENSt3__15arrayImLm7EEEEEvRKT0_: 77| 2|inline constexpr void assert_exact_byte_length(const R& r) { 78| 2| const std::span s{r}; 79| 2| if constexpr(statically_spanable_range) { 80| 2| static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| | } else { 82| | if(s.size_bytes() != expected) { 83| | memory_region_size_violation(); 84| | } 85| | } 86| 2|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm18446744073709551615EEETpTkNS0_14spanable_rangeEJNS2_6vectorIhNS2_9allocatorIhEEEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 256|{ 101| 256| const std::span s0{r0}; 102| | 103| | if constexpr(statically_spanable_range) { 104| | constexpr size_t expected_size = s0.size_bytes(); 105| | (assert_exact_byte_length(rs), ...); 106| 256| } else { 107| 256| const size_t expected_size = s0.size_bytes(); 108| 256| const bool correct_size = 109| 256| ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| 256| if(!correct_size) { ------------------ | Branch (111:10): [True: 0, False: 256] ------------------ 112| 0| memory_region_size_violation(); 113| 0| } 114| 256| } 115| 256|} _ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm4EEETpTkNS0_14spanable_rangeEJNS2_6vectorIhNS2_9allocatorIhEEEEEEEvRKT_DpRKT0_QgtsZT0_Li0E: 100| 721|{ 101| 721| const std::span s0{r0}; 102| | 103| 721| if constexpr(statically_spanable_range) { 104| 721| constexpr size_t expected_size = s0.size_bytes(); 105| 721| (assert_exact_byte_length(rs), ...); 106| | } else { 107| | const size_t expected_size = s0.size_bytes(); 108| | const bool correct_size = 109| | ((std::span>{rs}.size_bytes() == expected_size) && ...); 110| | 111| | if(!correct_size) { 112| | memory_region_size_violation(); 113| | } 114| | } 115| 721|} _ZN5Botan6ranges24assert_exact_byte_lengthILm4ETkNS0_14spanable_rangeENSt3__16vectorIhNS2_9allocatorIhEEEEEEvRKT0_: 77| 721|inline constexpr void assert_exact_byte_length(const R& r) { 78| 721| const std::span s{r}; 79| | if constexpr(statically_spanable_range) { 80| | static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths"); 81| 721| } else { 82| 721| if(s.size_bytes() != expected) { ------------------ | Branch (82:10): [True: 0, False: 721] ------------------ 83| 0| memory_region_size_violation(); 84| 0| } 85| 721| } 86| 721|} _ZN5Botan21RandomNumberGenerator9randomizeENSt3__14spanIhLm18446744073709551615EEE: 86| 12.5k| void randomize(std::span output) { this->fill_bytes_with_input(output, {}); } _ZN5Botan21RandomNumberGenerator11add_entropyENSt3__14spanIKhLm18446744073709551615EEE: 121| 1| void add_entropy(std::span input) { this->accept_seed_material(input); } _ZN5Botan21RandomNumberGenerator10random_vecENSt3__14spanIhLm18446744073709551615EEE: 254| 10.8k| void random_vec(std::span v) { this->randomize(v); } _ZN5Botan21RandomNumberGenerator9next_byteEv: 302| 7.43k| uint8_t next_byte() { 303| 7.43k| uint8_t b = 0; 304| 7.43k| this->fill_bytes_with_input(std::span(&b, 1), {}); 305| 7.43k| return b; 306| 7.43k| } _ZN5Botan21RandomNumberGenerator17next_nonzero_byteEv: 314| 7.40k| uint8_t next_nonzero_byte() { 315| 7.40k| uint8_t b = this->next_byte(); 316| 7.43k| while(b == 0) { ------------------ | Branch (316:16): [True: 29, False: 7.40k] ------------------ 317| 29| b = this->next_byte(); 318| 29| } 319| 7.40k| return b; 320| 7.40k| } _ZN5Botan21RandomNumberGeneratorC2Ev: 57| 6.57k| RandomNumberGenerator() = default; _ZN5Botan21RandomNumberGeneratorD2Ev: 52| 6.57k| virtual ~RandomNumberGenerator() = default; _ZN5Botan21RandomNumberGenerator10random_vecITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS_16secure_allocatorIhEEEEQsr3stdE21default_initializableIT_EEES8_m: 280| 4.24k| T random_vec(size_t bytes) { 281| 4.24k| T result; 282| 4.24k| random_vec(result, bytes); 283| 4.24k| return result; 284| 4.24k| } _ZN5Botan21RandomNumberGenerator10random_vecITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS_16secure_allocatorIhEEEEEEvRT_m: 265| 4.28k| void random_vec(T& v, size_t bytes) { 266| 4.28k| v.resize(bytes); 267| 4.28k| random_vec(v); 268| 4.28k| } _ZN5Botan21RandomNumberGenerator10random_vecITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS3_9allocatorIhEEEEEEvRT_m: 265| 6.57k| void random_vec(T& v, size_t bytes) { 266| 6.57k| v.resize(bytes); 267| 6.57k| random_vec(v); 268| 6.57k| } _ZN5Botan21RandomNumberGenerator10random_vecITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS3_9allocatorIhEEEEQsr3stdE21default_initializableIT_EEES8_m: 280| 6.57k| T random_vec(size_t bytes) { 281| 6.57k| T result; 282| 6.57k| random_vec(result, bytes); 283| 6.57k| return result; 284| 6.57k| } _ZNK5Botan13RSA_PublicKey9algo_nameEv: 41| 3.91k| std::string algo_name() const override { return "RSA"; } _ZN5Botan16secure_allocatorIhE8allocateEm: 95| 121k| T* allocate(std::size_t n) { return static_cast(allocate_memory(n, sizeof(T))); } _ZN5Botan16secure_allocatorIhE10deallocateEPhm: 102| 121k| void deallocate(T* p, std::size_t n) { deallocate_memory(p, n, sizeof(T)); } _ZN5BotanneIhhEEbRKNS_16secure_allocatorIT_EERKNS1_IT0_EE: 123| 9.09k|inline bool operator!=(const secure_allocator& /*a*/, const secure_allocator& /*b*/) { 124| 9.09k| return false; 125| 9.09k|} _ZN5Botan16secure_allocatorIjE10deallocateEPjm: 102| 15.7k| void deallocate(T* p, std::size_t n) { deallocate_memory(p, n, sizeof(T)); } _ZN5Botan16secure_allocatorImE10deallocateEPmm: 102| 4.84M| void deallocate(T* p, std::size_t n) { deallocate_memory(p, n, sizeof(T)); } _ZN5Botan16secure_allocatorImE8allocateEm: 95| 4.84M| T* allocate(std::size_t n) { return static_cast(allocate_memory(n, sizeof(T))); } _ZN5BotanpLIhNSt3__19allocatorIhEES3_EERNS1_6vectorIT_T0_EES8_RKNS4_IS5_T1_EE: 168| 102k|std::vector& operator+=(std::vector& out, const std::vector& in) { 169| 102k| out.insert(out.end(), in.begin(), in.end()); 170| 102k| return out; 171| 102k|} _ZN5BotanpLIhNSt3__19allocatorIhEENS_16secure_allocatorIhEEEERNS1_6vectorIT_T0_EESA_RKNS6_IS7_T1_EE: 168| 1.40k|std::vector& operator+=(std::vector& out, const std::vector& in) { 169| 1.40k| out.insert(out.end(), in.begin(), in.end()); 170| 1.40k| return out; 171| 1.40k|} _ZN5BotanpLIhNS_16secure_allocatorIhEES2_EERNSt3__16vectorIT_T0_EES8_RKNS4_IS5_T1_EE: 168| 9|std::vector& operator+=(std::vector& out, const std::vector& in) { 169| 9| out.insert(out.end(), in.begin(), in.end()); 170| 9| return out; 171| 9|} _ZN5BotanpLIhNS_16secure_allocatorIhEEmEERNSt3__16vectorIT_T0_EES8_RKNS3_4pairIPKS5_T1_EE: 204| 29.8k|std::vector& operator+=(std::vector& out, const std::pair& in) { 205| 29.8k| if(in.second > 0) { ------------------ | Branch (205:7): [True: 29.0k, False: 788] ------------------ 206| 29.0k| out.insert(out.end(), in.first, in.first + in.second); 207| 29.0k| } 208| 29.8k| return out; 209| 29.8k|} _ZN5Botan16secure_allocatorIjE8allocateEm: 95| 15.7k| T* allocate(std::size_t n) { return static_cast(allocate_memory(n, sizeof(T))); } _ZN5Botan3zapImNS_16secure_allocatorImEEEEvRNSt3__16vectorIT_T0_EE: 261| 476|void zap(std::vector& vec) { 262| 476| zeroise(vec); 263| 476| vec.clear(); 264| 476| vec.shrink_to_fit(); 265| 476|} _ZN5Botan7zeroiseImNS_16secure_allocatorImEEEEvRNSt3__16vectorIT_T0_EE: 241| 476|void zeroise(std::vector& vec) { 242| 476| for(size_t i = 0; i != vec.size(); ++i) { ------------------ | Branch (242:22): [True: 0, False: 476] ------------------ 243| 0| vec[i] = static_cast(0); 244| 0| } 245| 476|} _ZN5Botan7zeroiseIhNS_16secure_allocatorIhEEEEvRNSt3__16vectorIT_T0_EE: 241| 2.43k|void zeroise(std::vector& vec) { 242| 461k| for(size_t i = 0; i != vec.size(); ++i) { ------------------ | Branch (242:22): [True: 459k, False: 2.43k] ------------------ 243| 459k| vec[i] = static_cast(0); 244| 459k| } 245| 2.43k|} _ZN5BotanpLIhNS_16secure_allocatorIhEEmEERNSt3__16vectorIT_T0_EES8_RKNS3_4pairIPS5_T1_EE: 218| 685|std::vector& operator+=(std::vector& out, const std::pair& in) { 219| 685| if(in.second > 0) { ------------------ | Branch (219:7): [True: 685, False: 0] ------------------ 220| 685| out.insert(out.end(), in.first, in.first + in.second); 221| 685| } 222| 685| return out; 223| 685|} _ZN5Botan6unlockIhEENSt3__16vectorIT_NS1_9allocatorIS3_EEEERKNS2_IS3_NS_16secure_allocatorIS3_EEEE: 155| 707|std::vector unlock(const secure_vector& in) { 156| 707| return std::vector(in.begin(), in.end()); 157| 707|} _ZN5Botan7zeroiseIhNSt3__19allocatorIhEEEEvRNS1_6vectorIT_T0_EE: 241| 1.51k|void zeroise(std::vector& vec) { 242| 25.7k| for(size_t i = 0; i != vec.size(); ++i) { ------------------ | Branch (242:22): [True: 24.2k, False: 1.51k] ------------------ 243| 24.2k| vec[i] = static_cast(0); 244| 24.2k| } 245| 1.51k|} _ZN5BotanpLIhNSt3__19allocatorIhEEmEERNS1_6vectorIT_T0_EES8_RKNS1_4pairIPKS5_T1_EE: 204| 707|std::vector& operator+=(std::vector& out, const std::pair& in) { 205| 707| if(in.second > 0) { ------------------ | Branch (205:7): [True: 707, False: 0] ------------------ 206| 707| out.insert(out.end(), in.first, in.first + in.second); 207| 707| } 208| 707| return out; 209| 707|} _ZN5BotanpLIhNSt3__19allocatorIhEEEERNS1_6vectorIT_T0_EES8_NS1_4spanIKS5_Lm18446744073709551615EEE: 180| 6.57k|std::vector& operator+=(std::vector& out, std::span in) { 181| 6.57k| out.insert(out.end(), in.begin(), in.end()); 182| 6.57k| return out; 183| 6.57k|} _ZN5BotanpLIhNS_16secure_allocatorIhEEEERNSt3__16vectorIT_T0_EES8_NS3_4spanIKS5_Lm18446744073709551615EEE: 180| 906|std::vector& operator+=(std::vector& out, std::span in) { 181| 906| out.insert(out.end(), in.begin(), in.end()); 182| 906| return out; 183| 906|} _ZN5Botan12StreamCipher6cipherEPKhPhm: 61| 1.71k| void cipher(const uint8_t in[], uint8_t out[], size_t len) { cipher_bytes(in, out, len); } _ZN5Botan12StreamCipher15write_keystreamEPhm: 79| 117| void write_keystream(uint8_t out[], size_t len) { generate_keystream(out, len); } _ZN5Botan12StreamCipher15write_keystreamENSt3__14spanIhLm18446744073709551615EEE: 88| 19.9k| void write_keystream(std::span out) { generate_keystream(out.data(), out.size()); } _ZN5Botan12StreamCipher7cipher1EPhm: 110| 116| void cipher1(uint8_t buf[], size_t len) { cipher(buf, buf, len); } _ZN5Botan12StreamCipher8encipherENSt3__14spanIhLm18446744073709551615EEE: 124| 1.03k| void encipher(std::span inout) { cipher(inout.data(), inout.data(), inout.size()); } _ZN5Botan12StreamCipher6set_ivEPKhm: 168| 1.23k| void set_iv(const uint8_t iv[], size_t iv_len) { set_iv_bytes(iv, iv_len); } _ZN5Botan12StreamCipher6set_ivENSt3__14spanIKhLm18446744073709551615EEE: 175| 476| void set_iv(std::span iv) { set_iv_bytes(iv.data(), iv.size()); } _ZN5Botan12StreamCipher15keystream_bytesITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS_16secure_allocatorIhEEEEEET_m: 98| 1| T keystream_bytes(size_t bytes) { 99| 1| T out(bytes); 100| 1| write_keystream(out); 101| 1| return out; 102| 1| } _ZNKR5Botan6detail11Strong_BaseINSt3__16vectorIhNS2_9allocatorIhEEEEE3getEv: 85| 18.0k| constexpr const T& get() const& { return m_value; } _ZN5Botan6detail11Strong_BaseINSt3__16vectorIhNS2_9allocatorIhEEEEED2Ev: 73| 34.2k| ~Strong_Base() = default; _ZNK5Botan6detail29Container_Strong_Adapter_BaseINSt3__16vectorIhNS2_9allocatorIhEEEEE5emptyEvQsr8conceptsE9has_emptyIT_E: 188| 4.79k| { 189| 4.79k| return this->get().empty(); 190| 4.79k| } _ZN5Botan6detail11Strong_BaseINSt3__16vectorIhNS2_9allocatorIhEEEEEC2ES6_: 77| 10.5k| constexpr explicit Strong_Base(T v) : m_value(std::move(v)) {} _ZN5Botan6detail11Strong_BaseINSt3__16vectorIhNS2_9allocatorIhEEEEEC2EOS7_: 63| 8| Strong_Base(Strong_Base&&) noexcept = default; _ZN5Botan6detail11Strong_BaseINSt3__16vectorIhNS2_9allocatorIhEEEEEC2ERKS7_: 60| 16| Strong_Base(const Strong_Base&) = default; _ZN5Botan6detail11Strong_BaseINSt3__16vectorIhNS2_9allocatorIhEEEEEC2Ev: 57| 23.7k| Strong_Base() = default; _ZN5Botan6detail11Strong_BaseINSt3__16vectorIhNS2_9allocatorIhEEEEEaSEOS7_: 71| 10.5k| Strong_Base& operator=(Strong_Base&&) noexcept = default; _ZNK5Botan6detail29Container_Strong_Adapter_BaseINSt3__15arrayIhLm56EEEE5beginEv: 154| 1| decltype(auto) begin() const noexcept(noexcept(this->get().begin())) { return this->get().begin(); } _ZNK5Botan6detail29Container_Strong_Adapter_BaseINSt3__15arrayIhLm56EEEE3endEv: 162| 1| decltype(auto) end() const noexcept(noexcept(this->get().end())) { return this->get().end(); } _ZNK5Botan6detail14Strong_AdapterINSt3__15arrayIhLm56EEEE4dataEv: 253| 2| decltype(auto) data() const noexcept(noexcept(this->get().data())) { return this->get().data(); } _ZNK5Botan6detail29Container_Strong_Adapter_BaseINSt3__15arrayIhLm56EEEE4sizeEv: 182| 2| size_type size() const noexcept(noexcept(this->get().size())) { return this->get().size(); } _ZN5Botan6detail14Strong_AdapterINSt3__15arrayIhLm56EEEE4dataEv: 251| 1| decltype(auto) data() noexcept(noexcept(this->get().data())) { return this->get().data(); } _ZNR5Botan6detail11Strong_BaseINSt3__15arrayIhLm56EEEE3getEv: 81| 3| constexpr T& get() & { return m_value; } _ZN5Botan6detail29Container_Strong_Adapter_BaseINSt3__15arrayIhLm56EEEEixIiEEDcOT_: 220| 2| decltype(auto) operator[](U&& i) noexcept(noexcept(this->get().operator[](i))) { 221| 2| return this->get()[std::forward(i)]; 222| 2| } _ZNKR5Botan6detail11Strong_BaseINSt3__15arrayIhLm56EEEE3getEv: 85| 456| constexpr const T& get() const& { return m_value; } _ZNK5Botan6detail29Container_Strong_Adapter_BaseINSt3__15arrayIhLm56EEEEixImEEDcOT_: 212| 448| decltype(auto) operator[](U&& i) const noexcept(noexcept(this->get().operator[](i))) { 213| 448| return this->get()[std::forward(i)]; 214| 448| } _ZN5Botan6detail11Strong_BaseINSt3__15arrayIhLm56EEEEC2ES4_: 77| 1| constexpr explicit Strong_Base(T v) : m_value(std::move(v)) {} _ZN5BotaneqINSt3__16vectorIhNS1_9allocatorIhEEEEJNS_3TLS11Session_ID_EEQsr3stdE19equality_comparableIT_EEEbRKNS_6StrongIS8_DpT0_EESE_: 307| 38|bool operator==(const Strong& lhs, const Strong& rhs) { 308| 38| return lhs.get() == rhs.get(); 309| 38|} _ZN5Botan18unwrap_strong_typeIRmEEDcOT_: 119| 179k|[[nodiscard]] constexpr decltype(auto) unwrap_strong_type(T&& t) { 120| 179k| if constexpr(!concepts::strong_type>) { 121| | // If the parameter type isn't a strong type, return it as is. 122| 179k| return std::forward(t); 123| | } else { 124| | // Unwrap the strong type and return the underlying value. 125| | return std::forward(t).get(); 126| | } 127| 179k|} _ZN5Botan16wrap_strong_typeImRmQoosr3stdE18constructible_fromIT_T0_Eaasr8conceptsE11strong_typeIS2_Esr3stdE18constructible_fromINS2_12wrapped_typeES3_EEEDcOS3_: 144| 370k|[[nodiscard]] constexpr decltype(auto) wrap_strong_type(ParamT&& t) { 145| 370k| if constexpr(std::same_as, T>) { 146| | // Noop, if the parameter type already is the desired return type. 147| 370k| return std::forward(t); 148| | } else if constexpr(std::constructible_from) { 149| | // Implicit conversion from the parameter type to the return type. 150| | return T{std::forward(t)}; 151| | } else { 152| | // Explicitly calling the wrapped type's constructor to support 153| | // implicit conversions on types that mark their constructors as explicit. 154| | static_assert(concepts::strong_type && std::constructible_from); 155| | return T{typename T::wrapped_type{std::forward(t)}}; 156| | } 157| 370k|} _ZN5Botan18unwrap_strong_typeIRNSt3__16vectorIhNS1_9allocatorIhEEEEEEDcOT_: 119| 71.0k|[[nodiscard]] constexpr decltype(auto) unwrap_strong_type(T&& t) { 120| 71.0k| if constexpr(!concepts::strong_type>) { 121| | // If the parameter type isn't a strong type, return it as is. 122| 71.0k| return std::forward(t); 123| | } else { 124| | // Unwrap the strong type and return the underlying value. 125| | return std::forward(t).get(); 126| | } 127| 71.0k|} _ZN5Botan18unwrap_strong_typeIRNSt3__16vectorIhNS_16secure_allocatorIhEEEEEEDcOT_: 119| 4.21k|[[nodiscard]] constexpr decltype(auto) unwrap_strong_type(T&& t) { 120| 4.21k| if constexpr(!concepts::strong_type>) { 121| | // If the parameter type isn't a strong type, return it as is. 122| 4.21k| return std::forward(t); 123| | } else { 124| | // Unwrap the strong type and return the underlying value. 125| | return std::forward(t).get(); 126| | } 127| 4.21k|} _ZN5Botan16wrap_strong_typeItRtQoosr3stdE18constructible_fromIT_T0_Eaasr8conceptsE11strong_typeIS2_Esr3stdE18constructible_fromINS2_12wrapped_typeES3_EEEDcOS3_: 144| 1.48k|[[nodiscard]] constexpr decltype(auto) wrap_strong_type(ParamT&& t) { 145| 1.48k| if constexpr(std::same_as, T>) { 146| | // Noop, if the parameter type already is the desired return type. 147| 1.48k| return std::forward(t); 148| | } else if constexpr(std::constructible_from) { 149| | // Implicit conversion from the parameter type to the return type. 150| | return T{std::forward(t)}; 151| | } else { 152| | // Explicitly calling the wrapped type's constructor to support 153| | // implicit conversions on types that mark their constructors as explicit. 154| | static_assert(concepts::strong_type && std::constructible_from); 155| | return T{typename T::wrapped_type{std::forward(t)}}; 156| | } 157| 1.48k|} _ZN5Botan16wrap_strong_typeIjRjQoosr3stdE18constructible_fromIT_T0_Eaasr8conceptsE11strong_typeIS2_Esr3stdE18constructible_fromINS2_12wrapped_typeES3_EEEDcOS3_: 144| 2.51k|[[nodiscard]] constexpr decltype(auto) wrap_strong_type(ParamT&& t) { 145| 2.51k| if constexpr(std::same_as, T>) { 146| | // Noop, if the parameter type already is the desired return type. 147| 2.51k| return std::forward(t); 148| | } else if constexpr(std::constructible_from) { 149| | // Implicit conversion from the parameter type to the return type. 150| | return T{std::forward(t)}; 151| | } else { 152| | // Explicitly calling the wrapped type's constructor to support 153| | // implicit conversions on types that mark their constructors as explicit. 154| | static_assert(concepts::strong_type && std::constructible_from); 155| | return T{typename T::wrapped_type{std::forward(t)}}; 156| | } 157| 2.51k|} _ZN5Botan16wrap_strong_typeItRKtQoosr3stdE18constructible_fromIT_T0_Eaasr8conceptsE11strong_typeIS3_Esr3stdE18constructible_fromINS3_12wrapped_typeES4_EEEDcOS4_: 144| 10|[[nodiscard]] constexpr decltype(auto) wrap_strong_type(ParamT&& t) { 145| 10| if constexpr(std::same_as, T>) { 146| | // Noop, if the parameter type already is the desired return type. 147| 10| return std::forward(t); 148| | } else if constexpr(std::constructible_from) { 149| | // Implicit conversion from the parameter type to the return type. 150| | return T{std::forward(t)}; 151| | } else { 152| | // Explicitly calling the wrapped type's constructor to support 153| | // implicit conversions on types that mark their constructors as explicit. 154| | static_assert(concepts::strong_type && std::constructible_from); 155| | return T{typename T::wrapped_type{std::forward(t)}}; 156| | } 157| 10|} _ZN5Botan18unwrap_strong_typeIRjEEDcOT_: 119| 303k|[[nodiscard]] constexpr decltype(auto) unwrap_strong_type(T&& t) { 120| 303k| if constexpr(!concepts::strong_type>) { 121| | // If the parameter type isn't a strong type, return it as is. 122| 303k| return std::forward(t); 123| | } else { 124| | // Unwrap the strong type and return the underlying value. 125| | return std::forward(t).get(); 126| | } 127| 303k|} _ZN5Botan16wrap_strong_typeIhRhQoosr3stdE18constructible_fromIT_T0_Eaasr8conceptsE11strong_typeIS2_Esr3stdE18constructible_fromINS2_12wrapped_typeES3_EEEDcOS3_: 144| 2.01M|[[nodiscard]] constexpr decltype(auto) wrap_strong_type(ParamT&& t) { 145| 2.01M| if constexpr(std::same_as, T>) { 146| | // Noop, if the parameter type already is the desired return type. 147| 2.01M| return std::forward(t); 148| | } else if constexpr(std::constructible_from) { 149| | // Implicit conversion from the parameter type to the return type. 150| | return T{std::forward(t)}; 151| | } else { 152| | // Explicitly calling the wrapped type's constructor to support 153| | // implicit conversions on types that mark their constructors as explicit. 154| | static_assert(concepts::strong_type && std::constructible_from); 155| | return T{typename T::wrapped_type{std::forward(t)}}; 156| | } 157| 2.01M|} _ZN5Botan24Key_Length_SpecificationC2Em: 28| 948| explicit Key_Length_Specification(size_t keylen) : m_min_keylen(keylen), m_max_keylen(keylen), m_keylen_mod(1) {} _ZN5Botan24Key_Length_SpecificationC2Emmm: 37| 5.39k| m_min_keylen(min_k), m_max_keylen(max_k > 0 ? max_k : min_k), m_keylen_mod(k_mod) {} ------------------ | Branch (37:47): [True: 3.18k, False: 2.20k] ------------------ _ZNK5Botan24Key_Length_Specification15valid_keylengthEm: 44| 6.34k| bool valid_keylength(size_t length) const { 45| 6.34k| return ((length >= m_min_keylen) && (length <= m_max_keylen) && (length % m_keylen_mod == 0)); ------------------ | Branch (45:18): [True: 6.34k, False: 0] | Branch (45:46): [True: 6.34k, False: 0] | Branch (45:74): [True: 6.34k, False: 0] ------------------ 46| 6.34k| } _ZNK5Botan18SymmetricAlgorithm15valid_keylengthEm: 143| 6.34k| bool valid_keylength(size_t length) const { return key_spec().valid_keylength(length); } _ZN5Botan18SymmetricAlgorithm7set_keyEPKhm: 162| 117| void set_key(const uint8_t key[], size_t length) { set_key(std::span{key, length}); } _ZNK5Botan18SymmetricAlgorithm23assert_key_material_setEv: 180| 57.8k| void assert_key_material_set() const { assert_key_material_set(has_keying_material()); } _ZNK5Botan18SymmetricAlgorithm23assert_key_material_setEb: 186| 57.8k| void assert_key_material_set(bool predicate) const { 187| 57.8k| if(!predicate) { ------------------ | Branch (187:13): [True: 0, False: 57.8k] ------------------ 188| 0| throw_key_not_set_error(); 189| 0| } 190| 57.8k| } _ZN5Botan18SymmetricAlgorithmD2Ev: 90| 5.05k| virtual ~SymmetricAlgorithm() = default; _ZN5Botan18SymmetricAlgorithmC2Ev: 88| 5.05k| SymmetricAlgorithm() = default; _ZNK5Botan11OctetString6lengthEv: 28| 391| size_t length() const { return m_data.size(); } _ZNK5Botan11OctetString5emptyEv: 40| 1.02k| bool empty() const { return m_data.empty(); } _ZNK5Botan11OctetString7bits_ofEv: 46| 663| secure_vector bits_of() const { return m_data; } _ZN5Botan11OctetStringC2ENSt3__16vectorIhNS_16secure_allocatorIhEEEE: 112| 1.29k| explicit OctetString(secure_vector in) : m_data(std::move(in)) {} _ZN5Botan15TelephoneNumberC2ENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEE: 59| 2| explicit TelephoneNumber(std::string number) : m_number(std::move(number)) {} _ZNK5Botan3TLS5Alert8is_validEv: 78| 6.24k| bool is_valid() const { return (m_type_code != AlertType::None); } _ZNK5Botan3TLS5Alert8is_fatalEv: 93| 20.0k| bool is_fatal() const { return m_fatal; } _ZNK5Botan3TLS5Alert4typeEv: 100| 27.3k| Type type() const { return m_type_code; } _ZN5Botan3TLS5AlertC2ENS0_9AlertTypeEb: 126| 6.24k| m_fatal(fatal), m_type_code(type_code) {} _ZN5Botan3TLS12Group_ParamsC2Ev: 145| 32| constexpr Group_Params() : m_code(Group_Params_Code::NONE) {} _ZN5Botan3TLS12Group_ParamsC2Et: 151| 5.05k| constexpr Group_Params(uint16_t code) : m_code(static_cast(code)) {} _ZNK5Botan3TLS12Group_ParamseqENS0_17Group_Params_CodeE: 158| 2| constexpr bool operator==(Group_Params_Code code) const { return m_code == code; } _ZNK5Botan3TLS12Group_ParamseqES1_: 160| 9.17k| constexpr bool operator==(Group_Params other) const { return m_code == other.m_code; } _ZNK5Botan3TLS12Group_Params9wire_codeEv: 166| 76.7k| constexpr uint16_t wire_code() const { return static_cast(m_code); } _ZNK5Botan3TLS12Group_Params9is_x25519Ev: 173| 79.0k| constexpr bool is_x25519() const { return m_code == Group_Params_Code::X25519; } _ZNK5Botan3TLS12Group_Params7is_x448Ev: 175| 71.8k| constexpr bool is_x448() const { return m_code == Group_Params_Code::X448; } _ZNK5Botan3TLS12Group_Params19is_ecdh_named_curveEv: 177| 67.1k| constexpr bool is_ecdh_named_curve() const { 178| 67.1k| return m_code == Group_Params_Code::SECP256R1 || m_code == Group_Params_Code::SECP384R1 || ------------------ | Branch (178:17): [True: 7.58k, False: 59.5k] | Branch (178:59): [True: 7.66k, False: 51.8k] ------------------ 179| 51.8k| m_code == Group_Params_Code::SECP521R1 || m_code == Group_Params_Code::BRAINPOOL256R1 || ------------------ | Branch (179:17): [True: 7.46k, False: 44.3k] | Branch (179:59): [True: 7.38k, False: 37.0k] ------------------ 180| 37.0k| m_code == Group_Params_Code::BRAINPOOL384R1 || m_code == Group_Params_Code::BRAINPOOL512R1 || ------------------ | Branch (180:17): [True: 7.65k, False: 29.3k] | Branch (180:64): [True: 7.50k, False: 21.8k] ------------------ 181| 21.8k| m_code == Group_Params_Code::BRAINPOOL256R1TLS13 || m_code == Group_Params_Code::BRAINPOOL384R1TLS13 || ------------------ | Branch (181:17): [True: 7.34k, False: 14.5k] | Branch (181:69): [True: 7.21k, False: 7.28k] ------------------ 182| 7.28k| m_code == Group_Params_Code::BRAINPOOL512R1TLS13; ------------------ | Branch (182:17): [True: 7.22k, False: 66] ------------------ 183| 67.1k| } _ZNK5Botan3TLS12Group_Params17is_dh_named_groupEv: 190| 1.21k| constexpr bool is_dh_named_group() const { 191| 1.21k| return m_code == Group_Params_Code::FFDHE_2048 || m_code == Group_Params_Code::FFDHE_3072 || ------------------ | Branch (191:17): [True: 0, False: 1.21k] | Branch (191:60): [True: 0, False: 1.21k] ------------------ 192| 1.21k| m_code == Group_Params_Code::FFDHE_4096 || m_code == Group_Params_Code::FFDHE_6144 || ------------------ | Branch (192:17): [True: 0, False: 1.21k] | Branch (192:60): [True: 0, False: 1.21k] ------------------ 193| 1.21k| m_code == Group_Params_Code::FFDHE_8192; ------------------ | Branch (193:17): [True: 0, False: 1.21k] ------------------ 194| 1.21k| } _ZNK5Botan3TLS12Group_Params14is_pure_ml_kemEv: 196| 92.6k| constexpr bool is_pure_ml_kem() const { 197| 92.6k| return m_code == Group_Params_Code::ML_KEM_512 || m_code == Group_Params_Code::ML_KEM_768 || ------------------ | Branch (197:17): [True: 0, False: 92.6k] | Branch (197:60): [True: 0, False: 92.6k] ------------------ 198| 92.6k| m_code == Group_Params_Code::ML_KEM_1024; ------------------ | Branch (198:17): [True: 0, False: 92.6k] ------------------ 199| 92.6k| } _ZNK5Botan3TLS12Group_Params16is_pure_frodokemEv: 201| 92.6k| constexpr bool is_pure_frodokem() const { 202| 92.6k| return m_code == Group_Params_Code::eFRODOKEM_640_SHAKE_OQS || ------------------ | Branch (202:17): [True: 0, False: 92.6k] ------------------ 203| 92.6k| m_code == Group_Params_Code::eFRODOKEM_976_SHAKE_OQS || ------------------ | Branch (203:17): [True: 0, False: 92.6k] ------------------ 204| 92.6k| m_code == Group_Params_Code::eFRODOKEM_1344_SHAKE_OQS || ------------------ | Branch (204:17): [True: 0, False: 92.6k] ------------------ 205| 92.6k| m_code == Group_Params_Code::eFRODOKEM_640_AES_OQS || ------------------ | Branch (205:17): [True: 0, False: 92.6k] ------------------ 206| 92.6k| m_code == Group_Params_Code::eFRODOKEM_976_AES_OQS || ------------------ | Branch (206:17): [True: 0, False: 92.6k] ------------------ 207| 92.6k| m_code == Group_Params_Code::eFRODOKEM_1344_AES_OQS; ------------------ | Branch (207:17): [True: 0, False: 92.6k] ------------------ 208| 92.6k| } _ZNK5Botan3TLS12Group_Params17is_pure_ecc_groupEv: 210| 79.0k| constexpr bool is_pure_ecc_group() const { return is_x25519() || is_x448() || is_ecdh_named_curve(); } ------------------ | Branch (210:57): [True: 7.18k, False: 71.8k] | Branch (210:72): [True: 7.18k, False: 64.6k] | Branch (210:85): [True: 64.6k, False: 0] ------------------ _ZNK5Botan3TLS12Group_Params15is_post_quantumEv: 212| 92.6k| constexpr bool is_post_quantum() const { 213| 92.6k| BOTAN_DIAGNOSTIC_PUSH 214| 92.6k| BOTAN_DIAGNOSTIC_IGNORE_DEPRECATED_DECLARATIONS 215| | 216| 92.6k| return is_pure_ml_kem() || is_pure_frodokem() || is_pqc_hybrid(); ------------------ | Branch (216:17): [True: 0, False: 92.6k] | Branch (216:37): [True: 0, False: 92.6k] | Branch (216:59): [True: 19.7k, False: 72.9k] ------------------ 217| | 218| 92.6k| BOTAN_DIAGNOSTIC_POP 219| 92.6k| } _ZNK5Botan3TLS12Group_Params20is_pqc_hybrid_ml_kemEv: 221| 92.6k| constexpr bool is_pqc_hybrid_ml_kem() const { 222| 92.6k| return m_code == Group_Params_Code::HYBRID_SECP256R1_ML_KEM_768 || ------------------ | Branch (222:17): [True: 6.57k, False: 86.1k] ------------------ 223| 86.1k| m_code == Group_Params_Code::HYBRID_SECP384R1_ML_KEM_1024 || ------------------ | Branch (223:17): [True: 6.57k, False: 79.5k] ------------------ 224| 79.5k| m_code == Group_Params_Code::HYBRID_X25519_ML_KEM_768; ------------------ | Branch (224:17): [True: 6.57k, False: 72.9k] ------------------ 225| 92.6k| } _ZNK5Botan3TLS12Group_Params22is_pqc_hybrid_frodokemEv: 227| 72.9k| constexpr bool is_pqc_hybrid_frodokem() const { 228| 72.9k| return m_code == Group_Params_Code::HYBRID_X25519_eFRODOKEM_640_SHAKE_OQS || ------------------ | Branch (228:17): [True: 0, False: 72.9k] ------------------ 229| 72.9k| m_code == Group_Params_Code::HYBRID_X25519_eFRODOKEM_640_AES_OQS || ------------------ | Branch (229:17): [True: 0, False: 72.9k] ------------------ 230| 72.9k| m_code == Group_Params_Code::HYBRID_X448_eFRODOKEM_976_SHAKE_OQS || ------------------ | Branch (230:17): [True: 0, False: 72.9k] ------------------ 231| 72.9k| m_code == Group_Params_Code::HYBRID_X448_eFRODOKEM_976_AES_OQS || ------------------ | Branch (231:17): [True: 0, False: 72.9k] ------------------ 232| 72.9k| m_code == Group_Params_Code::HYBRID_SECP256R1_eFRODOKEM_640_SHAKE_OQS || ------------------ | Branch (232:17): [True: 0, False: 72.9k] ------------------ 233| 72.9k| m_code == Group_Params_Code::HYBRID_SECP256R1_eFRODOKEM_640_AES_OQS || ------------------ | Branch (233:17): [True: 0, False: 72.9k] ------------------ 234| 72.9k| m_code == Group_Params_Code::HYBRID_SECP384R1_eFRODOKEM_976_SHAKE_OQS || ------------------ | Branch (234:17): [True: 0, False: 72.9k] ------------------ 235| 72.9k| m_code == Group_Params_Code::HYBRID_SECP384R1_eFRODOKEM_976_AES_OQS || ------------------ | Branch (235:17): [True: 0, False: 72.9k] ------------------ 236| 72.9k| m_code == Group_Params_Code::HYBRID_SECP521R1_eFRODOKEM_1344_SHAKE_OQS || ------------------ | Branch (236:17): [True: 0, False: 72.9k] ------------------ 237| 72.9k| m_code == Group_Params_Code::HYBRID_SECP521R1_eFRODOKEM_1344_AES_OQS; ------------------ | Branch (237:17): [True: 0, False: 72.9k] ------------------ 238| 72.9k| } _ZNK5Botan3TLS12Group_Params13is_pqc_hybridEv: 240| 92.6k| constexpr bool is_pqc_hybrid() const { return is_pqc_hybrid_ml_kem() || is_pqc_hybrid_frodokem(); } ------------------ | Branch (240:53): [True: 19.7k, False: 72.9k] | Branch (240:79): [True: 0, False: 72.9k] ------------------ _ZN5Botan3TLS9CallbacksD2Ev: 60| 6.57k| virtual ~Callbacks() = default; _ZN5Botan3TLS9Callbacks21tls_session_activatedEv: 155| 8| virtual void tls_session_activated() {} _ZN5Botan3TLS9Callbacks26tls_peer_closed_connectionEv: 177| 301| virtual bool tls_peer_closed_connection() { return true; } _ZNK5Botan3TLS9Callbacks34tls_verify_cert_chain_ocsp_timeoutEv: 276| 893| virtual std::chrono::milliseconds tls_verify_cert_chain_ocsp_timeout() const { 277| 893| return std::chrono::milliseconds(0); 278| 893| } _ZN5Botan3TLS7Channel13received_dataENSt3__14spanIKhLm18446744073709551615EEE: 59| 6.57k| size_t received_data(std::span data) { return this->from_peer(data); } _ZN5Botan3TLS7ChannelC2Ev: 48| 6.57k| Channel() = default; _ZN5Botan3TLS7ChannelD2Ev: 40| 6.57k| virtual ~Channel() = default; _ZNK5Botan3TLS11Ciphersuite5validEv: 147| 671k| bool valid() const { return m_usable; } _ZNK5Botan3TLS11Ciphersuite16ciphersuite_codeEv: 62| 1.29M| uint16_t ciphersuite_code() const { return m_ciphersuite_code; } _ZNK5Botan3TLS11Ciphersuite8kex_algoEv: 108| 8| std::string kex_algo() const { return kex_method_to_string(kex_method()); } _ZNK5Botan3TLS11Ciphersuite10kex_methodEv: 110| 9.42k| Kex_Algo kex_method() const { return m_kex_algo; } _ZNK5Botan3TLS11Ciphersuite8sig_algoEv: 115| 780| std::string sig_algo() const { return auth_method_to_string(auth_method()); } _ZNK5Botan3TLS11Ciphersuite11auth_methodEv: 117| 9.00k| Auth_Method auth_method() const { return m_auth_method; } _ZNK5Botan3TLS11Ciphersuite11cipher_algoEv: 122| 1.30k| std::string cipher_algo() const { return m_cipher_algo; } _ZNK5Botan3TLS11Ciphersuite8mac_algoEv: 127| 5.32k| std::string mac_algo() const { return m_mac_algo; } _ZNK5Botan3TLS11Ciphersuite8prf_algoEv: 129| 2.82k| std::string prf_algo() const { return kdf_algo_to_string(m_prf_algo); } _ZNK5Botan3TLS11Ciphersuite13cipher_keylenEv: 134| 972| size_t cipher_keylen() const { return m_cipher_keylen; } _ZNK5Botan3TLS11Ciphersuite12nonce_formatEv: 140| 1.03k| Nonce_Format nonce_format() const { return m_nonce_format; } _ZNK5Botan3TLS11Ciphersuite10mac_keylenEv: 142| 972| size_t mac_keylen() const { return m_mac_keylen; } _ZNK5Botan3TLS11CiphersuiteltEt: 153| 71.0k| bool operator<(const uint16_t c) const { return ciphersuite_code() < c; } _ZN5Botan3TLS11CiphersuiteC2EtPKcNS0_11Auth_MethodENS0_8Kex_AlgoES3_mS3_mNS0_8KDF_AlgoENS0_12Nonce_FormatE: 168| 102| m_ciphersuite_code(ciphersuite_code), 169| 102| m_iana_id(iana_id), 170| 102| m_auth_method(auth_method), 171| 102| m_kex_algo(kex_algo), 172| 102| m_prf_algo(prf_algo), 173| 102| m_nonce_format(nonce_format), 174| 102| m_cipher_algo(cipher_algo), 175| 102| m_mac_algo(mac_algo), 176| 102| m_cipher_keylen(cipher_keylen), 177| 102| m_mac_keylen(mac_keylen), 178| 102| m_usable(is_known_usable(ciphersuite_code)) {} _ZN5Botan3TLS13TLS_ExceptionC2ENS0_9AlertTypeENSt3__117basic_string_viewIcNS3_11char_traitsIcEEEE: 24| 3.96k| Exception(err_msg), m_alert_type(type) {} _ZNK5Botan3TLS13TLS_Exception4typeEv: 21| 3.06k| Alert::Type type() const { return m_alert_type; } _ZN5Botan3TLS18Unexpected_MessageC2ENSt3__117basic_string_viewIcNS2_11char_traitsIcEEEE: 39| 35| explicit Unexpected_Message(std::string_view err) : TLS_Exception(AlertType::UnexpectedMessage, err) {} _ZN5Botan3TLS21Server_Name_Indicator11static_typeEv: 123| 6.67k| static Extension_Code static_type() { return Extension_Code::ServerNameIndication; } _ZNK5Botan3TLS21Server_Name_Indicator4typeEv: 125| 6.67k| Extension_Code type() const override { return static_type(); } _ZN5Botan3TLS21Server_Name_IndicatorC2ENSt3__117basic_string_viewIcNS2_11char_traitsIcEEEE: 127| 6.57k| explicit Server_Name_Indicator(std::string_view host_name) : m_sni_host_name(host_name) {} _ZNK5Botan3TLS21Server_Name_Indicator5emptyEv: 144| 11.6k| bool empty() const override { return false; } _ZN5Botan3TLS39Application_Layer_Protocol_Notification11static_typeEv: 157| 9.89k| static Extension_Code static_type() { return Extension_Code::ApplicationLayerProtocolNegotiation; } _ZNK5Botan3TLS39Application_Layer_Protocol_Notification4typeEv: 159| 6| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS39Application_Layer_Protocol_Notification5emptyEv: 179| 1| bool empty() const override { return m_protocols.empty(); } _ZNK5Botan3TLS21Certificate_Type_Base5emptyEv: 211| 4| bool empty() const override { 212| | // RFC 7250 4.1 213| | // If the client has no remaining certificate types to send in the 214| | // client hello, other than the default X.509 type, it MUST omit the 215| | // entire client[/server]_certificate_type extension [...]. 216| 4| return m_from == Connection_Side::Client && m_certificate_types.size() == 1 && ------------------ | Branch (216:17): [True: 0, False: 4] | Branch (216:54): [True: 0, False: 0] ------------------ 217| 0| m_certificate_types.front() == Certificate_Type::X509; ------------------ | Branch (217:17): [True: 0, False: 0] ------------------ 218| 4| } _ZN5Botan3TLS23Client_Certificate_Type11static_typeEv: 234| 5| static Extension_Code static_type() { return Extension_Code::ClientCertificateType; } _ZNK5Botan3TLS23Client_Certificate_Type4typeEv: 236| 5| Extension_Code type() const override { return static_type(); } _ZN5Botan3TLS23Server_Certificate_Type11static_typeEv: 248| 6| static Extension_Code static_type() { return Extension_Code::ServerCertificateType; } _ZNK5Botan3TLS23Server_Certificate_Type4typeEv: 250| 6| Extension_Code type() const override { return static_type(); } _ZN5Botan3TLS16Supported_Groups11static_typeEv: 258| 7.30k| static Extension_Code static_type() { return Extension_Code::SupportedGroups; } _ZNK5Botan3TLS16Supported_Groups4typeEv: 260| 6.69k| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS16Supported_Groups5emptyEv: 276| 11.6k| bool empty() const override { return m_groups.empty(); } _ZN5Botan3TLS20Signature_Algorithms11static_typeEv: 287| 7.18k| static Extension_Code static_type() { return Extension_Code::SignatureAlgorithms; } _ZNK5Botan3TLS20Signature_Algorithms4typeEv: 289| 6.58k| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS20Signature_Algorithms17supported_schemesEv: 291| 597| const std::vector& supported_schemes() const { return m_schemes; } _ZNK5Botan3TLS20Signature_Algorithms5emptyEv: 295| 11.6k| bool empty() const override { return m_schemes.empty(); } _ZN5Botan3TLS20Signature_AlgorithmsC2ENSt3__16vectorINS0_16Signature_SchemeENS2_9allocatorIS4_EEEE: 297| 6.57k| explicit Signature_Algorithms(std::vector schemes) : m_schemes(std::move(schemes)) {} _ZN5Botan3TLS25Signature_Algorithms_Cert11static_typeEv: 320| 9| static Extension_Code static_type() { return Extension_Code::CertSignatureAlgorithms; } _ZNK5Botan3TLS25Signature_Algorithms_Cert4typeEv: 322| 9| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS25Signature_Algorithms_Cert5emptyEv: 328| 1| bool empty() const override { return m_schemes.empty(); } _ZN5Botan3TLS24SRTP_Protection_Profiles11static_typeEv: 343| 4.95k| static Extension_Code static_type() { return Extension_Code::UseSrtp; } _ZNK5Botan3TLS24SRTP_Protection_Profiles4typeEv: 345| 8| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS24SRTP_Protection_Profiles5emptyEv: 351| 1| bool empty() const override { return m_pp.empty(); } _ZN5Botan3TLS26Certificate_Status_Request11static_typeEv: 370| 8.11k| static Extension_Code static_type() { return Extension_Code::CertificateStatusRequest; } _ZNK5Botan3TLS26Certificate_Status_Request4typeEv: 372| 6.63k| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS26Certificate_Status_Request5emptyEv: 376| 11.6k| bool empty() const override { return false; } _ZN5Botan3TLS18Supported_Versions11static_typeEv: 408| 11.8k| static Extension_Code static_type() { return Extension_Code::SupportedVersions; } _ZNK5Botan3TLS18Supported_Versions4typeEv: 410| 6.58k| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS18Supported_Versions5emptyEv: 414| 11.6k| bool empty() const override { return m_versions.empty(); } _ZN5Botan3TLS17Record_Size_Limit11static_typeEv: 439| 15| static Extension_Code static_type() { return Extension_Code::RecordSizeLimit; } _ZNK5Botan3TLS17Record_Size_Limit4typeEv: 441| 15| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS17Record_Size_Limit5emptyEv: 451| 2| bool empty() const override { return m_limit == 0; } _ZNK5Botan3TLS17Unknown_Extension5emptyEv: 468| 581| bool empty() const override { return false; } _ZNK5Botan3TLS17Unknown_Extension4typeEv: 470| 3.50k| Extension_Code type() const override { return m_type; } _ZN5Botan3TLS10Extensions3addEPNS0_9ExtensionE: 504| 59.2k| void add(Extension* extn) { add(std::unique_ptr(extn)); } _ZN5Botan3TLS10ExtensionsC2Ev: 557| 12.7k| Extensions() = default; _ZNK5Botan3TLS10Extensions3hasINS0_18Supported_VersionsEEEbv: 492| 5.26k| bool has() const { 493| 5.26k| return get() != nullptr; 494| 5.26k| } _ZNK5Botan3TLS10Extensions3getINS0_18Supported_VersionsEEEPT_v: 487| 5.28k| T* get() const { 488| 5.28k| return dynamic_cast(get(T::static_type())); 489| 5.28k| } _ZNK5Botan3TLS10Extensions3getINS0_20Signature_AlgorithmsEEEPT_v: 487| 597| T* get() const { 488| 597| return dynamic_cast(get(T::static_type())); 489| 597| } _ZNK5Botan3TLS10Extensions3getINS0_16Supported_GroupsEEEPT_v: 487| 607| T* get() const { 488| 607| return dynamic_cast(get(T::static_type())); 489| 607| } _ZNK5Botan3TLS10Extensions3hasINS0_39Application_Layer_Protocol_NotificationEEEbv: 492| 4.94k| bool has() const { 493| 4.94k| return get() != nullptr; 494| 4.94k| } _ZNK5Botan3TLS10Extensions3getINS0_39Application_Layer_Protocol_NotificationEEEPT_v: 487| 9.88k| T* get() const { 488| 9.88k| return dynamic_cast(get(T::static_type())); 489| 9.88k| } _ZNK5Botan3TLS10Extensions3getINS0_24SRTP_Protection_ProfilesEEEPT_v: 487| 4.95k| T* get() const { 488| 4.95k| return dynamic_cast(get(T::static_type())); 489| 4.95k| } _ZN5Botan3TLS9ExtensionD2Ev: 115| 84.6k| virtual ~Extension() = default; _ZNK5Botan3TLS10Extensions3hasINS0_26Certificate_Status_RequestEEEbv: 492| 1.48k| bool has() const { 493| 1.48k| return get() != nullptr; 494| 1.48k| } _ZNK5Botan3TLS10Extensions3getINS0_26Certificate_Status_RequestEEEPT_v: 487| 1.48k| T* get() const { 488| 1.48k| return dynamic_cast(get(T::static_type())); 489| 1.48k| } _ZNK5Botan3TLS10Extensions3getINS0_23Supported_Point_FormatsEEEPT_v: 487| 596| T* get() const { 488| 596| return dynamic_cast(get(T::static_type())); 489| 596| } _ZNK5Botan3TLS10Extensions3hasINS0_23Renegotiation_ExtensionEEEbv: 492| 11.5k| bool has() const { 493| 11.5k| return get() != nullptr; 494| 11.5k| } _ZNK5Botan3TLS10Extensions3getINS0_23Renegotiation_ExtensionEEEPT_v: 487| 22.4k| T* get() const { 488| 22.4k| return dynamic_cast(get(T::static_type())); 489| 22.4k| } _ZNK5Botan3TLS10Extensions3hasINS0_24Session_Ticket_ExtensionEEEbv: 492| 699| bool has() const { 493| 699| return get() != nullptr; 494| 699| } _ZNK5Botan3TLS10Extensions3getINS0_24Session_Ticket_ExtensionEEEPT_v: 487| 699| T* get() const { 488| 699| return dynamic_cast(get(T::static_type())); 489| 699| } _ZNK5Botan3TLS10Extensions3hasINS0_22Extended_Master_SecretEEEbv: 492| 5.65k| bool has() const { 493| 5.65k| return get() != nullptr; 494| 5.65k| } _ZNK5Botan3TLS10Extensions3getINS0_22Extended_Master_SecretEEEPT_v: 487| 5.65k| T* get() const { 488| 5.65k| return dynamic_cast(get(T::static_type())); 489| 5.65k| } _ZNK5Botan3TLS10Extensions3hasINS0_16Encrypt_then_MACEEEbv: 492| 4.49k| bool has() const { 493| 4.49k| return get() != nullptr; 494| 4.49k| } _ZNK5Botan3TLS10Extensions3getINS0_16Encrypt_then_MACEEEPT_v: 487| 4.49k| T* get() const { 488| 4.49k| return dynamic_cast(get(T::static_type())); 489| 4.49k| } _ZN5Botan3TLS23Renegotiation_Extension11static_typeEv: 31| 33.4k| static Extension_Code static_type() { return Extension_Code::SafeRenegotiation; } _ZNK5Botan3TLS23Renegotiation_Extension4typeEv: 33| 10.9k| Extension_Code type() const override { return static_type(); } _ZN5Botan3TLS23Renegotiation_ExtensionC2ENSt3__16vectorIhNS2_9allocatorIhEEEE: 37| 6.57k| explicit Renegotiation_Extension(std::vector bits) : m_reneg_data(std::move(bits)) {} _ZNK5Botan3TLS23Renegotiation_Extension18renegotiation_infoEv: 41| 10.9k| const std::vector& renegotiation_info() const { return m_reneg_data; } _ZNK5Botan3TLS23Renegotiation_Extension5emptyEv: 45| 15.9k| bool empty() const override { return false; } // always send this _ZN5Botan3TLS24Session_Ticket_Extension11static_typeEv: 56| 11.6k| static Extension_Code static_type() { return Extension_Code::SessionTicket; } _ZNK5Botan3TLS24Session_Ticket_Extension4typeEv: 58| 10.9k| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS24Session_Ticket_Extension9serializeENS0_15Connection_SideE: 80| 6.57k| std::vector serialize(Connection_Side /*whoami*/) const override { return m_ticket.get(); } _ZNK5Botan3TLS24Session_Ticket_Extension5emptyEv: 82| 15.9k| bool empty() const override { return false; } _ZN5Botan3TLS23Supported_Point_Formats11static_typeEv: 99| 7.77k| static Extension_Code static_type() { return Extension_Code::EcPointFormats; } _ZNK5Botan3TLS23Supported_Point_Formats4typeEv: 101| 7.17k| Extension_Code type() const override { return static_type(); } _ZN5Botan3TLS23Supported_Point_FormatsC2Eb: 105| 6.57k| explicit Supported_Point_Formats(bool prefer_compressed) : m_prefers_compressed(prefer_compressed) {} _ZNK5Botan3TLS23Supported_Point_Formats5emptyEv: 109| 12.2k| bool empty() const override { return false; } _ZN5Botan3TLS22Extended_Master_Secret11static_typeEv: 122| 17.0k| static Extension_Code static_type() { return Extension_Code::ExtendedMasterSecret; } _ZNK5Botan3TLS22Extended_Master_Secret4typeEv: 124| 11.3k| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS22Extended_Master_Secret5emptyEv: 128| 16.4k| bool empty() const override { return false; } _ZN5Botan3TLS16Encrypt_then_MAC11static_typeEv: 140| 11.1k| static Extension_Code static_type() { return Extension_Code::EncryptThenMac; } _ZNK5Botan3TLS16Encrypt_then_MAC4typeEv: 142| 6.61k| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS16Encrypt_then_MAC5emptyEv: 146| 11.6k| bool empty() const override { return false; } _ZN5Botan3TLS22Extended_Master_SecretC2Ev: 130| 6.57k| Extended_Master_Secret() = default; _ZN5Botan3TLS16Encrypt_then_MACC2Ev: 148| 6.57k| Encrypt_then_MAC() = default; _ZN5Botan3TLS24Session_Ticket_ExtensionC2Ev: 68| 6.57k| Session_Ticket_Extension() = default; _ZN5Botan3TLS9Key_Share11static_typeEv: 212| 20| static Extension_Code static_type() { return Extension_Code::KeyShare; } _ZN5Botan3TLS6Cookie11static_typeEv: 44| 9| static Extension_Code static_type() { return Extension_Code::Cookie; } _ZNK5Botan3TLS6Cookie4typeEv: 46| 9| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS6Cookie5emptyEv: 50| 2| bool empty() const override { return m_cookie.empty(); } _ZN5Botan3TLS22PSK_Key_Exchange_Modes11static_typeEv: 67| 32| static Extension_Code static_type() { return Extension_Code::PskKeyExchangeModes; } _ZNK5Botan3TLS22PSK_Key_Exchange_Modes4typeEv: 69| 32| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS22PSK_Key_Exchange_Modes5emptyEv: 73| 5| bool empty() const override { return m_modes.empty(); } _ZN5Botan3TLS23Certificate_Authorities11static_typeEv: 90| 2| static Extension_Code static_type() { return Extension_Code::CertificateAuthorities; } _ZNK5Botan3TLS23Certificate_Authorities4typeEv: 92| 2| Extension_Code type() const override { return static_type(); } _ZN5Botan3TLS3PSK11static_typeEv: 112| 10| static Extension_Code static_type() { return Extension_Code::PresharedKey; } _ZNK5Botan3TLS3PSK4typeEv: 114| 10| Extension_Code type() const override { return static_type(); } _ZNK5Botan3TLS9Key_Share4typeEv: 214| 20| Extension_Code type() const override { return static_type(); } _ZN5Botan3TLS19EarlyDataIndication11static_typeEv: 306| 29| static Extension_Code static_type() { return Extension_Code::EarlyData; } _ZNK5Botan3TLS19EarlyDataIndication4typeEv: 308| 29| Extension_Code type() const override { return static_type(); } _ZN5Botan3TLS11ExternalPSKC2ENSt3__117basic_string_viewIcNS2_11char_traitsIcEEEES6_NS2_6vectorIhNS_16secure_allocatorIhEEEE: 31| 1.02k| m_identity(identity), m_prf_algo(prf_algo), m_master_secret(std::move(psk)), m_is_imported(false) {} _ZN5Botan3TLS11ExternalPSKD2Ev: 28| 1.02k| ~ExternalPSK() = default; _ZNK5Botan3TLS17Handshake_Message9wire_typeEv: 47| 7.97k| virtual Handshake_Type wire_type() const { return type(); } _ZN5Botan3TLS17Handshake_MessageD2Ev: 54| 21.5k| virtual ~Handshake_Message() = default; _ZN5Botan3TLS17Handshake_MessageC2Ev: 55| 21.5k| Handshake_Message() = default; _ZN5Botan3TLS8FinishedC2ENSt3__16vectorIhNS2_9allocatorIhEEEE: 272| 8| explicit Finished(std::vector buf) : m_verification_data(std::move(buf)) {} _ZNK5Botan3TLS8Finished4typeEv: 274| 1.39k| Handshake_Type type() const override { return Handshake_Type::Finished; } _ZNK5Botan3TLS8Finished11verify_dataEv: 276| 16| std::vector verify_data() const { return m_verification_data; } _ZNK5Botan3TLS8Finished9serializeEv: 278| 699| std::vector serialize() const override { return m_verification_data; } _ZN5Botan3TLS15Client_Hello_128SettingsC2ENS0_16Protocol_VersionENSt3__117basic_string_viewIcNS4_11char_traitsIcEEEE: 30| 6.57k| m_new_session_version(version), m_hostname(hostname) {} _ZNK5Botan3TLS14Certificate_1210cert_chainEv: 225| 2.32k| const std::vector& cert_chain() const { return m_certs; } _ZNK5Botan3TLS18Change_Cipher_Spec4typeEv: 430| 699| Handshake_Type type() const override { return Handshake_Type::HandshakeCCS; } _ZNK5Botan3TLS18Change_Cipher_Spec9serializeEv: 432| 699| std::vector serialize() const override { return std::vector(1, 1); } _ZNK5Botan3TLS15Client_Hello_128Settings16protocol_versionEv: 32| 13.1k| Protocol_Version protocol_version() const { return m_new_session_version; } _ZNK5Botan3TLS15Client_Hello_128Settings8hostnameEv: 34| 13.1k| const std::string& hostname() const { return m_hostname; } _ZNK5Botan3TLS19Client_Key_Exchange4typeEv: 186| 1.39k| Handshake_Type type() const override { return Handshake_Type::ClientKeyExchange; } _ZNK5Botan3TLS19Client_Key_Exchange17pre_master_secretEv: 188| 699| const secure_vector& pre_master_secret() const { return m_pre_master; } _ZNK5Botan3TLS19Client_Key_Exchange12psk_identityEv: 193| 16| const std::optional& psk_identity() const { return m_psk_identity; } _ZNK5Botan3TLS19Client_Key_Exchange9serializeEv: 211| 699| std::vector serialize() const override { return m_key_material; } _ZNK5Botan3TLS19Server_Key_Exchange6paramsEv: 340| 1.74k| const std::vector& params() const { return m_params; } _ZN5Botan3TLS6PolicyD2Ev: 709| 6.57k| virtual ~Policy() = default; _ZN5Botan3TLS18Server_InformationC2ENSt3__117basic_string_viewIcNS2_11char_traitsIcEEEEt: 32| 6.57k| m_hostname(hostname), m_port(port) {} _ZNK5Botan3TLS18Server_Information8hostnameEv: 47| 9.96k| std::string hostname() const { return m_hostname; } _ZNK5Botan3TLS18Server_Information5emptyEv: 63| 6.57k| bool empty() const { return m_hostname.empty(); } _ZNK5Botan3TLS12Session_Base7versionEv: 74| 8| Protocol_Version version() const { return m_version; } _ZN5Botan3TLS15Session_Summary14set_session_idENS_6StrongINSt3__16vectorIhNS3_9allocatorIhEEEENS0_11Session_ID_EJEEE: 236| 8| void set_session_id(Session_ID id) { m_session_id = std::move(id); } _ZN5Botan3TLS15Session_ManagerD2Ev: 234| 6.57k| virtual ~Session_Manager() = default; _ZN5Botan3TLS15Session_Manager5mutexEv: 292| 6.57k| recursive_mutex_type& mutex() { return m_mutex; } _ZNK5Botan3TLS16Signature_Scheme9wire_codeEv: 104| 157k| Signature_Scheme::Code wire_code() const noexcept { return m_code; } _ZNK5Botan3TLS16Signature_SchemeeqERKS1_: 136| 6.10k| bool operator==(const Signature_Scheme& rhs) const { return m_code == rhs.m_code; } _ZN5Botan3TLS16Protocol_VersionC2ENS0_12Version_CodeE: 66| 724k| Protocol_Version(static_cast(named_version)) {} _ZN5Botan3TLS16Protocol_VersionC2Et: 60| 749k| explicit Protocol_Version(uint16_t code) : m_version(code) {} _ZN5Botan3TLS16Protocol_VersionC2Ev: 58| 13.1k| Protocol_Version() : m_version(0) {} _ZN5Botan3TLS16Protocol_VersionC2Ehh: 73| 24.8k| Protocol_Version(static_cast((static_cast(major) << 8) | minor)) {} _ZNK5Botan3TLS16Protocol_Version13major_versionEv: 88| 807k| uint8_t major_version() const { return static_cast(m_version >> 8); } _ZNK5Botan3TLS16Protocol_Version13minor_versionEv: 93| 39.1k| uint8_t minor_version() const { return static_cast(m_version & 0xFF); } _ZNK5Botan3TLS16Protocol_VersioneqERKS1_: 127| 692k| bool operator==(const Protocol_Version& other) const { return (m_version == other.m_version); } _ZNK5Botan3TLS16Protocol_VersionneERKS1_: 132| 6.79k| bool operator!=(const Protocol_Version& other) const { return (m_version != other.m_version); } _ZNK5Botan3TLS16Protocol_VersiongeERKS1_: 142| 13.8k| bool operator>=(const Protocol_Version& other) const { return (*this == other || *this > other); } ------------------ | Branch (142:70): [True: 6.57k, False: 7.25k] | Branch (142:88): [True: 118, False: 7.13k] ------------------ _ZNK5Botan3TLS16Protocol_VersionltERKS1_: 147| 672| bool operator<(const Protocol_Version& other) const { return !(*this >= other); } _ZNK5Botan3TLS16Protocol_VersionleERKS1_: 152| 635k| bool operator<=(const Protocol_Version& other) const { return (*this == other || *this < other); } ------------------ | Branch (152:70): [True: 635k, False: 672] | Branch (152:88): [True: 554, False: 118] ------------------ _ZN5Botan3URI9AuthorityC2ENSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_8optionalIS8_EENS2_7variantIJNS_7DNSNameENS_11IPv4AddressENS_11IPv6AddressEEEENS9_ItEE: 105| 166| m_raw(std::move(raw)), m_userinfo(std::move(userinfo)), m_host(std::move(host)), m_port(port) {} _ZN5Botan3URIC2ENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES7_NS1_8optionalINS0_9AuthorityEEES7_NS8_IS7_EESB_: 202| 226| m_raw(std::move(raw)), 203| 226| m_scheme(std::move(scheme)), 204| 226| m_authority(std::move(authority)), 205| 226| m_path(std::move(path)), 206| 226| m_query(std::move(query)), 207| 226| m_fragment(std::move(fragment)) {} _ZN5Botan13Work_ExecutorC2Ev: 37| 1| Work_Executor() = default; _ZN5Botan13Work_ExecutorD2Ev: 38| 1| virtual ~Work_Executor() = default; _ZN5Botan16X25519_PublicKeyC2Ev: 57| 10| X25519_PublicKey() = default; _ZN5Botan14X448_PublicKeyC2Ev: 62| 1| X448_PublicKey() = default; _ZNK5Botan14Cert_Extension17Basic_Constraints5is_caEv: 58| 1.50k| bool is_ca() const { return m_is_ca; } _ZNK5Botan14Cert_Extension17Basic_Constraints22path_length_constraintEv: 60| 352| std::optional path_length_constraint() const { return m_path_length_constraint; } _ZN5Botan14Cert_Extension17Basic_Constraints10static_oidEv: 62| 2.84k| static OID static_oid() { return OID({2, 5, 29, 19}); } _ZNK5Botan14Cert_Extension17Basic_Constraints8oid_nameEv: 67| 2.65k| std::string oid_name() const override { return "X509v3.BasicConstraints"; } _ZN5Botan14Cert_Extension9Key_UsageC2Ev: 89| 1.95k| explicit Key_Usage() : m_constraints(Key_Constraints::None) {} _ZNK5Botan14Cert_Extension9Key_Usage15get_constraintsEv: 91| 1.42k| Key_Constraints get_constraints() const { return m_constraints; } _ZN5Botan14Cert_Extension9Key_Usage10static_oidEv: 93| 2.84k| static OID static_oid() { return OID({2, 5, 29, 15}); } _ZNK5Botan14Cert_Extension9Key_Usage8oid_nameEv: 98| 3.00k| std::string oid_name() const override { return "X509v3.KeyUsage"; } _ZNK5Botan14Cert_Extension14Subject_Key_ID10get_key_idEv: 136| 332| const std::vector& get_key_id() const { return m_key_id; } _ZN5Botan14Cert_Extension14Subject_Key_ID10static_oidEv: 138| 2.84k| static OID static_oid() { return OID({2, 5, 29, 14}); } _ZNK5Botan14Cert_Extension14Subject_Key_ID8oid_nameEv: 143| 332| std::string oid_name() const override { return "X509v3.SubjectKeyIdentifier"; } _ZNK5Botan14Cert_Extension16Authority_Key_ID10get_key_idEv: 178| 79| const std::vector& get_key_id() const { return m_key_id; } _ZN5Botan14Cert_Extension16Authority_Key_ID10static_oidEv: 185| 2.84k| static OID static_oid() { return OID({2, 5, 29, 35}); } _ZNK5Botan14Cert_Extension16Authority_Key_ID8oid_nameEv: 190| 80| std::string oid_name() const override { return "X509v3.AuthorityKeyIdentifier"; } _ZNK5Botan14Cert_Extension24Subject_Alternative_Name12get_alt_nameEv: 208| 352| const AlternativeName& get_alt_name() const { return m_alt_name; } _ZN5Botan14Cert_Extension24Subject_Alternative_Name10static_oidEv: 210| 2.84k| static OID static_oid() { return OID({2, 5, 29, 17}); } _ZN5Botan14Cert_Extension24Subject_Alternative_NameC2ERKNS_15AlternativeNameE: 218| 1.59k| explicit Subject_Alternative_Name(const AlternativeName& name = AlternativeName()) : m_alt_name(name) {} _ZNK5Botan14Cert_Extension24Subject_Alternative_Name8oid_nameEv: 221| 352| std::string oid_name() const override { return "X509v3.SubjectAlternativeName"; } _ZNK5Botan14Cert_Extension23Issuer_Alternative_Name12get_alt_nameEv: 238| 2| const AlternativeName& get_alt_name() const { return m_alt_name; } _ZN5Botan14Cert_Extension23Issuer_Alternative_Name10static_oidEv: 240| 2.84k| static OID static_oid() { return OID({2, 5, 29, 18}); } _ZN5Botan14Cert_Extension23Issuer_Alternative_NameC2ERKNS_15AlternativeNameE: 248| 189| explicit Issuer_Alternative_Name(const AlternativeName& name = AlternativeName()) : m_alt_name(name) {} _ZNK5Botan14Cert_Extension23Issuer_Alternative_Name8oid_nameEv: 251| 2| std::string oid_name() const override { return "X509v3.IssuerAlternativeName"; } _ZNK5Botan14Cert_Extension18Extended_Key_Usage18object_identifiersEv: 276| 968| const std::vector& object_identifiers() const { return m_oids; } _ZN5Botan14Cert_Extension18Extended_Key_Usage10static_oidEv: 278| 2.84k| static OID static_oid() { return OID({2, 5, 29, 37}); } _ZNK5Botan14Cert_Extension18Extended_Key_Usage8oid_nameEv: 283| 968| std::string oid_name() const override { return "X509v3.ExtendedKeyUsage"; } _ZNK5Botan14Cert_Extension16Name_Constraints20get_name_constraintsEv: 314| 5| const NameConstraints& get_name_constraints() const { return m_name_constraints; } _ZN5Botan14Cert_Extension16Name_Constraints10static_oidEv: 316| 2.84k| static OID static_oid() { return OID({2, 5, 29, 30}); } _ZNK5Botan14Cert_Extension16Name_Constraints8oid_nameEv: 321| 5| std::string oid_name() const override { return "X509v3.NameConstraints"; } _ZNK5Botan14Cert_Extension20Certificate_Policies15get_policy_oidsEv: 346| 23| const std::vector& get_policy_oids() const { return m_oids; } _ZN5Botan14Cert_Extension20Certificate_Policies10static_oidEv: 348| 2.84k| static OID static_oid() { return OID({2, 5, 29, 32}); } _ZNK5Botan14Cert_Extension20Certificate_Policies8oid_nameEv: 359| 23| std::string oid_name() const override { return "X509v3.CertificatePolicies"; } _ZN5Botan14Cert_Extension28Authority_Information_Access17AccessDescriptionC2ENS_3OIDENS_9ASN1_TypeENS_10ASN1_ClassENSt3__16vectorIhNS6_9allocatorIhEEEE: 391| 95| m_method(std::move(method)), 392| 95| m_location_tag(location_tag), 393| 95| m_location_class(location_class), 394| 95| m_location_value(std::move(location_value)) {} _ZNK5Botan14Cert_Extension28Authority_Information_Access19ocsp_responder_urisEv: 465| 66| const std::vector& ocsp_responder_uris() const { return m_ocsp_responders; } _ZN5Botan14Cert_Extension28Authority_Information_Access10static_oidEv: 473| 2.84k| static OID static_oid() { return OID({1, 3, 6, 1, 5, 5, 7, 1, 1}); } _ZNK5Botan14Cert_Extension28Authority_Information_Access14ca_issuer_urisEv: 479| 66| const std::vector& ca_issuer_uris() const { return m_ca_issuers; } _ZNK5Botan14Cert_Extension28Authority_Information_Access8oid_nameEv: 482| 66| std::string oid_name() const override { return "PKIX.AuthorityInformationAccess"; } _ZN5Botan14Cert_Extension10CRL_NumberC2Ev: 506| 1| CRL_Number() : m_has_value(false), m_crl_number(BigInt::zero()) {} _ZNK5Botan14Cert_Extension10CRL_Number8oid_nameEv: 521| 1| std::string oid_name() const override { return "X509v3.CRLNumber"; } _ZN5Botan14Cert_Extension14CRL_ReasonCodeC2ENS_8CRL_CodeE: 543| 1| explicit CRL_ReasonCode(CRL_Code r = CRL_Code::Unspecified) : m_reason(r) {} _ZNK5Botan14Cert_Extension14CRL_ReasonCode8oid_nameEv: 552| 1| std::string oid_name() const override { return "X509v3.ReasonCode"; } _ZNK5Botan14Cert_Extension21DistributionPointName9full_nameEv: 592| 136| const std::optional& full_name() const { return m_full_name; } _ZNK5Botan14Cert_Extension23CRL_Distribution_Points18Distribution_Point23distribution_point_nameEv: 626| 68| const std::optional& distribution_point_name() const { return m_dp_name; } _ZNK5Botan14Cert_Extension23CRL_Distribution_Points27crl_distribution_point_urisEv: 665| 58| const std::vector& crl_distribution_point_uris() const { return m_crl_distribution_urls; } _ZN5Botan14Cert_Extension23CRL_Distribution_Points10static_oidEv: 667| 2.84k| static OID static_oid() { return OID({2, 5, 29, 31}); } _ZNK5Botan14Cert_Extension23CRL_Distribution_Points8oid_nameEv: 672| 58| std::string oid_name() const override { return "X509v3.CRLDistributionPoints"; } _ZNK5Botan14Cert_Extension30CRL_Issuing_Distribution_Point8oid_nameEv: 754| 1| std::string oid_name() const override { return "X509v3.CRLIssuingDistributionPoint"; } _ZN5Botan14Cert_Extension12OCSP_NoCheck10static_oidEv: 796| 6.53k| static OID static_oid() { return OID({1, 3, 6, 1, 5, 5, 7, 48, 1, 5}); } _ZN5Botan14Cert_Extension21NoRevocationAvailable10static_oidEv: 839| 2.84k| static OID static_oid() { return OID({2, 5, 29, 56}); } _ZNK5Botan14Cert_Extension15IPAddressBlocks15IPAddressFamily3afiEv: 1194| 7| uint16_t afi() const { return m_afi; } _ZN5Botan14Cert_Extension17Unknown_ExtensionC2ERKNS_3OIDEbb: 1466| 9.42k| m_oid(oid), m_critical(critical), m_failed_to_decode(failed_to_decode) {} _ZNK5Botan14Cert_Extension17Unknown_Extension8oid_nameEv: 1508| 6.59k| std::string oid_name() const override { return ""; } _ZN5Botan14Cert_ExtensionssENS0_15IPAddressBlocks9IPAddressILNS1_7VersionE4EEERKS4_: 1086| 20| friend std::strong_ordering operator<=>(const IPAddress lhs, const IPAddress& rhs) { 1087| 33| for(size_t i = 0; i < Length; i++) { ------------------ | Branch (1087:34): [True: 32, False: 1] ------------------ 1088| 32| if(lhs.m_value[i] < rhs.m_value[i]) { ------------------ | Branch (1088:22): [True: 11, False: 21] ------------------ 1089| 11| return std::strong_ordering::less; 1090| 21| } else if(lhs.m_value[i] > rhs.m_value[i]) { ------------------ | Branch (1090:29): [True: 8, False: 13] ------------------ 1091| 8| return std::strong_ordering::greater; 1092| 8| } 1093| 32| } 1094| 1| return std::strong_ordering::equal; 1095| 20| } _ZN5Botan14Cert_ExtensionssENS0_15IPAddressBlocks9IPAddressILNS1_7VersionE16EEERKS4_: 1086| 38| friend std::strong_ordering operator<=>(const IPAddress lhs, const IPAddress& rhs) { 1087| 128| for(size_t i = 0; i < Length; i++) { ------------------ | Branch (1087:34): [True: 128, False: 0] ------------------ 1088| 128| if(lhs.m_value[i] < rhs.m_value[i]) { ------------------ | Branch (1088:22): [True: 24, False: 104] ------------------ 1089| 24| return std::strong_ordering::less; 1090| 104| } else if(lhs.m_value[i] > rhs.m_value[i]) { ------------------ | Branch (1090:29): [True: 14, False: 90] ------------------ 1091| 14| return std::strong_ordering::greater; 1092| 14| } 1093| 128| } 1094| 0| return std::strong_ordering::equal; 1095| 38| } _ZN5Botan14Cert_Extension15IPAddressBlocks9IPAddressILNS1_7VersionE4EEC2ERKNS_11IPv4AddressE: 1050| 4| explicit IPAddress(const Address& addr) : m_value(addr.to_bytes()) {} _ZNK5Botan14Cert_Extension15IPAddressBlocks9IPAddressILNS1_7VersionE4EE8to_bytesEv: 1060| 18| std::array to_bytes() const { return m_value; } _ZN5Botan14Cert_Extension15IPAddressBlocks9IPAddressILNS1_7VersionE16EEC2ERKNS_11IPv6AddressE: 1050| 14| explicit IPAddress(const Address& addr) : m_value(addr.to_bytes()) {} _ZNK5Botan14Cert_Extension15IPAddressBlocks9IPAddressILNS1_7VersionE16EE8to_bytesEv: 1060| 34| std::array to_bytes() const { return m_value; } _ZNK5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE4EE3minEv: 1143| 16| IPAddress min() const { return m_min; } _ZNK5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE4EE3maxEv: 1145| 16| IPAddress max() const { return m_max; } _ZNK5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE16EE3minEv: 1143| 39| IPAddress min() const { return m_min; } _ZNK5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE16EE3maxEv: 1145| 39| IPAddress max() const { return m_max; } _ZN5Botan14Cert_Extension14Subject_Key_IDC2Ev: 115| 502| Subject_Key_ID() = default; _ZN5Botan14Cert_Extension30CRL_Issuing_Distribution_PointC2Ev: 698| 1| CRL_Issuing_Distribution_Point() = default; _ZN5Botan14Cert_Extension16Name_ConstraintsC2Ev: 304| 66| Name_Constraints() = default; _ZN5Botan14Cert_Extension23CRL_Distribution_PointsC2Ev: 657| 475| CRL_Distribution_Points() = default; _ZN5Botan14Cert_Extension20Certificate_PoliciesC2Ev: 342| 446| Certificate_Policies() = default; _ZN5Botan14Cert_Extension16Authority_Key_IDC2Ev: 162| 1.05k| Authority_Key_ID() = default; _ZN5Botan14Cert_Extension18Extended_Key_UsageC2Ev: 272| 1.97k| Extended_Key_Usage() = default; _ZN5Botan14Cert_Extension21NoRevocationAvailableC2Ev: 835| 20| NoRevocationAvailable() = default; _ZN5Botan14Cert_Extension28Authority_Information_AccessC2Ev: 427| 247| Authority_Information_Access() = default; _ZN5Botan14Cert_Extension15IPAddressBlocksC2Ev: 1206| 145| IPAddressBlocks() = default; _ZN5Botan14Cert_Extension8ASBlocksC2Ev: 1392| 24| ASBlocks() = default; _ZN5Botan14Cert_Extension8ASBlocks13ASIdentifiersC2Ev: 1386| 24| ASIdentifiers() = default; _ZN5Botan14Cert_Extension10TNAuthList5EntryC2Ev: 914| 237| Entry() = default; _ZN5Botan14Cert_Extension10TNAuthListC2Ev: 958| 257| TNAuthList() = default; _ZN5Botan14Cert_Extension15IPAddressBlocks15IPAddressChoiceILNS1_7VersionE4EEC2Ev: 1168| 214| IPAddressChoice() = default; _ZN5Botan14Cert_Extension15IPAddressBlocks15IPAddressChoiceILNS1_7VersionE16EEC2Ev: 1168| 72| IPAddressChoice() = default; _ZN5Botan14Cert_Extension8ASBlocks18ASIdentifierChoiceC2Ev: 1357| 16| ASIdentifierChoice() = default; _ZN5Botan14Cert_Extension23CRL_Distribution_Points18Distribution_PointC2Ev: 614| 451| Distribution_Point() = default; _ZN5Botan14Cert_Extension21DistributionPointNameC2Ev: 577| 368| DistributionPointName() = default; _ZN5Botan14Cert_Extension15IPAddressBlocks15IPAddressFamilyC2Ev: 1183| 158| IPAddressFamily() = default; _ZN5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE4EEC2Ev: 1116| 84| IPAddressOrRange() = default; _ZN5Botan14Cert_ExtensioneqERKNS0_15IPAddressBlocks9IPAddressILNS1_7VersionE4EEES6_: 1097| 4| friend bool operator==(const IPAddress& lhs, const IPAddress& rhs) { 1098| 4| return lhs.m_value == rhs.m_value; 1099| 4| } _ZN5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE16EEC2Ev: 1116| 158| IPAddressOrRange() = default; _ZN5Botan14Cert_ExtensioneqERKNS0_15IPAddressBlocks9IPAddressILNS1_7VersionE16EEES6_: 1097| 14| friend bool operator==(const IPAddress& lhs, const IPAddress& rhs) { 1098| 14| return lhs.m_value == rhs.m_value; 1099| 14| } _ZN5Botan14Cert_Extension8ASBlocks11ASIdOrRangeC2Ev: 1337| 2| ASIdOrRange() = default; _ZN5Botan4X5098load_keyERKNSt3__16vectorIhNS1_9allocatorIhEEEE: 59| 2.32k|inline std::unique_ptr load_key(const std::vector& enc) { 60| 2.32k| DataSource_Memory source(enc); 61| 2.32k| return X509::load_key(source); 62| 2.32k|} _ZN5Botan11X509_ObjectC2Ev: 120| 4.03k| X509_Object() = default; _ZN5Botan16X509_Certificate3TagC2ENSt3__15arrayIhLm32EEE: 464| 893| explicit Tag(std::array tag) : m_tag(tag) {} _ZN5Botan16X509_CertificateC2ERKS0_: 559| 3.21k| X509_Certificate(const X509_Certificate& other) = default; _ZN5Botan16X509_CertificateC2EOS0_: 560| 4.82k| X509_Certificate(X509_Certificate&& other) = default; _ZNK5Botan28Path_Validation_Restrictions33require_self_signed_trust_anchorsEv: 175| 893| bool require_self_signed_trust_anchors() const { return m_require_self_signed_trust_anchors; } _ZNK5Botan22Path_Validation_Result6resultEv: 229| 3.57k| Certificate_Status_Code result() const { return m_overall; } _ZN5Botan22Path_Validation_ResultC2ENS_23Certificate_Status_CodeE: 268| 893| explicit Path_Validation_Result(Certificate_Status_Code status) : m_overall(status) {} LLVMFuzzerInitialize: 28| 2|extern "C" int LLVMFuzzerInitialize(int* /*argc*/, char*** /*argv*/) { 29| | /* 30| | * This disables the mlock pool, as overwrites within the pool are 31| | * opaque to ASan or other instrumentation. 32| | */ 33| 2| ::setenv("BOTAN_MLOCK_POOL_SIZE", "0", 1); 34| 2| return 0; 35| 2|} LLVMFuzzerTestOneInput: 39| 6.58k|extern "C" int LLVMFuzzerTestOneInput(const uint8_t in[], size_t len) { 40| 6.58k| if(len <= max_fuzzer_input_size) { ------------------ | Branch (40:7): [True: 6.57k, False: 5] ------------------ 41| 6.57k| try { 42| 6.57k| fuzz(std::span(in, len)); 43| 6.57k| } catch(const std::exception& e) { 44| 0| std::cerr << "Uncaught exception from fuzzer driver " << e.what() << "\n"; 45| 0| abort(); 46| 0| } catch(...) { 47| 0| std::cerr << "Uncaught exception from fuzzer driver (unknown type)\n"; 48| 0| abort(); 49| 0| } 50| 6.57k| } 51| 6.58k| return 0; 52| 6.58k|} _Z20fuzzer_rng_as_sharedv: 56| 6.57k|inline std::shared_ptr fuzzer_rng_as_shared() { 57| 6.57k| static const std::shared_ptr rng = 58| 6.57k| std::make_shared(Botan::secure_vector(32)); 59| 6.57k| return rng; 60| 6.57k|} _Z4fuzzNSt3__14spanIKhLm18446744073709551615EEE: 97| 6.57k|void fuzz(std::span in) { 98| 6.57k| if(in.empty()) { ------------------ | Branch (98:7): [True: 0, False: 6.57k] ------------------ 99| 0| return; 100| 0| } 101| | 102| 6.57k| auto session_manager = std::make_shared(); 103| 6.57k| auto policy = std::make_shared(); 104| 6.57k| const Botan::TLS::Protocol_Version client_offer = Botan::TLS::Protocol_Version::TLS_V12; 105| 6.57k| const Botan::TLS::Server_Information info("server.name", 443); 106| 6.57k| auto callbacks = std::make_shared(); 107| 6.57k| auto creds = std::make_shared(); 108| | 109| 6.57k| Botan::TLS::Client client(callbacks, session_manager, creds, policy, fuzzer_rng_as_shared(), info, client_offer); 110| | 111| 6.57k| try { 112| 6.57k| client.received_data(in); 113| 6.57k| } catch(const std::exception& e) {} 114| 6.57k|} _ZNK17Fuzzer_TLS_Policy16ciphersuite_listEN5Botan3TLS16Protocol_VersionE: 54| 6.57k| std::vector ciphersuite_list(Botan::TLS::Protocol_Version version) const override { 55| 6.57k| std::vector ciphersuites; 56| | 57| 670k| for(auto&& suite : Botan::TLS::Ciphersuite::all_known_ciphersuites()) { ------------------ | Branch (57:27): [True: 670k, False: 6.57k] ------------------ 58| 670k| if(suite.valid() && suite.usable_in_version(version)) { ------------------ | Branch (58:16): [True: 618k, False: 52.6k] | Branch (58:33): [True: 585k, False: 32.8k] ------------------ 59| 585k| ciphersuites.push_back(suite.ciphersuite_code()); 60| 585k| } 61| 670k| } 62| | 63| 6.57k| return ciphersuites; 64| 6.57k| } _ZN27Fuzzer_TLS_Client_Callbacks13tls_emit_dataENSt3__14spanIKhLm18446744073709551615EEE: 69| 14.6k| void tls_emit_data(std::span /*data*/) override { 70| | // discard 71| 14.6k| } _ZN27Fuzzer_TLS_Client_Callbacks9tls_alertEN5Botan3TLS5AlertE: 77| 738| void tls_alert(Botan::TLS::Alert /*alert*/) override { 78| | // ignore alert 79| 738| } _ZN27Fuzzer_TLS_Client_Callbacks21tls_verify_cert_chainERKNSt3__16vectorIN5Botan16X509_CertificateENS0_9allocatorIS3_EEEERKNS1_INS0_8optionalINS2_4OCSP8ResponseEEENS4_ISC_EEEERKNS1_IPNS2_17Certificate_StoreENS4_ISI_EEEENS2_10Usage_TypeENS0_17basic_string_viewIcNS0_11char_traitsIcEEEERKNS2_3TLS6PolicyE: 86| 893| const Botan::TLS::Policy& policy) override { 87| 893| try { 88| | // try to validate to exercise those code paths 89| 893| Botan::TLS::Callbacks::tls_verify_cert_chain( 90| 893| cert_chain, ocsp_responses, trusted_roots, usage, hostname, policy); 91| 893| } catch(...) { 92| | // ignore validation result 93| 893| } 94| 893| } _ZN23Fuzzer_TLS_Client_Creds12psk_identityERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEES8_S8_: 25| 1.02k| const std::string& /*hint*/) override { 26| 1.02k| return "psk_id"; 27| 1.02k| } _ZN23Fuzzer_TLS_Client_Creds19find_preshared_keysENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEEN5Botan3TLS15Connection_SideERKNS0_6vectorINS0_12basic_stringIcS3_NS0_9allocatorIcEEEENSA_ISC_EEEERKNS0_8optionalISC_EE: 41| 1.02k| const std::optional& prf = std::nullopt) override { 42| 1.02k| if(!identities.empty() && std::find(identities.begin(), identities.end(), "psk_id") == identities.end()) { ------------------ | Branch (42:13): [True: 1.02k, False: 0] | Branch (42:13): [True: 0, False: 1.02k] | Branch (42:36): [True: 0, False: 1.02k] ------------------ 43| 0| return Botan::Credentials_Manager::find_preshared_keys(host, whoami, identities, prf); 44| 0| } 45| | 46| 1.02k| std::vector psks; 47| 1.02k| psks.emplace_back("psk_id", "SHA-256", Botan::hex_decode_locked("AABBCCDDEEFF00112233445566778899")); 48| 1.02k| return psks; 49| 1.02k| } _ZNK5Botan19AlgorithmIdentifier19parameters_are_nullEv: 50| 11.2k|bool AlgorithmIdentifier::parameters_are_null() const { 51| 11.2k| return (m_parameters.size() == 2 && (m_parameters[0] == 0x05) && (m_parameters[1] == 0x00)); ------------------ | Branch (51:12): [True: 9.52k, False: 1.72k] | Branch (51:40): [True: 9.35k, False: 168] | Branch (51:69): [True: 9.35k, False: 1] ------------------ 52| 11.2k|} _ZN5BotaneqERKNS_19AlgorithmIdentifierES2_: 54| 3.37k|bool operator==(const AlgorithmIdentifier& x, const AlgorithmIdentifier& y) { 55| 3.37k| return (x.oid() == y.oid() && x.parameters() == y.parameters()); ------------------ | Branch (55:12): [True: 3.35k, False: 14] | Branch (55:34): [True: 3.35k, False: 1] ------------------ 56| 3.37k|} _ZN5BotanneERKNS_19AlgorithmIdentifierES2_: 58| 3.37k|bool operator!=(const AlgorithmIdentifier& x, const AlgorithmIdentifier& y) { 59| 3.37k| return !(x == y); 60| 3.37k|} _ZNK5Botan19AlgorithmIdentifier11encode_intoERNS_11DER_EncoderE: 65| 2.84k|void AlgorithmIdentifier::encode_into(DER_Encoder& codec) const { 66| 2.84k| codec.start_sequence().encode(oid()).raw_bytes(parameters()).end_cons(); 67| 2.84k|} _ZN5Botan19AlgorithmIdentifier11decode_fromERNS_11BER_DecoderE: 72| 13.2k|void AlgorithmIdentifier::decode_from(BER_Decoder& codec) { 73| 13.2k| codec.start_sequence().decode(m_oid).raw_bytes(m_parameters).end_cons(); 74| | 75| | /* 76| | * The parameters field is OPTIONAL ANY but in practice it is one of 77| | * - empty 78| | * - NULL 79| | * - SEQUENCE 80| | * - OBJECT IDENTIFIER (namedCurve) 81| | * - OCTET STRING (CBC IV in PBES2) 82| | * 83| | * So require it be exactly one of these values. In particular this ensures that 84| | * there is not any additional trailing data (eg after the SEQUENCE encoding) 85| | * that might be otherwise skipped over by a reader. 86| | */ 87| | 88| 13.2k| const bool acceptable_parameters = [&]() { 89| 13.2k| if(this->parameters_are_null_or_empty()) { 90| 13.2k| return true; 91| 13.2k| } 92| 13.2k| if(ASN1::is_der_sequence_header(m_parameters)) { 93| 13.2k| return true; 94| 13.2k| } 95| 13.2k| if(ASN1::is_single_der_object(m_parameters, ASN1_Type::ObjectId, ASN1_Class::Universal)) { 96| 13.2k| return true; 97| 13.2k| } 98| 13.2k| if(ASN1::is_single_der_object(m_parameters, ASN1_Type::OctetString, ASN1_Class::Universal)) { 99| 13.2k| return true; 100| 13.2k| } 101| 13.2k| return false; 102| 13.2k| }(); 103| | 104| 13.2k| if(!acceptable_parameters) { ------------------ | Branch (104:7): [True: 63, False: 13.1k] ------------------ 105| 63| throw Decoding_Error("AlgorithmIdentifier parameters were not NULL, a SEQUENCE, an OID, or an OCTET STRING"); 106| 63| } 107| 13.2k|} alg_id.cpp:_ZZN5Botan19AlgorithmIdentifier11decode_fromERNS_11BER_DecoderEENK3$_0clEv: 88| 13.1k| const bool acceptable_parameters = [&]() { 89| 13.1k| if(this->parameters_are_null_or_empty()) { ------------------ | Branch (89:10): [True: 11.2k, False: 1.89k] ------------------ 90| 11.2k| return true; 91| 11.2k| } 92| 1.89k| if(ASN1::is_der_sequence_header(m_parameters)) { ------------------ | Branch (92:10): [True: 84, False: 1.80k] ------------------ 93| 84| return true; 94| 84| } 95| 1.80k| if(ASN1::is_single_der_object(m_parameters, ASN1_Type::ObjectId, ASN1_Class::Universal)) { ------------------ | Branch (95:10): [True: 1.59k, False: 217] ------------------ 96| 1.59k| return true; 97| 1.59k| } 98| 217| if(ASN1::is_single_der_object(m_parameters, ASN1_Type::OctetString, ASN1_Class::Universal)) { ------------------ | Branch (98:10): [True: 154, False: 63] ------------------ 99| 154| return true; 100| 154| } 101| 63| return false; 102| 217| }(); _ZNK5Botan11ASN1_Object10BER_encodeEv: 21| 18.3k|std::vector ASN1_Object::BER_encode() const { 22| 18.3k| std::vector output; 23| 18.3k| DER_Encoder der(output); 24| 18.3k| this->encode_into(der); 25| 18.3k| return output; 26| 18.3k|} _ZN5Botan14ASN1_BitStringC2ENSt3__16vectorIhNS1_9allocatorIhEEEEm: 29| 11.3k| m_bytes(std::move(bytes)), m_unused_bits(unused_bits) { 30| 11.3k| if(m_unused_bits >= 8) { ------------------ | Branch (30:7): [True: 0, False: 11.3k] ------------------ 31| 0| throw Invalid_Argument("ASN1_BitString: Invalid unused bit count"); 32| 0| } 33| | 34| 11.3k| if(m_bytes.empty() && m_unused_bits != 0) { ------------------ | Branch (34:7): [True: 41, False: 11.2k] | Branch (34:26): [True: 0, False: 41] ------------------ 35| 0| throw Invalid_Argument("ASN1_BitString: Empty BIT STRING cannot have unused bits"); 36| 0| } 37| | 38| 11.3k| if(m_unused_bits > 0 && (m_bytes.back() & ((1U << m_unused_bits) - 1)) != 0) { ------------------ | Branch (38:7): [True: 1.76k, False: 9.56k] | Branch (38:28): [True: 0, False: 1.76k] ------------------ 39| 0| throw Invalid_Argument("ASN1_BitString: Unused bits must be zero"); 40| 0| } 41| 11.3k|} _ZNK5Botan14ASN1_BitString10bit_lengthEv: 46| 22.0k|size_t ASN1_BitString::bit_length() const { 47| 22.0k| return 8 * m_bytes.size() - m_unused_bits; 48| 22.0k|} _ZNK5Botan14ASN1_BitString6bit_atEm: 50| 8.50k|bool ASN1_BitString::bit_at(size_t bit) const { 51| 8.50k| if(bit >= bit_length()) { ------------------ | Branch (51:7): [True: 0, False: 8.50k] ------------------ 52| 0| throw Invalid_Argument("ASN1_BitString: Bit index out of range"); 53| 0| } 54| | 55| 8.50k| return (m_bytes[bit / 8] & (0x80 >> (bit % 8))) != 0; 56| 8.50k|} _ZN5Botan10BER_ObjectD2Ev: 58| 505k|BER_Object::~BER_Object() { 59| 505k| secure_scrub_memory(m_value); 60| 505k|} _ZNK5Botan10BER_Object11assert_is_aENS_9ASN1_TypeENS_10ASN1_ClassENSt3__117basic_string_viewIcNS3_11char_traitsIcEEEE: 65| 138k|void BER_Object::assert_is_a(ASN1_Type expected_type_tag, ASN1_Class expected_class_tag, std::string_view descr) const { 66| 138k| if(!this->is_a(expected_type_tag, expected_class_tag)) { ------------------ | Branch (66:7): [True: 1.04k, False: 137k] ------------------ 67| 1.04k| std::stringstream msg; 68| | 69| 1.04k| msg << "Tag mismatch when decoding " << descr << " got "; 70| | 71| 1.04k| if(m_class_tag == ASN1_Class::NoObject && m_type_tag == ASN1_Type::NoObject) { ------------------ | Branch (71:10): [True: 9, False: 1.03k] | Branch (71:49): [True: 9, False: 0] ------------------ 72| 9| msg << "EOF"; 73| 1.03k| } else { 74| 1.03k| if(m_class_tag == ASN1_Class::Universal || m_class_tag == ASN1_Class::Constructed) { ------------------ | Branch (74:13): [True: 338, False: 701] | Branch (74:53): [True: 448, False: 253] ------------------ 75| 786| msg << asn1_tag_to_string(m_type_tag); 76| 786| } else { 77| 253| msg << std::to_string(static_cast(m_type_tag)); 78| 253| } 79| | 80| 1.03k| msg << "/" << asn1_class_to_string(m_class_tag); 81| 1.03k| } 82| | 83| 1.04k| msg << " expected "; 84| | 85| 1.04k| if(expected_class_tag == ASN1_Class::Universal || expected_class_tag == ASN1_Class::Constructed) { ------------------ | Branch (85:10): [True: 125, False: 923] | Branch (85:57): [True: 923, False: 0] ------------------ 86| 1.04k| msg << asn1_tag_to_string(expected_type_tag); 87| 1.04k| } else { 88| 0| msg << std::to_string(static_cast(expected_type_tag)); 89| 0| } 90| | 91| 1.04k| msg << "/" << asn1_class_to_string(expected_class_tag); 92| | 93| 1.04k| throw BER_Decoding_Error(msg.str()); 94| 1.04k| } 95| 138k|} _ZNK5Botan10BER_Object4is_aENS_9ASN1_TypeENS_10ASN1_ClassE: 97| 182k|bool BER_Object::is_a(ASN1_Type expected_type_tag, ASN1_Class expected_class_tag) const { 98| 182k| return (m_type_tag == expected_type_tag && m_class_tag == expected_class_tag); ------------------ | Branch (98:12): [True: 152k, False: 30.1k] | Branch (98:47): [True: 152k, False: 121] ------------------ 99| 182k|} _ZNK5Botan10BER_Object4is_aEiNS_10ASN1_ClassE: 101| 15.5k|bool BER_Object::is_a(int expected_type_tag, ASN1_Class expected_class_tag) const { 102| 15.5k| return is_a(ASN1_Type(expected_type_tag), expected_class_tag); 103| 15.5k|} _ZN5Botan10BER_Object11set_taggingENS_9ASN1_TypeENS_10ASN1_ClassE: 105| 223k|void BER_Object::set_tagging(ASN1_Type type_tag, ASN1_Class class_tag) { 106| 223k| m_type_tag = type_tag; 107| 223k| m_class_tag = class_tag; 108| 223k|} _ZN5Botan20asn1_class_to_stringENS_10ASN1_ClassE: 110| 2.08k|std::string asn1_class_to_string(ASN1_Class type) { 111| 2.08k| switch(type) { 112| 463| case ASN1_Class::Universal: ------------------ | Branch (112:7): [True: 463, False: 1.62k] ------------------ 113| 463| return "UNIVERSAL"; 114| 1.37k| case ASN1_Class::Constructed: ------------------ | Branch (114:7): [True: 1.37k, False: 716] ------------------ 115| 1.37k| return "CONSTRUCTED"; 116| 42| case ASN1_Class::ContextSpecific: ------------------ | Branch (116:7): [True: 42, False: 2.04k] ------------------ 117| 42| return "CONTEXT_SPECIFIC"; 118| 95| case ASN1_Class::Application: ------------------ | Branch (118:7): [True: 95, False: 1.99k] ------------------ 119| 95| return "APPLICATION"; 120| 21| case ASN1_Class::Private: ------------------ | Branch (120:7): [True: 21, False: 2.06k] ------------------ 121| 21| return "PRIVATE"; 122| 0| case ASN1_Class::NoObject: ------------------ | Branch (122:7): [True: 0, False: 2.08k] ------------------ 123| 0| return "NO_OBJECT"; 124| 95| default: ------------------ | Branch (124:7): [True: 95, False: 1.99k] ------------------ 125| 95| return "CLASS(" + std::to_string(static_cast(type)) + ")"; 126| 2.08k| } 127| 2.08k|} _ZN5Botan18asn1_tag_to_stringENS_9ASN1_TypeE: 129| 1.87k|std::string asn1_tag_to_string(ASN1_Type type) { 130| 1.87k| switch(type) { 131| 873| case ASN1_Type::Sequence: ------------------ | Branch (131:7): [True: 873, False: 998] ------------------ 132| 873| return "SEQUENCE"; 133| | 134| 95| case ASN1_Type::Set: ------------------ | Branch (134:7): [True: 95, False: 1.77k] ------------------ 135| 95| return "SET"; 136| | 137| 31| case ASN1_Type::PrintableString: ------------------ | Branch (137:7): [True: 31, False: 1.84k] ------------------ 138| 31| return "PRINTABLE STRING"; 139| | 140| 50| case ASN1_Type::NumericString: ------------------ | Branch (140:7): [True: 50, False: 1.82k] ------------------ 141| 50| return "NUMERIC STRING"; 142| | 143| 11| case ASN1_Type::Ia5String: ------------------ | Branch (143:7): [True: 11, False: 1.86k] ------------------ 144| 11| return "IA5 STRING"; 145| | 146| 12| case ASN1_Type::TeletexString: ------------------ | Branch (146:7): [True: 12, False: 1.85k] ------------------ 147| 12| return "T61 STRING"; 148| | 149| 75| case ASN1_Type::Utf8String: ------------------ | Branch (149:7): [True: 75, False: 1.79k] ------------------ 150| 75| return "UTF8 STRING"; 151| | 152| 11| case ASN1_Type::VisibleString: ------------------ | Branch (152:7): [True: 11, False: 1.86k] ------------------ 153| 11| return "VISIBLE STRING"; 154| | 155| 7| case ASN1_Type::BmpString: ------------------ | Branch (155:7): [True: 7, False: 1.86k] ------------------ 156| 7| return "BMP STRING"; 157| | 158| 11| case ASN1_Type::UniversalString: ------------------ | Branch (158:7): [True: 11, False: 1.86k] ------------------ 159| 11| return "UNIVERSAL STRING"; 160| | 161| 6| case ASN1_Type::UtcTime: ------------------ | Branch (161:7): [True: 6, False: 1.86k] ------------------ 162| 6| return "UTC TIME"; 163| | 164| 19| case ASN1_Type::GeneralizedTime: ------------------ | Branch (164:7): [True: 19, False: 1.85k] ------------------ 165| 19| return "GENERALIZED TIME"; 166| | 167| 110| case ASN1_Type::OctetString: ------------------ | Branch (167:7): [True: 110, False: 1.76k] ------------------ 168| 110| return "OCTET STRING"; 169| | 170| 138| case ASN1_Type::BitString: ------------------ | Branch (170:7): [True: 138, False: 1.73k] ------------------ 171| 138| return "BIT STRING"; 172| | 173| 25| case ASN1_Type::Enumerated: ------------------ | Branch (173:7): [True: 25, False: 1.84k] ------------------ 174| 25| return "ENUMERATED"; 175| | 176| 34| case ASN1_Type::Integer: ------------------ | Branch (176:7): [True: 34, False: 1.83k] ------------------ 177| 34| return "INTEGER"; 178| | 179| 37| case ASN1_Type::Null: ------------------ | Branch (179:7): [True: 37, False: 1.83k] ------------------ 180| 37| return "NULL"; 181| | 182| 21| case ASN1_Type::ObjectId: ------------------ | Branch (182:7): [True: 21, False: 1.85k] ------------------ 183| 21| return "OBJECT"; 184| | 185| 46| case ASN1_Type::Boolean: ------------------ | Branch (185:7): [True: 46, False: 1.82k] ------------------ 186| 46| return "BOOLEAN"; 187| | 188| 0| case ASN1_Type::NoObject: ------------------ | Branch (188:7): [True: 0, False: 1.87k] ------------------ 189| 0| return "NO_OBJECT"; 190| | 191| 259| default: ------------------ | Branch (191:7): [True: 259, False: 1.61k] ------------------ 192| 259| return "TAG(" + std::to_string(static_cast(type)) + ")"; 193| 1.87k| } 194| 1.87k|} _ZN5Botan18BER_Decoding_ErrorC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 199| 5.45k|BER_Decoding_Error::BER_Decoding_Error(std::string_view err) : Decoding_Error(fmt("BER: {}", err)) {} _ZN5Botan11BER_Bad_TagC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEj: 201| 103|BER_Bad_Tag::BER_Bad_Tag(std::string_view str, uint32_t tagging) : BER_Decoding_Error(fmt("{}: {}", str, tagging)) {} _ZN5Botan4ASN115put_in_sequenceERKNSt3__16vectorIhNS1_9allocatorIhEEEE: 208| 10.0k|std::vector put_in_sequence(const std::vector& contents) { 209| 10.0k| return ASN1::put_in_sequence(contents.data(), contents.size()); 210| 10.0k|} _ZN5Botan4ASN115put_in_sequenceEPKhm: 212| 10.0k|std::vector put_in_sequence(const uint8_t bits[], size_t len) { 213| 10.0k| std::vector output = der_sequence_header(len); 214| 10.0k| output.reserve(output.size() + len); 215| 10.0k| if(len > 0) { ------------------ | Branch (215:7): [True: 10.0k, False: 0] ------------------ 216| 10.0k| output.insert(output.end(), bits, bits + len); 217| 10.0k| } 218| 10.0k| return output; 219| 10.0k|} _ZN5Botan4ASN19to_stringERKNS_10BER_ObjectE: 224| 23.5k|std::string to_string(const BER_Object& obj) { 225| 23.5k| return bytes_to_string(obj.data()); 226| 23.5k|} _ZN5Botan4ASN19maybe_BERERNS_10DataSourceE: 231| 6.35k|bool maybe_BER(DataSource& source) { 232| 6.35k| uint8_t first_u8 = 0; 233| 6.35k| if(source.peek_byte(first_u8) == 0) { ------------------ | Branch (233:7): [True: 6, False: 6.34k] ------------------ 234| 6| BOTAN_ASSERT_EQUAL(source.read_byte(first_u8), 0, "Expected EOF"); ------------------ | | 97| 6| do { \ | | 98| 6| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 99| 6| if((expr1) != (expr2)) { \ | | ------------------ | | | Branch (99:10): [True: 0, False: 6] | | ------------------ | | 100| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 101| 0| Botan::assertion_failure(#expr1 " == " #expr2, assertion_made, __func__, __FILE__, __LINE__); \ | | 102| 0| } \ | | 103| 6| } while(0) | | ------------------ | | | Branch (103:12): [Folded, False: 6] | | ------------------ ------------------ 235| 6| throw Stream_IO_Error("ASN1::maybe_BER: Source was empty"); 236| 6| } 237| | 238| 6.34k| const auto cons_seq = static_cast(ASN1_Class::Constructed) | static_cast(ASN1_Type::Sequence); 239| 6.34k| return first_u8 == cons_seq; 240| 6.35k|} _ZN5Botan3OID9from_nameENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 66| 1.20k|std::optional OID::from_name(std::string_view name) { 67| 1.20k| if(name.empty()) { ------------------ | Branch (67:7): [True: 0, False: 1.20k] ------------------ 68| 0| throw Invalid_Argument("OID::from_name argument must be non-empty"); 69| 0| } 70| | 71| 1.20k| OID o = OID_Map::global_registry().str2oid(name); 72| 1.20k| if(o.has_value()) { ------------------ | Branch (72:7): [True: 1.20k, False: 0] ------------------ 73| 1.20k| return std::optional(o); 74| 1.20k| } 75| | 76| 0| return std::nullopt; 77| 1.20k|} _ZN5Botan3OID11from_stringENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 80| 3.67k|OID OID::from_string(std::string_view str) { 81| 3.67k| if(str.empty()) { ------------------ | Branch (81:7): [True: 0, False: 3.67k] ------------------ 82| 0| throw Invalid_Argument("OID::from_string argument must be non-empty"); 83| 0| } 84| | 85| 3.67k| OID o = OID_Map::global_registry().str2oid(str); 86| 3.67k| if(o.has_value()) { ------------------ | Branch (86:7): [True: 3.67k, False: 0] ------------------ 87| 3.67k| return o; 88| 3.67k| } 89| | 90| | // Try to parse as a dotted decimal 91| 0| try { 92| 0| return OID(str); 93| 0| } catch(...) {} 94| | 95| 0| throw Lookup_Error(fmt("No OID associated with name '{}'", str)); 96| 0|} _ZN5Botan3OIDC2ESt16initializer_listIjE: 98| 47.5k|OID::OID(std::initializer_list init) : m_id(init) { 99| 47.5k| oid_valid_check(m_id); 100| 47.5k|} _ZNK5Botan3OID9to_stringEv: 123| 996|std::string OID::to_string() const { 124| 996| std::ostringstream out; 125| | 126| 8.14k| for(size_t i = 0; i != m_id.size(); ++i) { ------------------ | Branch (126:22): [True: 7.14k, False: 996] ------------------ 127| | // avoid locale issues with integer formatting 128| 7.14k| out << std::to_string(m_id[i]); 129| 7.14k| if(i != m_id.size() - 1) { ------------------ | Branch (129:10): [True: 6.15k, False: 996] ------------------ 130| 6.15k| out << "."; 131| 6.15k| } 132| 7.14k| } 133| | 134| 996| return out.str(); 135| 996|} _ZNK5Botan3OID15registered_nameEv: 149| 3.28k|std::optional OID::registered_name() const { 150| 3.28k| return OID_Map::global_registry().oid2str(*this); 151| 3.28k|} _ZNK5Botan3OID7matchesESt16initializer_listIjE: 157| 2.68k|bool OID::matches(std::initializer_list other) const { 158| | // TODO: once all target compilers support it, use std::ranges::equal 159| 2.68k| return std::equal(m_id.begin(), m_id.end(), other.begin(), other.end()); 160| 2.68k|} _ZNK5Botan3OID9hash_codeEv: 162| 4.22k|uint64_t OID::hash_code() const { 163| | // If this is changed also update gen_oids.py to match 164| 4.22k| uint64_t hash = 0x621F302327D9A49A; 165| 29.7k| for(const auto id : m_id) { ------------------ | Branch (165:22): [True: 29.7k, False: 4.22k] ------------------ 166| 29.7k| hash *= 193; 167| 29.7k| hash += id; 168| 29.7k| } 169| 4.22k| return hash; 170| 4.22k|} _ZN5BotanltERKNS_3OIDES2_: 175| 165k|bool operator<(const OID& a, const OID& b) { 176| 165k| const std::vector& oid1 = a.get_components(); 177| 165k| const std::vector& oid2 = b.get_components(); 178| | 179| 165k| return std::lexicographical_compare(oid1.begin(), oid1.end(), oid2.begin(), oid2.end()); 180| 165k|} _ZNK5Botan3OID11encode_intoERNS_11DER_EncoderE: 185| 18.3k|void OID::encode_into(DER_Encoder& der) const { 186| 18.3k| if(m_id.size() < 2) { ------------------ | Branch (186:7): [True: 0, False: 18.3k] ------------------ 187| 0| throw Invalid_Argument("OID::encode_into: OID is invalid"); 188| 0| } 189| | 190| 18.3k| const auto append = [](std::vector& encoding, uint32_t z) { 191| 18.3k| if(z <= 0x7F) { 192| 18.3k| encoding.push_back(static_cast(z)); 193| 18.3k| } else { 194| 18.3k| const size_t z7 = (high_bit(z) + 7 - 1) / 7; 195| | 196| 18.3k| for(size_t j = 0; j != z7; ++j) { 197| 18.3k| uint8_t zp = static_cast(z >> (7 * (z7 - j - 1)) & 0x7F); 198| | 199| 18.3k| if(j != z7 - 1) { 200| 18.3k| zp |= 0x80; 201| 18.3k| } 202| | 203| 18.3k| encoding.push_back(zp); 204| 18.3k| } 205| 18.3k| } 206| 18.3k| }; 207| | 208| 18.3k| std::vector encoding; 209| | 210| | // We know 40 * root can't overflow because root is between 0 and 2 211| 18.3k| auto first = checked_add(40 * m_id[0], m_id[1]); 212| 18.3k| BOTAN_ASSERT_NOMSG(first.has_value()); ------------------ | | 84| 18.3k| do { \ | | 85| 18.3k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 18.3k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 18.3k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 18.3k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 18.3k] | | ------------------ ------------------ 213| | 214| 18.3k| append(encoding, *first); 215| | 216| 62.4k| for(size_t i = 2; i != m_id.size(); ++i) { ------------------ | Branch (216:22): [True: 44.1k, False: 18.3k] ------------------ 217| 44.1k| append(encoding, m_id[i]); 218| 44.1k| } 219| 18.3k| der.add_object(ASN1_Type::ObjectId, ASN1_Class::Universal, encoding); 220| 18.3k|} _ZN5Botan3OID11decode_fromERNS_11BER_DecoderE: 225| 46.1k|void OID::decode_from(BER_Decoder& decoder) { 226| 46.1k| const BER_Object obj = decoder.get_next_object(); 227| 46.1k| if(obj.tagging() != (ASN1_Class::Universal | ASN1_Type::ObjectId)) { ------------------ | Branch (227:7): [True: 88, False: 46.1k] ------------------ 228| 88| throw BER_Bad_Tag("Error decoding OID, unknown tag", obj.tagging()); 229| 88| } 230| | 231| 46.1k| if(obj.length() == 0) { ------------------ | Branch (231:7): [True: 26, False: 46.0k] ------------------ 232| 26| throw BER_Decoding_Error("OID encoding is too short"); 233| 26| } 234| | 235| 46.0k| const auto consume = [](BufferSlicer& data) -> uint32_t { 236| 46.0k| BOTAN_ASSERT_NOMSG(!data.empty()); 237| 46.0k| uint32_t b = data.take_byte(); 238| | 239| 46.0k| if(b > 0x7F) { 240| 46.0k| b &= 0x7F; 241| | 242| | // Even BER requires that the OID have minimal length, ie that 243| | // the first byte of a multibyte encoding cannot be zero 244| | // See X.690 section 8.19.2 245| 46.0k| if(b == 0) { 246| 46.0k| throw Decoding_Error("Leading zero byte in multibyte OID encoding"); 247| 46.0k| } 248| | 249| 46.0k| while(true) { 250| 46.0k| if(data.empty()) { 251| 46.0k| throw Decoding_Error("Truncated OID value"); 252| 46.0k| } 253| | 254| 46.0k| const uint8_t next = data.take_byte(); 255| 46.0k| const bool more = (next & 0x80) == 0x80; 256| 46.0k| const uint8_t value = next & 0x7F; 257| | 258| 46.0k| if((b >> (32 - 7)) != 0) { 259| 46.0k| throw Decoding_Error("OID component overflow"); 260| 46.0k| } 261| | 262| 46.0k| b = (b << 7) | value; 263| | 264| 46.0k| if(!more) { 265| 46.0k| break; 266| 46.0k| } 267| 46.0k| } 268| 46.0k| } 269| | 270| 46.0k| return b; 271| 46.0k| }; 272| | 273| 46.0k| BufferSlicer data(obj.data()); 274| 46.0k| std::vector parts; 275| | 276| | // Each byte of the DER encoding can result in at most one additional arc, 277| | // except the first byte which always encodes two. Don't reserve for more than 278| | // 16 arcs though; the longest OID in our current table has just 13 arcs. 279| 46.0k| parts.reserve(std::min(16, obj.length() + 1)); 280| | 281| 232k| while(!data.empty()) { ------------------ | Branch (281:10): [True: 186k, False: 46.0k] ------------------ 282| 186k| const uint32_t comp = consume(data); 283| | 284| 186k| if(parts.empty()) { ------------------ | Branch (284:10): [True: 45.3k, False: 141k] ------------------ 285| | // divide into root and second arc 286| | 287| 45.3k| const uint32_t root_arc = [](uint32_t b0) -> uint32_t { 288| 45.3k| if(b0 < 40) { 289| 45.3k| return 0; 290| 45.3k| } else if(b0 < 80) { 291| 45.3k| return 1; 292| 45.3k| } else { 293| 45.3k| return 2; 294| 45.3k| } 295| 45.3k| }(comp); 296| | 297| 45.3k| parts.push_back(root_arc); 298| 45.3k| BOTAN_ASSERT_NOMSG(comp >= 40 * root_arc); ------------------ | | 84| 45.3k| do { \ | | 85| 45.3k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 45.3k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 45.3k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 45.3k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 45.3k] | | ------------------ ------------------ 299| 45.3k| parts.push_back(comp - 40 * root_arc); 300| 141k| } else { 301| 141k| parts.push_back(comp); 302| 141k| } 303| 186k| } 304| | 305| 46.0k| m_id = std::move(parts); 306| 46.0k|} _ZN5BotanlsERNSt3__113basic_ostreamIcNS0_11char_traitsIcEEEERKNS_3OIDE: 308| 6|std::ostream& operator<<(std::ostream& out, const OID& oid) { 309| 6| out << oid.to_string(); 310| 6| return out; 311| 6|} asn1_oid.cpp:_ZN5Botan12_GLOBAL__N_115oid_valid_checkENSt3__14spanIKjLm18446744073709551615EEE: 26| 47.5k|void oid_valid_check(std::span oid) { 27| 47.5k| BOTAN_ARG_CHECK(oid.size() >= 2, "OID too short to be valid"); ------------------ | | 35| 47.5k| do { \ | | 36| 47.5k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 47.5k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 47.5k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 47.5k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 47.5k] | | ------------------ ------------------ 28| 47.5k| BOTAN_ARG_CHECK(oid[0] <= 2, "OID root out of range"); ------------------ | | 35| 47.5k| do { \ | | 36| 47.5k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 47.5k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 47.5k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 47.5k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 47.5k] | | ------------------ ------------------ 29| 47.5k| BOTAN_ARG_CHECK(oid[1] <= 39 || oid[0] == 2, "OID second arc too large"); ------------------ | | 35| 47.5k| do { \ | | 36| 47.5k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 47.5k| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 47.5k, False: 0] | | | Branch (37:12): [True: 0, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 47.5k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 47.5k] | | ------------------ ------------------ 30| | // This last is a limitation of using 32 bit integers when decoding 31| | // not a limitation of ASN.1 object identifiers in general 32| 47.5k| BOTAN_ARG_CHECK(oid[1] <= 0xFFFFFFAF, "OID second arc too large"); ------------------ | | 35| 47.5k| do { \ | | 36| 47.5k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 47.5k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 47.5k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 47.5k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 47.5k] | | ------------------ ------------------ 33| 47.5k|} asn1_oid.cpp:_ZZNK5Botan3OID11encode_intoERNS_11DER_EncoderEENK3$_0clERNSt3__16vectorIhNS4_9allocatorIhEEEEj: 190| 62.4k| const auto append = [](std::vector& encoding, uint32_t z) { 191| 62.4k| if(z <= 0x7F) { ------------------ | Branch (191:10): [True: 55.9k, False: 6.47k] ------------------ 192| 55.9k| encoding.push_back(static_cast(z)); 193| 55.9k| } else { 194| 6.47k| const size_t z7 = (high_bit(z) + 7 - 1) / 7; 195| | 196| 21.5k| for(size_t j = 0; j != z7; ++j) { ------------------ | Branch (196:28): [True: 15.0k, False: 6.47k] ------------------ 197| 15.0k| uint8_t zp = static_cast(z >> (7 * (z7 - j - 1)) & 0x7F); 198| | 199| 15.0k| if(j != z7 - 1) { ------------------ | Branch (199:16): [True: 8.61k, False: 6.47k] ------------------ 200| 8.61k| zp |= 0x80; 201| 8.61k| } 202| | 203| 15.0k| encoding.push_back(zp); 204| 15.0k| } 205| 6.47k| } 206| 62.4k| }; asn1_oid.cpp:_ZZN5Botan3OID11decode_fromERNS_11BER_DecoderEENK3$_0clERNS_12BufferSlicerE: 235| 186k| const auto consume = [](BufferSlicer& data) -> uint32_t { 236| 186k| BOTAN_ASSERT_NOMSG(!data.empty()); ------------------ | | 84| 186k| do { \ | | 85| 186k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 186k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 186k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 186k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 186k] | | ------------------ ------------------ 237| 186k| uint32_t b = data.take_byte(); 238| | 239| 186k| if(b > 0x7F) { ------------------ | Branch (239:10): [True: 27.8k, False: 158k] ------------------ 240| 27.8k| b &= 0x7F; 241| | 242| | // Even BER requires that the OID have minimal length, ie that 243| | // the first byte of a multibyte encoding cannot be zero 244| | // See X.690 section 8.19.2 245| 27.8k| if(b == 0) { ------------------ | Branch (245:13): [True: 12, False: 27.8k] ------------------ 246| 12| throw Decoding_Error("Leading zero byte in multibyte OID encoding"); 247| 12| } 248| | 249| 37.4k| while(true) { ------------------ | Branch (249:16): [True: 37.4k, Folded] ------------------ 250| 37.4k| if(data.empty()) { ------------------ | Branch (250:16): [True: 38, False: 37.3k] ------------------ 251| 38| throw Decoding_Error("Truncated OID value"); 252| 38| } 253| | 254| 37.3k| const uint8_t next = data.take_byte(); 255| 37.3k| const bool more = (next & 0x80) == 0x80; 256| 37.3k| const uint8_t value = next & 0x7F; 257| | 258| 37.3k| if((b >> (32 - 7)) != 0) { ------------------ | Branch (258:16): [True: 20, False: 37.3k] ------------------ 259| 20| throw Decoding_Error("OID component overflow"); 260| 20| } 261| | 262| 37.3k| b = (b << 7) | value; 263| | 264| 37.3k| if(!more) { ------------------ | Branch (264:16): [True: 27.7k, False: 9.59k] ------------------ 265| 27.7k| break; 266| 27.7k| } 267| 37.3k| } 268| 27.8k| } 269| | 270| 186k| return b; 271| 186k| }; asn1_oid.cpp:_ZZN5Botan3OID11decode_fromERNS_11BER_DecoderEENK3$_1clEj: 287| 45.3k| const uint32_t root_arc = [](uint32_t b0) -> uint32_t { 288| 45.3k| if(b0 < 40) { ------------------ | Branch (288:16): [True: 673, False: 44.6k] ------------------ 289| 673| return 0; 290| 44.6k| } else if(b0 < 80) { ------------------ | Branch (290:23): [True: 15.4k, False: 29.2k] ------------------ 291| 15.4k| return 1; 292| 29.2k| } else { 293| 29.2k| return 2; 294| 29.2k| } 295| 45.3k| }(comp); _ZN5Botan11ASN1_StringC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEENS_9ASN1_TypeE: 135| 15.8k|ASN1_String::ASN1_String(std::string_view str, ASN1_Type t) : m_utf8_str(str), m_tag(t) { 136| 15.8k| if(!is_utf8_subset_string_type(m_tag)) { ------------------ | Branch (136:7): [True: 0, False: 15.8k] ------------------ 137| 0| throw Invalid_Argument("ASN1_String only supports encoding to UTF-8 or a UTF-8 subset"); 138| 0| } 139| | 140| 15.8k| if(!is_valid_asn1_string_content(m_utf8_str, m_tag)) { ------------------ | Branch (140:7): [True: 0, False: 15.8k] ------------------ 141| 0| throw Invalid_Argument(fmt("ASN1_String: Invalid {} encoding", asn1_tag_to_string(m_tag))); 142| 0| } 143| 15.8k|} _ZN5Botan11ASN1_StringC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 145| 15.8k|ASN1_String::ASN1_String(std::string_view str) : ASN1_String(str, choose_encoding(str)) {} _ZN5Botan11ASN1_String11decode_fromERNS_11BER_DecoderE: 162| 15.8k|void ASN1_String::decode_from(BER_Decoder& source) { 163| 15.8k| const BER_Object obj = source.get_next_object(); 164| | 165| 15.8k| if(obj.get_class() != ASN1_Class::Universal || !is_asn1_string_type(obj.type())) { ------------------ | Branch (165:7): [True: 16, False: 15.8k] | Branch (165:51): [True: 11, False: 15.8k] ------------------ 166| 20| auto typ = static_cast(obj.type()); 167| 20| auto cls = static_cast(obj.get_class()); 168| 20| throw Decoding_Error(fmt("ASN1_String: Unknown string type {}/{}", typ, cls)); 169| 20| } 170| | 171| 15.8k| m_tag = obj.type(); 172| 15.8k| m_data.assign(obj.bits(), obj.bits() + obj.length()); 173| | 174| 15.8k| if(m_tag == ASN1_Type::BmpString) { ------------------ | Branch (174:7): [True: 150, False: 15.6k] ------------------ 175| 150| m_utf8_str = ucs2_to_utf8(m_data); 176| 15.6k| } else if(m_tag == ASN1_Type::UniversalString) { ------------------ | Branch (176:14): [True: 49, False: 15.6k] ------------------ 177| 49| m_utf8_str = ucs4_to_utf8(m_data); 178| 15.6k| } else if(m_tag == ASN1_Type::TeletexString) { ------------------ | Branch (178:14): [True: 300, False: 15.3k] ------------------ 179| | /* 180| | TeletexString is nominally ITU T.61 not ISO-8859-1 but it seems 181| | the majority of implementations actually used that charset here. 182| | */ 183| 300| m_utf8_str = latin1_to_utf8(m_data); 184| 15.3k| } else { 185| | // All other supported string types are UTF-8 or some subset thereof 186| 15.3k| m_utf8_str = ASN1::to_string(obj); 187| | 188| 15.3k| if(!is_valid_asn1_string_content(m_utf8_str, m_tag)) { ------------------ | Branch (188:10): [True: 36, False: 15.2k] ------------------ 189| 36| throw Decoding_Error(fmt("ASN1_String: Invalid {} encoding", asn1_tag_to_string(m_tag))); 190| 36| } 191| 15.3k| } 192| 15.8k|} asn1_str.cpp:_ZN5Botan12_GLOBAL__N_119is_asn1_string_typeENS_9ASN1_TypeE: 99| 15.8k|bool is_asn1_string_type(ASN1_Type tag) { 100| 15.8k| return (is_utf8_subset_string_type(tag) || tag == ASN1_Type::TeletexString || tag == ASN1_Type::BmpString || ------------------ | Branch (100:12): [True: 15.3k, False: 510] | Branch (100:47): [True: 300, False: 210] | Branch (100:82): [True: 150, False: 60] ------------------ 101| 60| tag == ASN1_Type::UniversalString); ------------------ | Branch (101:12): [True: 49, False: 11] ------------------ 102| 15.8k|} asn1_str.cpp:_ZN5Botan12_GLOBAL__N_126is_utf8_subset_string_typeENS_9ASN1_TypeE: 94| 62.9k|bool is_utf8_subset_string_type(ASN1_Type tag) { 95| 62.9k| return (tag == ASN1_Type::NumericString || tag == ASN1_Type::PrintableString || tag == ASN1_Type::VisibleString || ------------------ | Branch (95:12): [True: 24, False: 62.8k] | Branch (95:47): [True: 51.3k, False: 11.5k] | Branch (95:84): [True: 82, False: 11.4k] ------------------ 96| 11.4k| tag == ASN1_Type::Ia5String || tag == ASN1_Type::Utf8String); ------------------ | Branch (96:12): [True: 92, False: 11.3k] | Branch (96:43): [True: 10.8k, False: 510] ------------------ 97| 62.9k|} asn1_str.cpp:_ZN5Botan12_GLOBAL__N_128is_valid_asn1_string_contentERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS_9ASN1_TypeE: 104| 31.1k|bool is_valid_asn1_string_content(const std::string& str, ASN1_Type tag) { 105| 31.1k| BOTAN_ASSERT_NOMSG(is_utf8_subset_string_type(tag)); ------------------ | | 84| 31.1k| do { \ | | 85| 31.1k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 31.1k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 31.1k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 31.1k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 31.1k] | | ------------------ ------------------ 106| | 107| 31.1k| switch(tag) { 108| 5.42k| case ASN1_Type::Utf8String: ------------------ | Branch (108:7): [True: 5.42k, False: 25.7k] ------------------ 109| 5.42k| return is_valid_utf8(str); 110| 12| case ASN1_Type::NumericString: ------------------ | Branch (110:7): [True: 12, False: 31.1k] ------------------ 111| 25.6k| case ASN1_Type::PrintableString: ------------------ | Branch (111:7): [True: 25.6k, False: 5.52k] ------------------ 112| 25.7k| case ASN1_Type::Ia5String: ------------------ | Branch (112:7): [True: 46, False: 31.1k] ------------------ 113| 25.7k| case ASN1_Type::VisibleString: ------------------ | Branch (113:7): [True: 41, False: 31.1k] ------------------ 114| 25.7k| return g_char_validator.valid_encoding(str, tag); 115| 0| default: ------------------ | Branch (115:7): [True: 0, False: 31.1k] ------------------ 116| 0| return false; 117| 31.1k| } 118| 31.1k|} asn1_str.cpp:_ZNK5Botan12_GLOBAL__N_131ASN1_String_Codepoint_Validator14valid_encodingENSt3__117basic_string_viewIcNS2_11char_traitsIcEEEENS_9ASN1_TypeE: 25| 41.6k| constexpr bool valid_encoding(std::string_view str, ASN1_Type tag) const { 26| 41.6k| const uint8_t mask = mask_for(tag); 27| 80.4k| for(const char c : str) { ------------------ | Branch (27:27): [True: 80.4k, False: 41.6k] ------------------ 28| 80.4k| const uint8_t codepoint = static_cast(c); 29| 80.4k| const bool is_valid = (m_table[codepoint] & mask) != 0; 30| | 31| 80.4k| if(!is_valid) { ------------------ | Branch (31:16): [True: 14, False: 80.4k] ------------------ 32| 14| return false; 33| 14| } 34| 80.4k| } 35| | 36| 41.6k| return true; 37| 41.6k| } asn1_str.cpp:_ZN5Botan12_GLOBAL__N_131ASN1_String_Codepoint_Validator8mask_forENS_9ASN1_TypeE: 45| 41.6k| static constexpr uint8_t mask_for(ASN1_Type tag) { 46| 41.6k| switch(tag) { 47| 12| case ASN1_Type::NumericString: ------------------ | Branch (47:13): [True: 12, False: 41.6k] ------------------ 48| 12| return Numeric_String; 49| 41.5k| case ASN1_Type::PrintableString: ------------------ | Branch (49:13): [True: 41.5k, False: 99] ------------------ 50| 41.5k| return Printable_String; 51| 46| case ASN1_Type::Ia5String: ------------------ | Branch (51:13): [True: 46, False: 41.6k] ------------------ 52| 46| return IA5_String; 53| 41| case ASN1_Type::VisibleString: ------------------ | Branch (53:13): [True: 41, False: 41.6k] ------------------ 54| 41| return Visible_String; 55| 0| default: ------------------ | Branch (55:13): [True: 0, False: 41.6k] ------------------ 56| 0| return 0; 57| 41.6k| } 58| 41.6k| } asn1_str.cpp:_ZN5Botan12_GLOBAL__N_115choose_encodingENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 120| 15.8k|ASN1_Type choose_encoding(std::string_view str) { 121| 15.8k| if(g_char_validator.valid_encoding(str, ASN1_Type::PrintableString)) { ------------------ | Branch (121:7): [True: 15.8k, False: 0] ------------------ 122| 15.8k| return ASN1_Type::PrintableString; 123| 15.8k| } else { 124| 0| return ASN1_Type::Utf8String; 125| 0| } 126| 15.8k|} _ZN5Botan9ASN1_TimeC2EthhhhhNS_9ASN1_TypeE: 43| 6.95k| m_year(year), m_month(month), m_day(day), m_hour(hour), m_minute(minute), m_second(second), m_tag(tag) { 44| 6.95k| if(tag != ASN1_Type::UtcTime && tag != ASN1_Type::GeneralizedTime) { ------------------ | Branch (44:7): [True: 2, False: 6.95k] | Branch (44:36): [True: 0, False: 2] ------------------ 45| 0| throw Invalid_Argument("ASN1_Time tag must be UtcTime or GeneralizedTime"); 46| 0| } 47| | 48| | /* 49| | * RFC 5280 Section 4.1.2.5: 50| | * To indicate that a certificate has no well-defined expiration date, 51| | * the notAfter SHOULD be assigned the GeneralizedTime value of 52| | * 99991231235959Z. 53| | */ 54| 6.95k| const uint16_t min_year = 1950; 55| 6.95k| const uint16_t max_year = (tag == ASN1_Type::UtcTime) ? 2049 : 9999; ------------------ | Branch (55:30): [True: 6.95k, False: 2] ------------------ 56| | 57| 6.95k| if(m_year < min_year || m_year > max_year) { ------------------ | Branch (57:7): [True: 1, False: 6.95k] | Branch (57:28): [True: 0, False: 6.95k] ------------------ 58| 1| throw Invalid_Argument(fmt("ASN1_Time year {} is out of range ({} to {})", m_year, min_year, max_year)); 59| 1| } 60| | 61| 6.95k| if(m_month < 1 || m_month > 12) { ------------------ | Branch (61:7): [True: 1, False: 6.95k] | Branch (61:22): [True: 2, False: 6.94k] ------------------ 62| 3| throw Invalid_Argument(fmt("ASN1_Time month {} is out of range", static_cast(m_month))); 63| 3| } 64| | 65| 6.94k| constexpr uint8_t days_in_month[12] = {31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31}; 66| | 67| 6.94k| const bool is_leap_year = (m_year % 4 == 0) && (m_year % 100 != 0 || m_year % 400 == 0); ------------------ | Branch (67:30): [True: 2.97k, False: 3.97k] | Branch (67:52): [True: 2.97k, False: 5] | Branch (67:73): [True: 5, False: 0] ------------------ 68| 6.94k| const uint8_t max_day = (m_month == 2 && is_leap_year) ? 29 : days_in_month[m_month - 1]; ------------------ | Branch (68:29): [True: 1.49k, False: 5.45k] | Branch (68:45): [True: 5, False: 1.49k] ------------------ 69| | 70| 6.94k| if(m_day < 1 || m_day > max_day) { ------------------ | Branch (70:7): [True: 1, False: 6.94k] | Branch (70:20): [True: 3, False: 6.94k] ------------------ 71| 4| throw Invalid_Argument(fmt("ASN1_Time day {} is out of range for month {}", 72| 4| static_cast(m_day), 73| 4| static_cast(m_month))); 74| 4| } 75| | 76| 6.94k| if(m_hour > 23) { ------------------ | Branch (76:7): [True: 3, False: 6.94k] ------------------ 77| 3| throw Invalid_Argument(fmt("ASN1_Time hour {} is out of range", static_cast(m_hour))); 78| 3| } 79| | 80| 6.94k| if(m_minute > 59) { ------------------ | Branch (80:7): [True: 1, False: 6.94k] ------------------ 81| 1| throw Invalid_Argument(fmt("ASN1_Time minute {} is out of range", static_cast(m_minute))); 82| 1| } 83| | 84| | /* 85| | * RFC 5280 is silent on the issue of leap seconds in certificate fields, but both 86| | * OpenSSL and Go reject which suggests they are rarely if ever used in practice. 87| | */ 88| 6.94k| if(m_second > 59) { ------------------ | Branch (88:7): [True: 1, False: 6.94k] ------------------ 89| 1| throw Invalid_Argument(fmt("ASN1_Time second {} is out of range", static_cast(m_second))); 90| 1| } 91| 6.94k|} _ZN5Botan9ASN1_Time11from_stringENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEENS_9ASN1_TypeE: 109| 6.98k|ASN1_Time ASN1_Time::from_string(std::string_view t_spec, ASN1_Type tag) { 110| 6.98k| BOTAN_ARG_CHECK(tag == ASN1_Type::UtcTime || tag == ASN1_Type::GeneralizedTime, "Invalid tag for ASN1_Time"); ------------------ | | 35| 6.98k| do { \ | | 36| 6.98k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 6.98k| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 6.98k, False: 4] | | | Branch (37:12): [True: 4, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 6.98k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 6.98k] | | ------------------ ------------------ 111| | 112| 6.98k| if(tag == ASN1_Type::GeneralizedTime) { ------------------ | Branch (112:7): [True: 4, False: 6.98k] ------------------ 113| 4| BOTAN_ARG_CHECK(t_spec.size() == 15, "Invalid GeneralizedTime input string"); ------------------ | | 35| 4| do { \ | | 36| 4| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 4| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 1, False: 3] | | ------------------ | | 38| 1| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 1| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 1| } \ | | 41| 4| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 4] | | ------------------ ------------------ 114| 6.98k| } else { 115| 6.98k| BOTAN_ARG_CHECK(t_spec.size() == 13, "Invalid UTCTime input string"); ------------------ | | 35| 6.98k| do { \ | | 36| 6.98k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 6.98k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 3, False: 6.97k] | | ------------------ | | 38| 3| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 3| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 3| } \ | | 41| 6.98k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 6.98k] | | ------------------ ------------------ 116| 6.98k| } 117| | 118| 6.98k| BOTAN_ARG_CHECK(t_spec.back() == 'Z', "Botan does not support ASN1 times with timezones other than Z"); ------------------ | | 35| 6.98k| do { \ | | 36| 6.98k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 6.98k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 9, False: 6.97k] | | ------------------ | | 38| 9| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 9| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 9| } \ | | 41| 6.98k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 6.98k] | | ------------------ ------------------ 119| | 120| 6.98k| const size_t field_len = 2; 121| 6.98k| const size_t year_len = (tag == ASN1_Type::UtcTime) ? 2 : 4; ------------------ | Branch (121:28): [True: 6.96k, False: 16] ------------------ 122| | 123| 6.98k| const size_t year_start = 0; 124| 6.98k| const size_t month_start = year_start + year_len; 125| 6.98k| const size_t day_start = month_start + field_len; 126| 6.98k| const size_t hour_start = day_start + field_len; 127| 6.98k| const size_t min_start = hour_start + field_len; 128| 6.98k| const size_t sec_start = min_start + field_len; 129| | 130| 6.98k| uint32_t year = to_u32bit(t_spec.substr(year_start, year_len)); 131| 6.98k| const uint32_t month = to_u32bit(t_spec.substr(month_start, field_len)); 132| 6.98k| const uint32_t day = to_u32bit(t_spec.substr(day_start, field_len)); 133| 6.98k| const uint32_t hour = to_u32bit(t_spec.substr(hour_start, field_len)); 134| 6.98k| const uint32_t minute = to_u32bit(t_spec.substr(min_start, field_len)); 135| 6.98k| const uint32_t second = to_u32bit(t_spec.substr(sec_start, field_len)); 136| | 137| 6.98k| if(tag == ASN1_Type::UtcTime) { ------------------ | Branch (137:7): [True: 6.95k, False: 33] ------------------ 138| | // Interpret the two digit year by the 1950/2050 split (RFC 5280 Section 4.1.2.5.1) 139| 6.95k| year += (year >= 50) ? 1900 : 2000; ------------------ | Branch (139:15): [True: 26, False: 6.92k] ------------------ 140| 6.95k| } 141| | 142| 6.98k| return ASN1_Time(static_cast(year), 143| 6.98k| static_cast(month), 144| 6.98k| static_cast(day), 145| 6.98k| static_cast(hour), 146| 6.98k| static_cast(minute), 147| 6.98k| static_cast(second), 148| 6.98k| tag); 149| 6.98k|} _ZN5Botan9ASN1_Time11decode_fromERNS_11BER_DecoderE: 168| 6.99k|void ASN1_Time::decode_from(BER_Decoder& source) { 169| 6.99k| const BER_Object ber_time = source.get_next_object(); 170| | 171| 6.99k| if(ber_time.get_class() != ASN1_Class::Universal || ------------------ | Branch (171:7): [True: 3, False: 6.98k] ------------------ 172| 6.98k| (ber_time.type() != ASN1_Type::UtcTime && ber_time.type() != ASN1_Type::GeneralizedTime)) { ------------------ | Branch (172:8): [True: 7, False: 6.98k] | Branch (172:49): [True: 3, False: 4] ------------------ 173| 5| throw Decoding_Error(fmt("ASN1_Time: Unexpected tag {}/{}", 174| 5| static_cast(ber_time.type()), 175| 5| static_cast(ber_time.get_class()))); 176| 5| } 177| | 178| 6.98k| try { 179| | // Assigning only after a successful parse means that a decoding error 180| | // cannot leave this object in a partially written state 181| 6.98k| *this = ASN1_Time::from_string(ASN1::to_string(ber_time), ber_time.type()); 182| 6.98k| } catch(Invalid_Argument& e) { 183| 44| throw Decoding_Error(fmt("Invalid ASN1_Time encoding: {}", e.what())); 184| 44| } 185| 6.98k|} _ZN5Botan11BER_DecoderD2Ev: 456| 133k|BER_Decoder::~BER_Decoder() = default; _ZNK5Botan11BER_Decoder10more_itemsEv: 461| 79.5k|bool BER_Decoder::more_items() const { 462| 79.5k| if(m_source->end_of_data() && !m_pushed.is_set()) { ------------------ | Branch (462:7): [True: 27.4k, False: 52.1k] | Branch (462:34): [True: 27.4k, False: 0] ------------------ 463| 27.4k| return false; 464| 27.4k| } 465| 52.1k| return true; 466| 79.5k|} _ZN5Botan11BER_Decoder10verify_endEv: 471| 21.8k|BER_Decoder& BER_Decoder::verify_end() { 472| 21.8k| return verify_end("BER_Decoder::verify_end called, but data remains"); 473| 21.8k|} _ZN5Botan11BER_Decoder10verify_endENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 478| 25.2k|BER_Decoder& BER_Decoder::verify_end(std::string_view err) { 479| 25.2k| if(!m_source->end_of_data() || m_pushed.is_set()) { ------------------ | Branch (479:7): [True: 124, False: 25.1k] | Branch (479:35): [True: 0, False: 25.1k] ------------------ 480| 124| throw Decoding_Error(err); 481| 124| } 482| 25.1k| return (*this); 483| 25.2k|} _ZN5Botan11BER_Decoder17discard_remainingEv: 488| 33|BER_Decoder& BER_Decoder::discard_remaining() { 489| 33| m_pushed = BER_Object(); 490| 33| uint8_t buf[64]; 491| 39| while(m_source->read(buf, sizeof(buf)) != 0) {} ------------------ | Branch (491:10): [True: 6, False: 33] ------------------ 492| 33| return (*this); 493| 33|} _ZN5Botan11BER_Decoder10read_bytesENSt3__14spanIhLm18446744073709551615EEE: 505| 78.9k|size_t BER_Decoder::read_bytes(std::span out) { 506| 78.9k| BOTAN_ASSERT_NOMSG(m_source != nullptr); ------------------ | | 84| 78.9k| do { \ | | 85| 78.9k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 78.9k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 78.9k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 78.9k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 78.9k] | | ------------------ ------------------ 507| 78.9k| return m_source->read(out.data(), out.size()); 508| 78.9k|} _ZN5Botan11BER_Decoder16peek_next_objectEv: 510| 2.85k|const BER_Object& BER_Decoder::peek_next_object() { 511| 2.85k| if(!m_pushed.is_set()) { ------------------ | Branch (511:7): [True: 2.51k, False: 338] ------------------ 512| 2.51k| m_pushed = get_next_object(); 513| 2.51k| } 514| | 515| 2.85k| return m_pushed; 516| 2.85k|} _ZN5Botan11BER_Decoder15get_next_objectEv: 521| 247k|BER_Object BER_Decoder::get_next_object() { 522| 247k| BER_Object next; 523| | 524| 247k| if(m_pushed.is_set()) { ------------------ | Branch (524:7): [True: 24.0k, False: 223k] ------------------ 525| 24.0k| std::swap(next, m_pushed); 526| 24.0k| return next; 527| 24.0k| } 528| | 529| 223k| for(;;) { 530| 223k| ASN1_Type type_tag = ASN1_Type::NoObject; 531| 223k| ASN1_Class class_tag = ASN1_Class::NoObject; 532| 223k| decode_tag(m_source, type_tag, class_tag); 533| 223k| next.set_tagging(type_tag, class_tag); 534| 223k| if(next.is_set() == false) { // no more objects ------------------ | Branch (534:10): [True: 3.32k, False: 219k] ------------------ 535| 3.32k| return next; 536| 3.32k| } 537| | 538| 219k| const size_t allow_indef = m_limits.allow_ber_encoding() ? m_limits.max_nested_indefinite_length() : 0; ------------------ | Branch (538:34): [True: 0, False: 219k] ------------------ 539| 219k| const bool der_mode = m_limits.require_der_encoding(); 540| 219k| const auto dl = decode_length(m_source, allow_indef, der_mode, is_constructed(class_tag)); 541| | 542| | // Per X.690 8.1.5 the only valid EOC encoding is the two-octet 543| | // sequence 0x00 0x00. Reject any other length encoding on a tag of 544| | // (Eoc, Universal) before we consume the "content" bytes. 545| 219k| if(type_tag == ASN1_Type::Eoc && class_tag == ASN1_Class::Universal && ------------------ | Branch (545:10): [True: 4.90k, False: 214k] | Branch (545:40): [True: 272, False: 4.62k] ------------------ 546| 272| (dl.content_length() != 0 || dl.indefinite_length())) { ------------------ | Branch (546:11): [True: 165, False: 107] | Branch (546:39): [True: 0, False: 107] ------------------ 547| 165| throw BER_Decoding_Error("EOC marker with non-zero length"); 548| 165| } 549| | 550| 219k| if(const auto max_size = m_limits.max_object_size(); max_size && dl.content_length() > *max_size) { ------------------ | Branch (550:60): [True: 218k, False: 1.29k] | Branch (550:72): [True: 39, False: 218k] ------------------ 551| 39| throw BER_Decoding_Error("Encoded object exceeds maximum size"); 552| 39| } 553| | 554| 219k| if(!m_source->check_available(dl.total_length())) { ------------------ | Branch (554:10): [True: 2.19k, False: 217k] ------------------ 555| 2.19k| throw BER_Decoding_Error("Value truncated"); 556| 2.19k| } 557| | 558| 217k| uint8_t* out = next.mutable_bits(dl.content_length()); 559| 217k| if(m_source->read(out, dl.content_length()) != dl.content_length()) { ------------------ | Branch (559:10): [True: 0, False: 217k] ------------------ 560| 0| throw BER_Decoding_Error("Value truncated"); 561| 0| } 562| | 563| 217k| if(dl.indefinite_length()) { ------------------ | Branch (563:10): [True: 0, False: 217k] ------------------ 564| | // After reading the data consume the 2-byte EOC 565| 0| uint8_t eoc[2] = {0xFF, 0xFF}; 566| 0| if(m_source->read(eoc, 2) != 2 || eoc[0] != 0x00 || eoc[1] != 0x00) { ------------------ | Branch (566:13): [True: 0, False: 0] | Branch (566:44): [True: 0, False: 0] | Branch (566:62): [True: 0, False: 0] ------------------ 567| 0| throw BER_Decoding_Error("Missing or malformed EOC marker"); 568| 0| } 569| 0| } 570| | 571| 217k| if(next.tagging() == static_cast(ASN1_Type::Eoc)) { ------------------ | Branch (571:10): [True: 107, False: 217k] ------------------ 572| 107| if(m_limits.require_der_encoding()) { ------------------ | Branch (572:13): [True: 107, False: 0] ------------------ 573| 107| throw BER_Decoding_Error("Detected EOC marker in DER structure"); 574| 107| } 575| | // An EOC marker is only valid as an indefinite-length terminator, which 576| | // is consumed above when reading the indefinite-length object. A 577| | // standalone EOC is rejected unless the caller opted to tolerate it. 578| 0| if(m_limits.allow_standalone_eoc()) { ------------------ | Branch (578:13): [True: 0, False: 0] ------------------ 579| 0| continue; 580| 0| } 581| 0| throw BER_Decoding_Error("Encountered EOC marker outside of indefinite-length encoding"); 582| 0| } 583| | 584| 217k| break; 585| 217k| } 586| | 587| 217k| return next; 588| 223k|} _ZN5Botan11BER_Decoder9push_backEONS_10BER_ObjectE: 612| 25.1k|void BER_Decoder::push_back(BER_Object&& obj) { 613| 25.1k| if(m_pushed.is_set()) { ------------------ | Branch (613:7): [True: 0, False: 25.1k] ------------------ 614| 0| throw Invalid_State("BER_Decoder: Only one push back is allowed"); 615| 0| } 616| 25.1k| m_pushed = std::move(obj); 617| 25.1k|} _ZN5Botan11BER_Decoder10start_consENS_9ASN1_TypeENS_10ASN1_ClassE: 619| 95.9k|BER_Decoder BER_Decoder::start_cons(ASN1_Type type_tag, ASN1_Class class_tag) { 620| 95.9k| BER_Object obj = get_next_object(); 621| 95.9k| obj.assert_is_a(type_tag, class_tag | ASN1_Class::Constructed); 622| | 623| | // In DER mode the elements of a universal SET must appear in sorted order 624| 95.9k| if(m_limits.require_der_encoding() && type_tag == ASN1_Type::Set && class_tag == ASN1_Class::Universal) { ------------------ | Branch (624:7): [True: 92.7k, False: 3.17k] | Branch (624:42): [True: 15.9k, False: 76.7k] | Branch (624:72): [True: 15.9k, False: 0] ------------------ 625| 15.9k| verify_set_is_sorted(std::span{obj.bits(), obj.length()}); 626| 15.9k| } 627| | 628| 95.9k| BER_Decoder child(std::move(obj), this); 629| 95.9k| return child; 630| 95.9k|} _ZN5Botan11BER_Decoder8end_consEv: 635| 68.4k|BER_Decoder& BER_Decoder::end_cons() { 636| 68.4k| if(m_parent == nullptr) { ------------------ | Branch (636:7): [True: 0, False: 68.4k] ------------------ 637| 0| throw Invalid_State("BER_Decoder::end_cons called with null parent"); 638| 0| } 639| 68.4k| if(!m_source->end_of_data() || m_pushed.is_set()) { ------------------ | Branch (639:7): [True: 88, False: 68.3k] | Branch (639:35): [True: 148, False: 68.2k] ------------------ 640| 236| throw Decoding_Error("BER_Decoder::end_cons called with data left"); 641| 236| } 642| 68.2k| return (*m_parent); 643| 68.4k|} _ZN5Botan11BER_DecoderC2EONS_10BER_ObjectEPS0_: 646| 92.6k| m_limits(parent != nullptr ? parent->limits() : BER_Decoder::Limits::BER()), m_parent(parent) { ------------------ | Branch (646:16): [True: 92.6k, False: 0] ------------------ 647| 92.6k| m_data_src = std::make_unique(std::move(obj)); 648| 92.6k| m_source = m_data_src.get(); 649| 92.6k|} _ZN5Botan11BER_DecoderC2ERNS_10DataSourceENS0_6LimitsE: 659| 6.28k|BER_Decoder::BER_Decoder(DataSource& src, Limits limits) : m_limits(limits), m_source(&src) {} _ZN5Botan11BER_DecoderC2ENSt3__14spanIKhLm18446744073709551615EEENS0_6LimitsE: 664| 34.3k|BER_Decoder::BER_Decoder(std::span buf, Limits limits) : m_limits(limits) { 665| 34.3k| m_data_src = std::make_unique(buf); 666| 34.3k| m_source = m_data_src.get(); 667| 34.3k|} _ZN5Botan11BER_Decoder6decodeERNS_11ASN1_ObjectENS_9ASN1_TypeENS_10ASN1_ClassE: 676| 97.8k|BER_Decoder& BER_Decoder::decode(ASN1_Object& obj, ASN1_Type type_tag, ASN1_Class class_tag) { 677| | // TODO support this case properly 678| 97.8k| if(type_tag != ASN1_Type::NoObject || class_tag != ASN1_Class::NoObject) { ------------------ | Branch (678:7): [True: 0, False: 97.8k] | Branch (678:42): [True: 0, False: 97.8k] ------------------ 679| 0| throw Not_Implemented("BER_Decoder::decode(ASN1_Object) does not support implicit tagged decoding"); 680| 0| } 681| 97.8k| obj.decode_from(*this); 682| 97.8k| return (*this); 683| 97.8k|} _ZN5Botan11BER_Decoder11decode_nullEv: 688| 34|BER_Decoder& BER_Decoder::decode_null() { 689| 34| const BER_Object obj = get_next_object(); 690| 34| obj.assert_is_a(ASN1_Type::Null, ASN1_Class::Universal); 691| 34| if(obj.length() > 0) { ------------------ | Branch (691:7): [True: 1, False: 33] ------------------ 692| 1| throw BER_Decoding_Error("NULL object had nonzero size"); 693| 1| } 694| 33| return (*this); 695| 34|} _ZN5Botan11BER_Decoder6decodeERbNS_9ASN1_TypeENS_10ASN1_ClassE: 707| 5.15k|BER_Decoder& BER_Decoder::decode(bool& out, ASN1_Type type_tag, ASN1_Class class_tag) { 708| 5.15k| const BER_Object obj = get_next_object(); 709| 5.15k| obj.assert_is_a(type_tag, class_tag); 710| | 711| 5.15k| if(obj.length() != 1) { ------------------ | Branch (711:7): [True: 4, False: 5.14k] ------------------ 712| 4| throw BER_Decoding_Error("BER boolean value had invalid size"); 713| 4| } 714| | 715| 5.14k| const uint8_t val = obj.bits()[0]; 716| | 717| | // DER requires boolean values to be exactly 0x00 or 0xFF 718| 5.14k| if(m_limits.require_der_encoding() && val != 0x00 && val != 0xFF) { ------------------ | Branch (718:7): [True: 5.14k, False: 0] | Branch (718:42): [True: 5.13k, False: 10] | Branch (718:57): [True: 9, False: 5.12k] ------------------ 719| 9| throw BER_Decoding_Error("Detected non-canonical boolean encoding in DER structure"); 720| 9| } 721| | 722| 5.13k| out = (val != 0) ? true : false; ------------------ | Branch (722:10): [True: 5.12k, False: 10] ------------------ 723| | 724| 5.13k| return (*this); 725| 5.14k|} _ZN5Botan11BER_Decoder6decodeERmNS_9ASN1_TypeENS_10ASN1_ClassE: 730| 3.76k|BER_Decoder& BER_Decoder::decode(size_t& out, ASN1_Type type_tag, ASN1_Class class_tag) { 731| 3.76k| BigInt integer; 732| 3.76k| decode(integer, type_tag, class_tag); 733| | 734| 3.76k| if(integer.signum() < 0) { ------------------ | Branch (734:7): [True: 7, False: 3.75k] ------------------ 735| 7| throw BER_Decoding_Error("Decoded small integer value was negative"); 736| 7| } 737| | 738| 3.75k| if(integer.bits() > 32) { ------------------ | Branch (738:7): [True: 1, False: 3.75k] ------------------ 739| 1| throw BER_Decoding_Error("Decoded integer value larger than expected"); 740| 1| } 741| | 742| 3.75k| out = 0; 743| 18.7k| for(size_t i = 0; i != 4; ++i) { ------------------ | Branch (743:22): [True: 14.9k, False: 3.75k] ------------------ 744| 14.9k| out = (out << 8) | integer.byte_at(3 - i); 745| 14.9k| } 746| | 747| 3.75k| return (*this); 748| 3.75k|} _ZN5Botan11BER_Decoder6decodeERNS_6BigIntENS_9ASN1_TypeENS_10ASN1_ClassE: 780| 9.36k|BER_Decoder& BER_Decoder::decode(BigInt& out, ASN1_Type type_tag, ASN1_Class class_tag) { 781| 9.36k| const BER_Object obj = get_next_object(); 782| 9.36k| obj.assert_is_a(type_tag, class_tag); 783| | 784| | // An INTEGER must have at least one content octet (X.690 section 8.3.1) 785| 9.36k| if(obj.length() == 0) { ------------------ | Branch (785:7): [True: 3, False: 9.36k] ------------------ 786| 3| throw BER_Decoding_Error("INTEGER encoding has no content octets"); 787| 3| } 788| | 789| | // DER requires minimal INTEGER encoding (X.690 section 8.3.2) 790| 9.36k| if(m_limits.require_der_encoding()) { ------------------ | Branch (790:7): [True: 9.33k, False: 30] ------------------ 791| 9.33k| if(obj.length() > 1) { ------------------ | Branch (791:10): [True: 5.46k, False: 3.86k] ------------------ 792| 5.46k| if(obj.bits()[0] == 0x00 && (obj.bits()[1] & 0x80) == 0) { ------------------ | Branch (792:13): [True: 2.54k, False: 2.92k] | Branch (792:38): [True: 5, False: 2.54k] ------------------ 793| 5| throw BER_Decoding_Error("Detected non-minimal INTEGER encoding in DER structure"); 794| 5| } 795| 5.46k| if(obj.bits()[0] == 0xFF && (obj.bits()[1] & 0x80) != 0) { ------------------ | Branch (795:13): [True: 61, False: 5.40k] | Branch (795:38): [True: 5, False: 56] ------------------ 796| 5| throw BER_Decoding_Error("Detected non-minimal INTEGER encoding in DER structure"); 797| 5| } 798| 5.46k| } 799| 9.33k| } 800| | 801| 9.35k| out = ASN1::integer_from_contents(obj.data()); 802| | 803| 9.35k| return (*this); 804| 9.36k|} _ZN5Botan4ASN121integer_from_contentsENSt3__14spanIKhLm18446744073709551615EEE: 806| 9.47k|BigInt ASN1::integer_from_contents(std::span contents) { 807| 9.47k| if(contents.empty()) { ------------------ | Branch (807:7): [True: 0, False: 9.47k] ------------------ 808| 0| throw BER_Decoding_Error("INTEGER encoding has no content octets"); 809| 0| } 810| | 811| 9.47k| BigInt out; 812| | 813| 9.47k| const bool negative = (contents[0] & 0x80) == 0x80; 814| | 815| 9.47k| if(negative) { ------------------ | Branch (815:7): [True: 334, False: 9.13k] ------------------ 816| 334| secure_vector vec(contents.begin(), contents.end()); 817| 656| for(size_t i = vec.size(); i > 0; --i) { ------------------ | Branch (817:34): [True: 656, False: 0] ------------------ 818| 656| const bool gt0 = (vec[i - 1] > 0); 819| 656| vec[i - 1] -= 1; 820| 656| if(gt0) { ------------------ | Branch (820:13): [True: 334, False: 322] ------------------ 821| 334| break; 822| 334| } 823| 656| } 824| 6.03k| for(auto& byte : vec) { ------------------ | Branch (824:22): [True: 6.03k, False: 334] ------------------ 825| 6.03k| byte = ~byte; 826| 6.03k| } 827| 334| out._assign_from_bytes(vec); 828| 334| out.set_sign(BigInt::Negative); 829| 9.13k| } else { 830| 9.13k| out._assign_from_bytes(contents); 831| 9.13k| } 832| | 833| 9.47k| return out; 834| 9.47k|} _ZN5Botan11BER_Decoder23decode_into_byte_vectorERNSt3__16vectorIhNS1_9allocatorIhEEEENS_9ASN1_TypeES7_NS_10ASN1_ClassE: 1038| 15.3k| ASN1_Class class_tag) { 1039| 15.3k| if(real_type != ASN1_Type::OctetString && real_type != ASN1_Type::BitString) { ------------------ | Branch (1039:7): [True: 14, False: 15.2k] | Branch (1039:46): [True: 0, False: 14] ------------------ 1040| 0| throw BER_Bad_Tag("Bad tag for {BIT,OCTET} STRING", static_cast(real_type)); 1041| 0| } 1042| | 1043| 15.3k| asn1_decode_binary_string(buffer, get_next_object(), real_type, type_tag, class_tag, m_limits); 1044| 15.3k| return (*this); 1045| 15.3k|} _ZN5Botan11BER_Decoder16decode_bitstringERNS_14ASN1_BitStringENS_9ASN1_TypeENS_10ASN1_ClassE: 1047| 11.6k|BER_Decoder& BER_Decoder::decode_bitstring(ASN1_BitString& out, ASN1_Type type_tag, ASN1_Class class_tag) { 1048| 11.6k| const BER_Object obj = get_next_object(); 1049| | 1050| 11.6k| std::vector bits; 1051| 11.6k| uint8_t unused_bits = 0; 1052| | 1053| 11.6k| if(is_constructed(obj.class_tag())) { ------------------ | Branch (1053:7): [True: 44, False: 11.5k] ------------------ 1054| 44| obj.assert_is_a(type_tag, class_tag | ASN1_Class::Constructed); 1055| 44| if(m_limits.require_der_encoding()) { ------------------ | Branch (1055:10): [True: 2, False: 42] ------------------ 1056| 2| throw BER_Decoding_Error("Detected constructed string encoding in DER structure"); 1057| 2| } 1058| 42| bits.reserve(obj.length()); // upper possible bound on the output size 1059| 42| unused_bits = asn1_concat_constructed_bit_string(bits, obj, m_limits, 0); 1060| 11.5k| } else { 1061| 11.5k| unused_bits = asn1_bitstring_unused_bits(obj, type_tag, class_tag, m_limits.require_der_encoding()); 1062| 11.5k| bits.assign(obj.bits() + 1, obj.bits() + obj.length()); 1063| 11.5k| } 1064| | 1065| 11.5k| if(unused_bits > 0 && !bits.empty()) { ------------------ | Branch (1065:7): [True: 1.76k, False: 9.83k] | Branch (1065:26): [True: 1.76k, False: 0] ------------------ 1066| 1.76k| bits.back() &= static_cast(0xFF << unused_bits); 1067| 1.76k| } 1068| | 1069| 11.5k| out = ASN1_BitString(std::move(bits), unused_bits); 1070| 11.5k| return (*this); 1071| 11.6k|} _ZN5Botan11BER_Decoder22decode_named_bitstringERmmNS_9ASN1_TypeENS_10ASN1_ClassE: 1076| 1.96k| ASN1_Class class_tag) { 1077| 1.96k| if(width > 64) { ------------------ | Branch (1077:7): [True: 0, False: 1.96k] ------------------ 1078| 0| throw Invalid_Argument("BER_Decoder: Named BIT STRING width is too large"); 1079| 0| } 1080| | 1081| 1.96k| ASN1_BitString bits; 1082| 1.96k| decode_bitstring(bits, type_tag, class_tag); 1083| | 1084| 1.96k| if(bits.bit_length() > width) { ------------------ | Branch (1084:7): [True: 1, False: 1.96k] ------------------ 1085| 1| throw BER_Decoding_Error("Named BIT STRING exceeds declared width"); 1086| 1| } 1087| | 1088| 1.96k| if(m_limits.require_der_encoding() && bits.bit_length() > 0 && !bits.bit_at(bits.bit_length() - 1)) { ------------------ | Branch (1088:7): [True: 1.71k, False: 251] | Branch (1088:42): [True: 1.70k, False: 12] | Branch (1088:67): [True: 117, False: 1.58k] ------------------ 1089| 117| throw BER_Decoding_Error("Named BIT STRING is not minimally encoded"); 1090| 117| } 1091| | 1092| 1.84k| uint64_t decoded = 0; 1093| 8.64k| for(size_t bit = 0; bit != bits.bit_length(); ++bit) { ------------------ | Branch (1093:24): [True: 6.79k, False: 1.84k] ------------------ 1094| 6.79k| if(bits.bit_at(bit)) { ------------------ | Branch (1094:10): [True: 3.29k, False: 3.50k] ------------------ 1095| 3.29k| decoded |= uint64_t(1) << (width - 1 - bit); 1096| 3.29k| } 1097| 6.79k| } 1098| | 1099| 1.84k| out = decoded; 1100| 1.84k| return (*this); 1101| 1.96k|} _ZN5Botan4ASN120is_single_der_objectENSt3__14spanIKhLm18446744073709551615EEENS_9ASN1_TypeENS_10ASN1_ClassE: 1105| 3.91k|bool is_single_der_object(std::span bytes, ASN1_Type expected_type, ASN1_Class expected_class) { 1106| 3.91k| if(bytes.empty()) { ------------------ | Branch (1106:7): [True: 0, False: 3.91k] ------------------ 1107| 0| return false; 1108| 0| } 1109| | 1110| 3.91k| try { 1111| 3.91k| DataSource_Span src(bytes); 1112| | 1113| 3.91k| ASN1_Type type_tag = ASN1_Type::NoObject; 1114| 3.91k| ASN1_Class class_tag = ASN1_Class::NoObject; 1115| 3.91k| const size_t tag_bytes = decode_tag(&src, type_tag, class_tag); 1116| | 1117| 3.91k| if(type_tag != expected_type || class_tag != expected_class) { ------------------ | Branch (1117:10): [True: 2.06k, False: 1.85k] | Branch (1117:39): [True: 2, False: 1.84k] ------------------ 1118| 2.03k| return false; 1119| 2.03k| } 1120| | 1121| 1.88k| const auto dl = decode_length(&src, /*allow_indef=*/0, /*der_mode=*/true, is_constructed(expected_class)); 1122| | 1123| 1.88k| const size_t header_bytes = tag_bytes + dl.field_length(); 1124| 1.88k| if(header_bytes > bytes.size()) { ------------------ | Branch (1124:10): [True: 0, False: 1.88k] ------------------ 1125| 0| return false; 1126| 0| } 1127| 1.88k| return dl.content_length() == bytes.size() - header_bytes; 1128| 1.88k| } catch(Decoding_Error&) { 1129| 34| return false; 1130| 34| } 1131| 3.91k|} _ZN5Botan4ASN122is_der_sequence_headerENSt3__14spanIKhLm18446744073709551615EEE: 1133| 1.89k|bool is_der_sequence_header(std::span bytes) { 1134| 1.89k| return is_single_der_object(bytes, ASN1_Type::Sequence, ASN1_Class::Universal | ASN1_Class::Constructed); 1135| 1.89k|} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_110decode_tagEPNS_10DataSourceERNS_9ASN1_TypeERNS_10ASN1_ClassE: 29| 227k|size_t decode_tag(DataSource* ber, ASN1_Type& type_tag, ASN1_Class& class_tag) { 30| 227k| auto b = ber->read_byte(); 31| | 32| 227k| if(!b) { ------------------ | Branch (32:7): [True: 3.32k, False: 223k] ------------------ 33| 3.32k| type_tag = ASN1_Type::NoObject; 34| 3.32k| class_tag = ASN1_Class::NoObject; 35| 3.32k| return 0; 36| 3.32k| } 37| | 38| 223k| if((*b & 0x1F) != 0x1F) { ------------------ | Branch (38:7): [True: 223k, False: 418] ------------------ 39| 223k| type_tag = ASN1_Type(*b & 0x1F); 40| 223k| class_tag = ASN1_Class(*b & 0xE0); 41| | // The EOC marker is primitive; a constructed universal tag 0 has no 42| | // valid meaning and would otherwise bypass the EOC handling, which 43| | // matches on (Eoc, Universal) exactly 44| 223k| if(type_tag == ASN1_Type::Eoc && class_tag == ASN1_Class::Constructed) { ------------------ | Branch (44:10): [True: 4.99k, False: 218k] | Branch (44:40): [True: 50, False: 4.94k] ------------------ 45| 50| throw BER_Decoding_Error("EOC tag with constructed encoding"); 46| 50| } 47| 223k| return 1; 48| 223k| } 49| | 50| 418| size_t tag_bytes = 1; 51| 418| class_tag = ASN1_Class(*b & 0xE0); 52| | 53| 418| uint32_t tag_buf = 0; 54| 1.23k| while(true) { ------------------ | Branch (54:10): [True: 1.23k, Folded] ------------------ 55| 1.23k| b = ber->read_byte(); 56| 1.23k| if(!b) { ------------------ | Branch (56:10): [True: 34, False: 1.20k] ------------------ 57| 34| throw BER_Decoding_Error("Long-form tag truncated"); 58| 34| } 59| | // Reject if shifting in another 7 bits would overflow the uint32_t tag 60| 1.20k| if((tag_buf >> 25) != 0) { ------------------ | Branch (60:10): [True: 22, False: 1.17k] ------------------ 61| 22| throw BER_Decoding_Error("Long-form tag overflowed 32 bits"); 62| 22| } 63| | // This is required even by BER (see X.690 section 8.1.2.4.2 sentence c). 64| | // Bits 7-1 of the first subsequent octet must not be all zero; this rules 65| | // out both 0x80 (continuation with no data) and 0x00 (a long-form encoding 66| | // of tag value 0, which collides with the EOC marker). 67| 1.17k| if(tag_bytes == 1 && (*b & 0x7F) == 0) { ------------------ | Branch (67:10): [True: 400, False: 778] | Branch (67:28): [True: 14, False: 386] ------------------ 68| 14| throw BER_Decoding_Error("Long form tag with leading zero"); 69| 14| } 70| 1.16k| ++tag_bytes; 71| 1.16k| tag_buf = (tag_buf << 7) | (*b & 0x7F); 72| 1.16k| if((*b & 0x80) == 0) { ------------------ | Branch (72:10): [True: 348, False: 816] ------------------ 73| 348| break; 74| 348| } 75| 1.16k| } 76| | // Per X.690 8.1.2.2, tag values 0-30 shall be encoded in the short form. 77| | // Long-form encoding is reserved for tag values >= 31 (X.690 8.1.2.3). 78| | // This is unconditional and applies to BER as well as DER. 79| 348| if(tag_buf <= 30) { ------------------ | Branch (79:7): [True: 39, False: 309] ------------------ 80| 39| throw BER_Decoding_Error("Long-form tag encoding used for small tag value"); 81| 39| } 82| | 83| 309| if(tag_buf == static_cast(ASN1_Type::NoObject)) { ------------------ | Branch (83:7): [True: 1, False: 308] ------------------ 84| 1| throw BER_Decoding_Error("Tag value collides with internal sentinel"); 85| 1| } 86| | 87| | // NOLINTNEXTLINE(clang-analyzer-optin.core.EnumCastOutOfRange) 88| 308| type_tag = ASN1_Type(tag_buf); 89| 308| return tag_bytes; 90| 309|} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_113decode_lengthEPNS_10DataSourceEmbb: 135| 221k|BerDecodedLength decode_length(DataSource* ber, size_t allow_indef, bool der_mode, bool constructed) { 136| 221k| uint8_t b = 0; 137| 221k| if(ber->read_byte(b) == 0) { ------------------ | Branch (137:7): [True: 45, False: 221k] ------------------ 138| 45| throw BER_Decoding_Error("Length field not found"); 139| 45| } 140| 221k| if((b & 0x80) == 0) { ------------------ | Branch (140:7): [True: 196k, False: 25.0k] ------------------ 141| 196k| return BerDecodedLength(b, 1); 142| 196k| } 143| | 144| 25.0k| const size_t num_length_bytes = (b & 0x7F); 145| 25.0k| if(num_length_bytes > 4) { ------------------ | Branch (145:7): [True: 1.02k, False: 24.0k] ------------------ 146| 1.02k| throw BER_Decoding_Error("Length field is too large"); 147| 1.02k| } 148| | 149| 24.0k| const size_t field_size = 1 + num_length_bytes; 150| | 151| 24.0k| if(num_length_bytes == 0) { ------------------ | Branch (151:7): [True: 81, False: 23.9k] ------------------ 152| 81| if(der_mode) { ------------------ | Branch (152:10): [True: 81, False: 0] ------------------ 153| 81| throw BER_Decoding_Error("Detected indefinite-length encoding in DER structure"); 154| 81| } else if(!constructed) { ------------------ | Branch (154:17): [True: 0, False: 0] ------------------ 155| | // Indefinite length is only valid for constructed types (X.690 8.1.3.2) 156| 0| throw BER_Decoding_Error("Indefinite-length encoding used with non-constructed type"); 157| 0| } else if(allow_indef == 0) { ------------------ | Branch (157:17): [True: 0, False: 0] ------------------ 158| 0| throw BER_Decoding_Error("Nested EOC markers too deep, rejecting to avoid stack exhaustion"); 159| 0| } else { 160| | // find_eoc returns bytes up to and including the EOC marker. 161| | // Return the content length; the caller consumes the EOC separately. 162| 0| const size_t eoc_len = find_eoc(ber, /*base_offset=*/0, allow_indef - 1); 163| 0| if(eoc_len < 2) { ------------------ | Branch (163:13): [True: 0, False: 0] ------------------ 164| 0| throw BER_Decoding_Error("Invalid EOC encoding"); 165| 0| } 166| 0| return BerDecodedLength::indefinite(eoc_len - 2, field_size); 167| 0| } 168| 81| } 169| | 170| 23.9k| size_t length = 0; 171| | 172| 69.7k| for(size_t i = 0; i != num_length_bytes; ++i) { ------------------ | Branch (172:22): [True: 45.7k, False: 23.9k] ------------------ 173| 45.7k| if(ber->read_byte(b) == 0) { ------------------ | Branch (173:10): [True: 7, False: 45.7k] ------------------ 174| 7| throw BER_Decoding_Error("Corrupted length field"); 175| 7| } 176| | // Can't overflow since we already checked that num_length_bytes <= 4 177| 45.7k| length = (length << 8) | b; 178| 45.7k| } 179| | 180| | // DER requires shortest possible length encoding 181| 23.9k| if(der_mode) { ------------------ | Branch (181:7): [True: 23.9k, False: 0] ------------------ 182| 23.9k| if(length < 128) { ------------------ | Branch (182:10): [True: 8, False: 23.9k] ------------------ 183| 8| throw BER_Decoding_Error("Detected non-canonical length encoding in DER structure"); 184| 8| } 185| 23.9k| if(num_length_bytes > 1 && length < (size_t(1) << ((num_length_bytes - 1) * 8))) { ------------------ | Branch (185:10): [True: 21.6k, False: 2.30k] | Branch (185:34): [True: 1, False: 21.6k] ------------------ 186| 1| throw BER_Decoding_Error("Detected non-canonical length encoding in DER structure"); 187| 1| } 188| 23.9k| } 189| | 190| 23.9k| return BerDecodedLength(length, field_size); 191| 23.9k|} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_116BerDecodedLengthC2Emm: 108| 220k| BerDecodedLength(content_length, field_length, false) {} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_116BerDecodedLengthC2Emmb: 125| 220k| m_content_length(content_length), m_field_length(field_length), m_indefinite(indefinite) {} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_18peek_tagEPKNS_10DataSourceEmRNS_9ASN1_TypeERNS_10ASN1_ClassE: 197| 16.2k|size_t peek_tag(const DataSource* src, size_t offset, ASN1_Type& type_tag, ASN1_Class& class_tag) { 198| 16.2k| uint8_t b = 0; 199| 16.2k| if(src->peek(&b, 1, offset) == 0) { ------------------ | Branch (199:7): [True: 0, False: 16.2k] ------------------ 200| 0| type_tag = ASN1_Type::NoObject; 201| 0| class_tag = ASN1_Class::NoObject; 202| 0| return 0; 203| 0| } 204| | 205| 16.2k| if((b & 0x1F) != 0x1F) { ------------------ | Branch (205:7): [True: 16.1k, False: 127] ------------------ 206| 16.1k| type_tag = ASN1_Type(b & 0x1F); 207| 16.1k| class_tag = ASN1_Class(b & 0xE0); 208| | // The EOC marker is primitive; a constructed universal tag 0 has no 209| | // valid meaning and would otherwise bypass the EOC handling, which 210| | // matches on (Eoc, Universal) exactly 211| 16.1k| if(type_tag == ASN1_Type::Eoc && class_tag == ASN1_Class::Constructed) { ------------------ | Branch (211:10): [True: 139, False: 15.9k] | Branch (211:40): [True: 1, False: 138] ------------------ 212| 1| throw BER_Decoding_Error("EOC tag with constructed encoding"); 213| 1| } 214| 16.1k| return 1; 215| 16.1k| } 216| | 217| 127| class_tag = ASN1_Class(b & 0xE0); 218| 127| size_t tag_bytes = 1; 219| 127| uint32_t tag_buf = 0; 220| | 221| 345| while(true) { ------------------ | Branch (221:10): [True: 345, Folded] ------------------ 222| 345| if(src->peek(&b, 1, offset + tag_bytes) == 0) { ------------------ | Branch (222:10): [True: 1, False: 344] ------------------ 223| 1| throw BER_Decoding_Error("Long-form tag truncated"); 224| 1| } 225| | // Reject if shifting in another 7 bits would overflow the uint32_t tag 226| 344| if((tag_buf >> 25) != 0) { ------------------ | Branch (226:10): [True: 9, False: 335] ------------------ 227| 9| throw BER_Decoding_Error("Long-form tag overflowed 32 bits"); 228| 9| } 229| | // Required even by BER (X.690 section 8.1.2.4.2 sentence c). 230| | // Bits 7-1 of the first subsequent octet must not be all zero; this rules 231| | // out both 0x80 (continuation with no data) and 0x00 (a long-form encoding 232| | // of tag value 0, which collides with the EOC marker). 233| 335| if(tag_bytes == 1 && (b & 0x7F) == 0) { ------------------ | Branch (233:10): [True: 127, False: 208] | Branch (233:28): [True: 1, False: 126] ------------------ 234| 1| throw BER_Decoding_Error("Long form tag with leading zero"); 235| 1| } 236| 334| ++tag_bytes; 237| 334| tag_buf = (tag_buf << 7) | (b & 0x7F); 238| 334| if((b & 0x80) == 0) { ------------------ | Branch (238:10): [True: 116, False: 218] ------------------ 239| 116| break; 240| 116| } 241| 334| } 242| | 243| | // Per X.690 8.1.2.2, tag values 0-30 shall be encoded in the short form. 244| | // Long-form encoding is reserved for tag values >= 31 (X.690 8.1.2.3). 245| | // This is unconditional and applies to BER as well as DER. 246| 116| if(tag_buf <= 30) { ------------------ | Branch (246:7): [True: 1, False: 115] ------------------ 247| 1| throw BER_Decoding_Error("Long-form tag encoding used for small tag value"); 248| 1| } 249| | 250| 115| if(tag_buf == static_cast(ASN1_Type::NoObject)) { ------------------ | Branch (250:7): [True: 0, False: 115] ------------------ 251| 0| throw BER_Decoding_Error("Tag value collides with internal sentinel"); 252| 0| } 253| | 254| | // NOLINTNEXTLINE(clang-analyzer-optin.core.EnumCastOutOfRange) 255| 115| type_tag = ASN1_Type(tag_buf); 256| 115| return tag_bytes; 257| 115|} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_111peek_lengthEPNS_10DataSourceEmRmmbb: 265| 16.2k| DataSource* src, size_t offset, size_t& field_size, size_t allow_indef, bool constructed, bool der_mode) { 266| 16.2k| uint8_t b = 0; 267| 16.2k| if(src->peek(&b, 1, offset) == 0) { ------------------ | Branch (267:7): [True: 12, False: 16.2k] ------------------ 268| 12| throw BER_Decoding_Error("Length field not found"); 269| 12| } 270| | 271| 16.2k| field_size = 1; 272| 16.2k| if((b & 0x80) == 0) { ------------------ | Branch (272:7): [True: 16.1k, False: 73] ------------------ 273| 16.1k| return b; 274| 16.1k| } 275| | 276| 73| const size_t num_length_bytes = (b & 0x7F); 277| 73| field_size += num_length_bytes; 278| 73| if(field_size > 5) { ------------------ | Branch (278:7): [True: 14, False: 59] ------------------ 279| 14| throw BER_Decoding_Error("Length field is too large"); 280| 14| } 281| | 282| 59| if(num_length_bytes == 0) { ------------------ | Branch (282:7): [True: 1, False: 58] ------------------ 283| | // Indefinite length is not allowed in DER 284| 1| if(der_mode) { ------------------ | Branch (284:10): [True: 1, False: 0] ------------------ 285| 1| throw BER_Decoding_Error("Detected indefinite-length encoding in DER structure"); 286| 1| } 287| | // Indefinite length is only valid for constructed types (X.690 8.1.3.2) 288| 0| if(!constructed) { ------------------ | Branch (288:10): [True: 0, False: 0] ------------------ 289| 0| throw BER_Decoding_Error("Indefinite-length encoding used with non-constructed type"); 290| 0| } 291| 0| if(allow_indef == 0) { ------------------ | Branch (291:10): [True: 0, False: 0] ------------------ 292| 0| throw BER_Decoding_Error("Nested EOC markers too deep, rejecting to avoid stack exhaustion"); 293| 0| } 294| 0| return find_eoc(src, offset + 1, allow_indef - 1); 295| 0| } 296| | 297| 58| size_t length = 0; 298| 248| for(size_t i = 0; i < num_length_bytes; ++i) { ------------------ | Branch (298:22): [True: 191, False: 57] ------------------ 299| 191| if(src->peek(&b, 1, offset + 1 + i) == 0) { ------------------ | Branch (299:10): [True: 1, False: 190] ------------------ 300| 1| throw BER_Decoding_Error("Corrupted length field"); 301| 1| } 302| 190| if(get_byte<0>(length) != 0) { ------------------ | Branch (302:10): [True: 0, False: 190] ------------------ 303| 0| throw BER_Decoding_Error("Field length overflow"); 304| 0| } 305| 190| length = (length << 8) | b; 306| 190| } 307| 57| return length; 308| 58|} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_114is_constructedENS_10ASN1_ClassE: 22| 276k|bool is_constructed(ASN1_Class class_tag) { 23| 276k| return (static_cast(class_tag) & static_cast(ASN1_Class::Constructed)) != 0; 24| 276k|} ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_116BerDecodedLength14content_lengthEv: 114| 869k| size_t content_length() const { return m_content_length; } ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_116BerDecodedLength17indefinite_lengthEv: 121| 216k| bool indefinite_length() const { return m_indefinite; } ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_116BerDecodedLength12total_lengthEv: 117| 218k| size_t total_length() const { return m_indefinite ? m_content_length + 2 : m_content_length; } ------------------ | Branch (117:44): [True: 0, False: 218k] ------------------ ber_dec.cpp:_ZN5Botan12_GLOBAL__N_120verify_set_is_sortedENSt3__14spanIKhLm18446744073709551615EEE: 426| 15.9k|void verify_set_is_sorted(std::span content) { 427| 15.9k| DataSource_Span src(content); 428| 15.9k| size_t offset = 0; 429| 15.9k| std::optional> prev; 430| | 431| 32.1k| while(offset < content.size()) { ------------------ | Branch (431:10): [True: 16.2k, False: 15.8k] ------------------ 432| 16.2k| ASN1_Type type_tag = ASN1_Type::NoObject; 433| 16.2k| ASN1_Class class_tag = ASN1_Class::NoObject; 434| 16.2k| const size_t tag_size = peek_tag(&src, offset, type_tag, class_tag); 435| | 436| 16.2k| size_t length_size = 0; 437| 16.2k| const size_t item_size = 438| 16.2k| peek_length(&src, offset + tag_size, length_size, /*allow_indef=*/0, is_constructed(class_tag), true); 439| | 440| 16.2k| const auto end = checked_add(offset, tag_size, length_size, item_size); 441| 16.2k| if(!end || *end > content.size()) { ------------------ | Branch (441:10): [True: 41, False: 16.1k] | Branch (441:18): [True: 69, False: 16.1k] ------------------ 442| 69| throw BER_Decoding_Error("SET element exceeds available data"); 443| 69| } 444| | 445| 16.1k| const auto elem = content.subspan(offset, *end - offset); 446| 16.1k| if(prev && std::lexicographical_compare(elem.begin(), elem.end(), prev->begin(), prev->end())) { ------------------ | Branch (446:10): [True: 212, False: 15.9k] | Branch (446:18): [True: 37, False: 175] ------------------ 447| 37| throw BER_Decoding_Error("Detected unsorted SET in DER structure"); 448| 37| } 449| 16.1k| prev = elem; 450| 16.1k| offset = *end; 451| 16.1k| } 452| 15.9k|} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_126asn1_bitstring_unused_bitsERKNS_10BER_ObjectENS_9ASN1_TypeENS_10ASN1_ClassEb: 990| 11.4k|uint8_t asn1_bitstring_unused_bits(const BER_Object& obj, ASN1_Type type_tag, ASN1_Class class_tag, bool require_der) { 991| 11.4k| obj.assert_is_a(type_tag, class_tag); 992| 11.4k| BOTAN_ASSERT_NOMSG(!is_constructed(obj)); ------------------ | | 84| 11.4k| do { \ | | 85| 11.4k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 11.4k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 11.4k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 11.4k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 11.4k] | | ------------------ ------------------ 993| | 994| 11.4k| if(obj.length() == 0) { ------------------ | Branch (994:7): [True: 3, False: 11.4k] ------------------ 995| 3| throw BER_Decoding_Error("Invalid BIT STRING"); 996| 3| } 997| | 998| 11.4k| const uint8_t unused_bits = obj.bits()[0]; 999| | 1000| 11.4k| if(unused_bits >= 8) { ------------------ | Branch (1000:7): [True: 56, False: 11.4k] ------------------ 1001| 56| throw BER_Decoding_Error("Invalid number of unused bits in BIT STRING"); 1002| 56| } 1003| | 1004| 11.4k| if(obj.length() == 1 && unused_bits != 0) { ------------------ | Branch (1004:7): [True: 44, False: 11.3k] | Branch (1004:28): [True: 3, False: 41] ------------------ 1005| 3| throw BER_Decoding_Error("Invalid BIT STRING"); 1006| 3| } 1007| | 1008| 11.4k| if(require_der && unused_bits > 0) { ------------------ | Branch (1008:7): [True: 11.3k, False: 37] | Branch (1008:22): [True: 1.83k, False: 9.56k] ------------------ 1009| 1.83k| const uint8_t last_byte = obj.bits()[obj.length() - 1]; 1010| 1.83k| if((last_byte & ((1 << unused_bits) - 1)) != 0) { ------------------ | Branch (1010:10): [True: 67, False: 1.76k] ------------------ 1011| 67| throw BER_Decoding_Error("Detected non-zero padding bits in BIT STRING in DER structure"); 1012| 67| } 1013| 1.83k| } 1014| | 1015| 11.3k| return unused_bits; 1016| 11.4k|} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_114is_constructedERKNS_10BER_ObjectE: 838| 26.6k|bool is_constructed(const BER_Object& obj) { 839| 26.6k| return is_constructed(obj.class_tag()); 840| 26.6k|} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_115DataSource_SpanC2ENSt3__14spanIKhLm18446744073709551615EEE: 414| 19.8k| explicit DataSource_Span(std::span buf) : m_buf(buf) {} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_115DataSource_Span4readEPhm: 392| 5.96k| size_t read(uint8_t out[], size_t length) override { 393| 5.96k| const size_t got = std::min(m_buf.size() - m_offset, length); 394| 5.96k| copy_mem(out, m_buf.data() + m_offset, got); 395| 5.96k| m_offset += got; 396| 5.96k| return got; 397| 5.96k| } ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_115DataSource_Span4peekEPhmm: 399| 32.9k| size_t peek(uint8_t out[], size_t length, size_t peek_offset) const override { 400| 32.9k| if(peek_offset >= m_buf.size() - m_offset) { ------------------ | Branch (400:13): [True: 14, False: 32.9k] ------------------ 401| 14| return 0; 402| 14| } 403| 32.9k| const size_t got = std::min(m_buf.size() - m_offset - peek_offset, length); 404| 32.9k| copy_mem(out, m_buf.data() + m_offset + peek_offset, got); 405| 32.9k| return got; 406| 32.9k| } ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_116BerDecodedLength12field_lengthEv: 119| 1.84k| size_t field_length() const { return m_field_length; } ber_dec.cpp:_ZN5Botan12_GLOBAL__N_120DataSource_BERObjectC2EONS_10BER_ObjectE: 379| 92.6k| explicit DataSource_BERObject(BER_Object&& obj) : m_obj(std::move(obj)) {} ber_dec.cpp:_ZN5Botan12_GLOBAL__N_120DataSource_BERObject4readEPhm: 349| 526k| size_t read(uint8_t out[], size_t length) override { 350| 526k| BOTAN_ASSERT_NOMSG(m_offset <= m_obj.length()); ------------------ | | 84| 526k| do { \ | | 85| 526k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 526k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 526k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 526k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 526k] | | ------------------ ------------------ 351| 526k| const size_t got = std::min(m_obj.length() - m_offset, length); 352| 526k| copy_mem(out, m_obj.bits() + m_offset, got); 353| 526k| m_offset += got; 354| 526k| return got; 355| 526k| } ber_dec.cpp:_ZN5Botan12_GLOBAL__N_120DataSource_BERObject15check_availableEm: 370| 141k| bool check_available(size_t n) override { 371| 141k| BOTAN_ASSERT_NOMSG(m_offset <= m_obj.length()); ------------------ | | 84| 141k| do { \ | | 85| 141k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 141k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 141k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 141k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 141k] | | ------------------ ------------------ 372| 141k| return (n <= (m_obj.length() - m_offset)); 373| 141k| } ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_120DataSource_BERObject11end_of_dataEv: 375| 127k| bool end_of_data() const override { return get_bytes_read() == m_obj.length(); } ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_120DataSource_BERObject14get_bytes_readEv: 377| 127k| size_t get_bytes_read() const override { return m_offset; } ber_dec.cpp:_ZN5Botan12_GLOBAL__N_125asn1_decode_binary_stringINSt3__19allocatorIhEEEEvRNS2_6vectorIhT_EERKNS_10BER_ObjectENS_9ASN1_TypeESC_NS_10ASN1_ClassERKNS_11BER_Decoder6LimitsE: 932| 15.2k| const BER_Decoder::Limits& limits) { 933| | // DER requires BIT STRING and OCTET STRING to use primitive encoding; 934| | // in BER the constructed (fragmented) form is decoded by concatenation 935| 15.2k| if(is_constructed(obj)) { ------------------ | Branch (935:7): [True: 39, False: 15.1k] ------------------ 936| 39| obj.assert_is_a(type_tag, class_tag | ASN1_Class::Constructed); 937| | 938| 39| if(limits.require_der_encoding()) { ------------------ | Branch (938:10): [True: 3, False: 36] ------------------ 939| 3| throw BER_Decoding_Error("Detected constructed string encoding in DER structure"); 940| 3| } 941| | 942| | // Concatenate into a temporary so a failed decode leaves buffer unmodified 943| 36| std::vector concat; 944| 36| concat.reserve(obj.length()); // upper possible bound on the output size 945| 36| if(real_type == ASN1_Type::OctetString) { ------------------ | Branch (945:10): [True: 0, False: 36] ------------------ 946| 0| asn1_concat_constructed_octet_string(concat, obj, limits, 0); 947| 36| } else { 948| 36| asn1_concat_constructed_bit_string(concat, obj, limits, 0); 949| 36| } 950| 36| buffer = std::move(concat); 951| 36| return; 952| 39| } 953| | 954| 15.1k| obj.assert_is_a(type_tag, class_tag); 955| | 956| 15.1k| if(real_type == ASN1_Type::OctetString) { ------------------ | Branch (956:7): [True: 15.1k, False: 70] ------------------ 957| 15.1k| buffer.assign(obj.bits(), obj.bits() + obj.length()); 958| 15.1k| } else { 959| 70| if(obj.length() == 0) { ------------------ | Branch (959:10): [True: 1, False: 69] ------------------ 960| 1| throw BER_Decoding_Error("Invalid BIT STRING"); 961| 1| } 962| | 963| 69| const uint8_t unused_bits = obj.bits()[0]; 964| | 965| 69| if(unused_bits >= 8) { ------------------ | Branch (965:10): [True: 3, False: 66] ------------------ 966| 3| throw BER_Decoding_Error("Bad number of unused bits in BIT STRING"); 967| 3| } 968| | 969| | // Empty BIT STRING with unused bits > 0 ... 970| 66| if(unused_bits > 0 && obj.length() < 2) { ------------------ | Branch (970:10): [True: 7, False: 59] | Branch (970:29): [True: 1, False: 6] ------------------ 971| 1| throw BER_Decoding_Error("Invalid BIT STRING"); 972| 1| } 973| | 974| | // DER requires unused bits in BIT STRING to be zero (X.690 section 11.2.2) 975| 65| if(limits.require_der_encoding() && unused_bits > 0) { ------------------ | Branch (975:10): [True: 9, False: 56] | Branch (975:43): [True: 6, False: 3] ------------------ 976| 6| const uint8_t last_byte = obj.bits()[obj.length() - 1]; 977| 6| if((last_byte & ((1 << unused_bits) - 1)) != 0) { ------------------ | Branch (977:13): [True: 1, False: 5] ------------------ 978| 1| throw BER_Decoding_Error("Detected non-zero padding bits in BIT STRING in DER structure"); 979| 1| } 980| 6| } 981| | 982| 64| buffer.resize(obj.length() - 1); 983| | 984| 64| if(obj.length() > 1) { ------------------ | Branch (984:10): [True: 7, False: 57] ------------------ 985| 7| copy_mem(buffer.data(), obj.bits() + 1, obj.length() - 1); 986| 7| } 987| 64| } 988| 15.1k|} _ZN5Botan4ASN119der_sequence_headerEm: 71| 10.0k|std::vector der_sequence_header(size_t contents_len) { 72| 10.0k| std::vector header; 73| 10.0k| header.reserve(2 + sizeof(contents_len)); 74| 10.0k| encode_tag(header, ASN1_Type::Sequence, ASN1_Class::Constructed); 75| 10.0k| encode_length(header, contents_len); 76| 10.0k| return header; 77| 10.0k|} _ZN5Botan11DER_EncoderC2ERNSt3__16vectorIhNS1_9allocatorIhEEEE: 89| 18.4k|DER_Encoder::DER_Encoder(std::vector& vec) { 90| 18.4k| m_append_output = [&vec](const uint8_t b[], size_t l) { 91| 18.4k| if(l > 0) { 92| 18.4k| vec.insert(vec.end(), b, b + l); 93| 18.4k| } 94| 18.4k| }; 95| 18.4k|} _ZN5Botan11DER_Encoder12DER_Sequence13push_contentsERS0_: 100| 8.70k|void DER_Encoder::DER_Sequence::push_contents(DER_Encoder& der) { 101| 8.70k| const auto real_class_tag = m_class_tag | ASN1_Class::Constructed; 102| | 103| 8.70k| if(m_sort_contents) { ------------------ | Branch (103:7): [True: 0, False: 8.70k] ------------------ 104| 0| std::sort(m_set_contents.begin(), m_set_contents.end()); 105| 0| for(const auto& set_elem : m_set_contents) { ------------------ | Branch (105:32): [True: 0, False: 0] ------------------ 106| 0| m_contents += set_elem; 107| 0| } 108| 0| m_set_contents.clear(); 109| 0| } 110| | 111| 8.70k| der.add_object(m_type_tag, real_class_tag, m_contents.data(), m_contents.size()); 112| 8.70k| m_contents.clear(); 113| 8.70k|} _ZN5Botan11DER_Encoder12DER_Sequence9add_bytesEPKhm: 118| 5.69k|void DER_Encoder::DER_Sequence::add_bytes(const uint8_t data[], size_t length) { 119| 5.69k| if(m_sort_contents) { ------------------ | Branch (119:7): [True: 0, False: 5.69k] ------------------ 120| 0| if(length > 0) { ------------------ | Branch (120:10): [True: 0, False: 0] ------------------ 121| 0| m_set_contents.emplace_back(data, data + length); 122| 0| } else { 123| 0| m_set_contents.emplace_back(); 124| 0| } 125| 5.69k| } else { 126| 5.69k| m_contents += std::make_pair(data, length); 127| 5.69k| } 128| 5.69k|} _ZN5Botan11DER_Encoder12DER_Sequence9add_bytesEPKhmS3_m: 130| 11.5k|void DER_Encoder::DER_Sequence::add_bytes(const uint8_t hdr[], size_t hdr_len, const uint8_t val[], size_t val_len) { 131| 11.5k| if(m_sort_contents) { ------------------ | Branch (131:7): [True: 0, False: 11.5k] ------------------ 132| 0| secure_vector m; 133| 0| m.reserve(hdr_len + val_len); 134| 0| m += std::make_pair(hdr, hdr_len); 135| 0| m += std::make_pair(val, val_len); 136| 0| m_set_contents.push_back(std::move(m)); 137| 11.5k| } else { 138| 11.5k| m_contents += std::make_pair(hdr, hdr_len); 139| 11.5k| m_contents += std::make_pair(val, val_len); 140| 11.5k| } 141| 11.5k|} _ZN5Botan11DER_Encoder12DER_SequenceC2ENS_9ASN1_TypeENS_10ASN1_ClassEb: 154| 8.70k| m_type_tag(type_tag), 155| 8.70k| m_class_tag(class_tag), 156| 8.70k| m_sort_contents(sort_contents || (type_tag == ASN1_Type::Set && class_tag == ASN1_Class::Universal)) {} ------------------ | Branch (156:23): [True: 0, False: 8.70k] | Branch (156:41): [True: 0, False: 8.70k] | Branch (156:71): [True: 0, False: 0] ------------------ _ZN5Botan11DER_Encoder10start_consENS_9ASN1_TypeENS_10ASN1_ClassE: 192| 8.70k|DER_Encoder& DER_Encoder::start_cons(ASN1_Type type_tag, ASN1_Class class_tag) { 193| 8.70k| return start_cons(type_tag, class_tag, false); 194| 8.70k|} _ZN5Botan11DER_Encoder10start_consENS_9ASN1_TypeENS_10ASN1_ClassEb: 200| 8.70k|DER_Encoder& DER_Encoder::start_cons(ASN1_Type type_tag, ASN1_Class class_tag, bool sort_contents) { 201| 8.70k| m_subsequences.push_back(DER_Sequence(type_tag, class_tag, sort_contents)); 202| 8.70k| return (*this); 203| 8.70k|} _ZN5Botan11DER_Encoder8end_consEv: 208| 8.70k|DER_Encoder& DER_Encoder::end_cons() { 209| 8.70k| if(m_subsequences.empty()) { ------------------ | Branch (209:7): [True: 0, False: 8.70k] ------------------ 210| 0| throw Invalid_State("DER_Encoder::end_cons: No such sequence"); 211| 0| } 212| | 213| 8.70k| DER_Sequence last_seq = std::move(m_subsequences[m_subsequences.size() - 1]); 214| 8.70k| m_subsequences.pop_back(); 215| 8.70k| last_seq.push_contents(*this); 216| | 217| 8.70k| return (*this); 218| 8.70k|} _ZN5Botan11DER_Encoder9raw_bytesEPKhm: 237| 5.69k|DER_Encoder& DER_Encoder::raw_bytes(const uint8_t bytes[], size_t length) { 238| 5.69k| if(!m_subsequences.empty()) { ------------------ | Branch (238:7): [True: 5.69k, False: 0] ------------------ 239| 5.69k| m_subsequences[m_subsequences.size() - 1].add_bytes(bytes, length); 240| 5.69k| } else if(m_append_output) { ------------------ | Branch (240:14): [True: 0, False: 0] ------------------ 241| 0| m_append_output(bytes, length); 242| 0| } else { 243| 0| m_default_outbuf += std::make_pair(bytes, length); 244| 0| } 245| | 246| 5.69k| return (*this); 247| 5.69k|} _ZN5Botan11DER_Encoder10add_objectENS_9ASN1_TypeENS_10ASN1_ClassEPKhm: 285| 30.0k|DER_Encoder& DER_Encoder::add_object(ASN1_Type type_tag, ASN1_Class class_tag, const uint8_t rep[], size_t length) { 286| 30.0k| std::vector hdr; 287| 30.0k| encode_tag(hdr, type_tag, class_tag); 288| 30.0k| encode_length(hdr, length); 289| | 290| 30.0k| if(!m_subsequences.empty()) { ------------------ | Branch (290:7): [True: 11.5k, False: 18.4k] ------------------ 291| 11.5k| m_subsequences[m_subsequences.size() - 1].add_bytes(hdr.data(), hdr.size(), rep, length); 292| 18.4k| } else if(m_append_output) { ------------------ | Branch (292:14): [True: 18.4k, False: 0] ------------------ 293| 18.4k| m_append_output(hdr.data(), hdr.size()); 294| 18.4k| m_append_output(rep, length); 295| 18.4k| } else { 296| 0| m_default_outbuf += hdr; 297| 0| m_default_outbuf += std::make_pair(rep, length); 298| 0| } 299| | 300| 30.0k| return (*this); 301| 30.0k|} _ZN5Botan4ASN116integer_contentsERKNS_6BigIntE: 356| 3.73k|std::vector ASN1::integer_contents(const BigInt& n) { 357| 3.73k| if(n == 0) { ------------------ | Branch (357:7): [True: 87, False: 3.64k] ------------------ 358| 87| return {0x00}; 359| 87| } 360| | 361| | // Serialize magnitude with one extra leading byte 362| 3.64k| auto contents = n.serialize(n.bytes() + 1); 363| | 364| 3.64k| if(n.signum() < 0) { ------------------ | Branch (364:7): [True: 177, False: 3.47k] ------------------ 365| | // Two's complement: bitwise NOT then increment 366| 3.57k| for(auto& byte : contents) { ------------------ | Branch (366:22): [True: 3.57k, False: 177] ------------------ 367| 3.57k| byte = ~byte; 368| 3.57k| } 369| 476| for(size_t i = contents.size(); i > 0; --i) { ------------------ | Branch (369:39): [True: 476, False: 0] ------------------ 370| 476| if(++contents[i - 1] != 0) { ------------------ | Branch (370:13): [True: 177, False: 299] ------------------ 371| 177| break; 372| 177| } 373| 476| } 374| 177| } 375| | 376| | /* 377| | * DER requires the leading byte be emitted only if it required 378| | */ 379| 3.64k| BOTAN_ASSERT_NOMSG(contents.size() >= 2); ------------------ | | 84| 3.64k| do { \ | | 85| 3.64k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 3.64k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 3.64k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 3.64k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 3.64k] | | ------------------ ------------------ 380| 3.64k| const bool leading_byte_redundant = 381| 3.64k| (contents[0] == 0x00 && (contents[1] & 0x80) == 0) || (contents[0] == 0xFF && (contents[1] & 0x80) != 0); ------------------ | Branch (381:8): [True: 3.47k, False: 177] | Branch (381:31): [True: 1.45k, False: 2.01k] | Branch (381:62): [True: 177, False: 2.01k] | Branch (381:85): [True: 125, False: 52] ------------------ 382| | 383| 3.64k| if(leading_byte_redundant) { ------------------ | Branch (383:7): [True: 1.58k, False: 2.06k] ------------------ 384| 1.58k| contents.erase(contents.begin()); 385| 1.58k| } 386| 3.64k| return contents; 387| 3.73k|} _ZN5Botan11DER_Encoder16encode_bitstringENSt3__14spanIKhLm18446744073709551615EEEmNS_9ASN1_TypeENS_10ASN1_ClassE: 414| 2.84k| ASN1_Class class_tag) { 415| 2.84k| if(unused_bits >= 8) { ------------------ | Branch (415:7): [True: 0, False: 2.84k] ------------------ 416| 0| throw Invalid_Argument("DER_Encoder: Invalid unused bit count for BIT STRING"); 417| 0| } 418| | 419| 2.84k| if(bits.empty() && unused_bits != 0) { ------------------ | Branch (419:7): [True: 0, False: 2.84k] | Branch (419:23): [True: 0, False: 0] ------------------ 420| 0| throw Invalid_Argument("DER_Encoder: Empty BIT STRING cannot have unused bits"); 421| 0| } 422| | 423| 2.84k| if(unused_bits > 0 && (bits.back() & ((1U << unused_bits) - 1)) != 0) { ------------------ | Branch (423:7): [True: 0, False: 2.84k] | Branch (423:26): [True: 0, False: 0] ------------------ 424| 0| throw Invalid_Argument("DER_Encoder: BIT STRING unused bits must be zero"); 425| 0| } 426| | 427| 2.84k| secure_vector encoded; 428| 2.84k| encoded.reserve(1 + bits.size()); 429| 2.84k| encoded.push_back(static_cast(unused_bits)); 430| 2.84k| encoded.insert(encoded.end(), bits.begin(), bits.end()); 431| 2.84k| return add_object(type_tag, class_tag, encoded); 432| 2.84k|} _ZN5Botan11DER_Encoder6encodeERKNS_11ASN1_ObjectE: 467| 5.70k|DER_Encoder& DER_Encoder::encode(const ASN1_Object& obj) { 468| 5.70k| obj.encode_into(*this); 469| 5.70k| return (*this); 470| 5.70k|} der_enc.cpp:_ZN5Botan12_GLOBAL__N_110encode_tagERNSt3__16vectorIhNS1_9allocatorIhEEEENS_9ASN1_TypeENS_10ASN1_ClassE: 26| 40.1k|void encode_tag(std::vector& encoded_tag, ASN1_Type type_tag_e, ASN1_Class class_tag_e) { 27| 40.1k| const uint32_t type_tag = static_cast(type_tag_e); 28| 40.1k| const uint32_t class_tag = static_cast(class_tag_e); 29| | 30| 40.1k| if((class_tag | 0xE0) != 0xE0) { ------------------ | Branch (30:7): [True: 0, False: 40.1k] ------------------ 31| 0| throw Encoding_Error(fmt("DER_Encoder: Invalid class tag {}", std::to_string(class_tag))); 32| 0| } 33| | 34| 40.1k| if(type_tag <= 30) { ------------------ | Branch (34:7): [True: 40.0k, False: 4] ------------------ 35| 40.0k| encoded_tag.push_back(static_cast(type_tag | class_tag)); 36| 40.0k| } else { 37| 4| size_t blocks = high_bit(static_cast(type_tag)) + 6; 38| 4| blocks = (blocks - (blocks % 7)) / 7; 39| | 40| 4| BOTAN_ASSERT_NOMSG(blocks > 0); ------------------ | | 84| 4| do { \ | | 85| 4| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 4| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 4] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 4| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 4] | | ------------------ ------------------ 41| | 42| 4| encoded_tag.push_back(static_cast(class_tag | 0x1F)); 43| 10| for(size_t i = 0; i != blocks - 1; ++i) { ------------------ | Branch (43:25): [True: 6, False: 4] ------------------ 44| 6| encoded_tag.push_back(0x80 | ((type_tag >> 7 * (blocks - i - 1)) & 0x7F)); 45| 6| } 46| 4| encoded_tag.push_back(type_tag & 0x7F); 47| 4| } 48| 40.1k|} der_enc.cpp:_ZN5Botan12_GLOBAL__N_113encode_lengthERNSt3__16vectorIhNS1_9allocatorIhEEEEm: 53| 40.1k|void encode_length(std::vector& encoded_length, size_t length) { 54| 40.1k| if(length <= 127) { ------------------ | Branch (54:7): [True: 29.4k, False: 10.6k] ------------------ 55| 29.4k| encoded_length.push_back(static_cast(length)); 56| 29.4k| } else { 57| 10.6k| const size_t bytes_needed = significant_bytes(length); 58| | 59| 10.6k| encoded_length.push_back(static_cast(0x80 | bytes_needed)); 60| | 61| 31.4k| for(size_t i = sizeof(length) - bytes_needed; i < sizeof(length); ++i) { ------------------ | Branch (61:53): [True: 20.7k, False: 10.6k] ------------------ 62| 20.7k| encoded_length.push_back(get_byte_var(i, length)); 63| 20.7k| } 64| 10.6k| } 65| 40.1k|} der_enc.cpp:_ZZN5Botan11DER_EncoderC1ERNSt3__16vectorIhNS1_9allocatorIhEEEEENK3$_0clEPKhm: 90| 36.9k| m_append_output = [&vec](const uint8_t b[], size_t l) { 91| 36.9k| if(l > 0) { ------------------ | Branch (91:10): [True: 36.9k, False: 0] ------------------ 92| 36.9k| vec.insert(vec.end(), b, b + l); 93| 36.9k| } 94| 36.9k| }; _ZN5Botan7OID_MapC2Ev: 11| 1|OID_Map::OID_Map() { 12| 1| m_str2oid = OID_Map::load_str2oid_map(); 13| 1| m_oid2str = OID_Map::load_oid2str_map(); 14| 1|} _ZN5Botan7OID_Map15global_registryEv: 16| 8.17k|OID_Map& OID_Map::global_registry() { 17| 8.17k| static OID_Map g_map; 18| 8.17k| return g_map; 19| 8.17k|} _ZN5Botan7OID_Map7oid2strERKNS_3OIDE: 73| 3.28k|std::optional OID_Map::oid2str(const OID& oid) { 74| 3.28k| if(auto name = lookup_static_oid(oid)) { ------------------ | Branch (74:12): [True: 2.35k, False: 932] ------------------ 75| 2.35k| return std::string(*name); 76| 2.35k| } 77| | 78| 932| const lock_guard_type lock(m_mutex); 79| | 80| 932| const auto i = m_oid2str.find(oid); 81| 932| if(i != m_oid2str.end()) { ------------------ | Branch (81:7): [True: 0, False: 932] ------------------ 82| 0| return i->second; 83| 0| } 84| | 85| 932| return {}; 86| 932|} _ZN5Botan7OID_Map7str2oidENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 88| 4.88k|OID OID_Map::str2oid(std::string_view str) { 89| 4.88k| if(auto oid = lookup_static_oid_name(str)) { ------------------ | Branch (89:12): [True: 4.88k, False: 0] ------------------ 90| 4.88k| return std::move(*oid); 91| 4.88k| } 92| | 93| 0| const lock_guard_type lock(m_mutex); 94| 0| const auto i = m_str2oid.find(std::string(str)); 95| 0| if(i != m_str2oid.end()) { ------------------ | Branch (95:7): [True: 0, False: 0] ------------------ 96| 0| return i->second; 97| 0| } 98| | 99| 0| return OID(); 100| 0|} _ZN5Botan7OID_Map17lookup_static_oidERKNS_3OIDE: 48| 3.28k|std::optional OID_Map::lookup_static_oid(const OID& oid) { 49| 3.28k| const uint32_t hc = static_cast(oid.hash_code() % 858701); 50| | 51| 3.28k| switch(hc) { 52| 2| case 0x01506: ------------------ | Branch (52:7): [True: 2, False: 3.28k] ------------------ 53| 2| return if_match(oid, {1, 2, 840, 10045, 4, 3, 1}, "ECDSA/SHA-224"); 54| 2| case 0x01507: ------------------ | Branch (54:7): [True: 2, False: 3.28k] ------------------ 55| 2| return if_match(oid, {1, 2, 840, 10045, 4, 3, 2}, "ECDSA/SHA-256"); 56| 2| case 0x01508: ------------------ | Branch (56:7): [True: 2, False: 3.28k] ------------------ 57| 2| return if_match(oid, {1, 2, 840, 10045, 4, 3, 3}, "ECDSA/SHA-384"); 58| 2| case 0x01509: ------------------ | Branch (58:7): [True: 2, False: 3.28k] ------------------ 59| 2| return if_match(oid, {1, 2, 840, 10045, 4, 3, 4}, "ECDSA/SHA-512"); 60| 1| case 0x04C1E: ------------------ | Branch (60:7): [True: 1, False: 3.28k] ------------------ 61| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 3029, 1, 2, 1}, "ElGamal"); 62| 1| case 0x04E61: ------------------ | Branch (62:7): [True: 1, False: 3.28k] ------------------ 63| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 3029, 1, 5, 1}, "OpenPGP.Curve25519"); 64| 0| case 0x0779B: ------------------ | Branch (64:7): [True: 0, False: 3.28k] ------------------ 65| 0| return if_match(oid, {1, 2, 840, 113549, 2, 5}, "MD5"); 66| 1| case 0x0779D: ------------------ | Branch (66:7): [True: 1, False: 3.28k] ------------------ 67| 1| return if_match(oid, {1, 2, 840, 113549, 2, 7}, "HMAC(SHA-1)"); 68| 1| case 0x0779E: ------------------ | Branch (68:7): [True: 1, False: 3.28k] ------------------ 69| 1| return if_match(oid, {1, 2, 840, 113549, 2, 8}, "HMAC(SHA-224)"); 70| 1| case 0x0779F: ------------------ | Branch (70:7): [True: 1, False: 3.28k] ------------------ 71| 1| return if_match(oid, {1, 2, 840, 113549, 2, 9}, "HMAC(SHA-256)"); 72| 1| case 0x077A0: ------------------ | Branch (72:7): [True: 1, False: 3.28k] ------------------ 73| 1| return if_match(oid, {1, 2, 840, 113549, 2, 10}, "HMAC(SHA-384)"); 74| 1| case 0x077A1: ------------------ | Branch (74:7): [True: 1, False: 3.28k] ------------------ 75| 1| return if_match(oid, {1, 2, 840, 113549, 2, 11}, "HMAC(SHA-512)"); 76| 1| case 0x077A3: ------------------ | Branch (76:7): [True: 1, False: 3.28k] ------------------ 77| 1| return if_match(oid, {1, 2, 840, 113549, 2, 13}, "HMAC(SHA-512-256)"); 78| 1| case 0x0785E: ------------------ | Branch (78:7): [True: 1, False: 3.28k] ------------------ 79| 1| return if_match(oid, {1, 2, 840, 113549, 3, 7}, "TripleDES/CBC"); 80| 1| case 0x0C904: ------------------ | Branch (80:7): [True: 1, False: 3.28k] ------------------ 81| 1| return if_match(oid, {1, 0, 14888, 3, 0, 5}, "ECKCDSA"); 82| 1| case 0x11547: ------------------ | Branch (82:7): [True: 1, False: 3.28k] ------------------ 83| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 1}, "SphincsPlus-shake-128s-r3.1"); 84| 1| case 0x11548: ------------------ | Branch (84:7): [True: 1, False: 3.28k] ------------------ 85| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 2}, "SphincsPlus-shake-128f-r3.1"); 86| 1| case 0x11549: ------------------ | Branch (86:7): [True: 1, False: 3.28k] ------------------ 87| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 3}, "SphincsPlus-shake-192s-r3.1"); 88| 1| case 0x1154A: ------------------ | Branch (88:7): [True: 1, False: 3.28k] ------------------ 89| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 4}, "SphincsPlus-shake-192f-r3.1"); 90| 1| case 0x1154B: ------------------ | Branch (90:7): [True: 1, False: 3.28k] ------------------ 91| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 5}, "SphincsPlus-shake-256s-r3.1"); 92| 1| case 0x1154C: ------------------ | Branch (92:7): [True: 1, False: 3.28k] ------------------ 93| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 6}, "SphincsPlus-shake-256f-r3.1"); 94| 1| case 0x11608: ------------------ | Branch (94:7): [True: 1, False: 3.28k] ------------------ 95| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 1}, "SphincsPlus-sha2-128s-r3.1"); 96| 1| case 0x11609: ------------------ | Branch (96:7): [True: 1, False: 3.28k] ------------------ 97| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 2}, "SphincsPlus-sha2-128f-r3.1"); 98| 1| case 0x1160A: ------------------ | Branch (98:7): [True: 1, False: 3.28k] ------------------ 99| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 3}, "SphincsPlus-sha2-192s-r3.1"); 100| 1| case 0x1160B: ------------------ | Branch (100:7): [True: 1, False: 3.28k] ------------------ 101| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 4}, "SphincsPlus-sha2-192f-r3.1"); 102| 1| case 0x1160C: ------------------ | Branch (102:7): [True: 1, False: 3.28k] ------------------ 103| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 5}, "SphincsPlus-sha2-256s-r3.1"); 104| 1| case 0x1160D: ------------------ | Branch (104:7): [True: 1, False: 3.28k] ------------------ 105| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 6}, "SphincsPlus-sha2-256f-r3.1"); 106| 1| case 0x116C9: ------------------ | Branch (106:7): [True: 1, False: 3.28k] ------------------ 107| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 1}, "SphincsPlus-haraka-128s-r3.1"); 108| 1| case 0x116CA: ------------------ | Branch (108:7): [True: 1, False: 3.28k] ------------------ 109| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 2}, "SphincsPlus-haraka-128f-r3.1"); 110| 1| case 0x116CB: ------------------ | Branch (110:7): [True: 1, False: 3.28k] ------------------ 111| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 3}, "SphincsPlus-haraka-192s-r3.1"); 112| 1| case 0x116CC: ------------------ | Branch (112:7): [True: 1, False: 3.28k] ------------------ 113| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 4}, "SphincsPlus-haraka-192f-r3.1"); 114| 1| case 0x116CD: ------------------ | Branch (114:7): [True: 1, False: 3.28k] ------------------ 115| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 5}, "SphincsPlus-haraka-256s-r3.1"); 116| 1| case 0x116CE: ------------------ | Branch (116:7): [True: 1, False: 3.28k] ------------------ 117| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 6}, "SphincsPlus-haraka-256f-r3.1"); 118| 1| case 0x1533B: ------------------ | Branch (118:7): [True: 1, False: 3.28k] ------------------ 119| 1| return if_match(oid, {1, 2, 156, 10197, 1, 104, 2}, "SM4/CBC"); 120| 1| case 0x15341: ------------------ | Branch (120:7): [True: 1, False: 3.28k] ------------------ 121| 1| return if_match(oid, {1, 2, 156, 10197, 1, 104, 8}, "SM4/GCM"); 122| 0| case 0x1539D: ------------------ | Branch (122:7): [True: 0, False: 3.28k] ------------------ 123| 0| return if_match(oid, {1, 2, 156, 10197, 1, 104, 100}, "SM4/OCB"); 124| 1| case 0x187D7: ------------------ | Branch (124:7): [True: 1, False: 3.28k] ------------------ 125| 1| return if_match(oid, {1, 3, 14, 3, 2, 7}, "DES/CBC"); 126| 1| case 0x187EA: ------------------ | Branch (126:7): [True: 1, False: 3.28k] ------------------ 127| 1| return if_match(oid, {1, 3, 14, 3, 2, 26}, "SHA-1"); 128| 1| case 0x19933: ------------------ | Branch (128:7): [True: 1, False: 3.28k] ------------------ 129| 1| return if_match(oid, {1, 3, 132, 0, 8}, "secp160r1"); 130| 1| case 0x19934: ------------------ | Branch (130:7): [True: 1, False: 3.28k] ------------------ 131| 1| return if_match(oid, {1, 3, 132, 0, 9}, "secp160k1"); 132| 2| case 0x19935: ------------------ | Branch (132:7): [True: 2, False: 3.28k] ------------------ 133| 2| return if_match(oid, {1, 3, 132, 0, 10}, "secp256k1"); 134| 2| case 0x19949: ------------------ | Branch (134:7): [True: 2, False: 3.28k] ------------------ 135| 2| return if_match(oid, {1, 3, 132, 0, 30}, "secp160r2"); 136| 2| case 0x1994A: ------------------ | Branch (136:7): [True: 2, False: 3.28k] ------------------ 137| 2| return if_match(oid, {1, 3, 132, 0, 31}, "secp192k1"); 138| 2| case 0x1994B: ------------------ | Branch (138:7): [True: 2, False: 3.28k] ------------------ 139| 2| return if_match(oid, {1, 3, 132, 0, 32}, "secp224k1"); 140| 2| case 0x1994C: ------------------ | Branch (140:7): [True: 2, False: 3.28k] ------------------ 141| 2| return if_match(oid, {1, 3, 132, 0, 33}, "secp224r1"); 142| 2| case 0x1994D: ------------------ | Branch (142:7): [True: 2, False: 3.28k] ------------------ 143| 2| return if_match(oid, {1, 3, 132, 0, 34}, "secp384r1"); 144| 2| case 0x1994E: ------------------ | Branch (144:7): [True: 2, False: 3.28k] ------------------ 145| 2| return if_match(oid, {1, 3, 132, 0, 35}, "secp521r1"); 146| 1| case 0x199F8: ------------------ | Branch (146:7): [True: 1, False: 3.28k] ------------------ 147| 1| return if_match(oid, {1, 3, 132, 1, 12}, "ECDH"); 148| 1| case 0x1E7BF: ------------------ | Branch (148:7): [True: 1, False: 3.28k] ------------------ 149| 1| return if_match(oid, {1, 2, 156, 10197, 1, 301, 1}, "SM2"); 150| 1| case 0x1E7C0: ------------------ | Branch (150:7): [True: 1, False: 3.28k] ------------------ 151| 1| return if_match(oid, {1, 2, 156, 10197, 1, 301, 2}, "SM2_Kex"); 152| 1| case 0x1E7C1: ------------------ | Branch (152:7): [True: 1, False: 3.28k] ------------------ 153| 1| return if_match(oid, {1, 2, 156, 10197, 1, 301, 3}, "SM2_Enc"); 154| 1| case 0x21960: ------------------ | Branch (154:7): [True: 1, False: 3.28k] ------------------ 155| 1| return if_match(oid, {1, 3, 36, 3, 3, 1, 2}, "RSA/PKCS1v15(RIPEMD-160)"); 156| 1| case 0x2198A: ------------------ | Branch (156:7): [True: 1, False: 3.28k] ------------------ 157| 1| return if_match(oid, {1, 2, 840, 113533, 7, 66, 10}, "CAST-128/CBC"); 158| 1| case 0x2198F: ------------------ | Branch (158:7): [True: 1, False: 3.28k] ------------------ 159| 1| return if_match(oid, {1, 2, 840, 113533, 7, 66, 15}, "KeyWrap.CAST-128"); 160| 1| case 0x227C0: ------------------ | Branch (160:7): [True: 1, False: 3.28k] ------------------ 161| 1| return if_match(oid, {1, 3, 101, 110}, "X25519"); 162| 1| case 0x227C1: ------------------ | Branch (162:7): [True: 1, False: 3.28k] ------------------ 163| 1| return if_match(oid, {1, 3, 101, 111}, "X448"); 164| 1| case 0x227C2: ------------------ | Branch (164:7): [True: 1, False: 3.28k] ------------------ 165| 1| return if_match(oid, {1, 3, 101, 112}, "Ed25519"); 166| 1| case 0x227C3: ------------------ | Branch (166:7): [True: 1, False: 3.28k] ------------------ 167| 1| return if_match(oid, {1, 3, 101, 113}, "Ed448"); 168| 1| case 0x27565: ------------------ | Branch (168:7): [True: 1, False: 3.28k] ------------------ 169| 1| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 48, 1, 1}, "PKIX.OCSP.BasicResponse"); 170| 1| case 0x27566: ------------------ | Branch (170:7): [True: 1, False: 3.28k] ------------------ 171| 1| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 48, 1, 2}, "PKIX.OCSP.Nonce"); 172| 1| case 0x27569: ------------------ | Branch (172:7): [True: 1, False: 3.28k] ------------------ 173| 1| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 48, 1, 5}, "PKIX.OCSP.NoCheck"); 174| 0| case 0x29F7C: ------------------ | Branch (174:7): [True: 0, False: 3.28k] ------------------ 175| 0| return if_match(oid, {1, 2, 410, 200004, 1, 100, 4, 3}, "ECKCDSA/SHA-1"); 176| 0| case 0x29F7D: ------------------ | Branch (176:7): [True: 0, False: 3.28k] ------------------ 177| 0| return if_match(oid, {1, 2, 410, 200004, 1, 100, 4, 4}, "ECKCDSA/SHA-224"); 178| 0| case 0x29F7E: ------------------ | Branch (178:7): [True: 0, False: 3.28k] ------------------ 179| 0| return if_match(oid, {1, 2, 410, 200004, 1, 100, 4, 5}, "ECKCDSA/SHA-256"); 180| 1| case 0x2AC3B: ------------------ | Branch (180:7): [True: 1, False: 3.28k] ------------------ 181| 1| return if_match(oid, {2, 5, 29, 32, 0}, "X509v3.AnyPolicy"); 182| 1| case 0x2B000: ------------------ | Branch (182:7): [True: 1, False: 3.28k] ------------------ 183| 1| return if_match(oid, {2, 5, 29, 37, 0}, "X509v3.AnyExtendedKeyUsage"); 184| 396| case 0x2B5C9: ------------------ | Branch (184:7): [True: 396, False: 2.89k] ------------------ 185| 396| return if_match(oid, {1, 2, 840, 10045, 2, 1}, "ECDSA"); 186| 3| case 0x2B74B: ------------------ | Branch (186:7): [True: 3, False: 3.28k] ------------------ 187| 3| return if_match(oid, {1, 2, 840, 10045, 4, 1}, "ECDSA/SHA-1"); 188| 4| case 0x3474A: ------------------ | Branch (188:7): [True: 4, False: 3.28k] ------------------ 189| 4| return if_match(oid, {1, 2, 840, 10046, 2, 1}, "DH"); 190| 1| case 0x38D6D: ------------------ | Branch (190:7): [True: 1, False: 3.28k] ------------------ 191| 1| return if_match(oid, {1, 2, 643, 7, 1, 2, 1, 1, 1}, "gost_256A"); 192| 1| case 0x38D6E: ------------------ | Branch (192:7): [True: 1, False: 3.28k] ------------------ 193| 1| return if_match(oid, {1, 2, 643, 7, 1, 2, 1, 1, 2}, "gost_256B"); 194| 1| case 0x38E2E: ------------------ | Branch (194:7): [True: 1, False: 3.28k] ------------------ 195| 1| return if_match(oid, {1, 2, 643, 7, 1, 2, 1, 2, 1}, "gost_512A"); 196| 1| case 0x38E2F: ------------------ | Branch (196:7): [True: 1, False: 3.28k] ------------------ 197| 1| return if_match(oid, {1, 2, 643, 7, 1, 2, 1, 2, 2}, "gost_512B"); 198| 1| case 0x38F2C: ------------------ | Branch (198:7): [True: 1, False: 3.28k] ------------------ 199| 1| return if_match(oid, {1, 2, 643, 2, 2, 3}, "GOST-34.10/GOST-R-34.11-94"); 200| 1| case 0x38F3C: ------------------ | Branch (200:7): [True: 1, False: 3.28k] ------------------ 201| 1| return if_match(oid, {1, 2, 643, 2, 2, 19}, "GOST-34.10"); 202| 1| case 0x3D7B8: ------------------ | Branch (202:7): [True: 1, False: 3.28k] ------------------ 203| 1| return if_match(oid, {0, 3, 4401, 5, 3, 1, 9, 6}, "Camellia-128/GCM"); 204| 1| case 0x3D7CC: ------------------ | Branch (204:7): [True: 1, False: 3.28k] ------------------ 205| 1| return if_match(oid, {0, 3, 4401, 5, 3, 1, 9, 26}, "Camellia-192/GCM"); 206| 1| case 0x3D7E0: ------------------ | Branch (206:7): [True: 1, False: 3.28k] ------------------ 207| 1| return if_match(oid, {0, 3, 4401, 5, 3, 1, 9, 46}, "Camellia-256/GCM"); 208| 0| case 0x3F20F: ------------------ | Branch (208:7): [True: 0, False: 3.28k] ------------------ 209| 0| return if_match(oid, {1, 3, 36, 3, 2, 1}, "RIPEMD-160"); 210| 0| case 0x4266E: ------------------ | Branch (210:7): [True: 0, False: 3.28k] ------------------ 211| 0| return if_match(oid, {0, 4, 0, 127, 0, 15, 1, 1, 13, 0}, "XMSS"); 212| 1| case 0x478C4: ------------------ | Branch (212:7): [True: 1, False: 3.28k] ------------------ 213| 1| return if_match(oid, {1, 2, 410, 200004, 1, 4}, "SEED/CBC"); 214| 1| case 0x47D98: ------------------ | Branch (214:7): [True: 1, False: 3.28k] ------------------ 215| 1| return if_match(oid, {1, 2, 156, 10197, 1, 301}, "sm2p256v1"); 216| 0| case 0x47DFC: ------------------ | Branch (216:7): [True: 0, False: 3.28k] ------------------ 217| 0| return if_match(oid, {1, 2, 156, 10197, 1, 401}, "SM3"); 218| 1| case 0x47E60: ------------------ | Branch (218:7): [True: 1, False: 3.28k] ------------------ 219| 1| return if_match(oid, {1, 2, 156, 10197, 1, 501}, "SM2_Sig/SM3"); 220| 1| case 0x47E63: ------------------ | Branch (220:7): [True: 1, False: 3.28k] ------------------ 221| 1| return if_match(oid, {1, 2, 156, 10197, 1, 504}, "RSA/PKCS1v15(SM3)"); 222| 1| case 0x52B13: ------------------ | Branch (222:7): [True: 1, False: 3.28k] ------------------ 223| 1| return if_match(oid, {1, 2, 643, 3, 131, 1, 1}, "GOST.INN"); 224| 0| case 0x635AE: ------------------ | Branch (224:7): [True: 0, False: 3.28k] ------------------ 225| 0| return if_match(oid, {1, 2, 250, 1, 223, 101, 256, 1}, "frp256v1"); 226| 0| case 0x6A784: ------------------ | Branch (226:7): [True: 0, False: 3.28k] ------------------ 227| 0| return if_match(oid, {1, 2, 840, 113549, 1, 12, 10, 1, 1}, "PKCS12.KeyBag"); 228| 1| case 0x6A785: ------------------ | Branch (228:7): [True: 1, False: 3.28k] ------------------ 229| 1| return if_match(oid, {1, 2, 840, 113549, 1, 12, 10, 1, 2}, "PKCS12.PKCS8ShroudedKeyBag"); 230| 1| case 0x6A786: ------------------ | Branch (230:7): [True: 1, False: 3.28k] ------------------ 231| 1| return if_match(oid, {1, 2, 840, 113549, 1, 12, 10, 1, 3}, "PKCS12.CertBag"); 232| 1| case 0x6A787: ------------------ | Branch (232:7): [True: 1, False: 3.28k] ------------------ 233| 1| return if_match(oid, {1, 2, 840, 113549, 1, 12, 10, 1, 4}, "PKCS12.CRLBag"); 234| 1| case 0x6A788: ------------------ | Branch (234:7): [True: 1, False: 3.28k] ------------------ 235| 1| return if_match(oid, {1, 2, 840, 113549, 1, 12, 10, 1, 5}, "PKCS12.SecretBag"); 236| 1| case 0x6A789: ------------------ | Branch (236:7): [True: 1, False: 3.28k] ------------------ 237| 1| return if_match(oid, {1, 2, 840, 113549, 1, 12, 10, 1, 6}, "PKCS12.SafeContentsBag"); 238| 1| case 0x6EB86: ------------------ | Branch (238:7): [True: 1, False: 3.28k] ------------------ 239| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 6, 1}, "GOST-34.10-2012-256/SHA-256"); 240| 1| case 0x6EC47: ------------------ | Branch (240:7): [True: 1, False: 3.28k] ------------------ 241| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 7, 1}, "Kyber-512-r3"); 242| 1| case 0x6EC48: ------------------ | Branch (242:7): [True: 1, False: 3.28k] ------------------ 243| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 7, 2}, "Kyber-768-r3"); 244| 1| case 0x6EC49: ------------------ | Branch (244:7): [True: 1, False: 3.28k] ------------------ 245| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 7, 3}, "Kyber-1024-r3"); 246| 1| case 0x6EDC9: ------------------ | Branch (246:7): [True: 1, False: 3.28k] ------------------ 247| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 9, 1}, "Dilithium-4x4-r3"); 248| 1| case 0x6EDCA: ------------------ | Branch (248:7): [True: 1, False: 3.28k] ------------------ 249| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 9, 2}, "Dilithium-6x5-r3"); 250| 1| case 0x6EDCB: ------------------ | Branch (250:7): [True: 1, False: 3.28k] ------------------ 251| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 9, 3}, "Dilithium-8x7-r3"); 252| 1| case 0x6EE8A: ------------------ | Branch (252:7): [True: 1, False: 3.28k] ------------------ 253| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 10, 1}, "Dilithium-4x4-AES-r3"); 254| 1| case 0x6EE8B: ------------------ | Branch (254:7): [True: 1, False: 3.28k] ------------------ 255| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 10, 2}, "Dilithium-6x5-AES-r3"); 256| 1| case 0x6EE8C: ------------------ | Branch (256:7): [True: 1, False: 3.28k] ------------------ 257| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 10, 3}, "Dilithium-8x7-AES-r3"); 258| 1| case 0x6EF4B: ------------------ | Branch (258:7): [True: 1, False: 3.28k] ------------------ 259| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 11, 1}, "Kyber-512-90s-r3"); 260| 1| case 0x6EF4C: ------------------ | Branch (260:7): [True: 1, False: 3.28k] ------------------ 261| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 11, 2}, "Kyber-768-90s-r3"); 262| 1| case 0x6EF4D: ------------------ | Branch (262:7): [True: 1, False: 3.28k] ------------------ 263| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 11, 3}, "Kyber-1024-90s-r3"); 264| 1| case 0x6F18E: ------------------ | Branch (264:7): [True: 1, False: 3.28k] ------------------ 265| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 14, 1}, "FrodoKEM-640-SHAKE"); 266| 1| case 0x6F18F: ------------------ | Branch (266:7): [True: 1, False: 3.28k] ------------------ 267| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 14, 2}, "FrodoKEM-976-SHAKE"); 268| 1| case 0x6F190: ------------------ | Branch (268:7): [True: 1, False: 3.28k] ------------------ 269| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 14, 3}, "FrodoKEM-1344-SHAKE"); 270| 1| case 0x6F24F: ------------------ | Branch (270:7): [True: 1, False: 3.28k] ------------------ 271| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 15, 1}, "FrodoKEM-640-AES"); 272| 1| case 0x6F250: ------------------ | Branch (272:7): [True: 1, False: 3.28k] ------------------ 273| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 15, 2}, "FrodoKEM-976-AES"); 274| 1| case 0x6F251: ------------------ | Branch (274:7): [True: 1, False: 3.28k] ------------------ 275| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 15, 3}, "FrodoKEM-1344-AES"); 276| 1| case 0x6F310: ------------------ | Branch (276:7): [True: 1, False: 3.28k] ------------------ 277| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 16, 1}, "eFrodoKEM-640-SHAKE"); 278| 1| case 0x6F311: ------------------ | Branch (278:7): [True: 1, False: 3.28k] ------------------ 279| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 16, 2}, "eFrodoKEM-976-SHAKE"); 280| 1| case 0x6F312: ------------------ | Branch (280:7): [True: 1, False: 3.28k] ------------------ 281| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 16, 3}, "eFrodoKEM-1344-SHAKE"); 282| 1| case 0x6F3D1: ------------------ | Branch (282:7): [True: 1, False: 3.28k] ------------------ 283| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 17, 1}, "eFrodoKEM-640-AES"); 284| 1| case 0x6F3D2: ------------------ | Branch (284:7): [True: 1, False: 3.28k] ------------------ 285| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 17, 2}, "eFrodoKEM-976-AES"); 286| 1| case 0x6F3D3: ------------------ | Branch (286:7): [True: 1, False: 3.28k] ------------------ 287| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 17, 3}, "eFrodoKEM-1344-AES"); 288| 1| case 0x6F492: ------------------ | Branch (288:7): [True: 1, False: 3.28k] ------------------ 289| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 18, 1}, "ClassicMcEliece_6688128pc"); 290| 1| case 0x6F493: ------------------ | Branch (290:7): [True: 1, False: 3.28k] ------------------ 291| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 18, 2}, "ClassicMcEliece_6688128pcf"); 292| 1| case 0x6F494: ------------------ | Branch (292:7): [True: 1, False: 3.28k] ------------------ 293| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 18, 3}, "ClassicMcEliece_6960119pc"); 294| 1| case 0x6F495: ------------------ | Branch (294:7): [True: 1, False: 3.28k] ------------------ 295| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 18, 4}, "ClassicMcEliece_6960119pcf"); 296| 1| case 0x6F496: ------------------ | Branch (296:7): [True: 1, False: 3.28k] ------------------ 297| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 18, 5}, "ClassicMcEliece_8192128pc"); 298| 1| case 0x6F497: ------------------ | Branch (298:7): [True: 1, False: 3.28k] ------------------ 299| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 18, 6}, "ClassicMcEliece_8192128pcf"); 300| 0| case 0x6F79D: ------------------ | Branch (300:7): [True: 0, False: 3.28k] ------------------ 301| 0| return if_match(oid, {2, 16, 840, 1, 113730, 1, 13}, "Certificate Comment"); 302| 1| case 0x701A0: ------------------ | Branch (302:7): [True: 1, False: 3.28k] ------------------ 303| 1| return if_match(oid, {1, 3, 36, 3, 3, 2, 5, 2, 1}, "ECGDSA"); 304| 1| case 0x70322: ------------------ | Branch (304:7): [True: 1, False: 3.28k] ------------------ 305| 1| return if_match(oid, {1, 3, 36, 3, 3, 2, 5, 4, 1}, "ECGDSA/RIPEMD-160"); 306| 1| case 0x70323: ------------------ | Branch (306:7): [True: 1, False: 3.28k] ------------------ 307| 1| return if_match(oid, {1, 3, 36, 3, 3, 2, 5, 4, 2}, "ECGDSA/SHA-1"); 308| 1| case 0x70324: ------------------ | Branch (308:7): [True: 1, False: 3.28k] ------------------ 309| 1| return if_match(oid, {1, 3, 36, 3, 3, 2, 5, 4, 3}, "ECGDSA/SHA-224"); 310| 1| case 0x70325: ------------------ | Branch (310:7): [True: 1, False: 3.28k] ------------------ 311| 1| return if_match(oid, {1, 3, 36, 3, 3, 2, 5, 4, 4}, "ECGDSA/SHA-256"); 312| 1| case 0x70326: ------------------ | Branch (312:7): [True: 1, False: 3.28k] ------------------ 313| 1| return if_match(oid, {1, 3, 36, 3, 3, 2, 5, 4, 5}, "ECGDSA/SHA-384"); 314| 1| case 0x70327: ------------------ | Branch (314:7): [True: 1, False: 3.28k] ------------------ 315| 1| return if_match(oid, {1, 3, 36, 3, 3, 2, 5, 4, 6}, "ECGDSA/SHA-512"); 316| 1| case 0x72B21: ------------------ | Branch (316:7): [True: 1, False: 3.28k] ------------------ 317| 1| return if_match(oid, {1, 2, 643, 7, 1, 1, 1, 1}, "GOST-34.10-2012-256"); 318| 1| case 0x72B22: ------------------ | Branch (318:7): [True: 1, False: 3.28k] ------------------ 319| 1| return if_match(oid, {1, 2, 643, 7, 1, 1, 1, 2}, "GOST-34.10-2012-512"); 320| 1| case 0x72BE3: ------------------ | Branch (320:7): [True: 1, False: 3.28k] ------------------ 321| 1| return if_match(oid, {1, 2, 643, 7, 1, 1, 2, 2}, "Streebog-256"); 322| 1| case 0x72BE4: ------------------ | Branch (322:7): [True: 1, False: 3.28k] ------------------ 323| 1| return if_match(oid, {1, 2, 643, 7, 1, 1, 2, 3}, "Streebog-512"); 324| 1| case 0x72CA4: ------------------ | Branch (324:7): [True: 1, False: 3.28k] ------------------ 325| 1| return if_match(oid, {1, 2, 643, 7, 1, 1, 3, 2}, "GOST-34.10-2012-256/Streebog-256"); 326| 1| case 0x72CA5: ------------------ | Branch (326:7): [True: 1, False: 3.28k] ------------------ 327| 1| return if_match(oid, {1, 2, 643, 7, 1, 1, 3, 3}, "GOST-34.10-2012-512/Streebog-512"); 328| 1| case 0x7C7C7: ------------------ | Branch (328:7): [True: 1, False: 3.28k] ------------------ 329| 1| return if_match(oid, {1, 2, 840, 113549, 1, 9, 22, 1}, "PKCS9.X509Certificate"); 330| 1| case 0x7C7C8: ------------------ | Branch (330:7): [True: 1, False: 3.28k] ------------------ 331| 1| return if_match(oid, {1, 2, 840, 113549, 1, 9, 22, 2}, "PKCS9.SDSICertificate"); 332| 1| case 0x7C888: ------------------ | Branch (332:7): [True: 1, False: 3.28k] ------------------ 333| 1| return if_match(oid, {1, 2, 840, 113549, 1, 9, 23, 1}, "PKCS9.X509CRL"); 334| 1| case 0x7E10F: ------------------ | Branch (334:7): [True: 1, False: 3.28k] ------------------ 335| 1| return if_match(oid, {2, 5, 4, 3}, "X520.CommonName"); 336| 1| case 0x7E110: ------------------ | Branch (336:7): [True: 1, False: 3.28k] ------------------ 337| 1| return if_match(oid, {2, 5, 4, 4}, "X520.Surname"); 338| 1| case 0x7E111: ------------------ | Branch (338:7): [True: 1, False: 3.28k] ------------------ 339| 1| return if_match(oid, {2, 5, 4, 5}, "X520.SerialNumber"); 340| 1| case 0x7E112: ------------------ | Branch (340:7): [True: 1, False: 3.28k] ------------------ 341| 1| return if_match(oid, {2, 5, 4, 6}, "X520.Country"); 342| 1| case 0x7E113: ------------------ | Branch (342:7): [True: 1, False: 3.28k] ------------------ 343| 1| return if_match(oid, {2, 5, 4, 7}, "X520.Locality"); 344| 1| case 0x7E114: ------------------ | Branch (344:7): [True: 1, False: 3.28k] ------------------ 345| 1| return if_match(oid, {2, 5, 4, 8}, "X520.State"); 346| 1| case 0x7E115: ------------------ | Branch (346:7): [True: 1, False: 3.28k] ------------------ 347| 1| return if_match(oid, {2, 5, 4, 9}, "X520.StreetAddress"); 348| 1| case 0x7E116: ------------------ | Branch (348:7): [True: 1, False: 3.28k] ------------------ 349| 1| return if_match(oid, {2, 5, 4, 10}, "X520.Organization"); 350| 1| case 0x7E117: ------------------ | Branch (350:7): [True: 1, False: 3.28k] ------------------ 351| 1| return if_match(oid, {2, 5, 4, 11}, "X520.OrganizationalUnit"); 352| 1| case 0x7E118: ------------------ | Branch (352:7): [True: 1, False: 3.28k] ------------------ 353| 1| return if_match(oid, {2, 5, 4, 12}, "X520.Title"); 354| 1| case 0x7E136: ------------------ | Branch (354:7): [True: 1, False: 3.28k] ------------------ 355| 1| return if_match(oid, {2, 5, 4, 42}, "X520.GivenName"); 356| 1| case 0x7E137: ------------------ | Branch (356:7): [True: 1, False: 3.28k] ------------------ 357| 1| return if_match(oid, {2, 5, 4, 43}, "X520.Initials"); 358| 1| case 0x7E138: ------------------ | Branch (358:7): [True: 1, False: 3.28k] ------------------ 359| 1| return if_match(oid, {2, 5, 4, 44}, "X520.GenerationalQualifier"); 360| 1| case 0x7E13A: ------------------ | Branch (360:7): [True: 1, False: 3.28k] ------------------ 361| 1| return if_match(oid, {2, 5, 4, 46}, "X520.DNQualifier"); 362| 1| case 0x7E14D: ------------------ | Branch (362:7): [True: 1, False: 3.28k] ------------------ 363| 1| return if_match(oid, {2, 5, 4, 65}, "X520.Pseudonym"); 364| 1| case 0x7F3F3: ------------------ | Branch (364:7): [True: 1, False: 3.28k] ------------------ 365| 1| return if_match(oid, {2, 5, 29, 14}, "X509v3.SubjectKeyIdentifier"); 366| 1| case 0x7F3F4: ------------------ | Branch (366:7): [True: 1, False: 3.28k] ------------------ 367| 1| return if_match(oid, {2, 5, 29, 15}, "X509v3.KeyUsage"); 368| 1| case 0x7F3F5: ------------------ | Branch (368:7): [True: 1, False: 3.28k] ------------------ 369| 1| return if_match(oid, {2, 5, 29, 16}, "X509v3.PrivateKeyUsagePeriod"); 370| 1| case 0x7F3F6: ------------------ | Branch (370:7): [True: 1, False: 3.28k] ------------------ 371| 1| return if_match(oid, {2, 5, 29, 17}, "X509v3.SubjectAlternativeName"); 372| 1| case 0x7F3F7: ------------------ | Branch (372:7): [True: 1, False: 3.28k] ------------------ 373| 1| return if_match(oid, {2, 5, 29, 18}, "X509v3.IssuerAlternativeName"); 374| 1| case 0x7F3F8: ------------------ | Branch (374:7): [True: 1, False: 3.28k] ------------------ 375| 1| return if_match(oid, {2, 5, 29, 19}, "X509v3.BasicConstraints"); 376| 1| case 0x7F3F9: ------------------ | Branch (376:7): [True: 1, False: 3.28k] ------------------ 377| 1| return if_match(oid, {2, 5, 29, 20}, "X509v3.CRLNumber"); 378| 1| case 0x7F3FA: ------------------ | Branch (378:7): [True: 1, False: 3.28k] ------------------ 379| 1| return if_match(oid, {2, 5, 29, 21}, "X509v3.ReasonCode"); 380| 1| case 0x7F3FC: ------------------ | Branch (380:7): [True: 1, False: 3.28k] ------------------ 381| 1| return if_match(oid, {2, 5, 29, 23}, "X509v3.HoldInstructionCode"); 382| 1| case 0x7F3FD: ------------------ | Branch (382:7): [True: 1, False: 3.28k] ------------------ 383| 1| return if_match(oid, {2, 5, 29, 24}, "X509v3.InvalidityDate"); 384| 1| case 0x7F401: ------------------ | Branch (384:7): [True: 1, False: 3.28k] ------------------ 385| 1| return if_match(oid, {2, 5, 29, 28}, "X509v3.CRLIssuingDistributionPoint"); 386| 1| case 0x7F403: ------------------ | Branch (386:7): [True: 1, False: 3.28k] ------------------ 387| 1| return if_match(oid, {2, 5, 29, 30}, "X509v3.NameConstraints"); 388| 1| case 0x7F404: ------------------ | Branch (388:7): [True: 1, False: 3.28k] ------------------ 389| 1| return if_match(oid, {2, 5, 29, 31}, "X509v3.CRLDistributionPoints"); 390| 1| case 0x7F405: ------------------ | Branch (390:7): [True: 1, False: 3.28k] ------------------ 391| 1| return if_match(oid, {2, 5, 29, 32}, "X509v3.CertificatePolicies"); 392| 1| case 0x7F408: ------------------ | Branch (392:7): [True: 1, False: 3.28k] ------------------ 393| 1| return if_match(oid, {2, 5, 29, 35}, "X509v3.AuthorityKeyIdentifier"); 394| 1| case 0x7F409: ------------------ | Branch (394:7): [True: 1, False: 3.28k] ------------------ 395| 1| return if_match(oid, {2, 5, 29, 36}, "X509v3.PolicyConstraints"); 396| 1| case 0x7F40A: ------------------ | Branch (396:7): [True: 1, False: 3.28k] ------------------ 397| 1| return if_match(oid, {2, 5, 29, 37}, "X509v3.ExtendedKeyUsage"); 398| 1| case 0x7F41D: ------------------ | Branch (398:7): [True: 1, False: 3.28k] ------------------ 399| 1| return if_match(oid, {2, 5, 29, 56}, "X509v3.NoRevocationAvailable"); 400| 1| case 0x80B84: ------------------ | Branch (400:7): [True: 1, False: 3.28k] ------------------ 401| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 2, 1}, "AES-128/OCB"); 402| 1| case 0x80B85: ------------------ | Branch (402:7): [True: 1, False: 3.28k] ------------------ 403| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 2, 2}, "AES-192/OCB"); 404| 1| case 0x80B86: ------------------ | Branch (404:7): [True: 1, False: 3.28k] ------------------ 405| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 2, 3}, "AES-256/OCB"); 406| 1| case 0x80B87: ------------------ | Branch (406:7): [True: 1, False: 3.28k] ------------------ 407| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 2, 4}, "Serpent/OCB"); 408| 1| case 0x80B88: ------------------ | Branch (408:7): [True: 1, False: 3.28k] ------------------ 409| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 2, 5}, "Twofish/OCB"); 410| 1| case 0x80B89: ------------------ | Branch (410:7): [True: 1, False: 3.28k] ------------------ 411| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 2, 6}, "Camellia-128/OCB"); 412| 1| case 0x80B8A: ------------------ | Branch (412:7): [True: 1, False: 3.28k] ------------------ 413| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 2, 7}, "Camellia-192/OCB"); 414| 1| case 0x80B8B: ------------------ | Branch (414:7): [True: 1, False: 3.28k] ------------------ 415| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 2, 8}, "Camellia-256/OCB"); 416| 1| case 0x80D06: ------------------ | Branch (416:7): [True: 1, False: 3.28k] ------------------ 417| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 4, 1}, "AES-128/SIV"); 418| 1| case 0x80D07: ------------------ | Branch (418:7): [True: 1, False: 3.28k] ------------------ 419| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 4, 2}, "AES-192/SIV"); 420| 1| case 0x80D08: ------------------ | Branch (420:7): [True: 1, False: 3.28k] ------------------ 421| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 4, 3}, "AES-256/SIV"); 422| 1| case 0x80D09: ------------------ | Branch (422:7): [True: 1, False: 3.28k] ------------------ 423| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 4, 4}, "Serpent/SIV"); 424| 1| case 0x80D0A: ------------------ | Branch (424:7): [True: 1, False: 3.28k] ------------------ 425| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 4, 5}, "Twofish/SIV"); 426| 1| case 0x80D0B: ------------------ | Branch (426:7): [True: 1, False: 3.28k] ------------------ 427| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 4, 6}, "Camellia-128/SIV"); 428| 1| case 0x80D0C: ------------------ | Branch (428:7): [True: 1, False: 3.28k] ------------------ 429| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 4, 7}, "Camellia-192/SIV"); 430| 1| case 0x80D0D: ------------------ | Branch (430:7): [True: 1, False: 3.28k] ------------------ 431| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 4, 8}, "Camellia-256/SIV"); 432| 1| case 0x80D0E: ------------------ | Branch (432:7): [True: 1, False: 3.28k] ------------------ 433| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 4, 9}, "SM4/SIV"); 434| 1| case 0x84C6A: ------------------ | Branch (434:7): [True: 1, False: 3.28k] ------------------ 435| 1| return if_match(oid, {1, 2, 392, 200011, 61, 1, 1, 1, 2}, "Camellia-128/CBC"); 436| 1| case 0x84C6B: ------------------ | Branch (436:7): [True: 1, False: 3.28k] ------------------ 437| 1| return if_match(oid, {1, 2, 392, 200011, 61, 1, 1, 1, 3}, "Camellia-192/CBC"); 438| 1| case 0x84C6C: ------------------ | Branch (438:7): [True: 1, False: 3.28k] ------------------ 439| 1| return if_match(oid, {1, 2, 392, 200011, 61, 1, 1, 1, 4}, "Camellia-256/CBC"); 440| 1| case 0x88CD3: ------------------ | Branch (440:7): [True: 1, False: 3.28k] ------------------ 441| 1| return if_match(oid, {1, 2, 840, 113549, 1, 9, 16, 3, 6}, "KeyWrap.TripleDES"); 442| 1| case 0x88CD5: ------------------ | Branch (442:7): [True: 1, False: 3.28k] ------------------ 443| 1| return if_match(oid, {1, 2, 840, 113549, 1, 9, 16, 3, 8}, "Compression.Zlib"); 444| 1| case 0x88CDE: ------------------ | Branch (444:7): [True: 1, False: 3.28k] ------------------ 445| 1| return if_match(oid, {1, 2, 840, 113549, 1, 9, 16, 3, 17}, "HSS-LMS"); 446| 1| case 0x88CDF: ------------------ | Branch (446:7): [True: 1, False: 3.28k] ------------------ 447| 1| return if_match(oid, {1, 2, 840, 113549, 1, 9, 16, 3, 18}, "ChaCha20Poly1305"); 448| 1| case 0x92296: ------------------ | Branch (448:7): [True: 1, False: 3.28k] ------------------ 449| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 1, 2}, "AES-128/CBC"); 450| 1| case 0x92299: ------------------ | Branch (450:7): [True: 1, False: 3.28k] ------------------ 451| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 1, 5}, "KeyWrap.AES-128"); 452| 1| case 0x9229A: ------------------ | Branch (452:7): [True: 1, False: 3.28k] ------------------ 453| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 1, 6}, "AES-128/GCM"); 454| 1| case 0x9229B: ------------------ | Branch (454:7): [True: 1, False: 3.28k] ------------------ 455| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 1, 7}, "AES-128/CCM"); 456| 1| case 0x922AA: ------------------ | Branch (456:7): [True: 1, False: 3.28k] ------------------ 457| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 1, 22}, "AES-192/CBC"); 458| 1| case 0x922AD: ------------------ | Branch (458:7): [True: 1, False: 3.28k] ------------------ 459| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 1, 25}, "KeyWrap.AES-192"); 460| 1| case 0x922AE: ------------------ | Branch (460:7): [True: 1, False: 3.28k] ------------------ 461| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 1, 26}, "AES-192/GCM"); 462| 1| case 0x922AF: ------------------ | Branch (462:7): [True: 1, False: 3.28k] ------------------ 463| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 1, 27}, "AES-192/CCM"); 464| 1| case 0x922BE: ------------------ | Branch (464:7): [True: 1, False: 3.28k] ------------------ 465| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 1, 42}, "AES-256/CBC"); 466| 1| case 0x922C1: ------------------ | Branch (466:7): [True: 1, False: 3.28k] ------------------ 467| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 1, 45}, "KeyWrap.AES-256"); 468| 1| case 0x922C2: ------------------ | Branch (468:7): [True: 1, False: 3.28k] ------------------ 469| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 1, 46}, "AES-256/GCM"); 470| 1| case 0x922C3: ------------------ | Branch (470:7): [True: 1, False: 3.28k] ------------------ 471| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 1, 47}, "AES-256/CCM"); 472| 1| case 0x92356: ------------------ | Branch (472:7): [True: 1, False: 3.28k] ------------------ 473| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 2, 1}, "SHA-256"); 474| 1| case 0x92357: ------------------ | Branch (474:7): [True: 1, False: 3.28k] ------------------ 475| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 2, 2}, "SHA-384"); 476| 1| case 0x92358: ------------------ | Branch (476:7): [True: 1, False: 3.28k] ------------------ 477| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 2, 3}, "SHA-512"); 478| 1| case 0x92359: ------------------ | Branch (478:7): [True: 1, False: 3.28k] ------------------ 479| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 2, 4}, "SHA-224"); 480| 1| case 0x9235B: ------------------ | Branch (480:7): [True: 1, False: 3.28k] ------------------ 481| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 2, 6}, "SHA-512-256"); 482| 1| case 0x9235C: ------------------ | Branch (482:7): [True: 1, False: 3.28k] ------------------ 483| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 2, 7}, "SHA-3(224)"); 484| 1| case 0x9235D: ------------------ | Branch (484:7): [True: 1, False: 3.28k] ------------------ 485| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 2, 8}, "SHA-3(256)"); 486| 1| case 0x9235E: ------------------ | Branch (486:7): [True: 1, False: 3.28k] ------------------ 487| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 2, 9}, "SHA-3(384)"); 488| 1| case 0x9235F: ------------------ | Branch (488:7): [True: 1, False: 3.28k] ------------------ 489| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 2, 10}, "SHA-3(512)"); 490| 1| case 0x92360: ------------------ | Branch (490:7): [True: 1, False: 3.28k] ------------------ 491| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 2, 11}, "SHAKE-128"); 492| 1| case 0x92361: ------------------ | Branch (492:7): [True: 1, False: 3.28k] ------------------ 493| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 2, 12}, "SHAKE-256"); 494| 1| case 0x92417: ------------------ | Branch (494:7): [True: 1, False: 3.28k] ------------------ 495| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 1}, "DSA/SHA-224"); 496| 1| case 0x92418: ------------------ | Branch (496:7): [True: 1, False: 3.28k] ------------------ 497| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 2}, "DSA/SHA-256"); 498| 1| case 0x92419: ------------------ | Branch (498:7): [True: 1, False: 3.28k] ------------------ 499| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 3}, "DSA/SHA-384"); 500| 1| case 0x9241A: ------------------ | Branch (500:7): [True: 1, False: 3.28k] ------------------ 501| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 4}, "DSA/SHA-512"); 502| 1| case 0x9241B: ------------------ | Branch (502:7): [True: 1, False: 3.28k] ------------------ 503| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 5}, "DSA/SHA-3(224)"); 504| 1| case 0x9241C: ------------------ | Branch (504:7): [True: 1, False: 3.28k] ------------------ 505| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 6}, "DSA/SHA-3(256)"); 506| 1| case 0x9241D: ------------------ | Branch (506:7): [True: 1, False: 3.28k] ------------------ 507| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 7}, "DSA/SHA-3(384)"); 508| 1| case 0x9241E: ------------------ | Branch (508:7): [True: 1, False: 3.28k] ------------------ 509| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 8}, "DSA/SHA-3(512)"); 510| 1| case 0x9241F: ------------------ | Branch (510:7): [True: 1, False: 3.28k] ------------------ 511| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 9}, "ECDSA/SHA-3(224)"); 512| 1| case 0x92420: ------------------ | Branch (512:7): [True: 1, False: 3.28k] ------------------ 513| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 10}, "ECDSA/SHA-3(256)"); 514| 1| case 0x92421: ------------------ | Branch (514:7): [True: 1, False: 3.28k] ------------------ 515| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 11}, "ECDSA/SHA-3(384)"); 516| 1| case 0x92422: ------------------ | Branch (516:7): [True: 1, False: 3.28k] ------------------ 517| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 12}, "ECDSA/SHA-3(512)"); 518| 1| case 0x92423: ------------------ | Branch (518:7): [True: 1, False: 3.28k] ------------------ 519| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 13}, "RSA/PKCS1v15(SHA-3(224))"); 520| 1| case 0x92424: ------------------ | Branch (520:7): [True: 1, False: 3.28k] ------------------ 521| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 14}, "RSA/PKCS1v15(SHA-3(256))"); 522| 1| case 0x92425: ------------------ | Branch (522:7): [True: 1, False: 3.28k] ------------------ 523| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 15}, "RSA/PKCS1v15(SHA-3(384))"); 524| 1| case 0x92426: ------------------ | Branch (524:7): [True: 1, False: 3.28k] ------------------ 525| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 16}, "RSA/PKCS1v15(SHA-3(512))"); 526| 1| case 0x92427: ------------------ | Branch (526:7): [True: 1, False: 3.28k] ------------------ 527| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 17}, "ML-DSA-4x4"); 528| 1| case 0x92428: ------------------ | Branch (528:7): [True: 1, False: 3.28k] ------------------ 529| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 18}, "ML-DSA-6x5"); 530| 1| case 0x92429: ------------------ | Branch (530:7): [True: 1, False: 3.28k] ------------------ 531| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 19}, "ML-DSA-8x7"); 532| 1| case 0x9242A: ------------------ | Branch (532:7): [True: 1, False: 3.28k] ------------------ 533| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 20}, "SLH-DSA-SHA2-128s"); 534| 1| case 0x9242B: ------------------ | Branch (534:7): [True: 1, False: 3.28k] ------------------ 535| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 21}, "SLH-DSA-SHA2-128f"); 536| 1| case 0x9242C: ------------------ | Branch (536:7): [True: 1, False: 3.28k] ------------------ 537| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 22}, "SLH-DSA-SHA2-192s"); 538| 1| case 0x9242D: ------------------ | Branch (538:7): [True: 1, False: 3.28k] ------------------ 539| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 23}, "SLH-DSA-SHA2-192f"); 540| 1| case 0x9242E: ------------------ | Branch (540:7): [True: 1, False: 3.28k] ------------------ 541| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 24}, "SLH-DSA-SHA2-256s"); 542| 1| case 0x9242F: ------------------ | Branch (542:7): [True: 1, False: 3.28k] ------------------ 543| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 25}, "SLH-DSA-SHA2-256f"); 544| 1| case 0x92430: ------------------ | Branch (544:7): [True: 1, False: 3.28k] ------------------ 545| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 26}, "SLH-DSA-SHAKE-128s"); 546| 1| case 0x92431: ------------------ | Branch (546:7): [True: 1, False: 3.28k] ------------------ 547| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 27}, "SLH-DSA-SHAKE-128f"); 548| 2| case 0x92432: ------------------ | Branch (548:7): [True: 2, False: 3.28k] ------------------ 549| 2| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 28}, "SLH-DSA-SHAKE-192s"); 550| 1| case 0x92433: ------------------ | Branch (550:7): [True: 1, False: 3.28k] ------------------ 551| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 29}, "SLH-DSA-SHAKE-192f"); 552| 1| case 0x92434: ------------------ | Branch (552:7): [True: 1, False: 3.28k] ------------------ 553| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 30}, "SLH-DSA-SHAKE-256s"); 554| 1| case 0x92435: ------------------ | Branch (554:7): [True: 1, False: 3.28k] ------------------ 555| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 3, 31}, "SLH-DSA-SHAKE-256f"); 556| 1| case 0x924D8: ------------------ | Branch (556:7): [True: 1, False: 3.28k] ------------------ 557| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 4, 1}, "ML-KEM-512"); 558| 1| case 0x924D9: ------------------ | Branch (558:7): [True: 1, False: 3.28k] ------------------ 559| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 4, 2}, "ML-KEM-768"); 560| 1| case 0x924DA: ------------------ | Branch (560:7): [True: 1, False: 3.28k] ------------------ 561| 1| return if_match(oid, {2, 16, 840, 1, 101, 3, 4, 4, 3}, "ML-KEM-1024"); 562| 2| case 0x9479F: ------------------ | Branch (562:7): [True: 2, False: 3.28k] ------------------ 563| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 1, 1}, "PKIX.AuthorityInformationAccess"); 564| 2| case 0x947A5: ------------------ | Branch (564:7): [True: 2, False: 3.28k] ------------------ 565| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 1, 7}, "PKIX.IpAddrBlocks"); 566| 2| case 0x947A6: ------------------ | Branch (566:7): [True: 2, False: 3.28k] ------------------ 567| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 1, 8}, "PKIX.AutonomousSysIds"); 568| 2| case 0x947B8: ------------------ | Branch (568:7): [True: 2, False: 3.28k] ------------------ 569| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 1, 26}, "PKIX.TNAuthList"); 570| 2| case 0x94921: ------------------ | Branch (570:7): [True: 2, False: 3.28k] ------------------ 571| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 3, 1}, "PKIX.ServerAuth"); 572| 2| case 0x94922: ------------------ | Branch (572:7): [True: 2, False: 3.28k] ------------------ 573| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 3, 2}, "PKIX.ClientAuth"); 574| 2| case 0x94923: ------------------ | Branch (574:7): [True: 2, False: 3.28k] ------------------ 575| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 3, 3}, "PKIX.CodeSigning"); 576| 3| case 0x94924: ------------------ | Branch (576:7): [True: 3, False: 3.28k] ------------------ 577| 3| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 3, 4}, "PKIX.EmailProtection"); 578| 2| case 0x94925: ------------------ | Branch (578:7): [True: 2, False: 3.28k] ------------------ 579| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 3, 5}, "PKIX.IPsecEndSystem"); 580| 2| case 0x94926: ------------------ | Branch (580:7): [True: 2, False: 3.28k] ------------------ 581| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 3, 6}, "PKIX.IPsecTunnel"); 582| 2| case 0x94927: ------------------ | Branch (582:7): [True: 2, False: 3.28k] ------------------ 583| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 3, 7}, "PKIX.IPsecUser"); 584| 2| case 0x94928: ------------------ | Branch (584:7): [True: 2, False: 3.28k] ------------------ 585| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 3, 8}, "PKIX.TimeStamping"); 586| 2| case 0x94929: ------------------ | Branch (586:7): [True: 2, False: 3.28k] ------------------ 587| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 3, 9}, "PKIX.OCSPSigning"); 588| 2| case 0x94CEA: ------------------ | Branch (588:7): [True: 2, False: 3.28k] ------------------ 589| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 8, 5}, "PKIX.XMPPAddr"); 590| 2| case 0x94CEE: ------------------ | Branch (590:7): [True: 2, False: 3.28k] ------------------ 591| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 8, 9}, "PKIX.SmtpUTF8Mailbox"); 592| 1| case 0x954DB: ------------------ | Branch (592:7): [True: 1, False: 3.28k] ------------------ 593| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 311, 20, 2, 2}, "Microsoft SmartcardLogon"); 594| 1| case 0x954DC: ------------------ | Branch (594:7): [True: 1, False: 3.28k] ------------------ 595| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 311, 20, 2, 3}, "Microsoft UPN"); 596| 2| case 0x96B0E: ------------------ | Branch (596:7): [True: 2, False: 3.28k] ------------------ 597| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 48, 1}, "PKIX.OCSP"); 598| 2| case 0x96B0F: ------------------ | Branch (598:7): [True: 2, False: 3.28k] ------------------ 599| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 48, 2}, "PKIX.CertificateAuthorityIssuers"); 600| 2| case 0x96B1B: ------------------ | Branch (600:7): [True: 2, False: 3.28k] ------------------ 601| 2| return if_match(oid, {1, 3, 6, 1, 5, 5, 7, 48, 14}, "PKIX.STIRTNList"); 602| 1| case 0x96C77: ------------------ | Branch (602:7): [True: 1, False: 3.28k] ------------------ 603| 1| return if_match(oid, {1, 2, 840, 113549, 1, 12, 1, 3}, "PBE-SHA1-3DES"); 604| 1| case 0x96C78: ------------------ | Branch (604:7): [True: 1, False: 3.28k] ------------------ 605| 1| return if_match(oid, {1, 2, 840, 113549, 1, 12, 1, 4}, "PBE-SHA1-2DES"); 606| 0| case 0x9A008: ------------------ | Branch (606:7): [True: 0, False: 3.28k] ------------------ 607| 0| return if_match(oid, {1, 3, 36, 3, 3, 2, 8, 1, 1, 1}, "brainpool160r1"); 608| 0| case 0x9A00A: ------------------ | Branch (608:7): [True: 0, False: 3.28k] ------------------ 609| 0| return if_match(oid, {1, 3, 36, 3, 3, 2, 8, 1, 1, 3}, "brainpool192r1"); 610| 1| case 0x9A00C: ------------------ | Branch (610:7): [True: 1, False: 3.28k] ------------------ 611| 1| return if_match(oid, {1, 3, 36, 3, 3, 2, 8, 1, 1, 5}, "brainpool224r1"); 612| 2| case 0x9A00E: ------------------ | Branch (612:7): [True: 2, False: 3.28k] ------------------ 613| 2| return if_match(oid, {1, 3, 36, 3, 3, 2, 8, 1, 1, 7}, "brainpool256r1"); 614| 1| case 0x9A010: ------------------ | Branch (614:7): [True: 1, False: 3.28k] ------------------ 615| 1| return if_match(oid, {1, 3, 36, 3, 3, 2, 8, 1, 1, 9}, "brainpool320r1"); 616| 2| case 0x9A012: ------------------ | Branch (616:7): [True: 2, False: 3.28k] ------------------ 617| 2| return if_match(oid, {1, 3, 36, 3, 3, 2, 8, 1, 1, 11}, "brainpool384r1"); 618| 2| case 0x9A014: ------------------ | Branch (618:7): [True: 2, False: 3.28k] ------------------ 619| 2| return if_match(oid, {1, 3, 36, 3, 3, 2, 8, 1, 1, 13}, "brainpool512r1"); 620| 1| case 0xA0D61: ------------------ | Branch (620:7): [True: 1, False: 3.28k] ------------------ 621| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 3}, "McEliece"); 622| 1| case 0xA0D63: ------------------ | Branch (622:7): [True: 1, False: 3.28k] ------------------ 623| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 5}, "XMSS-draft6"); 624| 1| case 0xA0D66: ------------------ | Branch (624:7): [True: 1, False: 3.28k] ------------------ 625| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 8}, "XMSS-draft12"); 626| 1| case 0xA0D6B: ------------------ | Branch (626:7): [True: 1, False: 3.28k] ------------------ 627| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 1, 13}, "HSS-LMS-Private-Key"); 628| 1| case 0xA0EE1: ------------------ | Branch (628:7): [True: 1, False: 3.28k] ------------------ 629| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 1}, "Serpent/CBC"); 630| 1| case 0xA0EE2: ------------------ | Branch (630:7): [True: 1, False: 3.28k] ------------------ 631| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 2}, "Threefish-512/CBC"); 632| 1| case 0xA0EE3: ------------------ | Branch (632:7): [True: 1, False: 3.28k] ------------------ 633| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 3}, "Twofish/CBC"); 634| 1| case 0xA0F45: ------------------ | Branch (634:7): [True: 1, False: 3.28k] ------------------ 635| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 101}, "Serpent/GCM"); 636| 1| case 0xA0F46: ------------------ | Branch (636:7): [True: 1, False: 3.28k] ------------------ 637| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 3, 102}, "Twofish/GCM"); 638| 1| case 0xA0FA2: ------------------ | Branch (638:7): [True: 1, False: 3.28k] ------------------ 639| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 4, 1}, "numsp256d1"); 640| 1| case 0xA0FA3: ------------------ | Branch (640:7): [True: 1, False: 3.28k] ------------------ 641| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 4, 2}, "numsp384d1"); 642| 1| case 0xA0FA4: ------------------ | Branch (642:7): [True: 1, False: 3.28k] ------------------ 643| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 25258, 4, 3}, "numsp512d1"); 644| 1| case 0xA244B: ------------------ | Branch (644:7): [True: 1, False: 3.28k] ------------------ 645| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 22554, 5, 1, 1}, "ClassicMcEliece_348864"); 646| 1| case 0xA244C: ------------------ | Branch (646:7): [True: 1, False: 3.28k] ------------------ 647| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 22554, 5, 1, 2}, "ClassicMcEliece_348864f"); 648| 1| case 0xA244D: ------------------ | Branch (648:7): [True: 1, False: 3.28k] ------------------ 649| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 22554, 5, 1, 3}, "ClassicMcEliece_460896"); 650| 1| case 0xA244E: ------------------ | Branch (650:7): [True: 1, False: 3.28k] ------------------ 651| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 22554, 5, 1, 4}, "ClassicMcEliece_460896f"); 652| 1| case 0xA244F: ------------------ | Branch (652:7): [True: 1, False: 3.28k] ------------------ 653| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 22554, 5, 1, 5}, "ClassicMcEliece_6688128"); 654| 1| case 0xA2450: ------------------ | Branch (654:7): [True: 1, False: 3.28k] ------------------ 655| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 22554, 5, 1, 6}, "ClassicMcEliece_6688128f"); 656| 1| case 0xA2451: ------------------ | Branch (656:7): [True: 1, False: 3.28k] ------------------ 657| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 22554, 5, 1, 7}, "ClassicMcEliece_6960119"); 658| 1| case 0xA2452: ------------------ | Branch (658:7): [True: 1, False: 3.28k] ------------------ 659| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 22554, 5, 1, 8}, "ClassicMcEliece_6960119f"); 660| 1| case 0xA2453: ------------------ | Branch (660:7): [True: 1, False: 3.28k] ------------------ 661| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 22554, 5, 1, 9}, "ClassicMcEliece_8192128"); 662| 1| case 0xA2454: ------------------ | Branch (662:7): [True: 1, False: 3.28k] ------------------ 663| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 22554, 5, 1, 10}, "ClassicMcEliece_8192128f"); 664| 1.80k| case 0xAF989: ------------------ | Branch (664:7): [True: 1.80k, False: 1.48k] ------------------ 665| 1.80k| return if_match(oid, {1, 2, 840, 113549, 1, 1, 1}, "RSA"); 666| 5| case 0xAF98A: ------------------ | Branch (666:7): [True: 5, False: 3.28k] ------------------ 667| 5| return if_match(oid, {1, 2, 840, 113549, 1, 1, 2}, "RSA/PKCS1v15(MD2)"); 668| 15| case 0xAF98C: ------------------ | Branch (668:7): [True: 15, False: 3.27k] ------------------ 669| 15| return if_match(oid, {1, 2, 840, 113549, 1, 1, 4}, "RSA/PKCS1v15(MD5)"); 670| 25| case 0xAF98D: ------------------ | Branch (670:7): [True: 25, False: 3.26k] ------------------ 671| 25| return if_match(oid, {1, 2, 840, 113549, 1, 1, 5}, "RSA/PKCS1v15(SHA-1)"); 672| 3| case 0xAF98F: ------------------ | Branch (672:7): [True: 3, False: 3.28k] ------------------ 673| 3| return if_match(oid, {1, 2, 840, 113549, 1, 1, 7}, "RSA/OAEP"); 674| 2| case 0xAF990: ------------------ | Branch (674:7): [True: 2, False: 3.28k] ------------------ 675| 2| return if_match(oid, {1, 2, 840, 113549, 1, 1, 8}, "MGF1"); 676| 35| case 0xAF992: ------------------ | Branch (676:7): [True: 35, False: 3.25k] ------------------ 677| 35| return if_match(oid, {1, 2, 840, 113549, 1, 1, 10}, "RSA/PSS"); 678| 3| case 0xAF993: ------------------ | Branch (678:7): [True: 3, False: 3.28k] ------------------ 679| 3| return if_match(oid, {1, 2, 840, 113549, 1, 1, 11}, "RSA/PKCS1v15(SHA-256)"); 680| 3| case 0xAF994: ------------------ | Branch (680:7): [True: 3, False: 3.28k] ------------------ 681| 3| return if_match(oid, {1, 2, 840, 113549, 1, 1, 12}, "RSA/PKCS1v15(SHA-384)"); 682| 3| case 0xAF995: ------------------ | Branch (682:7): [True: 3, False: 3.28k] ------------------ 683| 3| return if_match(oid, {1, 2, 840, 113549, 1, 1, 13}, "RSA/PKCS1v15(SHA-512)"); 684| 7| case 0xAF996: ------------------ | Branch (684:7): [True: 7, False: 3.28k] ------------------ 685| 7| return if_match(oid, {1, 2, 840, 113549, 1, 1, 14}, "RSA/PKCS1v15(SHA-224)"); 686| 13| case 0xAF998: ------------------ | Branch (686:7): [True: 13, False: 3.27k] ------------------ 687| 13| return if_match(oid, {1, 2, 840, 113549, 1, 1, 16}, "RSA/PKCS1v15(SHA-512-256)"); 688| 2| case 0xAFC98: ------------------ | Branch (688:7): [True: 2, False: 3.28k] ------------------ 689| 2| return if_match(oid, {1, 2, 840, 113549, 1, 5, 12}, "PKCS5.PBKDF2"); 690| 2| case 0xAFC99: ------------------ | Branch (690:7): [True: 2, False: 3.28k] ------------------ 691| 2| return if_match(oid, {1, 2, 840, 113549, 1, 5, 13}, "PBE-PKCS5v20"); 692| 2| case 0xAFE0F: ------------------ | Branch (692:7): [True: 2, False: 3.28k] ------------------ 693| 2| return if_match(oid, {1, 2, 840, 113549, 1, 7, 1}, "PKCS7.Data"); 694| 2| case 0xAFE14: ------------------ | Branch (694:7): [True: 2, False: 3.28k] ------------------ 695| 2| return if_match(oid, {1, 2, 840, 113549, 1, 7, 6}, "PKCS7.EncryptedData"); 696| 2| case 0xAFF91: ------------------ | Branch (696:7): [True: 2, False: 3.28k] ------------------ 697| 2| return if_match(oid, {1, 2, 840, 113549, 1, 9, 1}, "PKCS9.EmailAddress"); 698| 2| case 0xAFF92: ------------------ | Branch (698:7): [True: 2, False: 3.28k] ------------------ 699| 2| return if_match(oid, {1, 2, 840, 113549, 1, 9, 2}, "PKCS9.UnstructuredName"); 700| 2| case 0xAFF93: ------------------ | Branch (700:7): [True: 2, False: 3.28k] ------------------ 701| 2| return if_match(oid, {1, 2, 840, 113549, 1, 9, 3}, "PKCS9.ContentType"); 702| 2| case 0xAFF94: ------------------ | Branch (702:7): [True: 2, False: 3.28k] ------------------ 703| 2| return if_match(oid, {1, 2, 840, 113549, 1, 9, 4}, "PKCS9.MessageDigest"); 704| 2| case 0xAFF97: ------------------ | Branch (704:7): [True: 2, False: 3.28k] ------------------ 705| 2| return if_match(oid, {1, 2, 840, 113549, 1, 9, 7}, "PKCS9.ChallengePassword"); 706| 2| case 0xAFF9E: ------------------ | Branch (706:7): [True: 2, False: 3.28k] ------------------ 707| 2| return if_match(oid, {1, 2, 840, 113549, 1, 9, 14}, "PKCS9.ExtensionRequest"); 708| 2| case 0xAFFA4: ------------------ | Branch (708:7): [True: 2, False: 3.28k] ------------------ 709| 2| return if_match(oid, {1, 2, 840, 113549, 1, 9, 20}, "PKCS9.FriendlyName"); 710| 2| case 0xAFFA5: ------------------ | Branch (710:7): [True: 2, False: 3.28k] ------------------ 711| 2| return if_match(oid, {1, 2, 840, 113549, 1, 9, 21}, "PKCS9.LocalKeyId"); 712| 0| case 0xC0226: ------------------ | Branch (712:7): [True: 0, False: 3.28k] ------------------ 713| 0| return if_match(oid, {1, 3, 6, 1, 4, 1, 11591, 4, 11}, "Scrypt"); 714| 1| case 0xC0A67: ------------------ | Branch (714:7): [True: 1, False: 3.28k] ------------------ 715| 1| return if_match(oid, {1, 3, 6, 1, 4, 1, 11591, 15, 1}, "OpenPGP.Ed25519"); 716| 1| case 0xC4CE5: ------------------ | Branch (716:7): [True: 1, False: 3.28k] ------------------ 717| 1| return if_match(oid, {1, 2, 643, 100, 1}, "GOST.OGRN"); 718| 1| case 0xC4D53: ------------------ | Branch (718:7): [True: 1, False: 3.28k] ------------------ 719| 1| return if_match(oid, {1, 2, 643, 100, 111}, "GOST.SubjectSigningTool"); 720| 1| case 0xC4D54: ------------------ | Branch (720:7): [True: 1, False: 3.28k] ------------------ 721| 1| return if_match(oid, {1, 2, 643, 100, 112}, "GOST.IssuerSigningTool"); 722| 1| case 0xC9C50: ------------------ | Branch (722:7): [True: 1, False: 3.28k] ------------------ 723| 1| return if_match(oid, {1, 2, 840, 10045, 3, 1, 1}, "secp192r1"); 724| 1| case 0xC9C51: ------------------ | Branch (724:7): [True: 1, False: 3.28k] ------------------ 725| 1| return if_match(oid, {1, 2, 840, 10045, 3, 1, 2}, "x962_p192v2"); 726| 1| case 0xC9C52: ------------------ | Branch (726:7): [True: 1, False: 3.28k] ------------------ 727| 1| return if_match(oid, {1, 2, 840, 10045, 3, 1, 3}, "x962_p192v3"); 728| 1| case 0xC9C53: ------------------ | Branch (728:7): [True: 1, False: 3.28k] ------------------ 729| 1| return if_match(oid, {1, 2, 840, 10045, 3, 1, 4}, "x962_p239v1"); 730| 1| case 0xC9C54: ------------------ | Branch (730:7): [True: 1, False: 3.28k] ------------------ 731| 1| return if_match(oid, {1, 2, 840, 10045, 3, 1, 5}, "x962_p239v2"); 732| 1| case 0xC9C55: ------------------ | Branch (732:7): [True: 1, False: 3.28k] ------------------ 733| 1| return if_match(oid, {1, 2, 840, 10045, 3, 1, 6}, "x962_p239v3"); 734| 2| case 0xC9C56: ------------------ | Branch (734:7): [True: 2, False: 3.28k] ------------------ 735| 2| return if_match(oid, {1, 2, 840, 10045, 3, 1, 7}, "secp256r1"); 736| 2| case 0xCFA13: ------------------ | Branch (736:7): [True: 2, False: 3.28k] ------------------ 737| 2| return if_match(oid, {1, 2, 840, 10040, 4, 1}, "DSA"); 738| 2| case 0xCFA15: ------------------ | Branch (738:7): [True: 2, False: 3.28k] ------------------ 739| 2| return if_match(oid, {1, 2, 840, 10040, 4, 3}, "DSA/SHA-1"); 740| 602| default: ------------------ | Branch (740:7): [True: 602, False: 2.68k] ------------------ 741| 602| return {}; 742| 3.28k| } 743| 3.28k|} _ZN5Botan7OID_Map22lookup_static_oid_nameENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 746| 4.88k|std::optional OID_Map::lookup_static_oid_name(std::string_view req) { 747| 4.88k| const uint32_t hc = hash_oid_name(req); 748| | 749| 4.88k| switch(hc) { 750| 0| case 0x00545: ------------------ | Branch (750:7): [True: 0, False: 4.88k] ------------------ 751| 0| return if_match(req, "Twofish/GCM", {1, 3, 6, 1, 4, 1, 25258, 3, 102}); 752| 0| case 0x00CF3: ------------------ | Branch (752:7): [True: 0, False: 4.88k] ------------------ 753| 0| return if_match(req, "SphincsPlus-sha2-192f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 4}); 754| 0| case 0x015FE: ------------------ | Branch (754:7): [True: 0, False: 4.88k] ------------------ 755| 0| return if_match(req, "FrodoKEM-640-SHAKE", {1, 3, 6, 1, 4, 1, 25258, 1, 14, 1}); 756| 0| case 0x01F9E: ------------------ | Branch (756:7): [True: 0, False: 4.88k] ------------------ 757| 0| return if_match(req, "MD5", {1, 2, 840, 113549, 2, 5}); 758| 0| case 0x02293: ------------------ | Branch (758:7): [True: 0, False: 4.88k] ------------------ 759| 0| return if_match(req, "SphincsPlus-shake-192f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 4}); 760| 0| case 0x02B93: ------------------ | Branch (760:7): [True: 0, False: 4.88k] ------------------ 761| 0| return if_match(req, "Microsoft SmartcardLogon", {1, 3, 6, 1, 4, 1, 311, 20, 2, 2}); 762| 0| case 0x041D5: ------------------ | Branch (762:7): [True: 0, False: 4.88k] ------------------ 763| 0| return if_match(req, "secp160k1", {1, 3, 132, 0, 9}); 764| 0| case 0x044B3: ------------------ | Branch (764:7): [True: 0, False: 4.88k] ------------------ 765| 0| return if_match(req, "Camellia-256/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 8}); 766| 0| case 0x048B2: ------------------ | Branch (766:7): [True: 0, False: 4.88k] ------------------ 767| 0| return if_match(req, "secp160r1", {1, 3, 132, 0, 8}); 768| 0| case 0x048B3: ------------------ | Branch (768:7): [True: 0, False: 4.88k] ------------------ 769| 0| return if_match(req, "secp160r2", {1, 3, 132, 0, 30}); 770| 0| case 0x05CDA: ------------------ | Branch (770:7): [True: 0, False: 4.88k] ------------------ 771| 0| return if_match(req, "X520.Country", {2, 5, 4, 6}); 772| 4| case 0x07783: ------------------ | Branch (772:7): [True: 4, False: 4.88k] ------------------ 773| 4| return if_match(req, "PKIX.ServerAuth", {1, 3, 6, 1, 5, 5, 7, 3, 1}); 774| 0| case 0x086C7: ------------------ | Branch (774:7): [True: 0, False: 4.88k] ------------------ 775| 0| return if_match(req, "numsp384d1", {1, 3, 6, 1, 4, 1, 25258, 4, 2}); 776| 0| case 0x08A92: ------------------ | Branch (776:7): [True: 0, False: 4.88k] ------------------ 777| 0| return if_match(req, "RSA/PKCS1v15(SHA-1)", {1, 2, 840, 113549, 1, 1, 5}); 778| 0| case 0x09EA0: ------------------ | Branch (778:7): [True: 0, False: 4.88k] ------------------ 779| 0| return if_match(req, "DES/CBC", {1, 3, 14, 3, 2, 7}); 780| 0| case 0x0B2D6: ------------------ | Branch (780:7): [True: 0, False: 4.88k] ------------------ 781| 0| return if_match(req, "ECDSA/SHA-3(512)", {2, 16, 840, 1, 101, 3, 4, 3, 12}); 782| 0| case 0x0BA72: ------------------ | Branch (782:7): [True: 0, False: 4.88k] ------------------ 783| 0| return if_match(req, "SphincsPlus-sha2-128s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 1}); 784| 0| case 0x0BE23: ------------------ | Branch (784:7): [True: 0, False: 4.88k] ------------------ 785| 0| return if_match(req, "ECGDSA", {1, 3, 36, 3, 3, 2, 5, 2, 1}); 786| 0| case 0x0C109: ------------------ | Branch (786:7): [True: 0, False: 4.88k] ------------------ 787| 0| return if_match(req, "PKCS9.FriendlyName", {1, 2, 840, 113549, 1, 9, 20}); 788| 0| case 0x0D012: ------------------ | Branch (788:7): [True: 0, False: 4.88k] ------------------ 789| 0| return if_match(req, "SphincsPlus-shake-128s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 1}); 790| 0| case 0x0DCE9: ------------------ | Branch (790:7): [True: 0, False: 4.88k] ------------------ 791| 0| return if_match(req, "ClassicMcEliece_8192128f", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 10}); 792| 0| case 0x0E52A: ------------------ | Branch (792:7): [True: 0, False: 4.88k] ------------------ 793| 0| return if_match(req, "numsp512d1", {1, 3, 6, 1, 4, 1, 25258, 4, 3}); 794| 0| case 0x0F9CC: ------------------ | Branch (794:7): [True: 0, False: 4.88k] ------------------ 795| 0| return if_match(req, "PKCS9.UnstructuredName", {1, 2, 840, 113549, 1, 9, 2}); 796| 0| case 0x0FF45: ------------------ | Branch (796:7): [True: 0, False: 4.88k] ------------------ 797| 0| return if_match(req, "Camellia-256/GCM", {0, 3, 4401, 5, 3, 1, 9, 46}); 798| 0| case 0x1033D: ------------------ | Branch (798:7): [True: 0, False: 4.88k] ------------------ 799| 0| return if_match(req, "DSA/SHA-3(384)", {2, 16, 840, 1, 101, 3, 4, 3, 7}); 800| 0| case 0x1139D: ------------------ | Branch (800:7): [True: 0, False: 4.88k] ------------------ 801| 0| return if_match(req, "secp192k1", {1, 3, 132, 0, 31}); 802| 0| case 0x113D6: ------------------ | Branch (802:7): [True: 0, False: 4.88k] ------------------ 803| 0| return if_match(req, "X520.DNQualifier", {2, 5, 4, 46}); 804| 0| case 0x11A7A: ------------------ | Branch (804:7): [True: 0, False: 4.88k] ------------------ 805| 0| return if_match(req, "secp192r1", {1, 2, 840, 10045, 3, 1, 1}); 806| 0| case 0x12096: ------------------ | Branch (806:7): [True: 0, False: 4.88k] ------------------ 807| 0| return if_match(req, "SM2_Kex", {1, 2, 156, 10197, 1, 301, 2}); 808| 0| case 0x13FC1: ------------------ | Branch (808:7): [True: 0, False: 4.88k] ------------------ 809| 0| return if_match(req, "X520.GenerationalQualifier", {2, 5, 4, 44}); 810| 0| case 0x1445B: ------------------ | Branch (810:7): [True: 0, False: 4.88k] ------------------ 811| 0| return if_match(req, "PKCS5.PBKDF2", {1, 2, 840, 113549, 1, 5, 12}); 812| 0| case 0x1495D: ------------------ | Branch (812:7): [True: 0, False: 4.88k] ------------------ 813| 0| return if_match(req, "eFrodoKEM-1344-AES", {1, 3, 6, 1, 4, 1, 25258, 1, 17, 3}); 814| 0| case 0x14E30: ------------------ | Branch (814:7): [True: 0, False: 4.88k] ------------------ 815| 0| return if_match(req, "ClassicMcEliece_460896", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 3}); 816| 0| case 0x14FB1: ------------------ | Branch (816:7): [True: 0, False: 4.88k] ------------------ 817| 0| return if_match(req, "XMSS-draft12", {1, 3, 6, 1, 4, 1, 25258, 1, 8}); 818| 0| case 0x156E3: ------------------ | Branch (818:7): [True: 0, False: 4.88k] ------------------ 819| 0| return if_match(req, "Compression.Zlib", {1, 2, 840, 113549, 1, 9, 16, 3, 8}); 820| 0| case 0x1579E: ------------------ | Branch (820:7): [True: 0, False: 4.88k] ------------------ 821| 0| return if_match(req, "Streebog-512", {1, 2, 643, 7, 1, 1, 2, 3}); 822| 4| case 0x1701A: ------------------ | Branch (822:7): [True: 4, False: 4.88k] ------------------ 823| 4| return if_match(req, "X509v3.AnyExtendedKeyUsage", {2, 5, 29, 37, 0}); 824| 0| case 0x175EF: ------------------ | Branch (824:7): [True: 0, False: 4.88k] ------------------ 825| 0| return if_match(req, "Kyber-1024-90s-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 11, 3}); 826| 0| case 0x17709: ------------------ | Branch (826:7): [True: 0, False: 4.88k] ------------------ 827| 0| return if_match(req, "X520.GivenName", {2, 5, 4, 42}); 828| 0| case 0x17AD9: ------------------ | Branch (828:7): [True: 0, False: 4.88k] ------------------ 829| 0| return if_match(req, "RSA/PKCS1v15(SM3)", {1, 2, 156, 10197, 1, 504}); 830| 0| case 0x17CE2: ------------------ | Branch (830:7): [True: 0, False: 4.88k] ------------------ 831| 0| return if_match(req, "SLH-DSA-SHA2-256f", {2, 16, 840, 1, 101, 3, 4, 3, 25}); 832| 0| case 0x17CEF: ------------------ | Branch (832:7): [True: 0, False: 4.88k] ------------------ 833| 0| return if_match(req, "SLH-DSA-SHA2-256s", {2, 16, 840, 1, 101, 3, 4, 3, 24}); 834| 0| case 0x18618: ------------------ | Branch (834:7): [True: 0, False: 4.88k] ------------------ 835| 0| return if_match(req, "FrodoKEM-976-AES", {1, 3, 6, 1, 4, 1, 25258, 1, 15, 2}); 836| 0| case 0x19480: ------------------ | Branch (836:7): [True: 0, False: 4.88k] ------------------ 837| 0| return if_match(req, "eFrodoKEM-1344-SHAKE", {1, 3, 6, 1, 4, 1, 25258, 1, 16, 3}); 838| 0| case 0x1958A: ------------------ | Branch (838:7): [True: 0, False: 4.88k] ------------------ 839| 0| return if_match(req, "X509v3.InvalidityDate", {2, 5, 29, 24}); 840| 0| case 0x19851: ------------------ | Branch (840:7): [True: 0, False: 4.88k] ------------------ 841| 0| return if_match(req, "DSA/SHA-1", {1, 2, 840, 10040, 4, 3}); 842| 0| case 0x1B2E7: ------------------ | Branch (842:7): [True: 0, False: 4.88k] ------------------ 843| 0| return if_match(req, "KeyWrap.AES-128", {2, 16, 840, 1, 101, 3, 4, 1, 5}); 844| 0| case 0x1B9BE: ------------------ | Branch (844:7): [True: 0, False: 4.88k] ------------------ 845| 0| return if_match(req, "KeyWrap.AES-192", {2, 16, 840, 1, 101, 3, 4, 1, 25}); 846| 0| case 0x1D439: ------------------ | Branch (846:7): [True: 0, False: 4.88k] ------------------ 847| 0| return if_match(req, "SphincsPlus-haraka-192f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 4}); 848| 0| case 0x2065B: ------------------ | Branch (848:7): [True: 0, False: 4.88k] ------------------ 849| 0| return if_match(req, "KeyWrap.CAST-128", {1, 2, 840, 113533, 7, 66, 15}); 850| 0| case 0x216A0: ------------------ | Branch (850:7): [True: 0, False: 4.88k] ------------------ 851| 0| return if_match(req, "ML-KEM-512", {2, 16, 840, 1, 101, 3, 4, 4, 1}); 852| 0| case 0x2216B: ------------------ | Branch (852:7): [True: 0, False: 4.88k] ------------------ 853| 0| return if_match(req, "GOST-34.10-2012-512", {1, 2, 643, 7, 1, 1, 1, 2}); 854| 0| case 0x22C2C: ------------------ | Branch (854:7): [True: 0, False: 4.88k] ------------------ 855| 0| return if_match(req, "ElGamal", {1, 3, 6, 1, 4, 1, 3029, 1, 2, 1}); 856| 0| case 0x2559A: ------------------ | Branch (856:7): [True: 0, False: 4.88k] ------------------ 857| 0| return if_match(req, "X520.Initials", {2, 5, 4, 43}); 858| 0| case 0x271AC: ------------------ | Branch (858:7): [True: 0, False: 4.88k] ------------------ 859| 0| return if_match(req, "PKIX.AutonomousSysIds", {1, 3, 6, 1, 5, 5, 7, 1, 8}); 860| 0| case 0x2808B: ------------------ | Branch (860:7): [True: 0, False: 4.88k] ------------------ 861| 0| return if_match(req, "PKCS7.Data", {1, 2, 840, 113549, 1, 7, 1}); 862| 0| case 0x281B8: ------------------ | Branch (862:7): [True: 0, False: 4.88k] ------------------ 863| 0| return if_match(req, "SphincsPlus-haraka-128s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 1}); 864| 0| case 0x282FE: ------------------ | Branch (864:7): [True: 0, False: 4.88k] ------------------ 865| 0| return if_match(req, "PKIX.OCSP.Nonce", {1, 3, 6, 1, 5, 5, 7, 48, 1, 2}); 866| 0| case 0x29999: ------------------ | Branch (866:7): [True: 0, False: 4.88k] ------------------ 867| 0| return if_match(req, "DSA/SHA-3(256)", {2, 16, 840, 1, 101, 3, 4, 3, 6}); 868| 0| case 0x2A83D: ------------------ | Branch (868:7): [True: 0, False: 4.88k] ------------------ 869| 0| return if_match(req, "SHA-224", {2, 16, 840, 1, 101, 3, 4, 2, 4}); 870| 0| case 0x2AB30: ------------------ | Branch (870:7): [True: 0, False: 4.88k] ------------------ 871| 0| return if_match(req, "SHA-256", {2, 16, 840, 1, 101, 3, 4, 2, 1}); 872| 0| case 0x2ABEF: ------------------ | Branch (872:7): [True: 0, False: 4.88k] ------------------ 873| 0| return if_match(req, "KeyWrap.AES-256", {2, 16, 840, 1, 101, 3, 4, 1, 45}); 874| 0| case 0x2BAEF: ------------------ | Branch (874:7): [True: 0, False: 4.88k] ------------------ 875| 0| return if_match(req, "SM2_Sig/SM3", {1, 2, 156, 10197, 1, 501}); 876| 0| case 0x2C39A: ------------------ | Branch (876:7): [True: 0, False: 4.88k] ------------------ 877| 0| return if_match(req, "ECGDSA/RIPEMD-160", {1, 3, 36, 3, 3, 2, 5, 4, 1}); 878| 0| case 0x2C54F: ------------------ | Branch (878:7): [True: 0, False: 4.88k] ------------------ 879| 0| return if_match(req, "ECDSA/SHA-3(224)", {2, 16, 840, 1, 101, 3, 4, 3, 9}); 880| 0| case 0x2EEA6: ------------------ | Branch (880:7): [True: 0, False: 4.88k] ------------------ 881| 0| return if_match(req, "RSA/PKCS1v15(RIPEMD-160)", {1, 3, 36, 3, 3, 1, 2}); 882| 0| case 0x2EFBA: ------------------ | Branch (882:7): [True: 0, False: 4.88k] ------------------ 883| 0| return if_match(req, "Kyber-512-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 7, 1}); 884| 0| case 0x2F0AD: ------------------ | Branch (884:7): [True: 0, False: 4.88k] ------------------ 885| 0| return if_match(req, "PKCS7.EncryptedData", {1, 2, 840, 113549, 1, 7, 6}); 886| 0| case 0x2F219: ------------------ | Branch (886:7): [True: 0, False: 4.88k] ------------------ 887| 0| return if_match(req, "PBE-SHA1-2DES", {1, 2, 840, 113549, 1, 12, 1, 4}); 888| 0| case 0x3133E: ------------------ | Branch (888:7): [True: 0, False: 4.88k] ------------------ 889| 0| return if_match(req, "SLH-DSA-SHA2-128f", {2, 16, 840, 1, 101, 3, 4, 3, 21}); 890| 0| case 0x3134B: ------------------ | Branch (890:7): [True: 0, False: 4.88k] ------------------ 891| 0| return if_match(req, "SLH-DSA-SHA2-128s", {2, 16, 840, 1, 101, 3, 4, 3, 20}); 892| 0| case 0x3160D: ------------------ | Branch (892:7): [True: 0, False: 4.88k] ------------------ 893| 0| return if_match(req, "RSA/PKCS1v15(SHA-3(224))", {2, 16, 840, 1, 101, 3, 4, 3, 13}); 894| 0| case 0x319E0: ------------------ | Branch (894:7): [True: 0, False: 4.88k] ------------------ 895| 0| return if_match(req, "GOST-34.10-2012-256/Streebog-256", {1, 2, 643, 7, 1, 1, 3, 2}); 896| 0| case 0x31B3D: ------------------ | Branch (896:7): [True: 0, False: 4.88k] ------------------ 897| 0| return if_match(req, "HMAC(SHA-512)", {1, 2, 840, 113549, 2, 11}); 898| 240| case 0x31C6D: ------------------ | Branch (898:7): [True: 240, False: 4.64k] ------------------ 899| 240| return if_match(req, "secp384r1", {1, 3, 132, 0, 34}); 900| 0| case 0x32899: ------------------ | Branch (900:7): [True: 0, False: 4.88k] ------------------ 901| 0| return if_match(req, "TripleDES/CBC", {1, 2, 840, 113549, 3, 7}); 902| 0| case 0x33C9C: ------------------ | Branch (902:7): [True: 0, False: 4.88k] ------------------ 903| 0| return if_match(req, "PKIX.SmtpUTF8Mailbox", {1, 3, 6, 1, 5, 5, 7, 8, 9}); 904| 0| case 0x33D04: ------------------ | Branch (904:7): [True: 0, False: 4.88k] ------------------ 905| 0| return if_match(req, "PKCS12.SecretBag", {1, 2, 840, 113549, 1, 12, 10, 1, 5}); 906| 0| case 0x3615D: ------------------ | Branch (906:7): [True: 0, False: 4.88k] ------------------ 907| 0| return if_match(req, "FrodoKEM-976-SHAKE", {1, 3, 6, 1, 4, 1, 25258, 1, 14, 2}); 908| 0| case 0x361B8: ------------------ | Branch (908:7): [True: 0, False: 4.88k] ------------------ 909| 0| return if_match(req, "Ed25519", {1, 3, 101, 112}); 910| 0| case 0x3649D: ------------------ | Branch (910:7): [True: 0, False: 4.88k] ------------------ 911| 0| return if_match(req, "SHAKE-128", {2, 16, 840, 1, 101, 3, 4, 2, 11}); 912| 0| case 0x36693: ------------------ | Branch (912:7): [True: 0, False: 4.88k] ------------------ 913| 0| return if_match(req, "ClassicMcEliece_348864", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 1}); 914| 0| case 0x373C7: ------------------ | Branch (914:7): [True: 0, False: 4.88k] ------------------ 915| 0| return if_match(req, "ML-DSA-4x4", {2, 16, 840, 1, 101, 3, 4, 3, 17}); 916| 0| case 0x3750B: ------------------ | Branch (916:7): [True: 0, False: 4.88k] ------------------ 917| 0| return if_match(req, "ClassicMcEliece_8192128", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 9}); 918| 0| case 0x39890: ------------------ | Branch (918:7): [True: 0, False: 4.88k] ------------------ 919| 0| return if_match(req, "Ed448", {1, 3, 101, 113}); 920| 0| case 0x3A438: ------------------ | Branch (920:7): [True: 0, False: 4.88k] ------------------ 921| 0| return if_match(req, "SHA-384", {2, 16, 840, 1, 101, 3, 4, 2, 2}); 922| 0| case 0x3A963: ------------------ | Branch (922:7): [True: 0, False: 4.88k] ------------------ 923| 0| return if_match(req, "DH", {1, 2, 840, 10046, 2, 1}); 924| 0| case 0x3AC83: ------------------ | Branch (924:7): [True: 0, False: 4.88k] ------------------ 925| 0| return if_match(req, "MGF1", {1, 2, 840, 113549, 1, 1, 8}); 926| 0| case 0x3ACBA: ------------------ | Branch (926:7): [True: 0, False: 4.88k] ------------------ 927| 0| return if_match(req, "X509v3.IssuerAlternativeName", {2, 5, 29, 18}); 928| 0| case 0x3B273: ------------------ | Branch (928:7): [True: 0, False: 4.88k] ------------------ 929| 0| return if_match(req, "KeyWrap.TripleDES", {1, 2, 840, 113549, 1, 9, 16, 3, 6}); 930| 0| case 0x3B91E: ------------------ | Branch (930:7): [True: 0, False: 4.88k] ------------------ 931| 0| return if_match(req, "X509v3.PrivateKeyUsagePeriod", {2, 5, 29, 16}); 932| 0| case 0x3BC8A: ------------------ | Branch (932:7): [True: 0, False: 4.88k] ------------------ 933| 0| return if_match(req, "SLH-DSA-SHAKE-192f", {2, 16, 840, 1, 101, 3, 4, 3, 29}); 934| 0| case 0x3BC97: ------------------ | Branch (934:7): [True: 0, False: 4.88k] ------------------ 935| 0| return if_match(req, "SLH-DSA-SHAKE-192s", {2, 16, 840, 1, 101, 3, 4, 3, 28}); 936| 0| case 0x3D127: ------------------ | Branch (936:7): [True: 0, False: 4.88k] ------------------ 937| 0| return if_match(req, "DSA", {1, 2, 840, 10040, 4, 1}); 938| 0| case 0x3E249: ------------------ | Branch (938:7): [True: 0, False: 4.88k] ------------------ 939| 0| return if_match(req, "HSS-LMS", {1, 2, 840, 113549, 1, 9, 16, 3, 17}); 940| 0| case 0x3E7D5: ------------------ | Branch (940:7): [True: 0, False: 4.88k] ------------------ 941| 0| return if_match(req, "RSA/PKCS1v15(SHA-3(256))", {2, 16, 840, 1, 101, 3, 4, 3, 14}); 942| 0| case 0x3F748: ------------------ | Branch (942:7): [True: 0, False: 4.88k] ------------------ 943| 0| return if_match(req, "GOST.OGRN", {1, 2, 643, 100, 1}); 944| 0| case 0x3F99F: ------------------ | Branch (944:7): [True: 0, False: 4.88k] ------------------ 945| 0| return if_match(req, "X509v3.BasicConstraints", {2, 5, 29, 19}); 946| 0| case 0x40726: ------------------ | Branch (946:7): [True: 0, False: 4.88k] ------------------ 947| 0| return if_match(req, "SHA-3(512)", {2, 16, 840, 1, 101, 3, 4, 2, 10}); 948| 0| case 0x407BF: ------------------ | Branch (948:7): [True: 0, False: 4.88k] ------------------ 949| 0| return if_match(req, "ML-KEM-768", {2, 16, 840, 1, 101, 3, 4, 4, 2}); 950| 0| case 0x41334: ------------------ | Branch (950:7): [True: 0, False: 4.88k] ------------------ 951| 0| return if_match(req, "ECDSA/SHA-3(384)", {2, 16, 840, 1, 101, 3, 4, 3, 11}); 952| 0| case 0x42DF3: ------------------ | Branch (952:7): [True: 0, False: 4.88k] ------------------ 953| 0| return if_match(req, "X509v3.CRLDistributionPoints", {2, 5, 29, 31}); 954| 0| case 0x437FB: ------------------ | Branch (954:7): [True: 0, False: 4.88k] ------------------ 955| 0| return if_match(req, "brainpool160r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 1}); 956| 0| case 0x441F5: ------------------ | Branch (956:7): [True: 0, False: 4.88k] ------------------ 957| 0| return if_match(req, "gost_256A", {1, 2, 643, 7, 1, 2, 1, 1, 1}); 958| 0| case 0x441F6: ------------------ | Branch (958:7): [True: 0, False: 4.88k] ------------------ 959| 0| return if_match(req, "gost_256B", {1, 2, 643, 7, 1, 2, 1, 1, 2}); 960| 0| case 0x44221: ------------------ | Branch (960:7): [True: 0, False: 4.88k] ------------------ 961| 0| return if_match(req, "GOST-34.10-2012-512/Streebog-512", {1, 2, 643, 7, 1, 1, 3, 3}); 962| 0| case 0x44322: ------------------ | Branch (962:7): [True: 0, False: 4.88k] ------------------ 963| 0| return if_match(req, "ClassicMcEliece_6960119pc", {1, 3, 6, 1, 4, 1, 25258, 1, 18, 3}); 964| 0| case 0x44973: ------------------ | Branch (964:7): [True: 0, False: 4.88k] ------------------ 965| 0| return if_match(req, "Kyber-512-90s-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 11, 1}); 966| 0| case 0x45C27: ------------------ | Branch (966:7): [True: 0, False: 4.88k] ------------------ 967| 0| return if_match(req, "RSA/PKCS1v15(SHA-512-256)", {1, 2, 840, 113549, 1, 1, 16}); 968| 0| case 0x45C85: ------------------ | Branch (968:7): [True: 0, False: 4.88k] ------------------ 969| 0| return if_match(req, "X509v3.ReasonCode", {2, 5, 29, 21}); 970| 0| case 0x45DA5: ------------------ | Branch (970:7): [True: 0, False: 4.88k] ------------------ 971| 0| return if_match(req, "SHAKE-256", {2, 16, 840, 1, 101, 3, 4, 2, 12}); 972| 0| case 0x4663C: ------------------ | Branch (972:7): [True: 0, False: 4.88k] ------------------ 973| 0| return if_match(req, "X509v3.PolicyConstraints", {2, 5, 29, 36}); 974| 0| case 0x480F7: ------------------ | Branch (974:7): [True: 0, False: 4.88k] ------------------ 975| 0| return if_match(req, "Serpent/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 4}); 976| 0| case 0x48627: ------------------ | Branch (976:7): [True: 0, False: 4.88k] ------------------ 977| 0| return if_match(req, "Dilithium-4x4-AES-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 10, 1}); 978| 0| case 0x48861: ------------------ | Branch (978:7): [True: 0, False: 4.88k] ------------------ 979| 0| return if_match(req, "ChaCha20Poly1305", {1, 2, 840, 113549, 1, 9, 16, 3, 18}); 980| 0| case 0x4A292: ------------------ | Branch (980:7): [True: 0, False: 4.88k] ------------------ 981| 0| return if_match(req, "frp256v1", {1, 2, 250, 1, 223, 101, 256, 1}); 982| 0| case 0x4A9EE: ------------------ | Branch (982:7): [True: 0, False: 4.88k] ------------------ 983| 0| return if_match(req, "ClassicMcEliece_6960119f", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 8}); 984| 0| case 0x4BF87: ------------------ | Branch (984:7): [True: 0, False: 4.88k] ------------------ 985| 0| return if_match(req, "PKIX.TNAuthList", {1, 3, 6, 1, 5, 5, 7, 1, 26}); 986| 0| case 0x4C088: ------------------ | Branch (986:7): [True: 0, False: 4.88k] ------------------ 987| 0| return if_match(req, "eFrodoKEM-976-AES", {1, 3, 6, 1, 4, 1, 25258, 1, 17, 2}); 988| 0| case 0x4C513: ------------------ | Branch (988:7): [True: 0, False: 4.88k] ------------------ 989| 0| return if_match(req, "DSA/SHA-224", {2, 16, 840, 1, 101, 3, 4, 3, 1}); 990| 0| case 0x4C806: ------------------ | Branch (990:7): [True: 0, False: 4.88k] ------------------ 991| 0| return if_match(req, "DSA/SHA-256", {2, 16, 840, 1, 101, 3, 4, 3, 2}); 992| 0| case 0x4D740: ------------------ | Branch (992:7): [True: 0, False: 4.88k] ------------------ 993| 0| return if_match(req, "X509v3.AnyPolicy", {2, 5, 29, 32, 0}); 994| 0| case 0x4DE49: ------------------ | Branch (994:7): [True: 0, False: 4.88k] ------------------ 995| 0| return if_match(req, "RSA/PKCS1v15(SHA-512)", {1, 2, 840, 113549, 1, 1, 13}); 996| 0| case 0x4ED5D: ------------------ | Branch (996:7): [True: 0, False: 4.88k] ------------------ 997| 0| return if_match(req, "CAST-128/CBC", {1, 2, 840, 113533, 7, 66, 10}); 998| 0| case 0x4FCDC: ------------------ | Branch (998:7): [True: 0, False: 4.88k] ------------------ 999| 0| return if_match(req, "RSA", {1, 2, 840, 113549, 1, 1, 1}); 1000| 0| case 0x501CB: ------------------ | Branch (1000:7): [True: 0, False: 4.88k] ------------------ 1001| 0| return if_match(req, "ECDSA/SHA-224", {1, 2, 840, 10045, 4, 3, 1}); 1002| 0| case 0x50395: ------------------ | Branch (1002:7): [True: 0, False: 4.88k] ------------------ 1003| 0| return if_match(req, "GOST-34.10/GOST-R-34.11-94", {1, 2, 643, 2, 2, 3}); 1004| 0| case 0x504BE: ------------------ | Branch (1004:7): [True: 0, False: 4.88k] ------------------ 1005| 0| return if_match(req, "ECDSA/SHA-256", {1, 2, 840, 10045, 4, 3, 2}); 1006| 0| case 0x509C3: ------------------ | Branch (1006:7): [True: 0, False: 4.88k] ------------------ 1007| 0| return if_match(req, "brainpool192r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 3}); 1008| 0| case 0x509F9: ------------------ | Branch (1008:7): [True: 0, False: 4.88k] ------------------ 1009| 0| return if_match(req, "PKCS9.ContentType", {1, 2, 840, 113549, 1, 9, 3}); 1010| 0| case 0x50B26: ------------------ | Branch (1010:7): [True: 0, False: 4.88k] ------------------ 1011| 0| return if_match(req, "FrodoKEM-640-AES", {1, 3, 6, 1, 4, 1, 25258, 1, 15, 1}); 1012| 0| case 0x50D78: ------------------ | Branch (1012:7): [True: 0, False: 4.88k] ------------------ 1013| 0| return if_match(req, "x962_p192v2", {1, 2, 840, 10045, 3, 1, 2}); 1014| 0| case 0x50D79: ------------------ | Branch (1014:7): [True: 0, False: 4.88k] ------------------ 1015| 0| return if_match(req, "x962_p192v3", {1, 2, 840, 10045, 3, 1, 3}); 1016| 0| case 0x51DC6: ------------------ | Branch (1016:7): [True: 0, False: 4.88k] ------------------ 1017| 0| return if_match(req, "AES-128/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 1}); 1018| 0| case 0x52DB6: ------------------ | Branch (1018:7): [True: 0, False: 4.88k] ------------------ 1019| 0| return if_match(req, "HMAC(SHA-224)", {1, 2, 840, 113549, 2, 8}); 1020| 0| case 0x53E11: ------------------ | Branch (1020:7): [True: 0, False: 4.88k] ------------------ 1021| 0| return if_match(req, "FrodoKEM-1344-SHAKE", {1, 3, 6, 1, 4, 1, 25258, 1, 14, 3}); 1022| 0| case 0x54012: ------------------ | Branch (1022:7): [True: 0, False: 4.88k] ------------------ 1023| 0| return if_match(req, "PKIX.TimeStamping", {1, 3, 6, 1, 5, 5, 7, 3, 8}); 1024| 0| case 0x5407A: ------------------ | Branch (1024:7): [True: 0, False: 4.88k] ------------------ 1025| 0| return if_match(req, "Serpent/CBC", {1, 3, 6, 1, 4, 1, 25258, 3, 1}); 1026| 0| case 0x5576D: ------------------ | Branch (1026:7): [True: 0, False: 4.88k] ------------------ 1027| 0| return if_match(req, "SphincsPlus-sha2-128f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 2}); 1028| 0| case 0x55EF6: ------------------ | Branch (1028:7): [True: 0, False: 4.88k] ------------------ 1029| 0| return if_match(req, "AES-192/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 2}); 1030| 0| case 0x55FFA: ------------------ | Branch (1030:7): [True: 0, False: 4.88k] ------------------ 1031| 0| return if_match(req, "ML-DSA-6x5", {2, 16, 840, 1, 101, 3, 4, 3, 18}); 1032| 0| case 0x56826: ------------------ | Branch (1032:7): [True: 0, False: 4.88k] ------------------ 1033| 0| return if_match(req, "brainpool320r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 9}); 1034| 0| case 0x56D0D: ------------------ | Branch (1034:7): [True: 0, False: 4.88k] ------------------ 1035| 0| return if_match(req, "SphincsPlus-shake-128f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 2}); 1036| 0| case 0x57077: ------------------ | Branch (1036:7): [True: 0, False: 4.88k] ------------------ 1037| 0| return if_match(req, "XMSS-draft6", {1, 3, 6, 1, 4, 1, 25258, 1, 5}); 1038| 0| case 0x5818B: ------------------ | Branch (1038:7): [True: 0, False: 4.88k] ------------------ 1039| 0| return if_match(req, "ECGDSA/SHA-224", {1, 3, 36, 3, 3, 2, 5, 4, 3}); 1040| 0| case 0x5847E: ------------------ | Branch (1040:7): [True: 0, False: 4.88k] ------------------ 1041| 0| return if_match(req, "ECGDSA/SHA-256", {1, 3, 36, 3, 3, 2, 5, 4, 4}); 1042| 0| case 0x5898B: ------------------ | Branch (1042:7): [True: 0, False: 4.88k] ------------------ 1043| 0| return if_match(req, "SHA-512", {2, 16, 840, 1, 101, 3, 4, 2, 3}); 1044| 0| case 0x58991: ------------------ | Branch (1044:7): [True: 0, False: 4.88k] ------------------ 1045| 0| return if_match(req, "PKIX.OCSP.NoCheck", {1, 3, 6, 1, 5, 5, 7, 48, 1, 5}); 1046| 0| case 0x59717: ------------------ | Branch (1046:7): [True: 0, False: 4.88k] ------------------ 1047| 0| return if_match(req, "X509v3.SubjectKeyIdentifier", {2, 5, 29, 14}); 1048| 0| case 0x5A1E1: ------------------ | Branch (1048:7): [True: 0, False: 4.88k] ------------------ 1049| 0| return if_match(req, "PKCS12.KeyBag", {1, 2, 840, 113549, 1, 12, 10, 1, 1}); 1050| 0| case 0x5A570: ------------------ | Branch (1050:7): [True: 0, False: 4.88k] ------------------ 1051| 0| return if_match(req, "X520.CommonName", {2, 5, 4, 3}); 1052| 0| case 0x5A990: ------------------ | Branch (1052:7): [True: 0, False: 4.88k] ------------------ 1053| 0| return if_match(req, "ECDSA/SHA-3(256)", {2, 16, 840, 1, 101, 3, 4, 3, 10}); 1054| 0| case 0x5AB0E: ------------------ | Branch (1054:7): [True: 0, False: 4.88k] ------------------ 1055| 0| return if_match(req, "SphincsPlus-sha2-256s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 5}); 1056| 0| case 0x5AC4A: ------------------ | Branch (1056:7): [True: 0, False: 4.88k] ------------------ 1057| 0| return if_match(req, "X520.Surname", {2, 5, 4, 4}); 1058| 0| case 0x5AF2C: ------------------ | Branch (1058:7): [True: 0, False: 4.88k] ------------------ 1059| 0| return if_match(req, "ClassicMcEliece_8192128pc", {1, 3, 6, 1, 4, 1, 25258, 1, 18, 5}); 1060| 0| case 0x5BC39: ------------------ | Branch (1060:7): [True: 0, False: 4.88k] ------------------ 1061| 0| return if_match(req, "X509v3.KeyUsage", {2, 5, 29, 15}); 1062| 0| case 0x5BDDB: ------------------ | Branch (1062:7): [True: 0, False: 4.88k] ------------------ 1063| 0| return if_match(req, "numsp256d1", {1, 3, 6, 1, 4, 1, 25258, 4, 1}); 1064| 0| case 0x5C0AE: ------------------ | Branch (1064:7): [True: 0, False: 4.88k] ------------------ 1065| 0| return if_match(req, "SphincsPlus-shake-256s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 5}); 1066| 0| case 0x5C10E: ------------------ | Branch (1066:7): [True: 0, False: 4.88k] ------------------ 1067| 0| return if_match(req, "DSA/SHA-384", {2, 16, 840, 1, 101, 3, 4, 3, 3}); 1068| 0| case 0x5CFE5: ------------------ | Branch (1068:7): [True: 0, False: 4.88k] ------------------ 1069| 0| return if_match(req, "PKCS9.X509Certificate", {1, 2, 840, 113549, 1, 9, 22, 1}); 1070| 0| case 0x5D1CF: ------------------ | Branch (1070:7): [True: 0, False: 4.88k] ------------------ 1071| 0| return if_match(req, "X520.SerialNumber", {2, 5, 4, 5}); 1072| 0| case 0x5D375: ------------------ | Branch (1072:7): [True: 0, False: 4.88k] ------------------ 1073| 0| return if_match(req, "SM4/OCB", {1, 2, 156, 10197, 1, 104, 100}); 1074| 0| case 0x5DD49: ------------------ | Branch (1074:7): [True: 0, False: 4.88k] ------------------ 1075| 0| return if_match(req, "AES-128/CBC", {2, 16, 840, 1, 101, 3, 4, 1, 2}); 1076| 0| case 0x5DE4E: ------------------ | Branch (1076:7): [True: 0, False: 4.88k] ------------------ 1077| 0| return if_match(req, "AES-128/CCM", {2, 16, 840, 1, 101, 3, 4, 1, 7}); 1078| 0| case 0x5DF23: ------------------ | Branch (1078:7): [True: 0, False: 4.88k] ------------------ 1079| 0| return if_match(req, "HMAC(SHA-512-256)", {1, 2, 840, 113549, 2, 13}); 1080| 0| case 0x5ED04: ------------------ | Branch (1080:7): [True: 0, False: 4.88k] ------------------ 1081| 0| return if_match(req, "SM2", {1, 2, 156, 10197, 1, 301, 1}); 1082| 0| case 0x5ED05: ------------------ | Branch (1082:7): [True: 0, False: 4.88k] ------------------ 1083| 0| return if_match(req, "SM3", {1, 2, 156, 10197, 1, 401}); 1084| 0| case 0x5FDC6: ------------------ | Branch (1084:7): [True: 0, False: 4.88k] ------------------ 1085| 0| return if_match(req, "ECDSA/SHA-384", {1, 2, 840, 10045, 4, 3, 3}); 1086| 0| case 0x6199F: ------------------ | Branch (1086:7): [True: 0, False: 4.88k] ------------------ 1087| 0| return if_match(req, "SHA-3(224)", {2, 16, 840, 1, 101, 3, 4, 2, 7}); 1088| 0| case 0x61E79: ------------------ | Branch (1088:7): [True: 0, False: 4.88k] ------------------ 1089| 0| return if_match(req, "AES-192/CBC", {2, 16, 840, 1, 101, 3, 4, 1, 22}); 1090| 0| case 0x61F7E: ------------------ | Branch (1090:7): [True: 0, False: 4.88k] ------------------ 1091| 0| return if_match(req, "AES-192/CCM", {2, 16, 840, 1, 101, 3, 4, 1, 27}); 1092| 0| case 0x64947: ------------------ | Branch (1092:7): [True: 0, False: 4.88k] ------------------ 1093| 0| return if_match(req, "OpenPGP.Ed25519", {1, 3, 6, 1, 4, 1, 11591, 15, 1}); 1094| 0| case 0x652E7: ------------------ | Branch (1094:7): [True: 0, False: 4.88k] ------------------ 1095| 0| return if_match(req, "sm2p256v1", {1, 2, 156, 10197, 1, 301}); 1096| 0| case 0x6697B: ------------------ | Branch (1096:7): [True: 0, False: 4.88k] ------------------ 1097| 0| return if_match(req, "FrodoKEM-1344-AES", {1, 3, 6, 1, 4, 1, 25258, 1, 15, 3}); 1098| 0| case 0x67B2C: ------------------ | Branch (1098:7): [True: 0, False: 4.88k] ------------------ 1099| 0| return if_match(req, "X520.State", {2, 5, 4, 8}); 1100| 0| case 0x67B9B: ------------------ | Branch (1100:7): [True: 0, False: 4.88k] ------------------ 1101| 0| return if_match(req, "HMAC(SHA-384)", {1, 2, 840, 113549, 2, 10}); 1102| 0| case 0x67D86: ------------------ | Branch (1102:7): [True: 0, False: 4.88k] ------------------ 1103| 0| return if_match(req, "ECGDSA/SHA-384", {1, 3, 36, 3, 3, 2, 5, 4, 5}); 1104| 0| case 0x68A0B: ------------------ | Branch (1104:7): [True: 0, False: 4.88k] ------------------ 1105| 0| return if_match(req, "Camellia-128/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 6}); 1106| 0| case 0x68E33: ------------------ | Branch (1106:7): [True: 0, False: 4.88k] ------------------ 1107| 0| return if_match(req, "PKCS9.ExtensionRequest", {1, 2, 840, 113549, 1, 9, 14}); 1108| 2.84k| case 0x69126: ------------------ | Branch (1108:7): [True: 2.84k, False: 2.03k] ------------------ 1109| 2.84k| return if_match(req, "X509v3.SubjectAlternativeName", {2, 5, 29, 17}); 1110| 0| case 0x692F8: ------------------ | Branch (1110:7): [True: 0, False: 4.88k] ------------------ 1111| 0| return if_match(req, "SM4/CBC", {1, 2, 156, 10197, 1, 104, 2}); 1112| 0| case 0x695E1: ------------------ | Branch (1112:7): [True: 0, False: 4.88k] ------------------ 1113| 0| return if_match(req, "Dilithium-4x4-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 9, 1}); 1114| 0| case 0x696DC: ------------------ | Branch (1114:7): [True: 0, False: 4.88k] ------------------ 1115| 0| return if_match(req, "PKIX.IpAddrBlocks", {1, 3, 6, 1, 5, 5, 7, 1, 7}); 1116| 401| case 0x6A7CA: ------------------ | Branch (1116:7): [True: 401, False: 4.48k] ------------------ 1117| 401| return if_match(req, "ECDSA", {1, 2, 840, 10045, 2, 1}); 1118| 0| case 0x6BD26: ------------------ | Branch (1118:7): [True: 0, False: 4.88k] ------------------ 1119| 0| return if_match(req, "GOST.INN", {1, 2, 643, 3, 131, 1, 1}); 1120| 0| case 0x6CB3B: ------------------ | Branch (1120:7): [True: 0, False: 4.88k] ------------------ 1121| 0| return if_match(req, "Camellia-192/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 7}); 1122| 0| case 0x6E602: ------------------ | Branch (1122:7): [True: 0, False: 4.88k] ------------------ 1123| 0| return if_match(req, "Dilithium-8x7-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 9, 3}); 1124| 0| case 0x6F0C2: ------------------ | Branch (1124:7): [True: 0, False: 4.88k] ------------------ 1125| 0| return if_match(req, "RSA/PKCS1v15(SHA-224)", {1, 2, 840, 113549, 1, 1, 14}); 1126| 0| case 0x6F9F8: ------------------ | Branch (1126:7): [True: 0, False: 4.88k] ------------------ 1127| 0| return if_match(req, "PKCS12.SafeContentsBag", {1, 2, 840, 113549, 1, 12, 10, 1, 6}); 1128| 0| case 0x6FB26: ------------------ | Branch (1128:7): [True: 0, False: 4.88k] ------------------ 1129| 0| return if_match(req, "PKIX.AuthorityInformationAccess", {1, 3, 6, 1, 5, 5, 7, 1, 1}); 1130| 252| case 0x70BB6: ------------------ | Branch (1130:7): [True: 252, False: 4.63k] ------------------ 1131| 252| return if_match(req, "brainpool384r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 11}); 1132| 0| case 0x70EA6: ------------------ | Branch (1132:7): [True: 0, False: 4.88k] ------------------ 1133| 0| return if_match(req, "PKCS12.PKCS8ShroudedKeyBag", {1, 2, 840, 113549, 1, 12, 10, 1, 2}); 1134| 0| case 0x71EB3: ------------------ | Branch (1134:7): [True: 0, False: 4.88k] ------------------ 1135| 0| return if_match(req, "SphincsPlus-haraka-128f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 2}); 1136| 0| case 0x7382C: ------------------ | Branch (1136:7): [True: 0, False: 4.88k] ------------------ 1137| 0| return if_match(req, "ML-KEM-1024", {2, 16, 840, 1, 101, 3, 4, 4, 3}); 1138| 0| case 0x743BD: ------------------ | Branch (1138:7): [True: 0, False: 4.88k] ------------------ 1139| 0| return if_match(req, "AES-256/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 3}); 1140| 0| case 0x7498E: ------------------ | Branch (1140:7): [True: 0, False: 4.88k] ------------------ 1141| 0| return if_match(req, "Camellia-128/CBC", {1, 2, 392, 200011, 61, 1, 1, 1, 2}); 1142| 0| case 0x74C2E: ------------------ | Branch (1142:7): [True: 0, False: 4.88k] ------------------ 1143| 0| return if_match(req, "ML-DSA-8x7", {2, 16, 840, 1, 101, 3, 4, 3, 19}); 1144| 0| case 0x7505F: ------------------ | Branch (1144:7): [True: 0, False: 4.88k] ------------------ 1145| 0| return if_match(req, "PKIX.XMPPAddr", {1, 3, 6, 1, 5, 5, 7, 8, 5}); 1146| 0| case 0x7517A: ------------------ | Branch (1146:7): [True: 0, False: 4.88k] ------------------ 1147| 0| return if_match(req, "RSA/PKCS1v15(MD2)", {1, 2, 840, 113549, 1, 1, 2}); 1148| 0| case 0x7546B: ------------------ | Branch (1148:7): [True: 0, False: 4.88k] ------------------ 1149| 0| return if_match(req, "RSA/PKCS1v15(MD5)", {1, 2, 840, 113549, 1, 1, 4}); 1150| 0| case 0x75921: ------------------ | Branch (1150:7): [True: 0, False: 4.88k] ------------------ 1151| 0| return if_match(req, "ClassicMcEliece_348864f", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 2}); 1152| 0| case 0x76784: ------------------ | Branch (1152:7): [True: 0, False: 4.88k] ------------------ 1153| 0| return if_match(req, "SHA-3(384)", {2, 16, 840, 1, 101, 3, 4, 2, 9}); 1154| 0| case 0x768FD: ------------------ | Branch (1154:7): [True: 0, False: 4.88k] ------------------ 1155| 0| return if_match(req, "PKCS9.LocalKeyId", {1, 2, 840, 113549, 1, 9, 21}); 1156| 178| case 0x76A19: ------------------ | Branch (1156:7): [True: 178, False: 4.70k] ------------------ 1157| 178| return if_match(req, "brainpool512r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 13}); 1158| 0| case 0x77254: ------------------ | Branch (1158:7): [True: 0, False: 4.88k] ------------------ 1159| 0| return if_match(req, "SphincsPlus-haraka-256s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 5}); 1160| 0| case 0x77ADC: ------------------ | Branch (1160:7): [True: 0, False: 4.88k] ------------------ 1161| 0| return if_match(req, "secp224k1", {1, 3, 132, 0, 32}); 1162| 0| case 0x781B9: ------------------ | Branch (1162:7): [True: 0, False: 4.88k] ------------------ 1163| 0| return if_match(req, "secp224r1", {1, 3, 132, 0, 33}); 1164| 0| case 0x78ABE: ------------------ | Branch (1164:7): [True: 0, False: 4.88k] ------------------ 1165| 0| return if_match(req, "Camellia-192/CBC", {1, 2, 392, 200011, 61, 1, 1, 1, 3}); 1166| 0| case 0x792F2: ------------------ | Branch (1166:7): [True: 0, False: 4.88k] ------------------ 1167| 0| return if_match(req, "ClassicMcEliece_6688128pc", {1, 3, 6, 1, 4, 1, 25258, 1, 18, 1}); 1168| 0| case 0x7A661: ------------------ | Branch (1168:7): [True: 0, False: 4.88k] ------------------ 1169| 0| return if_match(req, "DSA/SHA-512", {2, 16, 840, 1, 101, 3, 4, 3, 4}); 1170| 0| case 0x7A977: ------------------ | Branch (1170:7): [True: 0, False: 4.88k] ------------------ 1171| 0| return if_match(req, "X509v3.ExtendedKeyUsage", {2, 5, 29, 37}); 1172| 0| case 0x7AE67: ------------------ | Branch (1172:7): [True: 0, False: 4.88k] ------------------ 1173| 0| return if_match(req, "SM2_Enc", {1, 2, 156, 10197, 1, 301, 3}); 1174| 0| case 0x7B602: ------------------ | Branch (1174:7): [True: 0, False: 4.88k] ------------------ 1175| 0| return if_match(req, "Twofish/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 5}); 1176| 0| case 0x7B9A1: ------------------ | Branch (1176:7): [True: 0, False: 4.88k] ------------------ 1177| 0| return if_match(req, "SphincsPlus-sha2-192s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 3}); 1178| 0| case 0x7BB0A: ------------------ | Branch (1178:7): [True: 0, False: 4.88k] ------------------ 1179| 0| return if_match(req, "SLH-DSA-SHAKE-256f", {2, 16, 840, 1, 101, 3, 4, 3, 31}); 1180| 0| case 0x7BB17: ------------------ | Branch (1180:7): [True: 0, False: 4.88k] ------------------ 1181| 0| return if_match(req, "SLH-DSA-SHAKE-256s", {2, 16, 840, 1, 101, 3, 4, 3, 30}); 1182| 0| case 0x7BCF3: ------------------ | Branch (1182:7): [True: 0, False: 4.88k] ------------------ 1183| 0| return if_match(req, "PKIX.EmailProtection", {1, 3, 6, 1, 5, 5, 7, 3, 4}); 1184| 0| case 0x7CC2C: ------------------ | Branch (1184:7): [True: 0, False: 4.88k] ------------------ 1185| 0| return if_match(req, "SHA-512-256", {2, 16, 840, 1, 101, 3, 4, 2, 6}); 1186| 0| case 0x7CF41: ------------------ | Branch (1186:7): [True: 0, False: 4.88k] ------------------ 1187| 0| return if_match(req, "SphincsPlus-shake-192s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 3}); 1188| 0| case 0x7DB91: ------------------ | Branch (1188:7): [True: 0, False: 4.88k] ------------------ 1189| 0| return if_match(req, "GOST-34.10", {1, 2, 643, 2, 2, 19}); 1190| 0| case 0x7E319: ------------------ | Branch (1190:7): [True: 0, False: 4.88k] ------------------ 1191| 0| return if_match(req, "ECDSA/SHA-512", {1, 2, 840, 10045, 4, 3, 4}); 1192| 0| case 0x7E874: ------------------ | Branch (1192:7): [True: 0, False: 4.88k] ------------------ 1193| 0| return if_match(req, "ClassicMcEliece_6688128f", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 6}); 1194| 0| case 0x7EAAF: ------------------ | Branch (1194:7): [True: 0, False: 4.88k] ------------------ 1195| 0| return if_match(req, "eFrodoKEM-640-SHAKE", {1, 3, 6, 1, 4, 1, 25258, 1, 16, 1}); 1196| 0| case 0x7F51F: ------------------ | Branch (1196:7): [True: 0, False: 4.88k] ------------------ 1197| 0| return if_match(req, "PKIX.IPsecTunnel", {1, 3, 6, 1, 5, 5, 7, 3, 6}); 1198| 0| case 0x80272: ------------------ | Branch (1198:7): [True: 0, False: 4.88k] ------------------ 1199| 0| return if_match(req, "X520.Organization", {2, 5, 4, 10}); 1200| 0| case 0x80340: ------------------ | Branch (1200:7): [True: 0, False: 4.88k] ------------------ 1201| 0| return if_match(req, "AES-256/CBC", {2, 16, 840, 1, 101, 3, 4, 1, 42}); 1202| 0| case 0x80445: ------------------ | Branch (1202:7): [True: 0, False: 4.88k] ------------------ 1203| 0| return if_match(req, "AES-256/CCM", {2, 16, 840, 1, 101, 3, 4, 1, 47}); 1204| 0| case 0x80E71: ------------------ | Branch (1204:7): [True: 0, False: 4.88k] ------------------ 1205| 0| return if_match(req, "PKIX.STIRTNList", {1, 3, 6, 1, 5, 5, 7, 48, 14}); 1206| 0| case 0x811F7: ------------------ | Branch (1206:7): [True: 0, False: 4.88k] ------------------ 1207| 0| return if_match(req, "HMAC(SHA-256)", {1, 2, 840, 113549, 2, 9}); 1208| 0| case 0x82434: ------------------ | Branch (1208:7): [True: 0, False: 4.88k] ------------------ 1209| 0| return if_match(req, "PKCS9.X509CRL", {1, 2, 840, 113549, 1, 9, 23, 1}); 1210| 0| case 0x82B47: ------------------ | Branch (1210:7): [True: 0, False: 4.88k] ------------------ 1211| 0| return if_match(req, "Threefish-512/CBC", {1, 3, 6, 1, 4, 1, 25258, 3, 2}); 1212| 0| case 0x83EA7: ------------------ | Branch (1212:7): [True: 0, False: 4.88k] ------------------ 1213| 0| return if_match(req, "RSA/PKCS1v15(SHA-384)", {1, 2, 840, 113549, 1, 1, 12}); 1214| 0| case 0x84596: ------------------ | Branch (1214:7): [True: 0, False: 4.88k] ------------------ 1215| 0| return if_match(req, "eFrodoKEM-640-AES", {1, 3, 6, 1, 4, 1, 25258, 1, 17, 1}); 1216| 0| case 0x8469F: ------------------ | Branch (1216:7): [True: 0, False: 4.88k] ------------------ 1217| 0| return if_match(req, "ClassicMcEliece_6960119pcf", {1, 3, 6, 1, 4, 1, 25258, 1, 18, 4}); 1218| 0| case 0x84CA4: ------------------ | Branch (1218:7): [True: 0, False: 4.88k] ------------------ 1219| 0| return if_match(req, "secp256k1", {1, 3, 132, 0, 10}); 1220| 202| case 0x85381: ------------------ | Branch (1220:7): [True: 202, False: 4.68k] ------------------ 1221| 202| return if_match(req, "secp256r1", {1, 2, 840, 10045, 3, 1, 7}); 1222| 0| case 0x854FC: ------------------ | Branch (1222:7): [True: 0, False: 4.88k] ------------------ 1223| 0| return if_match(req, "PKIX.IPsecUser", {1, 3, 6, 1, 5, 5, 7, 3, 7}); 1224| 0| case 0x85F51: ------------------ | Branch (1224:7): [True: 0, False: 4.88k] ------------------ 1225| 0| return if_match(req, "Serpent/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 4}); 1226| 0| case 0x862D9: ------------------ | Branch (1226:7): [True: 0, False: 4.88k] ------------------ 1227| 0| return if_match(req, "ECGDSA/SHA-512", {1, 3, 36, 3, 3, 2, 5, 4, 6}); 1228| 0| case 0x87585: ------------------ | Branch (1228:7): [True: 0, False: 4.88k] ------------------ 1229| 0| return if_match(req, "Twofish/CBC", {1, 3, 6, 1, 4, 1, 25258, 3, 3}); 1230| 0| case 0x877D1: ------------------ | Branch (1230:7): [True: 0, False: 4.88k] ------------------ 1231| 0| return if_match(req, "PKCS9.EmailAddress", {1, 2, 840, 113549, 1, 9, 1}); 1232| 215| case 0x87D27: ------------------ | Branch (1232:7): [True: 215, False: 4.67k] ------------------ 1233| 215| return if_match(req, "PKIX.CertificateAuthorityIssuers", {1, 3, 6, 1, 5, 5, 7, 48, 2}); 1234| 0| case 0x87E42: ------------------ | Branch (1234:7): [True: 0, False: 4.88k] ------------------ 1235| 0| return if_match(req, "X509v3.AuthorityKeyIdentifier", {2, 5, 29, 35}); 1236| 0| case 0x889B1: ------------------ | Branch (1236:7): [True: 0, False: 4.88k] ------------------ 1237| 0| return if_match(req, "ECDSA/SHA-1", {1, 2, 840, 10045, 4, 1}); 1238| 0| case 0x89658: ------------------ | Branch (1238:7): [True: 0, False: 4.88k] ------------------ 1239| 0| return if_match(req, "PBE-PKCS5v20", {1, 2, 840, 113549, 1, 5, 13}); 1240| 0| case 0x8976D: ------------------ | Branch (1240:7): [True: 0, False: 4.88k] ------------------ 1241| 0| return if_match(req, "PKCS9.MessageDigest", {1, 2, 840, 113549, 1, 9, 4}); 1242| 0| case 0x8B002: ------------------ | Branch (1242:7): [True: 0, False: 4.88k] ------------------ 1243| 0| return if_match(req, "Camellia-256/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 8}); 1244| 0| case 0x8B935: ------------------ | Branch (1244:7): [True: 0, False: 4.88k] ------------------ 1245| 0| return if_match(req, "ClassicMcEliece_6688128", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 5}); 1246| 0| case 0x8BB11: ------------------ | Branch (1246:7): [True: 0, False: 4.88k] ------------------ 1247| 0| return if_match(req, "X509v3.NoRevocationAvailable", {2, 5, 29, 56}); 1248| 0| case 0x8CE3D: ------------------ | Branch (1248:7): [True: 0, False: 4.88k] ------------------ 1249| 0| return if_match(req, "PKCS9.ChallengePassword", {1, 2, 840, 113549, 1, 9, 7}); 1250| 0| case 0x8D45C: ------------------ | Branch (1250:7): [True: 0, False: 4.88k] ------------------ 1251| 0| return if_match(req, "ECKCDSA", {1, 0, 14888, 3, 0, 5}); 1252| 0| case 0x8E0C1: ------------------ | Branch (1252:7): [True: 0, False: 4.88k] ------------------ 1253| 0| return if_match(req, "X509v3.CertificatePolicies", {2, 5, 29, 32}); 1254| 0| case 0x8E39A: ------------------ | Branch (1254:7): [True: 0, False: 4.88k] ------------------ 1255| 0| return if_match(req, "HSS-LMS-Private-Key", {1, 3, 6, 1, 4, 1, 25258, 1, 13}); 1256| 0| case 0x8EC51: ------------------ | Branch (1256:7): [True: 0, False: 4.88k] ------------------ 1257| 0| return if_match(req, "Kyber-768-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 7, 2}); 1258| 0| case 0x8F94A: ------------------ | Branch (1258:7): [True: 0, False: 4.88k] ------------------ 1259| 0| return if_match(req, "Dilithium-6x5-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 9, 2}); 1260| 0| case 0x8FC20: ------------------ | Branch (1260:7): [True: 0, False: 4.88k] ------------------ 1261| 0| return if_match(req, "AES-128/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 1}); 1262| 0| case 0x8FDE0: ------------------ | Branch (1262:7): [True: 0, False: 4.88k] ------------------ 1263| 0| return if_match(req, "SHA-3(256)", {2, 16, 840, 1, 101, 3, 4, 2, 8}); 1264| 0| case 0x919E3: ------------------ | Branch (1264:7): [True: 0, False: 4.88k] ------------------ 1265| 0| return if_match(req, "Serpent/GCM", {1, 3, 6, 1, 4, 1, 25258, 3, 101}); 1266| 0| case 0x91C1A: ------------------ | Branch (1266:7): [True: 0, False: 4.88k] ------------------ 1267| 0| return if_match(req, "X25519", {1, 3, 101, 110}); 1268| 0| case 0x91DC4: ------------------ | Branch (1268:7): [True: 0, False: 4.88k] ------------------ 1269| 0| return if_match(req, "McEliece", {1, 3, 6, 1, 4, 1, 25258, 1, 3}); 1270| 0| case 0x93467: ------------------ | Branch (1270:7): [True: 0, False: 4.88k] ------------------ 1271| 0| return if_match(req, "Dilithium-6x5-AES-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 10, 2}); 1272| 0| case 0x93D50: ------------------ | Branch (1272:7): [True: 0, False: 4.88k] ------------------ 1273| 0| return if_match(req, "AES-192/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 2}); 1274| 0| case 0x95166: ------------------ | Branch (1274:7): [True: 0, False: 4.88k] ------------------ 1275| 0| return if_match(req, "SLH-DSA-SHAKE-128f", {2, 16, 840, 1, 101, 3, 4, 3, 27}); 1276| 0| case 0x95173: ------------------ | Branch (1276:7): [True: 0, False: 4.88k] ------------------ 1277| 0| return if_match(req, "SLH-DSA-SHAKE-128s", {2, 16, 840, 1, 101, 3, 4, 3, 26}); 1278| 215| case 0x952D6: ------------------ | Branch (1278:7): [True: 215, False: 4.67k] ------------------ 1279| 215| return if_match(req, "PKIX.OCSP", {1, 3, 6, 1, 5, 5, 7, 48, 1}); 1280| 0| case 0x959B9: ------------------ | Branch (1280:7): [True: 0, False: 4.88k] ------------------ 1281| 0| return if_match(req, "PKIX.IPsecEndSystem", {1, 3, 6, 1, 5, 5, 7, 3, 5}); 1282| 0| case 0x96F85: ------------------ | Branch (1282:7): [True: 0, False: 4.88k] ------------------ 1283| 0| return if_match(req, "Camellia-256/CBC", {1, 2, 392, 200011, 61, 1, 1, 1, 4}); 1284| 0| case 0x97D5E: ------------------ | Branch (1284:7): [True: 0, False: 4.88k] ------------------ 1285| 0| return if_match(req, "HMAC(SHA-1)", {1, 2, 840, 113549, 2, 7}); 1286| 0| case 0x9805C: ------------------ | Branch (1286:7): [True: 0, False: 4.88k] ------------------ 1287| 0| return if_match(req, "SEED/CBC", {1, 2, 410, 200004, 1, 4}); 1288| 0| case 0x980E7: ------------------ | Branch (1288:7): [True: 0, False: 4.88k] ------------------ 1289| 0| return if_match(req, "SphincsPlus-haraka-192s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 3}); 1290| 0| case 0x980F5: ------------------ | Branch (1290:7): [True: 0, False: 4.88k] ------------------ 1291| 0| return if_match(req, "GOST.SubjectSigningTool", {1, 2, 643, 100, 111}); 1292| 0| case 0x98B03: ------------------ | Branch (1292:7): [True: 0, False: 4.88k] ------------------ 1293| 0| return if_match(req, "XMSS", {0, 4, 0, 127, 0, 15, 1, 1, 13, 0}); 1294| 0| case 0x9A6B2: ------------------ | Branch (1294:7): [True: 0, False: 4.88k] ------------------ 1295| 0| return if_match(req, "ECKCDSA/SHA-1", {1, 2, 410, 200004, 1, 100, 4, 3}); 1296| 0| case 0x9B1CF: ------------------ | Branch (1296:7): [True: 0, False: 4.88k] ------------------ 1297| 0| return if_match(req, "SM4/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 9}); 1298| 0| case 0x9B6B2: ------------------ | Branch (1298:7): [True: 0, False: 4.88k] ------------------ 1299| 0| return if_match(req, "AES-128/GCM", {2, 16, 840, 1, 101, 3, 4, 1, 6}); 1300| 0| case 0x9B6BB: ------------------ | Branch (1300:7): [True: 0, False: 4.88k] ------------------ 1301| 0| return if_match(req, "X520.OrganizationalUnit", {2, 5, 4, 11}); 1302| 0| case 0x9B851: ------------------ | Branch (1302:7): [True: 0, False: 4.88k] ------------------ 1303| 0| return if_match(req, "OpenPGP.Curve25519", {1, 3, 6, 1, 4, 1, 3029, 1, 5, 1}); 1304| 0| case 0x9C80B: ------------------ | Branch (1304:7): [True: 0, False: 4.88k] ------------------ 1305| 0| return if_match(req, "SLH-DSA-SHA2-192f", {2, 16, 840, 1, 101, 3, 4, 3, 23}); 1306| 0| case 0x9C818: ------------------ | Branch (1306:7): [True: 0, False: 4.88k] ------------------ 1307| 0| return if_match(req, "SLH-DSA-SHA2-192s", {2, 16, 840, 1, 101, 3, 4, 3, 22}); 1308| 0| case 0x9CD2B: ------------------ | Branch (1308:7): [True: 0, False: 4.88k] ------------------ 1309| 0| return if_match(req, "Scrypt", {1, 3, 6, 1, 4, 1, 11591, 4, 11}); 1310| 0| case 0x9CDE1: ------------------ | Branch (1310:7): [True: 0, False: 4.88k] ------------------ 1311| 0| return if_match(req, "GOST-34.10-2012-256/SHA-256", {1, 3, 6, 1, 4, 1, 25258, 1, 6, 1}); 1312| 0| case 0x9CF73: ------------------ | Branch (1312:7): [True: 0, False: 4.88k] ------------------ 1313| 0| return if_match(req, "ClassicMcEliece_460896f", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 4}); 1314| 0| case 0x9D354: ------------------ | Branch (1314:7): [True: 0, False: 4.88k] ------------------ 1315| 0| return if_match(req, "RIPEMD-160", {1, 3, 36, 3, 2, 1}); 1316| 0| case 0x9D503: ------------------ | Branch (1316:7): [True: 0, False: 4.88k] ------------------ 1317| 0| return if_match(req, "RSA/PKCS1v15(SHA-256)", {1, 2, 840, 113549, 1, 1, 11}); 1318| 0| case 0x9EC88: ------------------ | Branch (1318:7): [True: 0, False: 4.88k] ------------------ 1319| 0| return if_match(req, "DSA/SHA-3(512)", {2, 16, 840, 1, 101, 3, 4, 3, 8}); 1320| 0| case 0x9EF36: ------------------ | Branch (1320:7): [True: 0, False: 4.88k] ------------------ 1321| 0| return if_match(req, "ClassicMcEliece_6960119", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 7}); 1322| 0| case 0x9F764: ------------------ | Branch (1322:7): [True: 0, False: 4.88k] ------------------ 1323| 0| return if_match(req, "X448", {1, 3, 101, 111}); 1324| 0| case 0x9F7E2: ------------------ | Branch (1324:7): [True: 0, False: 4.88k] ------------------ 1325| 0| return if_match(req, "AES-192/GCM", {2, 16, 840, 1, 101, 3, 4, 1, 26}); 1326| 0| case 0x9F9C5: ------------------ | Branch (1326:7): [True: 0, False: 4.88k] ------------------ 1327| 0| return if_match(req, "ClassicMcEliece_6688128pcf", {1, 3, 6, 1, 4, 1, 25258, 1, 18, 2}); 1328| 0| case 0xA0805: ------------------ | Branch (1328:7): [True: 0, False: 4.88k] ------------------ 1329| 0| return if_match(req, "PKCS9.SDSICertificate", {1, 2, 840, 113549, 1, 9, 22, 2}); 1330| 0| case 0xA2B5B: ------------------ | Branch (1330:7): [True: 0, False: 4.88k] ------------------ 1331| 0| return if_match(req, "X509v3.CRLNumber", {2, 5, 29, 20}); 1332| 0| case 0xA3005: ------------------ | Branch (1332:7): [True: 0, False: 4.88k] ------------------ 1333| 0| return if_match(req, "X520.Title", {2, 5, 4, 12}); 1334| 0| case 0xA323F: ------------------ | Branch (1334:7): [True: 0, False: 4.88k] ------------------ 1335| 0| return if_match(req, "X509v3.NameConstraints", {2, 5, 29, 30}); 1336| 0| case 0xA3C55: ------------------ | Branch (1336:7): [True: 0, False: 4.88k] ------------------ 1337| 0| return if_match(req, "X520.Pseudonym", {2, 5, 4, 65}); 1338| 0| case 0xA4809: ------------------ | Branch (1338:7): [True: 0, False: 4.88k] ------------------ 1339| 0| return if_match(req, "SphincsPlus-sha2-256f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 6}); 1340| 140| case 0xA57AF: ------------------ | Branch (1340:7): [True: 140, False: 4.74k] ------------------ 1341| 140| return if_match(req, "secp521r1", {1, 3, 132, 0, 35}); 1342| 0| case 0xA5DA9: ------------------ | Branch (1342:7): [True: 0, False: 4.88k] ------------------ 1343| 0| return if_match(req, "SphincsPlus-shake-256f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 6}); 1344| 0| case 0xA6865: ------------------ | Branch (1344:7): [True: 0, False: 4.88k] ------------------ 1345| 0| return if_match(req, "Camellia-128/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 6}); 1346| 0| case 0xA6C61: ------------------ | Branch (1346:7): [True: 0, False: 4.88k] ------------------ 1347| 0| return if_match(req, "SM4/GCM", {1, 2, 156, 10197, 1, 104, 8}); 1348| 0| case 0xA8439: ------------------ | Branch (1348:7): [True: 0, False: 4.88k] ------------------ 1349| 0| return if_match(req, "PKCS12.CertBag", {1, 2, 840, 113549, 1, 12, 10, 1, 3}); 1350| 0| case 0xA9061: ------------------ | Branch (1350:7): [True: 0, False: 4.88k] ------------------ 1351| 0| return if_match(req, "Kyber-768-90s-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 11, 2}); 1352| 0| case 0xAA995: ------------------ | Branch (1352:7): [True: 0, False: 4.88k] ------------------ 1353| 0| return if_match(req, "Camellia-192/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 7}); 1354| 0| case 0xAAE2B: ------------------ | Branch (1354:7): [True: 0, False: 4.88k] ------------------ 1355| 0| return if_match(req, "Dilithium-8x7-AES-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 10, 3}); 1356| 0| case 0xABCED: ------------------ | Branch (1356:7): [True: 0, False: 4.88k] ------------------ 1357| 0| return if_match(req, "GOST.IssuerSigningTool", {1, 2, 643, 100, 112}); 1358| 0| case 0xABD24: ------------------ | Branch (1358:7): [True: 0, False: 4.88k] ------------------ 1359| 0| return if_match(req, "RSA/OAEP", {1, 2, 840, 113549, 1, 1, 7}); 1360| 0| case 0xAC2EC: ------------------ | Branch (1360:7): [True: 0, False: 4.88k] ------------------ 1361| 0| return if_match(req, "Streebog-256", {1, 2, 643, 7, 1, 1, 2, 2}); 1362| 0| case 0xAC3DD: ------------------ | Branch (1362:7): [True: 0, False: 4.88k] ------------------ 1363| 0| return if_match(req, "Certificate Comment", {2, 16, 840, 1, 113730, 1, 13}); 1364| 0| case 0xAC511: ------------------ | Branch (1364:7): [True: 0, False: 4.88k] ------------------ 1365| 0| return if_match(req, "PBE-SHA1-3DES", {1, 2, 840, 113549, 1, 12, 1, 3}); 1366| 4| case 0xAE6FE: ------------------ | Branch (1366:7): [True: 4, False: 4.88k] ------------------ 1367| 4| return if_match(req, "PKIX.ClientAuth", {1, 3, 6, 1, 5, 5, 7, 3, 2}); 1368| 0| case 0xAE8D3: ------------------ | Branch (1368:7): [True: 0, False: 4.88k] ------------------ 1369| 0| return if_match(req, "ClassicMcEliece_8192128pcf", {1, 3, 6, 1, 4, 1, 25258, 1, 18, 6}); 1370| 0| case 0xAF476: ------------------ | Branch (1370:7): [True: 0, False: 4.88k] ------------------ 1371| 0| return if_match(req, "ECDH", {1, 3, 132, 1, 12}); 1372| 0| case 0xAFA6A: ------------------ | Branch (1372:7): [True: 0, False: 4.88k] ------------------ 1373| 0| return if_match(req, "RSA/PKCS1v15(SHA-3(384))", {2, 16, 840, 1, 101, 3, 4, 3, 15}); 1374| 0| case 0xB2217: ------------------ | Branch (1374:7): [True: 0, False: 4.88k] ------------------ 1375| 0| return if_match(req, "AES-256/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 3}); 1376| 0| case 0xB22F7: ------------------ | Branch (1376:7): [True: 0, False: 4.88k] ------------------ 1377| 0| return if_match(req, "Camellia-128/GCM", {0, 3, 4401, 5, 3, 1, 9, 6}); 1378| 0| case 0xB23DE: ------------------ | Branch (1378:7): [True: 0, False: 4.88k] ------------------ 1379| 0| return if_match(req, "X520.Locality", {2, 5, 4, 7}); 1380| 0| case 0xB2FBD: ------------------ | Branch (1380:7): [True: 0, False: 4.88k] ------------------ 1381| 0| return if_match(req, "ECKCDSA/SHA-224", {1, 2, 410, 200004, 1, 100, 4, 4}); 1382| 0| case 0xB32B0: ------------------ | Branch (1382:7): [True: 0, False: 4.88k] ------------------ 1383| 0| return if_match(req, "ECKCDSA/SHA-256", {1, 2, 410, 200004, 1, 100, 4, 5}); 1384| 0| case 0xB360E: ------------------ | Branch (1384:7): [True: 0, False: 4.88k] ------------------ 1385| 0| return if_match(req, "eFrodoKEM-976-SHAKE", {1, 3, 6, 1, 4, 1, 25258, 1, 16, 2}); 1386| 0| case 0xB4368: ------------------ | Branch (1386:7): [True: 0, False: 4.88k] ------------------ 1387| 0| return if_match(req, "ECGDSA/SHA-1", {1, 3, 36, 3, 3, 2, 5, 4, 2}); 1388| 0| case 0xB58CD: ------------------ | Branch (1388:7): [True: 0, False: 4.88k] ------------------ 1389| 0| return if_match(req, "RSA/PKCS1v15(SHA-3(512))", {2, 16, 840, 1, 101, 3, 4, 3, 16}); 1390| 0| case 0xB6427: ------------------ | Branch (1390:7): [True: 0, False: 4.88k] ------------------ 1391| 0| return if_match(req, "Camellia-192/GCM", {0, 3, 4401, 5, 3, 1, 9, 26}); 1392| 0| case 0xB7102: ------------------ | Branch (1392:7): [True: 0, False: 4.88k] ------------------ 1393| 0| return if_match(req, "brainpool224r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 5}); 1394| 0| case 0xB710D: ------------------ | Branch (1394:7): [True: 0, False: 4.88k] ------------------ 1395| 0| return if_match(req, "X509v3.CRLIssuingDistributionPoint", {2, 5, 29, 28}); 1396| 0| case 0xB72D4: ------------------ | Branch (1396:7): [True: 0, False: 4.88k] ------------------ 1397| 0| return if_match(req, "Microsoft UPN", {1, 3, 6, 1, 4, 1, 311, 20, 2, 3}); 1398| 0| case 0xB73A5: ------------------ | Branch (1398:7): [True: 0, False: 4.88k] ------------------ 1399| 0| return if_match(req, "RSA/PSS", {1, 2, 840, 113549, 1, 1, 10}); 1400| 0| case 0xB84B3: ------------------ | Branch (1400:7): [True: 0, False: 4.88k] ------------------ 1401| 0| return if_match(req, "PKIX.CodeSigning", {1, 3, 6, 1, 5, 5, 7, 3, 3}); 1402| 0| case 0xB8CB9: ------------------ | Branch (1402:7): [True: 0, False: 4.88k] ------------------ 1403| 0| return if_match(req, "GOST-34.10-2012-256", {1, 2, 643, 7, 1, 1, 1, 1}); 1404| 0| case 0xB945C: ------------------ | Branch (1404:7): [True: 0, False: 4.88k] ------------------ 1405| 0| return if_match(req, "Twofish/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 5}); 1406| 0| case 0xB94E4: ------------------ | Branch (1406:7): [True: 0, False: 4.88k] ------------------ 1407| 0| return if_match(req, "gost_512A", {1, 2, 643, 7, 1, 2, 1, 2, 1}); 1408| 0| case 0xB94E5: ------------------ | Branch (1408:7): [True: 0, False: 4.88k] ------------------ 1409| 0| return if_match(req, "gost_512B", {1, 2, 643, 7, 1, 2, 1, 2, 2}); 1410| 0| case 0xBA1D8: ------------------ | Branch (1410:7): [True: 0, False: 4.88k] ------------------ 1411| 0| return if_match(req, "X520.StreetAddress", {2, 5, 4, 9}); 1412| 0| case 0xBCB45: ------------------ | Branch (1412:7): [True: 0, False: 4.88k] ------------------ 1413| 0| return if_match(req, "PKCS12.CRLBag", {1, 2, 840, 113549, 1, 12, 10, 1, 4}); 1414| 0| case 0xBCC82: ------------------ | Branch (1414:7): [True: 0, False: 4.88k] ------------------ 1415| 0| return if_match(req, "x962_p239v1", {1, 2, 840, 10045, 3, 1, 4}); 1416| 0| case 0xBCC83: ------------------ | Branch (1416:7): [True: 0, False: 4.88k] ------------------ 1417| 0| return if_match(req, "x962_p239v2", {1, 2, 840, 10045, 3, 1, 5}); 1418| 0| case 0xBCC84: ------------------ | Branch (1418:7): [True: 0, False: 4.88k] ------------------ 1419| 0| return if_match(req, "x962_p239v3", {1, 2, 840, 10045, 3, 1, 6}); 1420| 0| case 0xBD92B: ------------------ | Branch (1420:7): [True: 0, False: 4.88k] ------------------ 1421| 0| return if_match(req, "X509v3.HoldInstructionCode", {2, 5, 29, 23}); 1422| 0| case 0xBDCA9: ------------------ | Branch (1422:7): [True: 0, False: 4.88k] ------------------ 1423| 0| return if_match(req, "AES-256/GCM", {2, 16, 840, 1, 101, 3, 4, 1, 46}); 1424| 0| case 0xBE48D: ------------------ | Branch (1424:7): [True: 0, False: 4.88k] ------------------ 1425| 0| return if_match(req, "PKIX.OCSP.BasicResponse", {1, 3, 6, 1, 5, 5, 7, 48, 1, 1}); 1426| 0| case 0xBF71E: ------------------ | Branch (1426:7): [True: 0, False: 4.88k] ------------------ 1427| 0| return if_match(req, "Kyber-1024-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 7, 3}); 1428| 0| case 0xBFF01: ------------------ | Branch (1428:7): [True: 0, False: 4.88k] ------------------ 1429| 0| return if_match(req, "DSA/SHA-3(224)", {2, 16, 840, 1, 101, 3, 4, 3, 5}); 1430| 0| case 0xC0F4F: ------------------ | Branch (1430:7): [True: 0, False: 4.88k] ------------------ 1431| 0| return if_match(req, "SphincsPlus-haraka-256f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 6}); 1432| 0| case 0xC1875: ------------------ | Branch (1432:7): [True: 0, False: 4.88k] ------------------ 1433| 0| return if_match(req, "SHA-1", {1, 3, 14, 3, 2, 26}); 1434| 4| case 0xC28D1: ------------------ | Branch (1434:7): [True: 4, False: 4.88k] ------------------ 1435| 4| return if_match(req, "PKIX.OCSPSigning", {1, 3, 6, 1, 5, 5, 7, 3, 9}); 1436| 180| case 0xC42CA: ------------------ | Branch (1436:7): [True: 180, False: 4.70k] ------------------ 1437| 180| return if_match(req, "brainpool256r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 7}); 1438| 0| default: ------------------ | Branch (1438:7): [True: 0, False: 4.88k] ------------------ 1439| 0| return {}; 1440| 4.88k| } 1441| 4.88k|} _ZN5Botan7OID_Map16load_oid2str_mapEv: 1443| 1|std::unordered_map OID_Map::load_oid2str_map() { 1444| 1| return { 1445| 1| {OID{2, 5, 8, 1, 1}, "RSA"}, 1446| 1| {OID{1, 3, 6, 1, 4, 1, 8301, 3, 1, 2, 9, 0, 38}, "secp521r1"}, 1447| 1| {OID{1, 2, 643, 2, 2, 35, 1}, "gost_256A"}, 1448| 1| {OID{1, 2, 643, 2, 2, 36, 0}, "gost_256A"}, 1449| 1| }; 1450| 1|} _ZN5Botan7OID_Map16load_str2oid_mapEv: 1452| 1|std::unordered_map OID_Map::load_str2oid_map() { 1453| 1| return { 1454| 1| {"Curve25519", OID{1, 3, 101, 110}}, 1455| 1| {"SM2_Sig", OID{1, 2, 156, 10197, 1, 301, 1}}, 1456| 1| {"RSA/EMSA3(MD2)", OID{1, 2, 840, 113549, 1, 1, 2}}, 1457| 1| {"RSA/EMSA3(MD5)", OID{1, 2, 840, 113549, 1, 1, 4}}, 1458| 1| {"RSA/EMSA3(SHA-1)", OID{1, 2, 840, 113549, 1, 1, 5}}, 1459| 1| {"RSA/EMSA3(SHA-256)", OID{1, 2, 840, 113549, 1, 1, 11}}, 1460| 1| {"RSA/EMSA3(SHA-384)", OID{1, 2, 840, 113549, 1, 1, 12}}, 1461| 1| {"RSA/EMSA3(SHA-512)", OID{1, 2, 840, 113549, 1, 1, 13}}, 1462| 1| {"RSA/EMSA3(SHA-224)", OID{1, 2, 840, 113549, 1, 1, 14}}, 1463| 1| {"RSA/EMSA3(SHA-512-256)", OID{1, 2, 840, 113549, 1, 1, 16}}, 1464| 1| {"RSA/EMSA3(SHA-3(224))", OID{2, 16, 840, 1, 101, 3, 4, 3, 13}}, 1465| 1| {"RSA/EMSA3(SHA-3(256))", OID{2, 16, 840, 1, 101, 3, 4, 3, 14}}, 1466| 1| {"RSA/EMSA3(SHA-3(384))", OID{2, 16, 840, 1, 101, 3, 4, 3, 15}}, 1467| 1| {"RSA/EMSA3(SHA-3(512))", OID{2, 16, 840, 1, 101, 3, 4, 3, 16}}, 1468| 1| {"RSA/EMSA3(SM3)", OID{1, 2, 156, 10197, 1, 504}}, 1469| 1| {"RSA/EMSA3(RIPEMD-160)", OID{1, 3, 36, 3, 3, 1, 2}}, 1470| 1| {"RSA/EMSA4", OID{1, 2, 840, 113549, 1, 1, 10}}, 1471| 1| {"PBES2", OID{1, 2, 840, 113549, 1, 5, 13}}, 1472| 1| }; 1473| 1|} static_oids.cpp:_ZN5Botan12_GLOBAL__N_18if_matchERKNS_3OIDESt16initializer_listIjENSt3__117basic_string_viewIcNS6_11char_traitsIcEEEE: 18| 2.68k|std::optional if_match(const OID& oid, std::initializer_list val, std::string_view name) { 19| 2.68k| if(oid.matches(val)) { ------------------ | Branch (19:7): [True: 2.35k, False: 330] ------------------ 20| 2.35k| return name; 21| 2.35k| } else { 22| 330| return {}; 23| 330| } 24| 2.68k|} static_oids.cpp:_ZN5Botan12_GLOBAL__N_113hash_oid_nameENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 34| 4.88k|uint32_t hash_oid_name(std::string_view s) { 35| 4.88k| uint64_t hash = 0x8188B31879A4879A; 36| | 37| 107k| for(const char c : s) { ------------------ | Branch (37:21): [True: 107k, False: 4.88k] ------------------ 38| 107k| hash *= 251; 39| 107k| hash += c; 40| 107k| } 41| | 42| 4.88k| return static_cast(hash % 805289); 43| 4.88k|} static_oids.cpp:_ZN5Botan12_GLOBAL__N_18if_matchENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_St16initializer_listIjE: 26| 4.88k|std::optional if_match(std::string_view req, std::string_view actual, std::initializer_list oid) { 27| 4.88k| if(req == actual) { ------------------ | Branch (27:7): [True: 4.88k, False: 0] ------------------ 28| 4.88k| return OID(oid); 29| 4.88k| } else { 30| 0| return {}; 31| 0| } 32| 4.88k|} _ZN5Botan20Buffered_Computation9update_beEj: 24| 33|void Buffered_Computation::update_be(uint32_t val) { 25| 33| uint8_t inb[sizeof(val)]; 26| 33| store_be(val, inb); 27| 33| add_data({inb, sizeof(inb)}); 28| 33|} _ZN5Botan20Buffered_Computation5finalENSt3__14spanIhLm18446744073709551615EEE: 54| 28.9k|void Buffered_Computation::final(std::span out) { 55| 28.9k| BOTAN_ARG_CHECK(out.size() >= output_length(), "Output buffer has insufficient capacity"); ------------------ | | 35| 28.9k| do { \ | | 36| 28.9k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 28.9k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 28.9k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 28.9k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 28.9k] | | ------------------ ------------------ 56| | // Pass exactly output_length() bytes so that an oversized buffer has the 57| | // result written to its leading bytes with the remainder left untouched. 58| 28.9k| final_result(out.first(output_length())); 59| 28.9k|} _ZN5Botan18SymmetricAlgorithm7set_keyENSt3__14spanIKhLm18446744073709551615EEE: 22| 5.79k|void SymmetricAlgorithm::set_key(std::span key) { 23| 5.79k| if(!valid_keylength(key.size())) { ------------------ | Branch (23:7): [True: 0, False: 5.79k] ------------------ 24| 0| throw Invalid_Key_Length(name(), key.size()); 25| 0| } 26| 5.79k| key_schedule(key); 27| 5.79k|} _ZN5Botan11OctetStringC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 27| 1.17k|OctetString::OctetString(std::string_view hex_string) { 28| 1.17k| if(!hex_string.empty()) { ------------------ | Branch (28:7): [True: 0, False: 1.17k] ------------------ 29| 0| m_data.resize(1 + hex_string.length() / 2); 30| 0| m_data.resize(hex_decode(m_data.data(), hex_string)); 31| 0| } 32| 1.17k|} _ZNK5Botan7AES_12811parallelismEv: 867| 112|size_t AES_128::parallelism() const { 868| 112| return aes_parallelism(); 869| 112|} _ZNK5Botan7AES_25611parallelismEv: 875| 944|size_t AES_256::parallelism() const { 876| 944| return aes_parallelism(); 877| 944|} _ZNK5Botan7AES_12819has_keying_materialEv: 879| 3.66k|bool AES_128::has_keying_material() const { 880| 3.66k| return !m_EK.empty(); 881| 3.66k|} _ZNK5Botan7AES_25619has_keying_materialEv: 887| 6.80k|bool AES_256::has_keying_material() const { 888| 6.80k| return !m_EK.empty(); 889| 6.80k|} _ZNK5Botan7AES_1289encrypt_nEPKhPhm: 891| 3.26k|void AES_128::encrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 892| 3.26k| assert_key_material_set(); 893| | 894| 3.26k|#if defined(BOTAN_HAS_AES_VAES) 895| 3.26k| if(CPUID::has(CPUID::Feature::AVX2_AES)) { ------------------ | Branch (895:7): [True: 0, False: 3.26k] ------------------ 896| 0| return x86_vaes_encrypt_n(in, out, blocks); 897| 0| } 898| 3.26k|#endif 899| | 900| 3.26k|#if defined(BOTAN_HAS_HW_AES_SUPPORT) 901| 3.26k| if(CPUID::has(CPUID::Feature::HW_AES)) { ------------------ | Branch (901:7): [True: 3.26k, False: 0] ------------------ 902| 3.26k| return hw_aes_encrypt_n(in, out, blocks); 903| 3.26k| } 904| 0|#endif 905| | 906| 0|#if defined(BOTAN_HAS_AES_VPERM) 907| 0| if(CPUID::has(CPUID::Feature::SIMD_4X32)) { ------------------ | Branch (907:7): [True: 0, False: 0] ------------------ 908| 0| return vperm_encrypt_n(in, out, blocks); 909| 0| } 910| 0|#endif 911| | 912| 0| aes_encrypt_n(in, out, blocks, m_EK); 913| 0|} _ZNK5Botan7AES_1289decrypt_nEPKhPhm: 915| 120|void AES_128::decrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 916| 120| assert_key_material_set(); 917| | 918| 120|#if defined(BOTAN_HAS_AES_VAES) 919| 120| if(CPUID::has(CPUID::Feature::AVX2_AES)) { ------------------ | Branch (919:7): [True: 0, False: 120] ------------------ 920| 0| return x86_vaes_decrypt_n(in, out, blocks); 921| 0| } 922| 120|#endif 923| | 924| 120|#if defined(BOTAN_HAS_HW_AES_SUPPORT) 925| 120| if(CPUID::has(CPUID::Feature::HW_AES)) { ------------------ | Branch (925:7): [True: 120, False: 0] ------------------ 926| 120| return hw_aes_decrypt_n(in, out, blocks); 927| 120| } 928| 0|#endif 929| | 930| 0|#if defined(BOTAN_HAS_AES_VPERM) 931| 0| if(CPUID::has(CPUID::Feature::SIMD_4X32)) { ------------------ | Branch (931:7): [True: 0, False: 0] ------------------ 932| 0| return vperm_decrypt_n(in, out, blocks); 933| 0| } 934| 0|#endif 935| | 936| 0| aes_decrypt_n(in, out, blocks, m_DK); 937| 0|} _ZN5Botan7AES_12812key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 939| 161|void AES_128::key_schedule(std::span key) { 940| 161|#if defined(BOTAN_HAS_AES_NI) 941| 161| if(CPUID::has(CPUID::Feature::AESNI)) { ------------------ | Branch (941:7): [True: 161, False: 0] ------------------ 942| 161| return aesni_key_schedule(key.data(), key.size()); 943| 161| } 944| 0|#endif 945| | 946| 0|#if defined(BOTAN_HAS_AES_VAES) 947| 0| if(CPUID::has(CPUID::Feature::AVX2_AES)) { ------------------ | Branch (947:7): [True: 0, False: 0] ------------------ 948| 0| return aes_key_schedule(key.data(), key.size(), m_EK, m_DK, true); 949| 0| } 950| 0|#endif 951| | 952| 0|#if defined(BOTAN_HAS_HW_AES_SUPPORT) 953| 0| if(CPUID::has(CPUID::Feature::HW_AES)) { ------------------ | Branch (953:7): [True: 0, False: 0] ------------------ 954| 0| constexpr bool is_little_endian = std::endian::native == std::endian::little; 955| 0| return aes_key_schedule(key.data(), key.size(), m_EK, m_DK, is_little_endian); 956| 0| } 957| 0|#endif 958| | 959| 0|#if defined(BOTAN_HAS_AES_VPERM) 960| 0| if(CPUID::has(CPUID::Feature::SIMD_4X32)) { ------------------ | Branch (960:7): [True: 0, False: 0] ------------------ 961| 0| return vperm_key_schedule(key.data(), key.size()); 962| 0| } 963| 0|#endif 964| | 965| 0| aes_key_schedule(key.data(), key.size(), m_EK, m_DK); 966| 0|} _ZNK5Botan7AES_2569encrypt_nEPKhPhm: 1055| 3.99k|void AES_256::encrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 1056| 3.99k| assert_key_material_set(); 1057| | 1058| 3.99k|#if defined(BOTAN_HAS_AES_VAES) 1059| 3.99k| if(CPUID::has(CPUID::Feature::AVX2_AES)) { ------------------ | Branch (1059:7): [True: 0, False: 3.99k] ------------------ 1060| 0| return x86_vaes_encrypt_n(in, out, blocks); 1061| 0| } 1062| 3.99k|#endif 1063| | 1064| 3.99k|#if defined(BOTAN_HAS_HW_AES_SUPPORT) 1065| 3.99k| if(CPUID::has(CPUID::Feature::HW_AES)) { ------------------ | Branch (1065:7): [True: 3.99k, False: 0] ------------------ 1066| 3.99k| return hw_aes_encrypt_n(in, out, blocks); 1067| 3.99k| } 1068| 0|#endif 1069| | 1070| 0|#if defined(BOTAN_HAS_AES_VPERM) 1071| 0| if(CPUID::has(CPUID::Feature::SIMD_4X32)) { ------------------ | Branch (1071:7): [True: 0, False: 0] ------------------ 1072| 0| return vperm_encrypt_n(in, out, blocks); 1073| 0| } 1074| 0|#endif 1075| | 1076| 0| aes_encrypt_n(in, out, blocks, m_EK); 1077| 0|} _ZNK5Botan7AES_2569decrypt_nEPKhPhm: 1079| 261|void AES_256::decrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 1080| 261| assert_key_material_set(); 1081| | 1082| 261|#if defined(BOTAN_HAS_AES_VAES) 1083| 261| if(CPUID::has(CPUID::Feature::AVX2_AES)) { ------------------ | Branch (1083:7): [True: 0, False: 261] ------------------ 1084| 0| return x86_vaes_decrypt_n(in, out, blocks); 1085| 0| } 1086| 261|#endif 1087| | 1088| 261|#if defined(BOTAN_HAS_HW_AES_SUPPORT) 1089| 261| if(CPUID::has(CPUID::Feature::HW_AES)) { ------------------ | Branch (1089:7): [True: 261, False: 0] ------------------ 1090| 261| return hw_aes_decrypt_n(in, out, blocks); 1091| 261| } 1092| 0|#endif 1093| | 1094| 0|#if defined(BOTAN_HAS_AES_VPERM) 1095| 0| if(CPUID::has(CPUID::Feature::SIMD_4X32)) { ------------------ | Branch (1095:7): [True: 0, False: 0] ------------------ 1096| 0| return vperm_decrypt_n(in, out, blocks); 1097| 0| } 1098| 0|#endif 1099| | 1100| 0| aes_decrypt_n(in, out, blocks, m_DK); 1101| 0|} _ZN5Botan7AES_25612key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 1103| 527|void AES_256::key_schedule(std::span key) { 1104| 527|#if defined(BOTAN_HAS_AES_NI) 1105| 527| if(CPUID::has(CPUID::Feature::AESNI)) { ------------------ | Branch (1105:7): [True: 527, False: 0] ------------------ 1106| 527| return aesni_key_schedule(key.data(), key.size()); 1107| 527| } 1108| 0|#endif 1109| | 1110| 0|#if defined(BOTAN_HAS_AES_VAES) 1111| 0| if(CPUID::has(CPUID::Feature::AVX2_AES)) { ------------------ | Branch (1111:7): [True: 0, False: 0] ------------------ 1112| 0| return aes_key_schedule(key.data(), key.size(), m_EK, m_DK, true); 1113| 0| } 1114| 0|#endif 1115| | 1116| 0|#if defined(BOTAN_HAS_HW_AES_SUPPORT) 1117| 0| if(CPUID::has(CPUID::Feature::HW_AES)) { ------------------ | Branch (1117:7): [True: 0, False: 0] ------------------ 1118| 0| constexpr bool is_little_endian = std::endian::native == std::endian::little; 1119| 0| return aes_key_schedule(key.data(), key.size(), m_EK, m_DK, is_little_endian); 1120| 0| } 1121| 0|#endif 1122| | 1123| 0|#if defined(BOTAN_HAS_AES_VPERM) 1124| 0| if(CPUID::has(CPUID::Feature::SIMD_4X32)) { ------------------ | Branch (1124:7): [True: 0, False: 0] ------------------ 1125| 0| return vperm_key_schedule(key.data(), key.size()); 1126| 0| } 1127| 0|#endif 1128| | 1129| 0| aes_key_schedule(key.data(), key.size(), m_EK, m_DK); 1130| 0|} aes.cpp:_ZN5Botan12_GLOBAL__N_115aes_parallelismEv: 808| 1.05k|size_t aes_parallelism() { 809| 1.05k|#if defined(BOTAN_HAS_AES_VAES) 810| 1.05k| if(CPUID::has(CPUID::Feature::AVX2_AES)) { ------------------ | Branch (810:7): [True: 0, False: 1.05k] ------------------ 811| 0| return 8; // pipelined 812| 0| } 813| 1.05k|#endif 814| | 815| 1.05k|#if defined(BOTAN_HAS_HW_AES_SUPPORT) 816| 1.05k| if(CPUID::has(CPUID::Feature::HW_AES)) { ------------------ | Branch (816:7): [True: 1.05k, False: 0] ------------------ 817| 1.05k| return 4; // pipelined 818| 1.05k| } 819| 0|#endif 820| | 821| 0|#if defined(BOTAN_HAS_AES_VPERM) 822| 0| if(CPUID::has(CPUID::Feature::SIMD_4X32)) { ------------------ | Branch (822:7): [True: 0, False: 0] ------------------ 823| 0| return 2; // pipelined 824| 0| } 825| 0|#endif 826| | 827| | // bitsliced: 828| 0| return AES_BITSLICED_BLOCKS; 829| 0|} _ZNK5Botan7AES_12816hw_aes_encrypt_nEPKhPhm: 135| 3.26k|BOTAN_FN_ISA_AESNI void AES_128::hw_aes_encrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 136| 3.26k| const SIMD_4x32 K0 = SIMD_4x32::load_le(&m_EK[4 * 0]); 137| 3.26k| const SIMD_4x32 K1 = SIMD_4x32::load_le(&m_EK[4 * 1]); 138| 3.26k| const SIMD_4x32 K2 = SIMD_4x32::load_le(&m_EK[4 * 2]); 139| 3.26k| const SIMD_4x32 K3 = SIMD_4x32::load_le(&m_EK[4 * 3]); 140| 3.26k| const SIMD_4x32 K4 = SIMD_4x32::load_le(&m_EK[4 * 4]); 141| 3.26k| const SIMD_4x32 K5 = SIMD_4x32::load_le(&m_EK[4 * 5]); 142| 3.26k| const SIMD_4x32 K6 = SIMD_4x32::load_le(&m_EK[4 * 6]); 143| 3.26k| const SIMD_4x32 K7 = SIMD_4x32::load_le(&m_EK[4 * 7]); 144| 3.26k| const SIMD_4x32 K8 = SIMD_4x32::load_le(&m_EK[4 * 8]); 145| 3.26k| const SIMD_4x32 K9 = SIMD_4x32::load_le(&m_EK[4 * 9]); 146| 3.26k| const SIMD_4x32 K10 = SIMD_4x32::load_le(&m_EK[4 * 10]); 147| | 148| 3.97k| while(blocks >= 4) { ------------------ | Branch (148:10): [True: 712, False: 3.26k] ------------------ 149| 712| SIMD_4x32 B0 = SIMD_4x32::load_le(in + 16 * 0); 150| 712| SIMD_4x32 B1 = SIMD_4x32::load_le(in + 16 * 1); 151| 712| SIMD_4x32 B2 = SIMD_4x32::load_le(in + 16 * 2); 152| 712| SIMD_4x32 B3 = SIMD_4x32::load_le(in + 16 * 3); 153| | 154| 712| keyxor(K0, B0, B1, B2, B3); 155| 712| aesenc(K1, B0, B1, B2, B3); 156| 712| aesenc(K2, B0, B1, B2, B3); 157| 712| aesenc(K3, B0, B1, B2, B3); 158| 712| aesenc(K4, B0, B1, B2, B3); 159| 712| aesenc(K5, B0, B1, B2, B3); 160| 712| aesenc(K6, B0, B1, B2, B3); 161| 712| aesenc(K7, B0, B1, B2, B3); 162| 712| aesenc(K8, B0, B1, B2, B3); 163| 712| aesenc(K9, B0, B1, B2, B3); 164| 712| aesenclast(K10, B0, B1, B2, B3); 165| | 166| 712| B0.store_le(out + 16 * 0); 167| 712| B1.store_le(out + 16 * 1); 168| 712| B2.store_le(out + 16 * 2); 169| 712| B3.store_le(out + 16 * 3); 170| | 171| 712| blocks -= 4; 172| 712| in += 4 * 16; 173| 712| out += 4 * 16; 174| 712| } 175| | 176| 6.34k| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (176:22): [True: 3.08k, False: 3.26k] ------------------ 177| 3.08k| SIMD_4x32 B0 = SIMD_4x32::load_le(in + 16 * i); 178| | 179| 3.08k| B0 ^= K0; 180| 3.08k| aesenc(K1, B0); 181| 3.08k| aesenc(K2, B0); 182| 3.08k| aesenc(K3, B0); 183| 3.08k| aesenc(K4, B0); 184| 3.08k| aesenc(K5, B0); 185| 3.08k| aesenc(K6, B0); 186| 3.08k| aesenc(K7, B0); 187| 3.08k| aesenc(K8, B0); 188| 3.08k| aesenc(K9, B0); 189| 3.08k| aesenclast(K10, B0); 190| | 191| 3.08k| B0.store_le(out + 16 * i); 192| 3.08k| } 193| 3.26k|} _ZNK5Botan7AES_12816hw_aes_decrypt_nEPKhPhm: 198| 120|BOTAN_FN_ISA_AESNI void AES_128::hw_aes_decrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 199| 120| const SIMD_4x32 K0 = SIMD_4x32::load_le(&m_DK[4 * 0]); 200| 120| const SIMD_4x32 K1 = SIMD_4x32::load_le(&m_DK[4 * 1]); 201| 120| const SIMD_4x32 K2 = SIMD_4x32::load_le(&m_DK[4 * 2]); 202| 120| const SIMD_4x32 K3 = SIMD_4x32::load_le(&m_DK[4 * 3]); 203| 120| const SIMD_4x32 K4 = SIMD_4x32::load_le(&m_DK[4 * 4]); 204| 120| const SIMD_4x32 K5 = SIMD_4x32::load_le(&m_DK[4 * 5]); 205| 120| const SIMD_4x32 K6 = SIMD_4x32::load_le(&m_DK[4 * 6]); 206| 120| const SIMD_4x32 K7 = SIMD_4x32::load_le(&m_DK[4 * 7]); 207| 120| const SIMD_4x32 K8 = SIMD_4x32::load_le(&m_DK[4 * 8]); 208| 120| const SIMD_4x32 K9 = SIMD_4x32::load_le(&m_DK[4 * 9]); 209| 120| const SIMD_4x32 K10 = SIMD_4x32::load_le(&m_DK[4 * 10]); 210| | 211| 535| while(blocks >= 4) { ------------------ | Branch (211:10): [True: 415, False: 120] ------------------ 212| 415| SIMD_4x32 B0 = SIMD_4x32::load_le(in + 16 * 0); 213| 415| SIMD_4x32 B1 = SIMD_4x32::load_le(in + 16 * 1); 214| 415| SIMD_4x32 B2 = SIMD_4x32::load_le(in + 16 * 2); 215| 415| SIMD_4x32 B3 = SIMD_4x32::load_le(in + 16 * 3); 216| | 217| 415| keyxor(K0, B0, B1, B2, B3); 218| 415| aesdec(K1, B0, B1, B2, B3); 219| 415| aesdec(K2, B0, B1, B2, B3); 220| 415| aesdec(K3, B0, B1, B2, B3); 221| 415| aesdec(K4, B0, B1, B2, B3); 222| 415| aesdec(K5, B0, B1, B2, B3); 223| 415| aesdec(K6, B0, B1, B2, B3); 224| 415| aesdec(K7, B0, B1, B2, B3); 225| 415| aesdec(K8, B0, B1, B2, B3); 226| 415| aesdec(K9, B0, B1, B2, B3); 227| 415| aesdeclast(K10, B0, B1, B2, B3); 228| | 229| 415| B0.store_le(out + 16 * 0); 230| 415| B1.store_le(out + 16 * 1); 231| 415| B2.store_le(out + 16 * 2); 232| 415| B3.store_le(out + 16 * 3); 233| | 234| 415| blocks -= 4; 235| 415| in += 4 * 16; 236| 415| out += 4 * 16; 237| 415| } 238| | 239| 169| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (239:22): [True: 49, False: 120] ------------------ 240| 49| SIMD_4x32 B0 = SIMD_4x32::load_le(in + 16 * i); 241| | 242| 49| B0 ^= K0; 243| 49| aesdec(K1, B0); 244| 49| aesdec(K2, B0); 245| 49| aesdec(K3, B0); 246| 49| aesdec(K4, B0); 247| 49| aesdec(K5, B0); 248| 49| aesdec(K6, B0); 249| 49| aesdec(K7, B0); 250| 49| aesdec(K8, B0); 251| 49| aesdec(K9, B0); 252| 49| aesdeclast(K10, B0); 253| | 254| 49| B0.store_le(out + 16 * i); 255| 49| } 256| 120|} _ZN5Botan7AES_12818aesni_key_scheduleEPKhm: 261| 161|BOTAN_FN_ISA_AESNI void AES_128::aesni_key_schedule(const uint8_t key[], size_t /*length*/) { 262| 161| m_EK.resize(44); 263| 161| m_DK.resize(44); 264| | 265| 161| const SIMD_4x32 K0 = SIMD_4x32::load_le(key); 266| 161| const SIMD_4x32 K1 = aes_128_key_expansion<0x01>(K0, K0); 267| 161| const SIMD_4x32 K2 = aes_128_key_expansion<0x02>(K1, K1); 268| 161| const SIMD_4x32 K3 = aes_128_key_expansion<0x04>(K2, K2); 269| 161| const SIMD_4x32 K4 = aes_128_key_expansion<0x08>(K3, K3); 270| 161| const SIMD_4x32 K5 = aes_128_key_expansion<0x10>(K4, K4); 271| 161| const SIMD_4x32 K6 = aes_128_key_expansion<0x20>(K5, K5); 272| 161| const SIMD_4x32 K7 = aes_128_key_expansion<0x40>(K6, K6); 273| 161| const SIMD_4x32 K8 = aes_128_key_expansion<0x80>(K7, K7); 274| 161| const SIMD_4x32 K9 = aes_128_key_expansion<0x1B>(K8, K8); 275| 161| const SIMD_4x32 K10 = aes_128_key_expansion<0x36>(K9, K9); 276| | 277| 161| K0.store_le(&m_EK[4 * 0]); 278| 161| K1.store_le(&m_EK[4 * 1]); 279| 161| K2.store_le(&m_EK[4 * 2]); 280| 161| K3.store_le(&m_EK[4 * 3]); 281| 161| K4.store_le(&m_EK[4 * 4]); 282| 161| K5.store_le(&m_EK[4 * 5]); 283| 161| K6.store_le(&m_EK[4 * 6]); 284| 161| K7.store_le(&m_EK[4 * 7]); 285| 161| K8.store_le(&m_EK[4 * 8]); 286| 161| K9.store_le(&m_EK[4 * 9]); 287| 161| K10.store_le(&m_EK[4 * 10]); 288| | 289| | // Now generate decryption keys 290| 161| K10.store_le(&m_DK[4 * 0]); 291| 161| aesimc(K9).store_le(&m_DK[4 * 1]); 292| 161| aesimc(K8).store_le(&m_DK[4 * 2]); 293| 161| aesimc(K7).store_le(&m_DK[4 * 3]); 294| 161| aesimc(K6).store_le(&m_DK[4 * 4]); 295| 161| aesimc(K5).store_le(&m_DK[4 * 5]); 296| 161| aesimc(K4).store_le(&m_DK[4 * 6]); 297| 161| aesimc(K3).store_le(&m_DK[4 * 7]); 298| 161| aesimc(K2).store_le(&m_DK[4 * 8]); 299| 161| aesimc(K1).store_le(&m_DK[4 * 9]); 300| 161| K0.store_le(&m_DK[4 * 10]); 301| 161|} _ZNK5Botan7AES_25616hw_aes_encrypt_nEPKhPhm: 483| 3.99k|BOTAN_FN_ISA_AESNI void AES_256::hw_aes_encrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 484| 3.99k| const SIMD_4x32 K0 = SIMD_4x32::load_le(&m_EK[4 * 0]); 485| 3.99k| const SIMD_4x32 K1 = SIMD_4x32::load_le(&m_EK[4 * 1]); 486| 3.99k| const SIMD_4x32 K2 = SIMD_4x32::load_le(&m_EK[4 * 2]); 487| 3.99k| const SIMD_4x32 K3 = SIMD_4x32::load_le(&m_EK[4 * 3]); 488| 3.99k| const SIMD_4x32 K4 = SIMD_4x32::load_le(&m_EK[4 * 4]); 489| 3.99k| const SIMD_4x32 K5 = SIMD_4x32::load_le(&m_EK[4 * 5]); 490| 3.99k| const SIMD_4x32 K6 = SIMD_4x32::load_le(&m_EK[4 * 6]); 491| 3.99k| const SIMD_4x32 K7 = SIMD_4x32::load_le(&m_EK[4 * 7]); 492| 3.99k| const SIMD_4x32 K8 = SIMD_4x32::load_le(&m_EK[4 * 8]); 493| 3.99k| const SIMD_4x32 K9 = SIMD_4x32::load_le(&m_EK[4 * 9]); 494| 3.99k| const SIMD_4x32 K10 = SIMD_4x32::load_le(&m_EK[4 * 10]); 495| 3.99k| const SIMD_4x32 K11 = SIMD_4x32::load_le(&m_EK[4 * 11]); 496| 3.99k| const SIMD_4x32 K12 = SIMD_4x32::load_le(&m_EK[4 * 12]); 497| 3.99k| const SIMD_4x32 K13 = SIMD_4x32::load_le(&m_EK[4 * 13]); 498| 3.99k| const SIMD_4x32 K14 = SIMD_4x32::load_le(&m_EK[4 * 14]); 499| | 500| 8.28k| while(blocks >= 4) { ------------------ | Branch (500:10): [True: 4.29k, False: 3.99k] ------------------ 501| 4.29k| SIMD_4x32 B0 = SIMD_4x32::load_le(in + 16 * 0); 502| 4.29k| SIMD_4x32 B1 = SIMD_4x32::load_le(in + 16 * 1); 503| 4.29k| SIMD_4x32 B2 = SIMD_4x32::load_le(in + 16 * 2); 504| 4.29k| SIMD_4x32 B3 = SIMD_4x32::load_le(in + 16 * 3); 505| | 506| 4.29k| keyxor(K0, B0, B1, B2, B3); 507| 4.29k| aesenc(K1, B0, B1, B2, B3); 508| 4.29k| aesenc(K2, B0, B1, B2, B3); 509| 4.29k| aesenc(K3, B0, B1, B2, B3); 510| 4.29k| aesenc(K4, B0, B1, B2, B3); 511| 4.29k| aesenc(K5, B0, B1, B2, B3); 512| 4.29k| aesenc(K6, B0, B1, B2, B3); 513| 4.29k| aesenc(K7, B0, B1, B2, B3); 514| 4.29k| aesenc(K8, B0, B1, B2, B3); 515| 4.29k| aesenc(K9, B0, B1, B2, B3); 516| 4.29k| aesenc(K10, B0, B1, B2, B3); 517| 4.29k| aesenc(K11, B0, B1, B2, B3); 518| 4.29k| aesenc(K12, B0, B1, B2, B3); 519| 4.29k| aesenc(K13, B0, B1, B2, B3); 520| 4.29k| aesenclast(K14, B0, B1, B2, B3); 521| | 522| 4.29k| B0.store_le(out + 16 * 0); 523| 4.29k| B1.store_le(out + 16 * 1); 524| 4.29k| B2.store_le(out + 16 * 2); 525| 4.29k| B3.store_le(out + 16 * 3); 526| | 527| 4.29k| blocks -= 4; 528| 4.29k| in += 4 * 16; 529| 4.29k| out += 4 * 16; 530| 4.29k| } 531| | 532| 6.90k| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (532:22): [True: 2.91k, False: 3.99k] ------------------ 533| 2.91k| SIMD_4x32 B0 = SIMD_4x32::load_le(in + 16 * i); 534| | 535| 2.91k| B0 ^= K0; 536| | 537| 2.91k| aesenc(K1, B0); 538| 2.91k| aesenc(K2, B0); 539| 2.91k| aesenc(K3, B0); 540| 2.91k| aesenc(K4, B0); 541| 2.91k| aesenc(K5, B0); 542| 2.91k| aesenc(K6, B0); 543| 2.91k| aesenc(K7, B0); 544| 2.91k| aesenc(K8, B0); 545| 2.91k| aesenc(K9, B0); 546| 2.91k| aesenc(K10, B0); 547| 2.91k| aesenc(K11, B0); 548| 2.91k| aesenc(K12, B0); 549| 2.91k| aesenc(K13, B0); 550| 2.91k| aesenclast(K14, B0); 551| | 552| 2.91k| B0.store_le(out + 16 * i); 553| 2.91k| } 554| 3.99k|} _ZNK5Botan7AES_25616hw_aes_decrypt_nEPKhPhm: 559| 261|BOTAN_FN_ISA_AESNI void AES_256::hw_aes_decrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 560| 261| const SIMD_4x32 K0 = SIMD_4x32::load_le(&m_DK[4 * 0]); 561| 261| const SIMD_4x32 K1 = SIMD_4x32::load_le(&m_DK[4 * 1]); 562| 261| const SIMD_4x32 K2 = SIMD_4x32::load_le(&m_DK[4 * 2]); 563| 261| const SIMD_4x32 K3 = SIMD_4x32::load_le(&m_DK[4 * 3]); 564| 261| const SIMD_4x32 K4 = SIMD_4x32::load_le(&m_DK[4 * 4]); 565| 261| const SIMD_4x32 K5 = SIMD_4x32::load_le(&m_DK[4 * 5]); 566| 261| const SIMD_4x32 K6 = SIMD_4x32::load_le(&m_DK[4 * 6]); 567| 261| const SIMD_4x32 K7 = SIMD_4x32::load_le(&m_DK[4 * 7]); 568| 261| const SIMD_4x32 K8 = SIMD_4x32::load_le(&m_DK[4 * 8]); 569| 261| const SIMD_4x32 K9 = SIMD_4x32::load_le(&m_DK[4 * 9]); 570| 261| const SIMD_4x32 K10 = SIMD_4x32::load_le(&m_DK[4 * 10]); 571| 261| const SIMD_4x32 K11 = SIMD_4x32::load_le(&m_DK[4 * 11]); 572| 261| const SIMD_4x32 K12 = SIMD_4x32::load_le(&m_DK[4 * 12]); 573| 261| const SIMD_4x32 K13 = SIMD_4x32::load_le(&m_DK[4 * 13]); 574| 261| const SIMD_4x32 K14 = SIMD_4x32::load_le(&m_DK[4 * 14]); 575| | 576| 1.17k| while(blocks >= 4) { ------------------ | Branch (576:10): [True: 910, False: 261] ------------------ 577| 910| SIMD_4x32 B0 = SIMD_4x32::load_le(in + 16 * 0); 578| 910| SIMD_4x32 B1 = SIMD_4x32::load_le(in + 16 * 1); 579| 910| SIMD_4x32 B2 = SIMD_4x32::load_le(in + 16 * 2); 580| 910| SIMD_4x32 B3 = SIMD_4x32::load_le(in + 16 * 3); 581| | 582| 910| keyxor(K0, B0, B1, B2, B3); 583| 910| aesdec(K1, B0, B1, B2, B3); 584| 910| aesdec(K2, B0, B1, B2, B3); 585| 910| aesdec(K3, B0, B1, B2, B3); 586| 910| aesdec(K4, B0, B1, B2, B3); 587| 910| aesdec(K5, B0, B1, B2, B3); 588| 910| aesdec(K6, B0, B1, B2, B3); 589| 910| aesdec(K7, B0, B1, B2, B3); 590| 910| aesdec(K8, B0, B1, B2, B3); 591| 910| aesdec(K9, B0, B1, B2, B3); 592| 910| aesdec(K10, B0, B1, B2, B3); 593| 910| aesdec(K11, B0, B1, B2, B3); 594| 910| aesdec(K12, B0, B1, B2, B3); 595| 910| aesdec(K13, B0, B1, B2, B3); 596| 910| aesdeclast(K14, B0, B1, B2, B3); 597| | 598| 910| B0.store_le(out + 16 * 0); 599| 910| B1.store_le(out + 16 * 1); 600| 910| B2.store_le(out + 16 * 2); 601| 910| B3.store_le(out + 16 * 3); 602| | 603| 910| blocks -= 4; 604| 910| in += 4 * 16; 605| 910| out += 4 * 16; 606| 910| } 607| | 608| 364| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (608:22): [True: 103, False: 261] ------------------ 609| 103| SIMD_4x32 B0 = SIMD_4x32::load_le(in + 16 * i); 610| | 611| 103| B0 ^= K0; 612| | 613| 103| aesdec(K1, B0); 614| 103| aesdec(K2, B0); 615| 103| aesdec(K3, B0); 616| 103| aesdec(K4, B0); 617| 103| aesdec(K5, B0); 618| 103| aesdec(K6, B0); 619| 103| aesdec(K7, B0); 620| 103| aesdec(K8, B0); 621| 103| aesdec(K9, B0); 622| 103| aesdec(K10, B0); 623| 103| aesdec(K11, B0); 624| 103| aesdec(K12, B0); 625| 103| aesdec(K13, B0); 626| 103| aesdeclast(K14, B0); 627| | 628| 103| B0.store_le(out + 16 * i); 629| 103| } 630| 261|} _ZN5Botan7AES_25618aesni_key_scheduleEPKhm: 635| 527|BOTAN_FN_ISA_AESNI void AES_256::aesni_key_schedule(const uint8_t key[], size_t /*length*/) { 636| 527| m_EK.resize(60); 637| 527| m_DK.resize(60); 638| | 639| 527| const SIMD_4x32 K0 = SIMD_4x32::load_le(key); 640| 527| const SIMD_4x32 K1 = SIMD_4x32::load_le(key + 16); 641| | 642| 527| const SIMD_4x32 K2 = aes_128_key_expansion<0x01>(K0, K1); 643| 527| const SIMD_4x32 K3 = aes_256_key_expansion(K1, K2); 644| | 645| 527| const SIMD_4x32 K4 = aes_128_key_expansion<0x02>(K2, K3); 646| 527| const SIMD_4x32 K5 = aes_256_key_expansion(K3, K4); 647| | 648| 527| const SIMD_4x32 K6 = aes_128_key_expansion<0x04>(K4, K5); 649| 527| const SIMD_4x32 K7 = aes_256_key_expansion(K5, K6); 650| | 651| 527| const SIMD_4x32 K8 = aes_128_key_expansion<0x08>(K6, K7); 652| 527| const SIMD_4x32 K9 = aes_256_key_expansion(K7, K8); 653| | 654| 527| const SIMD_4x32 K10 = aes_128_key_expansion<0x10>(K8, K9); 655| 527| const SIMD_4x32 K11 = aes_256_key_expansion(K9, K10); 656| | 657| 527| const SIMD_4x32 K12 = aes_128_key_expansion<0x20>(K10, K11); 658| 527| const SIMD_4x32 K13 = aes_256_key_expansion(K11, K12); 659| | 660| 527| const SIMD_4x32 K14 = aes_128_key_expansion<0x40>(K12, K13); 661| | 662| 527| K0.store_le(&m_EK[4 * 0]); 663| 527| K1.store_le(&m_EK[4 * 1]); 664| 527| K2.store_le(&m_EK[4 * 2]); 665| 527| K3.store_le(&m_EK[4 * 3]); 666| 527| K4.store_le(&m_EK[4 * 4]); 667| 527| K5.store_le(&m_EK[4 * 5]); 668| 527| K6.store_le(&m_EK[4 * 6]); 669| 527| K7.store_le(&m_EK[4 * 7]); 670| 527| K8.store_le(&m_EK[4 * 8]); 671| 527| K9.store_le(&m_EK[4 * 9]); 672| 527| K10.store_le(&m_EK[4 * 10]); 673| 527| K11.store_le(&m_EK[4 * 11]); 674| 527| K12.store_le(&m_EK[4 * 12]); 675| 527| K13.store_le(&m_EK[4 * 13]); 676| 527| K14.store_le(&m_EK[4 * 14]); 677| | 678| 527| K14.store_le(&m_DK[4 * 0]); 679| 527| aesimc(K13).store_le(&m_DK[4 * 1]); 680| 527| aesimc(K12).store_le(&m_DK[4 * 2]); 681| 527| aesimc(K11).store_le(&m_DK[4 * 3]); 682| 527| aesimc(K10).store_le(&m_DK[4 * 4]); 683| 527| aesimc(K9).store_le(&m_DK[4 * 5]); 684| 527| aesimc(K8).store_le(&m_DK[4 * 6]); 685| 527| aesimc(K7).store_le(&m_DK[4 * 7]); 686| 527| aesimc(K6).store_le(&m_DK[4 * 8]); 687| 527| aesimc(K5).store_le(&m_DK[4 * 9]); 688| 527| aesimc(K4).store_le(&m_DK[4 * 10]); 689| 527| aesimc(K3).store_le(&m_DK[4 * 11]); 690| 527| aesimc(K2).store_le(&m_DK[4 * 12]); 691| 527| aesimc(K1).store_le(&m_DK[4 * 13]); 692| 527| K0.store_le(&m_DK[4 * 14]); 693| 527|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_16keyxorENS_9SIMD_4x32ERS1_S2_S2_S2_: 69| 6.33k| SIMD_4x32 K, SIMD_4x32& B0, SIMD_4x32& B1, SIMD_4x32& B2, SIMD_4x32& B3) { 70| 6.33k| B0 ^= K; 71| 6.33k| B1 ^= K; 72| 6.33k| B2 ^= K; 73| 6.33k| B3 ^= K; 74| 6.33k|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_16aesencENS_9SIMD_4x32ERS1_S2_S2_S2_: 81| 62.2k| SIMD_4x32 K, SIMD_4x32& B0, SIMD_4x32& B1, SIMD_4x32& B2, SIMD_4x32& B3) { 82| 62.2k| B0 = SIMD_4x32(_mm_aesenc_si128(B0.raw(), K.raw())); 83| 62.2k| B1 = SIMD_4x32(_mm_aesenc_si128(B1.raw(), K.raw())); 84| 62.2k| B2 = SIMD_4x32(_mm_aesenc_si128(B2.raw(), K.raw())); 85| 62.2k| B3 = SIMD_4x32(_mm_aesenc_si128(B3.raw(), K.raw())); 86| 62.2k|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_110aesenclastENS_9SIMD_4x32ERS1_S2_S2_S2_: 93| 5.00k| SIMD_4x32 K, SIMD_4x32& B0, SIMD_4x32& B1, SIMD_4x32& B2, SIMD_4x32& B3) { 94| 5.00k| B0 = SIMD_4x32(_mm_aesenclast_si128(B0.raw(), K.raw())); 95| 5.00k| B1 = SIMD_4x32(_mm_aesenclast_si128(B1.raw(), K.raw())); 96| 5.00k| B2 = SIMD_4x32(_mm_aesenclast_si128(B2.raw(), K.raw())); 97| 5.00k| B3 = SIMD_4x32(_mm_aesenclast_si128(B3.raw(), K.raw())); 98| 5.00k|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_16aesencENS_9SIMD_4x32ERS1_: 76| 65.6k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_AESNI void aesenc(SIMD_4x32 K, SIMD_4x32& B) { 77| 65.6k| B = SIMD_4x32(_mm_aesenc_si128(B.raw(), K.raw())); 78| 65.6k|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_110aesenclastENS_9SIMD_4x32ERS1_: 88| 6.00k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_AESNI void aesenclast(SIMD_4x32 K, SIMD_4x32& B) { 89| 6.00k| B = SIMD_4x32(_mm_aesenclast_si128(B.raw(), K.raw())); 90| 6.00k|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_16aesdecENS_9SIMD_4x32ERS1_S2_S2_S2_: 105| 15.5k| SIMD_4x32 K, SIMD_4x32& B0, SIMD_4x32& B1, SIMD_4x32& B2, SIMD_4x32& B3) { 106| 15.5k| B0 = SIMD_4x32(_mm_aesdec_si128(B0.raw(), K.raw())); 107| 15.5k| B1 = SIMD_4x32(_mm_aesdec_si128(B1.raw(), K.raw())); 108| 15.5k| B2 = SIMD_4x32(_mm_aesdec_si128(B2.raw(), K.raw())); 109| 15.5k| B3 = SIMD_4x32(_mm_aesdec_si128(B3.raw(), K.raw())); 110| 15.5k|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_110aesdeclastENS_9SIMD_4x32ERS1_S2_S2_S2_: 117| 1.32k| SIMD_4x32 K, SIMD_4x32& B0, SIMD_4x32& B1, SIMD_4x32& B2, SIMD_4x32& B3) { 118| 1.32k| B0 = SIMD_4x32(_mm_aesdeclast_si128(B0.raw(), K.raw())); 119| 1.32k| B1 = SIMD_4x32(_mm_aesdeclast_si128(B1.raw(), K.raw())); 120| 1.32k| B2 = SIMD_4x32(_mm_aesdeclast_si128(B2.raw(), K.raw())); 121| 1.32k| B3 = SIMD_4x32(_mm_aesdeclast_si128(B3.raw(), K.raw())); 122| 1.32k|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_16aesdecENS_9SIMD_4x32ERS1_: 100| 1.78k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_AESNI void aesdec(SIMD_4x32 K, SIMD_4x32& B) { 101| 1.78k| B = SIMD_4x32(_mm_aesdec_si128(B.raw(), K.raw())); 102| 1.78k|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_110aesdeclastENS_9SIMD_4x32ERS1_: 112| 152|BOTAN_FORCE_INLINE BOTAN_FN_ISA_AESNI void aesdeclast(SIMD_4x32 K, SIMD_4x32& B) { 113| 152| B = SIMD_4x32(_mm_aesdeclast_si128(B.raw(), K.raw())); 114| 152|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_16aesimcENS_9SIMD_4x32E: 124| 8.30k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_AESNI SIMD_4x32 aesimc(SIMD_4x32 B) { 125| 8.30k| return SIMD_4x32(_mm_aesimc_si128(B.raw())); 126| 8.30k|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_121aes_256_key_expansionENS_9SIMD_4x32ES1_: 57| 3.16k|BOTAN_FN_ISA_AESNI SIMD_4x32 aes_256_key_expansion(SIMD_4x32 key, SIMD_4x32 key2) { 58| 3.16k| __m128i key_with_rcon = _mm_aeskeygenassist_si128(key2.raw(), 0x00); 59| 3.16k| key_with_rcon = _mm_shuffle_epi32(key_with_rcon, _MM_SHUFFLE(2, 2, 2, 2)); 60| | 61| 3.16k| key ^= key.shift_elems_left<1>(); 62| 3.16k| key ^= key.shift_elems_left<1>(); 63| 3.16k| key ^= key.shift_elems_left<1>(); 64| 3.16k| key ^= SIMD_4x32(key_with_rcon); 65| 3.16k| return key; 66| 3.16k|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_121aes_128_key_expansionILh1EEENS_9SIMD_4x32ES2_S2_: 22| 688|BOTAN_FN_ISA_AESNI inline SIMD_4x32 aes_128_key_expansion(SIMD_4x32 key, SIMD_4x32 key_getting_rcon) { 23| 688| __m128i key_with_rcon = _mm_aeskeygenassist_si128(key_getting_rcon.raw(), RC); 24| | key_with_rcon = _mm_shuffle_epi32(key_with_rcon, _MM_SHUFFLE(3, 3, 3, 3)); 25| 688| key ^= key.shift_elems_left<1>(); 26| 688| key ^= key.shift_elems_left<1>(); 27| 688| key ^= key.shift_elems_left<1>(); 28| 688| key ^= SIMD_4x32(key_with_rcon); 29| 688| return key; 30| 688|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_121aes_128_key_expansionILh2EEENS_9SIMD_4x32ES2_S2_: 22| 688|BOTAN_FN_ISA_AESNI inline SIMD_4x32 aes_128_key_expansion(SIMD_4x32 key, SIMD_4x32 key_getting_rcon) { 23| 688| __m128i key_with_rcon = _mm_aeskeygenassist_si128(key_getting_rcon.raw(), RC); 24| | key_with_rcon = _mm_shuffle_epi32(key_with_rcon, _MM_SHUFFLE(3, 3, 3, 3)); 25| 688| key ^= key.shift_elems_left<1>(); 26| 688| key ^= key.shift_elems_left<1>(); 27| 688| key ^= key.shift_elems_left<1>(); 28| 688| key ^= SIMD_4x32(key_with_rcon); 29| 688| return key; 30| 688|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_121aes_128_key_expansionILh4EEENS_9SIMD_4x32ES2_S2_: 22| 688|BOTAN_FN_ISA_AESNI inline SIMD_4x32 aes_128_key_expansion(SIMD_4x32 key, SIMD_4x32 key_getting_rcon) { 23| 688| __m128i key_with_rcon = _mm_aeskeygenassist_si128(key_getting_rcon.raw(), RC); 24| | key_with_rcon = _mm_shuffle_epi32(key_with_rcon, _MM_SHUFFLE(3, 3, 3, 3)); 25| 688| key ^= key.shift_elems_left<1>(); 26| 688| key ^= key.shift_elems_left<1>(); 27| 688| key ^= key.shift_elems_left<1>(); 28| 688| key ^= SIMD_4x32(key_with_rcon); 29| 688| return key; 30| 688|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_121aes_128_key_expansionILh8EEENS_9SIMD_4x32ES2_S2_: 22| 688|BOTAN_FN_ISA_AESNI inline SIMD_4x32 aes_128_key_expansion(SIMD_4x32 key, SIMD_4x32 key_getting_rcon) { 23| 688| __m128i key_with_rcon = _mm_aeskeygenassist_si128(key_getting_rcon.raw(), RC); 24| | key_with_rcon = _mm_shuffle_epi32(key_with_rcon, _MM_SHUFFLE(3, 3, 3, 3)); 25| 688| key ^= key.shift_elems_left<1>(); 26| 688| key ^= key.shift_elems_left<1>(); 27| 688| key ^= key.shift_elems_left<1>(); 28| 688| key ^= SIMD_4x32(key_with_rcon); 29| 688| return key; 30| 688|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_121aes_128_key_expansionILh16EEENS_9SIMD_4x32ES2_S2_: 22| 688|BOTAN_FN_ISA_AESNI inline SIMD_4x32 aes_128_key_expansion(SIMD_4x32 key, SIMD_4x32 key_getting_rcon) { 23| 688| __m128i key_with_rcon = _mm_aeskeygenassist_si128(key_getting_rcon.raw(), RC); 24| | key_with_rcon = _mm_shuffle_epi32(key_with_rcon, _MM_SHUFFLE(3, 3, 3, 3)); 25| 688| key ^= key.shift_elems_left<1>(); 26| 688| key ^= key.shift_elems_left<1>(); 27| 688| key ^= key.shift_elems_left<1>(); 28| 688| key ^= SIMD_4x32(key_with_rcon); 29| 688| return key; 30| 688|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_121aes_128_key_expansionILh32EEENS_9SIMD_4x32ES2_S2_: 22| 688|BOTAN_FN_ISA_AESNI inline SIMD_4x32 aes_128_key_expansion(SIMD_4x32 key, SIMD_4x32 key_getting_rcon) { 23| 688| __m128i key_with_rcon = _mm_aeskeygenassist_si128(key_getting_rcon.raw(), RC); 24| | key_with_rcon = _mm_shuffle_epi32(key_with_rcon, _MM_SHUFFLE(3, 3, 3, 3)); 25| 688| key ^= key.shift_elems_left<1>(); 26| 688| key ^= key.shift_elems_left<1>(); 27| 688| key ^= key.shift_elems_left<1>(); 28| 688| key ^= SIMD_4x32(key_with_rcon); 29| 688| return key; 30| 688|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_121aes_128_key_expansionILh64EEENS_9SIMD_4x32ES2_S2_: 22| 688|BOTAN_FN_ISA_AESNI inline SIMD_4x32 aes_128_key_expansion(SIMD_4x32 key, SIMD_4x32 key_getting_rcon) { 23| 688| __m128i key_with_rcon = _mm_aeskeygenassist_si128(key_getting_rcon.raw(), RC); 24| | key_with_rcon = _mm_shuffle_epi32(key_with_rcon, _MM_SHUFFLE(3, 3, 3, 3)); 25| 688| key ^= key.shift_elems_left<1>(); 26| 688| key ^= key.shift_elems_left<1>(); 27| 688| key ^= key.shift_elems_left<1>(); 28| 688| key ^= SIMD_4x32(key_with_rcon); 29| 688| return key; 30| 688|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_121aes_128_key_expansionILh128EEENS_9SIMD_4x32ES2_S2_: 22| 161|BOTAN_FN_ISA_AESNI inline SIMD_4x32 aes_128_key_expansion(SIMD_4x32 key, SIMD_4x32 key_getting_rcon) { 23| 161| __m128i key_with_rcon = _mm_aeskeygenassist_si128(key_getting_rcon.raw(), RC); 24| | key_with_rcon = _mm_shuffle_epi32(key_with_rcon, _MM_SHUFFLE(3, 3, 3, 3)); 25| 161| key ^= key.shift_elems_left<1>(); 26| 161| key ^= key.shift_elems_left<1>(); 27| 161| key ^= key.shift_elems_left<1>(); 28| 161| key ^= SIMD_4x32(key_with_rcon); 29| 161| return key; 30| 161|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_121aes_128_key_expansionILh27EEENS_9SIMD_4x32ES2_S2_: 22| 161|BOTAN_FN_ISA_AESNI inline SIMD_4x32 aes_128_key_expansion(SIMD_4x32 key, SIMD_4x32 key_getting_rcon) { 23| 161| __m128i key_with_rcon = _mm_aeskeygenassist_si128(key_getting_rcon.raw(), RC); 24| | key_with_rcon = _mm_shuffle_epi32(key_with_rcon, _MM_SHUFFLE(3, 3, 3, 3)); 25| 161| key ^= key.shift_elems_left<1>(); 26| 161| key ^= key.shift_elems_left<1>(); 27| 161| key ^= key.shift_elems_left<1>(); 28| 161| key ^= SIMD_4x32(key_with_rcon); 29| 161| return key; 30| 161|} aes_ni.cpp:_ZN5Botan12_GLOBAL__N_121aes_128_key_expansionILh54EEENS_9SIMD_4x32ES2_S2_: 22| 161|BOTAN_FN_ISA_AESNI inline SIMD_4x32 aes_128_key_expansion(SIMD_4x32 key, SIMD_4x32 key_getting_rcon) { 23| 161| __m128i key_with_rcon = _mm_aeskeygenassist_si128(key_getting_rcon.raw(), RC); 24| | key_with_rcon = _mm_shuffle_epi32(key_with_rcon, _MM_SHUFFLE(3, 3, 3, 3)); 25| 161| key ^= key.shift_elems_left<1>(); 26| 161| key ^= key.shift_elems_left<1>(); 27| 161| key ^= key.shift_elems_left<1>(); 28| 161| key ^= SIMD_4x32(key_with_rcon); 29| 161| return key; 30| 161|} _ZNK5Botan8ARIA_1289encrypt_nEPKhPhm: 372| 160|void ARIA_128::encrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 373| 160| assert_key_material_set(); 374| | 375| 160|#if defined(BOTAN_HAS_ARIA_AVX512_GFNI) 376| 160| if(CPUID::has(CPUID::Feature::AVX512, CPUID::Feature::GFNI)) { ------------------ | Branch (376:7): [True: 0, False: 160] ------------------ 377| 0| return aria_avx512_gfni_encrypt(in, out, blocks); 378| 0| } 379| 160|#endif 380| | 381| 160|#if defined(BOTAN_HAS_ARIA_HWAES) 382| 160| if(CPUID::has(CPUID::Feature::HW_AES)) { ------------------ | Branch (382:7): [True: 160, False: 0] ------------------ 383| 160| return aria_hwaes_encrypt(in, out, blocks); 384| 160| } 385| 0|#endif 386| | 387| 0| ARIA_F::transform(in, out, blocks, m_ERK); 388| 0|} _ZNK5Botan8ARIA_2569encrypt_nEPKhPhm: 408| 132|void ARIA_256::encrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 409| 132| assert_key_material_set(); 410| | 411| 132|#if defined(BOTAN_HAS_ARIA_AVX512_GFNI) 412| 132| if(CPUID::has(CPUID::Feature::AVX512, CPUID::Feature::GFNI)) { ------------------ | Branch (412:7): [True: 0, False: 132] ------------------ 413| 0| return aria_avx512_gfni_encrypt(in, out, blocks); 414| 0| } 415| 132|#endif 416| | 417| 132|#if defined(BOTAN_HAS_ARIA_HWAES) 418| 132| if(CPUID::has(CPUID::Feature::HW_AES)) { ------------------ | Branch (418:7): [True: 132, False: 0] ------------------ 419| 132| return aria_hwaes_encrypt(in, out, blocks); 420| 132| } 421| 0|#endif 422| | 423| 0| ARIA_F::transform(in, out, blocks, m_ERK); 424| 0|} _ZNK5Botan8ARIA_12819has_keying_materialEv: 480| 316|bool ARIA_128::has_keying_material() const { 481| 316| return !m_ERK.empty(); 482| 316|} _ZNK5Botan8ARIA_25619has_keying_materialEv: 488| 318|bool ARIA_256::has_keying_material() const { 489| 318| return !m_ERK.empty(); 490| 318|} _ZNK5Botan8ARIA_12811parallelismEv: 528| 44|size_t ARIA_128::parallelism() const { 529| 44| return aria_parallelism(); 530| 44|} _ZNK5Botan8ARIA_25611parallelismEv: 544| 52|size_t ARIA_256::parallelism() const { 545| 52| return aria_parallelism(); 546| 52|} _ZN5Botan8ARIA_12812key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 552| 22|void ARIA_128::key_schedule(std::span key) { 553| 22| ARIA_F::key_schedule(m_ERK, m_DRK, key); 554| 22|} _ZN5Botan8ARIA_25612key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 560| 26|void ARIA_256::key_schedule(std::span key) { 561| 26| ARIA_F::key_schedule(m_ERK, m_DRK, key); 562| 26|} aria.cpp:_ZN5Botan12_GLOBAL__N_16ARIA_F7ARIA_FOERjS2_S2_S2_: 118| 96|inline void ARIA_FO(uint32_t& T0, uint32_t& T1, uint32_t& T2, uint32_t& T3) { 119| 96| T0 = ARIA_F1(T0); 120| 96| T1 = ARIA_F1(T1); 121| 96| T2 = ARIA_F1(T2); 122| 96| T3 = ARIA_F1(T3); 123| | 124| 96| T1 ^= T2; 125| 96| T2 ^= T3; 126| 96| T0 ^= T1; 127| 96| T3 ^= T1; 128| 96| T2 ^= T0; 129| 96| T1 ^= T2; 130| | 131| 96| T1 = ((T1 << 8) & 0xFF00FF00) | ((T1 >> 8) & 0x00FF00FF); 132| 96| T2 = rotr<16>(T2); 133| 96| T3 = reverse_bytes(T3); 134| | 135| 96| T1 ^= T2; 136| 96| T2 ^= T3; 137| 96| T0 ^= T1; 138| 96| T3 ^= T1; 139| 96| T2 ^= T0; 140| 96| T1 ^= T2; 141| 96|} aria.cpp:_ZN5Botan12_GLOBAL__N_16ARIA_F7ARIA_F1Ej: 100| 384|inline uint32_t ARIA_F1(uint32_t X) { 101| 384| const uint32_t M1 = 0x00010101; 102| 384| const uint32_t M2 = 0x01000101; 103| 384| const uint32_t M3 = 0x01010001; 104| 384| const uint32_t M4 = 0x01010100; 105| | 106| 384| return (S1[get_byte<0>(X)] * M1) ^ (S2[get_byte<1>(X)] * M2) ^ (X1[get_byte<2>(X)] * M3) ^ (X2[get_byte<3>(X)] * M4); 107| 384|} aria.cpp:_ZN5Botan12_GLOBAL__N_16ARIA_F7ARIA_FEERjS2_S2_S2_: 143| 48|inline void ARIA_FE(uint32_t& T0, uint32_t& T1, uint32_t& T2, uint32_t& T3) { 144| 48| T0 = ARIA_F2(T0); 145| 48| T1 = ARIA_F2(T1); 146| 48| T2 = ARIA_F2(T2); 147| 48| T3 = ARIA_F2(T3); 148| | 149| 48| T1 ^= T2; 150| 48| T2 ^= T3; 151| 48| T0 ^= T1; 152| 48| T3 ^= T1; 153| 48| T2 ^= T0; 154| 48| T1 ^= T2; 155| | 156| 48| T3 = ((T3 << 8) & 0xFF00FF00) | ((T3 >> 8) & 0x00FF00FF); 157| 48| T0 = rotr<16>(T0); 158| 48| T1 = reverse_bytes(T1); 159| | 160| 48| T1 ^= T2; 161| 48| T2 ^= T3; 162| 48| T0 ^= T1; 163| 48| T3 ^= T1; 164| 48| T2 ^= T0; 165| 48| T1 ^= T2; 166| 48|} aria.cpp:_ZN5Botan12_GLOBAL__N_16ARIA_F7ARIA_F2Ej: 109| 192|inline uint32_t ARIA_F2(uint32_t X) { 110| 192| const uint32_t M1 = 0x00010101; 111| 192| const uint32_t M2 = 0x01000101; 112| 192| const uint32_t M3 = 0x01010001; 113| 192| const uint32_t M4 = 0x01010100; 114| | 115| 192| return (X1[get_byte<0>(X)] * M3) ^ (X2[get_byte<1>(X)] * M4) ^ (S1[get_byte<2>(X)] * M1) ^ (S2[get_byte<3>(X)] * M2); 116| 192|} aria.cpp:_ZN5Botan12_GLOBAL__N_116aria_parallelismEv: 494| 96|size_t aria_parallelism() { 495| 96|#if defined(BOTAN_HAS_ARIA_AVX512_GFNI) 496| 96| if(CPUID::has(CPUID::Feature::AVX512, CPUID::Feature::GFNI)) { ------------------ | Branch (496:7): [True: 0, False: 96] ------------------ 497| 0| return 16; 498| 0| } 499| 96|#endif 500| | 501| 96|#if defined(BOTAN_HAS_ARIA_HWAES) 502| 96| if(CPUID::has(CPUID::Feature::HW_AES)) { ------------------ | Branch (502:7): [True: 96, False: 0] ------------------ 503| 96| return 4; 504| 96| } 505| 0|#endif 506| | 507| 0| return 1; 508| 96|} aria.cpp:_ZN5Botan12_GLOBAL__N_16ARIA_F12key_scheduleERNSt3__16vectorIjNS_16secure_allocatorIjEEEES7_NS2_4spanIKhLm18446744073709551615EEE: 260| 48|void key_schedule(secure_vector& ERK, secure_vector& DRK, std::span key) { 261| 48| prefetch_arrays(S1, S2, X1, X2); 262| | 263| 48| const uint32_t KRK[3][4] = {{0x517cc1b7, 0x27220a94, 0xfe13abe8, 0xfa9a6ee0}, 264| 48| {0x6db14acc, 0x9e21c820, 0xff28b1d5, 0xef5de2b0}, 265| 48| {0xdb92371d, 0x2126e970, 0x03249775, 0x04e8c90e}}; 266| | 267| 48| const size_t CK0 = (key.size() / 8) - 2; 268| 48| const size_t CK1 = (CK0 + 1) % 3; 269| 48| const size_t CK2 = (CK1 + 1) % 3; 270| | 271| 48| uint32_t w0[4]; 272| 48| uint32_t w1[4]; 273| 48| uint32_t w2[4]; 274| 48| uint32_t w3[4]; 275| | 276| 48| w0[0] = load_be(key.data(), 0); 277| 48| w0[1] = load_be(key.data(), 1); 278| 48| w0[2] = load_be(key.data(), 2); 279| 48| w0[3] = load_be(key.data(), 3); 280| | 281| 48| w1[0] = w0[0] ^ KRK[CK0][0]; 282| 48| w1[1] = w0[1] ^ KRK[CK0][1]; 283| 48| w1[2] = w0[2] ^ KRK[CK0][2]; 284| 48| w1[3] = w0[3] ^ KRK[CK0][3]; 285| | 286| 48| ARIA_FO(w1[0], w1[1], w1[2], w1[3]); 287| | 288| 48| if(key.size() == 24 || key.size() == 32) { ------------------ | Branch (288:7): [True: 0, False: 48] | Branch (288:27): [True: 26, False: 22] ------------------ 289| 26| w1[0] ^= load_be(key.data(), 4); 290| 26| w1[1] ^= load_be(key.data(), 5); 291| 26| } 292| 48| if(key.size() == 32) { ------------------ | Branch (292:7): [True: 26, False: 22] ------------------ 293| 26| w1[2] ^= load_be(key.data(), 6); 294| 26| w1[3] ^= load_be(key.data(), 7); 295| 26| } 296| | 297| 48| w2[0] = w1[0] ^ KRK[CK1][0]; 298| 48| w2[1] = w1[1] ^ KRK[CK1][1]; 299| 48| w2[2] = w1[2] ^ KRK[CK1][2]; 300| 48| w2[3] = w1[3] ^ KRK[CK1][3]; 301| | 302| 48| ARIA_FE(w2[0], w2[1], w2[2], w2[3]); 303| | 304| 48| w2[0] ^= w0[0]; 305| 48| w2[1] ^= w0[1]; 306| 48| w2[2] ^= w0[2]; 307| 48| w2[3] ^= w0[3]; 308| | 309| 48| w3[0] = w2[0] ^ KRK[CK2][0]; 310| 48| w3[1] = w2[1] ^ KRK[CK2][1]; 311| 48| w3[2] = w2[2] ^ KRK[CK2][2]; 312| 48| w3[3] = w2[3] ^ KRK[CK2][3]; 313| | 314| 48| ARIA_FO(w3[0], w3[1], w3[2], w3[3]); 315| | 316| 48| w3[0] ^= w1[0]; 317| 48| w3[1] ^= w1[1]; 318| 48| w3[2] ^= w1[2]; 319| 48| w3[3] ^= w1[3]; 320| | 321| 48| if(key.size() == 16) { ------------------ | Branch (321:7): [True: 22, False: 26] ------------------ 322| 22| ERK.resize(4 * 13); 323| 26| } else if(key.size() == 24) { ------------------ | Branch (323:14): [True: 0, False: 26] ------------------ 324| 0| ERK.resize(4 * 15); 325| 26| } else if(key.size() == 32) { ------------------ | Branch (325:14): [True: 26, False: 0] ------------------ 326| 26| ERK.resize(4 * 17); 327| 26| } 328| | 329| 48| ARIA_ROL128<19>(w0, w1, &ERK[0]); // NOLINT(*-container-data-pointer) 330| 48| ARIA_ROL128<19>(w1, w2, &ERK[4]); 331| 48| ARIA_ROL128<19>(w2, w3, &ERK[8]); 332| 48| ARIA_ROL128<19>(w3, w0, &ERK[12]); 333| 48| ARIA_ROL128<31>(w0, w1, &ERK[16]); 334| 48| ARIA_ROL128<31>(w1, w2, &ERK[20]); 335| 48| ARIA_ROL128<31>(w2, w3, &ERK[24]); 336| 48| ARIA_ROL128<31>(w3, w0, &ERK[28]); 337| 48| ARIA_ROL128<67>(w0, w1, &ERK[32]); 338| 48| ARIA_ROL128<67>(w1, w2, &ERK[36]); 339| 48| ARIA_ROL128<67>(w2, w3, &ERK[40]); 340| 48| ARIA_ROL128<67>(w3, w0, &ERK[44]); 341| 48| ARIA_ROL128<97>(w0, w1, &ERK[48]); 342| | 343| 48| if(key.size() == 24 || key.size() == 32) { ------------------ | Branch (343:7): [True: 0, False: 48] | Branch (343:27): [True: 26, False: 22] ------------------ 344| 26| ARIA_ROL128<97>(w1, w2, &ERK[52]); 345| 26| ARIA_ROL128<97>(w2, w3, &ERK[56]); 346| | 347| 26| if(key.size() == 32) { ------------------ | Branch (347:10): [True: 26, False: 0] ------------------ 348| 26| ARIA_ROL128<97>(w3, w0, &ERK[60]); 349| 26| ARIA_ROL128<109>(w0, w1, &ERK[64]); 350| 26| } 351| 26| } 352| | 353| | // Now create the decryption key schedule 354| 48| DRK.resize(ERK.size()); 355| | 356| 776| for(size_t i = 0; i != DRK.size(); i += 4) { ------------------ | Branch (356:22): [True: 728, False: 48] ------------------ 357| 728| DRK[i] = ERK[ERK.size() - 4 - i]; 358| 728| DRK[i + 1] = ERK[ERK.size() - 3 - i]; 359| 728| DRK[i + 2] = ERK[ERK.size() - 2 - i]; 360| 728| DRK[i + 3] = ERK[ERK.size() - 1 - i]; 361| 728| } 362| | 363| 680| for(size_t i = 4; i != DRK.size() - 4; i += 4) { ------------------ | Branch (363:22): [True: 632, False: 48] ------------------ 364| 632| aria_ks_dk_transform(DRK[i + 0], DRK[i + 1], DRK[i + 2], DRK[i + 3]); 365| 632| } 366| 48|} aria.cpp:_ZN5Botan12_GLOBAL__N_16ARIA_F11ARIA_ROL128ILm19EEEvPKjS4_Pj: 221| 192|inline void ARIA_ROL128(const uint32_t X[4], const uint32_t Y[4], uint32_t KS[4]) { 222| | // MSVC is not generating a "rotate immediate". Constify to help it along. 223| 192| static const size_t Q = 4 - (N / 32); 224| 192| static const size_t R = N % 32; 225| 192| static_assert(R > 0 && R < 32, "Rotation in range for type"); 226| 192| KS[0] = (X[0]) ^ ((Y[(Q) % 4]) >> R) ^ ((Y[(Q + 3) % 4]) << (32 - R)); 227| 192| KS[1] = (X[1]) ^ ((Y[(Q + 1) % 4]) >> R) ^ ((Y[(Q) % 4]) << (32 - R)); 228| 192| KS[2] = (X[2]) ^ ((Y[(Q + 2) % 4]) >> R) ^ ((Y[(Q + 1) % 4]) << (32 - R)); 229| 192| KS[3] = (X[3]) ^ ((Y[(Q + 3) % 4]) >> R) ^ ((Y[(Q + 2) % 4]) << (32 - R)); 230| 192|} aria.cpp:_ZN5Botan12_GLOBAL__N_16ARIA_F11ARIA_ROL128ILm31EEEvPKjS4_Pj: 221| 192|inline void ARIA_ROL128(const uint32_t X[4], const uint32_t Y[4], uint32_t KS[4]) { 222| | // MSVC is not generating a "rotate immediate". Constify to help it along. 223| 192| static const size_t Q = 4 - (N / 32); 224| 192| static const size_t R = N % 32; 225| 192| static_assert(R > 0 && R < 32, "Rotation in range for type"); 226| 192| KS[0] = (X[0]) ^ ((Y[(Q) % 4]) >> R) ^ ((Y[(Q + 3) % 4]) << (32 - R)); 227| 192| KS[1] = (X[1]) ^ ((Y[(Q + 1) % 4]) >> R) ^ ((Y[(Q) % 4]) << (32 - R)); 228| 192| KS[2] = (X[2]) ^ ((Y[(Q + 2) % 4]) >> R) ^ ((Y[(Q + 1) % 4]) << (32 - R)); 229| 192| KS[3] = (X[3]) ^ ((Y[(Q + 3) % 4]) >> R) ^ ((Y[(Q + 2) % 4]) << (32 - R)); 230| 192|} aria.cpp:_ZN5Botan12_GLOBAL__N_16ARIA_F11ARIA_ROL128ILm67EEEvPKjS4_Pj: 221| 192|inline void ARIA_ROL128(const uint32_t X[4], const uint32_t Y[4], uint32_t KS[4]) { 222| | // MSVC is not generating a "rotate immediate". Constify to help it along. 223| 192| static const size_t Q = 4 - (N / 32); 224| 192| static const size_t R = N % 32; 225| 192| static_assert(R > 0 && R < 32, "Rotation in range for type"); 226| 192| KS[0] = (X[0]) ^ ((Y[(Q) % 4]) >> R) ^ ((Y[(Q + 3) % 4]) << (32 - R)); 227| 192| KS[1] = (X[1]) ^ ((Y[(Q + 1) % 4]) >> R) ^ ((Y[(Q) % 4]) << (32 - R)); 228| 192| KS[2] = (X[2]) ^ ((Y[(Q + 2) % 4]) >> R) ^ ((Y[(Q + 1) % 4]) << (32 - R)); 229| 192| KS[3] = (X[3]) ^ ((Y[(Q + 3) % 4]) >> R) ^ ((Y[(Q + 2) % 4]) << (32 - R)); 230| 192|} aria.cpp:_ZN5Botan12_GLOBAL__N_16ARIA_F11ARIA_ROL128ILm97EEEvPKjS4_Pj: 221| 126|inline void ARIA_ROL128(const uint32_t X[4], const uint32_t Y[4], uint32_t KS[4]) { 222| | // MSVC is not generating a "rotate immediate". Constify to help it along. 223| 126| static const size_t Q = 4 - (N / 32); 224| 126| static const size_t R = N % 32; 225| 126| static_assert(R > 0 && R < 32, "Rotation in range for type"); 226| 126| KS[0] = (X[0]) ^ ((Y[(Q) % 4]) >> R) ^ ((Y[(Q + 3) % 4]) << (32 - R)); 227| 126| KS[1] = (X[1]) ^ ((Y[(Q + 1) % 4]) >> R) ^ ((Y[(Q) % 4]) << (32 - R)); 228| 126| KS[2] = (X[2]) ^ ((Y[(Q + 2) % 4]) >> R) ^ ((Y[(Q + 1) % 4]) << (32 - R)); 229| 126| KS[3] = (X[3]) ^ ((Y[(Q + 3) % 4]) >> R) ^ ((Y[(Q + 2) % 4]) << (32 - R)); 230| 126|} aria.cpp:_ZN5Botan12_GLOBAL__N_16ARIA_F11ARIA_ROL128ILm109EEEvPKjS4_Pj: 221| 26|inline void ARIA_ROL128(const uint32_t X[4], const uint32_t Y[4], uint32_t KS[4]) { 222| | // MSVC is not generating a "rotate immediate". Constify to help it along. 223| 26| static const size_t Q = 4 - (N / 32); 224| 26| static const size_t R = N % 32; 225| 26| static_assert(R > 0 && R < 32, "Rotation in range for type"); 226| 26| KS[0] = (X[0]) ^ ((Y[(Q) % 4]) >> R) ^ ((Y[(Q + 3) % 4]) << (32 - R)); 227| 26| KS[1] = (X[1]) ^ ((Y[(Q + 1) % 4]) >> R) ^ ((Y[(Q) % 4]) << (32 - R)); 228| 26| KS[2] = (X[2]) ^ ((Y[(Q + 2) % 4]) >> R) ^ ((Y[(Q + 1) % 4]) << (32 - R)); 229| 26| KS[3] = (X[3]) ^ ((Y[(Q + 3) % 4]) >> R) ^ ((Y[(Q + 2) % 4]) << (32 - R)); 230| 26|} aria.cpp:_ZN5Botan12_GLOBAL__N_16ARIA_F20aria_ks_dk_transformERjS2_S2_S2_: 232| 632|void aria_ks_dk_transform(uint32_t& K0, uint32_t& K1, uint32_t& K2, uint32_t& K3) { 233| 632| K0 = rotr<8>(K0) ^ rotr<16>(K0) ^ rotr<24>(K0); 234| 632| K1 = rotr<8>(K1) ^ rotr<16>(K1) ^ rotr<24>(K1); 235| 632| K2 = rotr<8>(K2) ^ rotr<16>(K2) ^ rotr<24>(K2); 236| 632| K3 = rotr<8>(K3) ^ rotr<16>(K3) ^ rotr<24>(K3); 237| | 238| 632| K1 ^= K2; 239| 632| K2 ^= K3; 240| 632| K0 ^= K1; 241| 632| K3 ^= K1; 242| 632| K2 ^= K0; 243| 632| K1 ^= K2; 244| | 245| 632| K1 = ((K1 << 8) & 0xFF00FF00) | ((K1 >> 8) & 0x00FF00FF); 246| 632| K2 = rotr<16>(K2); 247| 632| K3 = reverse_bytes(K3); 248| | 249| 632| K1 ^= K2; 250| 632| K2 ^= K3; 251| 632| K0 ^= K1; 252| 632| K3 ^= K1; 253| 632| K2 ^= K0; 254| 632| K1 ^= K2; 255| 632|} _ZNK5Botan8ARIA_12818aria_hwaes_encryptEPKhPhm: 224| 160|void BOTAN_FN_ISA_HWAES ARIA_128::aria_hwaes_encrypt(const uint8_t in[], uint8_t out[], size_t blocks) const { 225| 160| ARIA_HWAES::aria_transform(in, out, blocks, m_ERK); 226| 160|} _ZNK5Botan8ARIA_25618aria_hwaes_encryptEPKhPhm: 240| 132|void BOTAN_FN_ISA_HWAES ARIA_256::aria_hwaes_encrypt(const uint8_t in[], uint8_t out[], size_t blocks) const { 241| 132| ARIA_HWAES::aria_transform(in, out, blocks, m_ERK); 242| 132|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_114aria_transformEPKhPhmNSt3__14spanIKjLm18446744073709551615EEE: 203| 292|void BOTAN_FN_ISA_HWAES aria_transform(const uint8_t in[], uint8_t out[], size_t blocks, std::span KS) { 204| 1.46k| while(blocks >= 4) { ------------------ | Branch (204:10): [True: 1.16k, False: 292] ------------------ 205| 1.16k| transform_4(in, out, KS); 206| 1.16k| in += 4 * 16; 207| 1.16k| out += 4 * 16; 208| 1.16k| blocks -= 4; 209| 1.16k| } 210| | 211| 292| if(blocks > 0) { ------------------ | Branch (211:7): [True: 0, False: 292] ------------------ 212| 0| uint8_t ibuf[4 * 16] = {0}; 213| 0| uint8_t obuf[4 * 16] = {0}; 214| 0| copy_mem(ibuf, in, blocks * 16); 215| 0| transform_4(ibuf, obuf, KS); 216| 0| copy_mem(out, obuf, blocks * 16); 217| 0| } 218| 292|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_111transform_4EPKhPhNSt3__14spanIKjLm18446744073709551615EEE: 159| 1.16k|BOTAN_FN_ISA_HWAES void transform_4(const uint8_t in[], uint8_t out[], std::span KS) { 160| 1.16k| const size_t ROUNDS = (KS.size() / 4) - 1; 161| | 162| 1.16k| auto B0 = SIMD_4x32::load_be(in); 163| 1.16k| auto B1 = SIMD_4x32::load_be(in + 16); 164| 1.16k| auto B2 = SIMD_4x32::load_be(in + 32); 165| 1.16k| auto B3 = SIMD_4x32::load_be(in + 48); 166| | 167| 1.16k| SIMD_4x32::transpose(B0, B1, B2, B3); 168| | 169| 9.23k| for(size_t r = 0; r != ROUNDS; r += 2) { ------------------ | Branch (169:22): [True: 8.06k, False: 1.16k] ------------------ 170| 8.06k| B0 ^= SIMD_4x32::splat(KS[4 * r]); 171| 8.06k| B1 ^= SIMD_4x32::splat(KS[4 * r + 1]); 172| 8.06k| B2 ^= SIMD_4x32::splat(KS[4 * r + 2]); 173| 8.06k| B3 ^= SIMD_4x32::splat(KS[4 * r + 3]); 174| | 175| 8.06k| aria_fo(B0, B1, B2, B3); 176| | 177| 8.06k| B0 ^= SIMD_4x32::splat(KS[4 * r + 4]); 178| 8.06k| B1 ^= SIMD_4x32::splat(KS[4 * r + 5]); 179| 8.06k| B2 ^= SIMD_4x32::splat(KS[4 * r + 6]); 180| 8.06k| B3 ^= SIMD_4x32::splat(KS[4 * r + 7]); 181| | 182| 8.06k| if(r != ROUNDS - 2) { ------------------ | Branch (182:10): [True: 6.89k, False: 1.16k] ------------------ 183| 6.89k| aria_fe(B0, B1, B2, B3); 184| 6.89k| } 185| 8.06k| } 186| | 187| | // Last half-round: FE sbox only 188| 1.16k| aria_fe_sbox(B0, B1, B2, B3); 189| | 190| 1.16k| B0 ^= SIMD_4x32::splat(KS[4 * ROUNDS]); 191| 1.16k| B1 ^= SIMD_4x32::splat(KS[4 * ROUNDS + 1]); 192| 1.16k| B2 ^= SIMD_4x32::splat(KS[4 * ROUNDS + 2]); 193| 1.16k| B3 ^= SIMD_4x32::splat(KS[4 * ROUNDS + 3]); 194| | 195| 1.16k| SIMD_4x32::transpose(B0, B1, B2, B3); 196| | 197| 1.16k| B0.store_be(out); 198| 1.16k| B1.store_be(out + 16); 199| 1.16k| B2.store_be(out + 32); 200| 1.16k| B3.store_be(out + 48); 201| 1.16k|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_17aria_foERNS_9SIMD_4x32ES3_S3_S3_: 125| 8.06k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES void aria_fo(SIMD_4x32& B0, SIMD_4x32& B1, SIMD_4x32& B2, SIMD_4x32& B3) { 126| 8.06k| aria_fo_sbox(B0, B1, B2, B3); 127| | 128| 8.06k| B0 = aria_fo_m(B0); 129| 8.06k| B1 = aria_fo_m(B1); 130| 8.06k| B2 = aria_fo_m(B2); 131| 8.06k| B3 = aria_fo_m(B3); 132| | 133| 8.06k| aria_mix(B0, B1, B2, B3); 134| | 135| 8.06k| B1 = swap_abcd_badc(B1); 136| 8.06k| B2 = B2.rotl<16>(); 137| 8.06k| B3 = B3.bswap(); 138| | 139| 8.06k| aria_mix(B0, B1, B2, B3); 140| 8.06k|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_112aria_fo_sboxERNS_9SIMD_4x32ES3_S3_S3_: 87| 8.06k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES void aria_fo_sbox(SIMD_4x32& B0, SIMD_4x32& B1, SIMD_4x32& B2, SIMD_4x32& B3) { 88| 8.06k| B0 = byte_transpose(B0); 89| 8.06k| B1 = byte_transpose(B1); 90| 8.06k| B2 = byte_transpose(B2); 91| 8.06k| B3 = byte_transpose(B3); 92| 8.06k| SIMD_4x32::transpose(B0, B1, B2, B3); 93| | 94| 8.06k| B3 = aria_s1(B3); 95| 8.06k| B2 = aria_s2(B2); 96| 8.06k| B1 = aria_x1(B1); 97| 8.06k| B0 = aria_x2(B0); 98| | 99| 8.06k| SIMD_4x32::transpose(B0, B1, B2, B3); 100| 8.06k| B0 = byte_transpose(B0); 101| 8.06k| B1 = byte_transpose(B1); 102| 8.06k| B2 = byte_transpose(B2); 103| 8.06k| B3 = byte_transpose(B3); 104| 8.06k|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_114byte_transposeENS_9SIMD_4x32E: 82| 129k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES SIMD_4x32 byte_transpose(SIMD_4x32 v) { 83| 129k| const SIMD_4x32 tbl(0x0C080400, 0x0D090501, 0x0E0A0602, 0x0F0B0703); 84| 129k| return SIMD_4x32::byte_shuffle(v, tbl); 85| 129k|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_17aria_s1ENS_9SIMD_4x32E: 21| 16.1k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES SIMD_4x32 aria_s1(SIMD_4x32 v) { 22| 16.1k| return hw_aes_sbox(v); 23| 16.1k|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_17aria_s2ENS_9SIMD_4x32E: 25| 16.1k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES SIMD_4x32 aria_s2(SIMD_4x32 v) { 26| 16.1k| constexpr uint64_t AFF_S2 = gfni_matrix(R"( 27| 16.1k| 0 1 0 1 0 1 1 1 28| 16.1k| 0 0 1 1 1 1 1 1 29| 16.1k| 1 1 1 0 1 1 0 1 30| 16.1k| 1 1 0 0 0 0 1 1 31| 16.1k| 0 1 0 0 0 0 1 1 32| 16.1k| 1 1 0 0 1 1 1 0 33| 16.1k| 0 1 1 0 0 0 1 1 34| 16.1k| 1 1 1 1 0 1 1 0)"); 35| | 36| 16.1k| constexpr auto POST_S2 = Gf2AffineTransformation::post_sbox(AFF_S2, 0xE2); 37| 16.1k| return POST_S2.affine_transform(hw_aes_sbox(v)); 38| 16.1k|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_17aria_x1ENS_9SIMD_4x32E: 41| 16.1k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES SIMD_4x32 aria_x1(SIMD_4x32 v) { 42| 16.1k| return hw_aes_inv_sbox(v); 43| 16.1k|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_17aria_x2ENS_9SIMD_4x32E: 45| 16.1k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES SIMD_4x32 aria_x2(SIMD_4x32 v) { 46| 16.1k| constexpr uint64_t AFF_X2 = gfni_matrix(R"( 47| 16.1k| 0 0 0 1 1 0 0 0 48| 16.1k| 0 0 1 0 0 1 1 0 49| 16.1k| 0 0 0 0 1 0 1 0 50| 16.1k| 1 1 1 0 0 0 1 1 51| 16.1k| 1 1 1 0 1 1 0 0 52| 16.1k| 0 1 1 0 1 0 1 1 53| 16.1k| 1 0 1 1 1 1 0 1 54| 16.1k| 1 0 0 1 0 0 1 1)"); 55| 16.1k| constexpr auto PRE_X2D = Gf2AffineTransformation::post_inv_sbox(AFF_X2, 0x2C); 56| | 57| 16.1k| return hw_aes_inv_sbox(PRE_X2D.affine_transform(v)); 58| 16.1k|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_19aria_fo_mENS_9SIMD_4x32E: 60| 32.2k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES SIMD_4x32 aria_fo_m(SIMD_4x32 x) { 61| 32.2k| return x.rotl<8>() ^ x.rotl<16>() ^ x.rotl<24>(); 62| 32.2k|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_18aria_mixERNS_9SIMD_4x32ES3_S3_S3_: 68| 29.9k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES void aria_mix(SIMD_4x32& B0, SIMD_4x32& B1, SIMD_4x32& B2, SIMD_4x32& B3) { 69| 29.9k| B1 ^= B2; 70| 29.9k| B2 ^= B3; 71| 29.9k| B0 ^= B1; 72| 29.9k| B3 ^= B1; 73| 29.9k| B2 ^= B0; 74| 29.9k| B1 ^= B2; 75| 29.9k|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_114swap_abcd_badcENS_9SIMD_4x32E: 77| 14.9k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES SIMD_4x32 swap_abcd_badc(SIMD_4x32 x) { 78| 14.9k| const auto shuf = SIMD_4x32(0x02030001, 0x06070405, 0x0A0B0809, 0x0E0F0C0D); 79| 14.9k| return SIMD_4x32::byte_shuffle(x, shuf); 80| 14.9k|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_17aria_feERNS_9SIMD_4x32ES3_S3_S3_: 142| 6.89k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES void aria_fe(SIMD_4x32& B0, SIMD_4x32& B1, SIMD_4x32& B2, SIMD_4x32& B3) { 143| 6.89k| aria_fe_sbox(B0, B1, B2, B3); 144| | 145| 6.89k| B0 = aria_fe_m(B0); 146| 6.89k| B1 = aria_fe_m(B1); 147| 6.89k| B2 = aria_fe_m(B2); 148| 6.89k| B3 = aria_fe_m(B3); 149| | 150| 6.89k| aria_mix(B0, B1, B2, B3); 151| | 152| 6.89k| B3 = swap_abcd_badc(B3); 153| 6.89k| B0 = B0.rotl<16>(); 154| 6.89k| B1 = B1.bswap(); 155| | 156| 6.89k| aria_mix(B0, B1, B2, B3); 157| 6.89k|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_19aria_fe_mENS_9SIMD_4x32E: 64| 27.5k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES SIMD_4x32 aria_fe_m(SIMD_4x32 x) { 65| 27.5k| return x ^ x.rotl<8>() ^ x.rotl<24>(); 66| 27.5k|} aria_hwaes.cpp:_ZN5Botan10ARIA_HWAES12_GLOBAL__N_112aria_fe_sboxERNS_9SIMD_4x32ES3_S3_S3_: 106| 8.06k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES void aria_fe_sbox(SIMD_4x32& B0, SIMD_4x32& B1, SIMD_4x32& B2, SIMD_4x32& B3) { 107| 8.06k| B0 = byte_transpose(B0); 108| 8.06k| B1 = byte_transpose(B1); 109| 8.06k| B2 = byte_transpose(B2); 110| 8.06k| B3 = byte_transpose(B3); 111| 8.06k| SIMD_4x32::transpose(B0, B1, B2, B3); 112| | 113| 8.06k| B3 = aria_x1(B3); 114| 8.06k| B2 = aria_x2(B2); 115| 8.06k| B1 = aria_s1(B1); 116| 8.06k| B0 = aria_s2(B0); 117| | 118| 8.06k| SIMD_4x32::transpose(B0, B1, B2, B3); 119| 8.06k| B0 = byte_transpose(B0); 120| 8.06k| B1 = byte_transpose(B1); 121| 8.06k| B2 = byte_transpose(B2); 122| 8.06k| B3 = byte_transpose(B3); 123| 8.06k|} _ZN5Botan11BlockCipher6createENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_: 97| 953|std::unique_ptr BlockCipher::create(std::string_view algo, std::string_view provider) { 98| |#if defined(BOTAN_HAS_COMMONCRYPTO) 99| | if(provider.empty() || provider == "commoncrypto") { 100| | if(auto bc = make_commoncrypto_block_cipher(algo)) 101| | return bc; 102| | 103| | if(!provider.empty()) 104| | return nullptr; 105| | } 106| |#endif 107| | 108| | // TODO: CryptoAPI 109| | // TODO: /dev/crypto 110| | 111| | // Only base providers from here on out 112| 953| if(provider.empty() == false && provider != "base") { ------------------ | Branch (112:7): [True: 0, False: 953] | Branch (112:36): [True: 0, False: 0] ------------------ 113| 0| return nullptr; 114| 0| } 115| | 116| 953|#if defined(BOTAN_HAS_AES) 117| 953| if(algo == "AES-128") { ------------------ | Branch (117:7): [True: 161, False: 792] ------------------ 118| 161| return std::make_unique(); 119| 161| } 120| | 121| 792| if(algo == "AES-192") { ------------------ | Branch (121:7): [True: 0, False: 792] ------------------ 122| 0| return std::make_unique(); 123| 0| } 124| | 125| 792| if(algo == "AES-256") { ------------------ | Branch (125:7): [True: 527, False: 265] ------------------ 126| 527| return std::make_unique(); 127| 527| } 128| 265|#endif 129| | 130| 265|#if defined(BOTAN_HAS_ARIA) 131| 265| if(algo == "ARIA-128") { ------------------ | Branch (131:7): [True: 22, False: 243] ------------------ 132| 22| return std::make_unique(); 133| 22| } 134| | 135| 243| if(algo == "ARIA-192") { ------------------ | Branch (135:7): [True: 0, False: 243] ------------------ 136| 0| return std::make_unique(); 137| 0| } 138| | 139| 243| if(algo == "ARIA-256") { ------------------ | Branch (139:7): [True: 26, False: 217] ------------------ 140| 26| return std::make_unique(); 141| 26| } 142| 217|#endif 143| | 144| 217|#if defined(BOTAN_HAS_SERPENT) 145| 217| if(algo == "Serpent") { ------------------ | Branch (145:7): [True: 0, False: 217] ------------------ 146| 0| return std::make_unique(); 147| 0| } 148| 217|#endif 149| | 150| 217|#if defined(BOTAN_HAS_SHACAL2) 151| 217| if(algo == "SHACAL2") { ------------------ | Branch (151:7): [True: 0, False: 217] ------------------ 152| 0| return std::make_unique(); 153| 0| } 154| 217|#endif 155| | 156| 217|#if defined(BOTAN_HAS_TWOFISH) 157| 217| if(algo == "Twofish") { ------------------ | Branch (157:7): [True: 0, False: 217] ------------------ 158| 0| return std::make_unique(); 159| 0| } 160| 217|#endif 161| | 162| 217|#if defined(BOTAN_HAS_THREEFISH_512) 163| 217| if(algo == "Threefish-512") { ------------------ | Branch (163:7): [True: 0, False: 217] ------------------ 164| 0| return std::make_unique(); 165| 0| } 166| 217|#endif 167| | 168| 217|#if defined(BOTAN_HAS_BLOWFISH) 169| 217| if(algo == "Blowfish") { ------------------ | Branch (169:7): [True: 0, False: 217] ------------------ 170| 0| return std::make_unique(); 171| 0| } 172| 217|#endif 173| | 174| 217|#if defined(BOTAN_HAS_CAMELLIA) 175| 217| if(algo == "Camellia-128") { ------------------ | Branch (175:7): [True: 32, False: 185] ------------------ 176| 32| return std::make_unique(); 177| 32| } 178| | 179| 185| if(algo == "Camellia-192") { ------------------ | Branch (179:7): [True: 0, False: 185] ------------------ 180| 0| return std::make_unique(); 181| 0| } 182| | 183| 185| if(algo == "Camellia-256") { ------------------ | Branch (183:7): [True: 35, False: 150] ------------------ 184| 35| return std::make_unique(); 185| 35| } 186| 150|#endif 187| | 188| 150|#if defined(BOTAN_HAS_DES) 189| 150| if(algo == "DES") { ------------------ | Branch (189:7): [True: 0, False: 150] ------------------ 190| 0| return std::make_unique(); 191| 0| } 192| | 193| 150| if(algo == "TripleDES" || algo == "3DES" || algo == "DES-EDE") { ------------------ | Branch (193:7): [True: 0, False: 150] | Branch (193:30): [True: 150, False: 0] | Branch (193:48): [True: 0, False: 0] ------------------ 194| 150| return std::make_unique(); 195| 150| } 196| 0|#endif 197| | 198| 0|#if defined(BOTAN_HAS_NOEKEON) 199| 0| if(algo == "Noekeon") { ------------------ | Branch (199:7): [True: 0, False: 0] ------------------ 200| 0| return std::make_unique(); 201| 0| } 202| 0|#endif 203| | 204| 0|#if defined(BOTAN_HAS_CAST_128) 205| 0| if(algo == "CAST-128" || algo == "CAST5") { ------------------ | Branch (205:7): [True: 0, False: 0] | Branch (205:29): [True: 0, False: 0] ------------------ 206| 0| return std::make_unique(); 207| 0| } 208| 0|#endif 209| | 210| 0|#if defined(BOTAN_HAS_IDEA) 211| 0| if(algo == "IDEA") { ------------------ | Branch (211:7): [True: 0, False: 0] ------------------ 212| 0| return std::make_unique(); 213| 0| } 214| 0|#endif 215| | 216| 0|#if defined(BOTAN_HAS_KUZNYECHIK) 217| 0| if(algo == "Kuznyechik") { ------------------ | Branch (217:7): [True: 0, False: 0] ------------------ 218| 0| return std::make_unique(); 219| 0| } 220| 0|#endif 221| | 222| 0|#if defined(BOTAN_HAS_SEED) 223| 0| if(algo == "SEED") { ------------------ | Branch (223:7): [True: 0, False: 0] ------------------ 224| 0| return std::make_unique(); 225| 0| } 226| 0|#endif 227| | 228| 0|#if defined(BOTAN_HAS_SM4) 229| 0| if(algo == "SM4") { ------------------ | Branch (229:7): [True: 0, False: 0] ------------------ 230| 0| return std::make_unique(); 231| 0| } 232| 0|#endif 233| | 234| 0| const AlgorithmSpec req(algo); 235| | 236| 0|#if defined(BOTAN_HAS_GOST_28147_89) 237| 0| if(auto m = req.match("GOST-28147-89({params:str=R3411_94_TestParam})")) { ------------------ | Branch (237:12): [True: 0, False: 0] ------------------ 238| 0| return std::make_unique(m->str("params")); 239| 0| } 240| 0|#endif 241| | 242| 0|#if defined(BOTAN_HAS_CASCADE) 243| 0| if(auto m = req.match("Cascade({cipher1},{cipher2})")) { ------------------ | Branch (243:12): [True: 0, False: 0] ------------------ 244| 0| auto c1 = BlockCipher::create(m->str("cipher1")); 245| 0| auto c2 = BlockCipher::create(m->str("cipher2")); 246| | 247| 0| if(c1 && c2) { ------------------ | Branch (247:10): [True: 0, False: 0] | Branch (247:16): [True: 0, False: 0] ------------------ 248| 0| return std::make_unique(std::move(c1), std::move(c2)); 249| 0| } 250| 0| } 251| 0|#endif 252| | 253| 0|#if defined(BOTAN_HAS_LION) 254| 0| if(auto m = req.match("Lion({hash},{stream},{block_size:int=1024})")) { ------------------ | Branch (254:12): [True: 0, False: 0] ------------------ 255| 0| auto hash = HashFunction::create(m->str("hash")); 256| 0| auto stream = StreamCipher::create(m->str("stream")); 257| | 258| 0| if(hash && stream) { ------------------ | Branch (258:10): [True: 0, False: 0] | Branch (258:18): [True: 0, False: 0] ------------------ 259| 0| return std::make_unique(std::move(hash), std::move(stream), m->integer("block_size")); 260| 0| } 261| 0| } 262| 0|#endif 263| | 264| 0| BOTAN_UNUSED(req); ------------------ | | 151| 0|#define BOTAN_UNUSED Botan::ignore_params ------------------ 265| 0| BOTAN_UNUSED(provider); ------------------ | | 151| 0|#define BOTAN_UNUSED Botan::ignore_params ------------------ 266| | 267| 0| return nullptr; 268| 0|} _ZN5Botan11BlockCipher15create_or_throwENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_: 271| 273|std::unique_ptr BlockCipher::create_or_throw(std::string_view algo, std::string_view provider) { 272| 273| if(auto bc = BlockCipher::create(algo, provider)) { ------------------ | Branch (272:12): [True: 273, False: 0] ------------------ 273| 273| return bc; 274| 273| } 275| 0| throw Lookup_Error("Block cipher", algo, provider); 276| 273|} _ZNK5Botan12Camellia_1289encrypt_nEPKhPhm: 431| 229|void Camellia_128::encrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 432| 229| assert_key_material_set(); 433| | 434| 229|#if defined(BOTAN_HAS_CAMELLIA_AVX512_GFNI) 435| 229| if(CPUID::has(CPUID::Feature::AVX512, CPUID::Feature::GFNI)) { ------------------ | Branch (435:7): [True: 0, False: 229] ------------------ 436| 0| return avx512_gfni_encrypt(in, out, blocks, m_SK); 437| 0| } 438| 229|#endif 439| | 440| 229|#if defined(BOTAN_HAS_CAMELLIA_AVX2_GFNI) 441| 229| if(CPUID::has(CPUID::Feature::GFNI)) { ------------------ | Branch (441:7): [True: 0, False: 229] ------------------ 442| 0| return avx2_gfni_encrypt(in, out, blocks, m_SK); 443| 0| } 444| 229|#endif 445| | 446| 229|#if defined(BOTAN_HAS_CAMELLIA_HWAES) 447| 229| if(CPUID::has(CPUID::Feature::HW_AES)) { ------------------ | Branch (447:7): [True: 229, False: 0] ------------------ 448| 229| return hwaes_encrypt(in, out, blocks, m_SK); 449| 229| } 450| 0|#endif 451| | 452| 0| Camellia_F::encrypt(in, out, blocks, m_SK, 9); 453| 0|} _ZNK5Botan12Camellia_2569encrypt_nEPKhPhm: 479| 216|void Camellia_256::encrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 480| 216| assert_key_material_set(); 481| | 482| 216|#if defined(BOTAN_HAS_CAMELLIA_AVX512_GFNI) 483| 216| if(CPUID::has(CPUID::Feature::AVX512, CPUID::Feature::GFNI)) { ------------------ | Branch (483:7): [True: 0, False: 216] ------------------ 484| 0| return avx512_gfni_encrypt(in, out, blocks, m_SK); 485| 0| } 486| 216|#endif 487| | 488| 216|#if defined(BOTAN_HAS_CAMELLIA_AVX2_GFNI) 489| 216| if(CPUID::has(CPUID::Feature::GFNI)) { ------------------ | Branch (489:7): [True: 0, False: 216] ------------------ 490| 0| return avx2_gfni_encrypt(in, out, blocks, m_SK); 491| 0| } 492| 216|#endif 493| | 494| 216|#if defined(BOTAN_HAS_CAMELLIA_HWAES) 495| 216| if(CPUID::has(CPUID::Feature::HW_AES)) { ------------------ | Branch (495:7): [True: 216, False: 0] ------------------ 496| 216| return hwaes_encrypt(in, out, blocks, m_SK); 497| 216| } 498| 0|#endif 499| | 500| 0| Camellia_F::encrypt(in, out, blocks, m_SK, 12); 501| 0|} _ZNK5Botan12Camellia_12819has_keying_materialEv: 575| 457|bool Camellia_128::has_keying_material() const { 576| 457| return !m_SK.empty(); 577| 457|} _ZNK5Botan12Camellia_25619has_keying_materialEv: 583| 468|bool Camellia_256::has_keying_material() const { 584| 468| return !m_SK.empty(); 585| 468|} _ZN5Botan12Camellia_12812key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 587| 32|void Camellia_128::key_schedule(std::span key) { 588| 32| Camellia_F::key_schedule(m_SK, key); 589| 32|} _ZN5Botan12Camellia_25612key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 595| 35|void Camellia_256::key_schedule(std::span key) { 596| 35| Camellia_F::key_schedule(m_SK, key); 597| 35|} _ZNK5Botan12Camellia_12811parallelismEv: 623| 64|size_t Camellia_128::parallelism() const { 624| 64| return Camellia_F::parallelism(); 625| 64|} _ZNK5Botan12Camellia_25611parallelismEv: 631| 70|size_t Camellia_256::parallelism() const { 632| 70| return Camellia_F::parallelism(); 633| 70|} camellia.cpp:_ZN5Botan12_GLOBAL__N_110Camellia_F1PEhhhhhhhh: 96| 402|inline uint64_t P(uint8_t z1, uint8_t z2, uint8_t z3, uint8_t z4, uint8_t z5, uint8_t z6, uint8_t z7, uint8_t z8) { 97| 402| constexpr uint64_t M1 = 0x0101010001000001; 98| 402| constexpr uint64_t M2 = 0x0001010101010000; 99| 402| constexpr uint64_t M3 = 0x0100010100010100; 100| 402| constexpr uint64_t M4 = 0x0101000100000101; 101| 402| constexpr uint64_t M5 = 0x0001010100010101; 102| 402| constexpr uint64_t M6 = 0x0100010101000101; 103| 402| constexpr uint64_t M7 = 0x0101000101010001; 104| 402| constexpr uint64_t M8 = 0x0101010001010100; 105| | 106| 402| const uint64_t Z1 = M1 * z1; 107| 402| const uint64_t Z2 = M2 * z2; 108| 402| const uint64_t Z3 = M3 * z3; 109| 402| const uint64_t Z4 = M4 * z4; 110| 402| const uint64_t Z5 = M5 * z5; 111| 402| const uint64_t Z6 = M6 * z6; 112| 402| const uint64_t Z7 = M7 * z7; 113| 402| const uint64_t Z8 = M8 * z8; 114| | 115| 402| return Z1 ^ Z2 ^ Z3 ^ Z4 ^ Z5 ^ Z6 ^ Z7 ^ Z8; 116| 402|} camellia.cpp:_ZN5Botan12_GLOBAL__N_110Camellia_F12key_scheduleERNSt3__16vectorImNS_16secure_allocatorImEEEENS2_4spanIKhLm18446744073709551615EEE: 263| 67|void key_schedule(secure_vector& SK, std::span key) { 264| 67| prefetch_arrays(SBOX1); 265| | 266| 67| constexpr uint64_t Sigma1 = 0xA09E667F3BCC908B; 267| 67| constexpr uint64_t Sigma2 = 0xB67AE8584CAA73B2; 268| 67| constexpr uint64_t Sigma3 = 0xC6EF372FE94F82BE; 269| 67| constexpr uint64_t Sigma4 = 0x54FF53A5F1D36F1C; 270| 67| constexpr uint64_t Sigma5 = 0x10E527FADE682D1D; 271| 67| constexpr uint64_t Sigma6 = 0xB05688C2B3E6C1FD; 272| | 273| 67| const uint64_t KL_H = load_be(key.data(), 0); 274| 67| const uint64_t KL_L = load_be(key.data(), 1); 275| | 276| 67| const uint64_t KR_H = (key.size() >= 24) ? load_be(key.data(), 2) : 0; ------------------ | Branch (276:26): [True: 35, False: 32] ------------------ 277| | 278| 67| const uint64_t KR_L = [&]() -> uint64_t { 279| 67| if(key.size() == 32) { 280| 67| return load_be(key.data(), 3); 281| 67| } else if(key.size() == 24) { 282| 67| return ~KR_H; 283| 67| } else { 284| 67| return 0; 285| 67| } 286| 67| }(); 287| | 288| 67| uint64_t D1 = KL_H ^ KR_H; 289| 67| uint64_t D2 = KL_L ^ KR_L; 290| 67| D2 ^= F_1tab(D1, Sigma1); 291| 67| D1 ^= F_1tab(D2, Sigma2); 292| 67| D1 ^= KL_H; 293| 67| D2 ^= KL_L; 294| 67| D2 ^= F_1tab(D1, Sigma3); 295| 67| D1 ^= F_1tab(D2, Sigma4); 296| | 297| 67| const uint64_t KA_H = D1; 298| 67| const uint64_t KA_L = D2; 299| | 300| 67| D1 = KA_H ^ KR_H; 301| 67| D2 = KA_L ^ KR_L; 302| 67| D2 ^= F_1tab(D1, Sigma5); 303| 67| D1 ^= F_1tab(D2, Sigma6); 304| | 305| 67| const uint64_t KB_H = D1; 306| 67| const uint64_t KB_L = D2; 307| | 308| 67| if(key.size() == 16) { ------------------ | Branch (308:7): [True: 32, False: 35] ------------------ 309| 32| SK.resize(26); 310| | 311| 32| SK[0] = KL_H; 312| 32| SK[1] = KL_L; 313| 32| SK[2] = KA_H; 314| 32| SK[3] = KA_L; 315| 32| SK[4] = left_rot_hi(KL_H, KL_L, 15); 316| 32| SK[5] = left_rot_lo(KL_H, KL_L, 15); 317| 32| SK[6] = left_rot_hi(KA_H, KA_L, 15); 318| 32| SK[7] = left_rot_lo(KA_H, KA_L, 15); 319| 32| SK[8] = left_rot_hi(KA_H, KA_L, 30); 320| 32| SK[9] = left_rot_lo(KA_H, KA_L, 30); 321| 32| SK[10] = left_rot_hi(KL_H, KL_L, 45); 322| 32| SK[11] = left_rot_lo(KL_H, KL_L, 45); 323| 32| SK[12] = left_rot_hi(KA_H, KA_L, 45); 324| 32| SK[13] = left_rot_lo(KL_H, KL_L, 60); 325| 32| SK[14] = left_rot_hi(KA_H, KA_L, 60); 326| 32| SK[15] = left_rot_lo(KA_H, KA_L, 60); 327| 32| SK[16] = left_rot_lo(KL_H, KL_L, 77); 328| 32| SK[17] = left_rot_hi(KL_H, KL_L, 77); 329| 32| SK[18] = left_rot_lo(KL_H, KL_L, 94); 330| 32| SK[19] = left_rot_hi(KL_H, KL_L, 94); 331| 32| SK[20] = left_rot_lo(KA_H, KA_L, 94); 332| 32| SK[21] = left_rot_hi(KA_H, KA_L, 94); 333| 32| SK[22] = left_rot_lo(KL_H, KL_L, 111); 334| 32| SK[23] = left_rot_hi(KL_H, KL_L, 111); 335| 32| SK[24] = left_rot_lo(KA_H, KA_L, 111); 336| 32| SK[25] = left_rot_hi(KA_H, KA_L, 111); 337| 35| } else { 338| 35| SK.resize(34); 339| | 340| 35| SK[0] = KL_H; 341| 35| SK[1] = KL_L; 342| 35| SK[2] = KB_H; 343| 35| SK[3] = KB_L; 344| | 345| 35| SK[4] = left_rot_hi(KR_H, KR_L, 15); 346| 35| SK[5] = left_rot_lo(KR_H, KR_L, 15); 347| 35| SK[6] = left_rot_hi(KA_H, KA_L, 15); 348| 35| SK[7] = left_rot_lo(KA_H, KA_L, 15); 349| | 350| 35| SK[8] = left_rot_hi(KR_H, KR_L, 30); 351| 35| SK[9] = left_rot_lo(KR_H, KR_L, 30); 352| 35| SK[10] = left_rot_hi(KB_H, KB_L, 30); 353| 35| SK[11] = left_rot_lo(KB_H, KB_L, 30); 354| | 355| 35| SK[12] = left_rot_hi(KL_H, KL_L, 45); 356| 35| SK[13] = left_rot_lo(KL_H, KL_L, 45); 357| 35| SK[14] = left_rot_hi(KA_H, KA_L, 45); 358| 35| SK[15] = left_rot_lo(KA_H, KA_L, 45); 359| | 360| 35| SK[16] = left_rot_hi(KL_H, KL_L, 60); 361| 35| SK[17] = left_rot_lo(KL_H, KL_L, 60); 362| 35| SK[18] = left_rot_hi(KR_H, KR_L, 60); 363| 35| SK[19] = left_rot_lo(KR_H, KR_L, 60); 364| 35| SK[20] = left_rot_hi(KB_H, KB_L, 60); 365| 35| SK[21] = left_rot_lo(KB_H, KB_L, 60); 366| | 367| 35| SK[22] = left_rot_lo(KL_H, KL_L, 77); 368| 35| SK[23] = left_rot_hi(KL_H, KL_L, 77); 369| 35| SK[24] = left_rot_lo(KA_H, KA_L, 77); 370| 35| SK[25] = left_rot_hi(KA_H, KA_L, 77); 371| | 372| 35| SK[26] = left_rot_lo(KR_H, KR_L, 94); 373| 35| SK[27] = left_rot_hi(KR_H, KR_L, 94); 374| 35| SK[28] = left_rot_lo(KA_H, KA_L, 94); 375| 35| SK[29] = left_rot_hi(KA_H, KA_L, 94); 376| 35| SK[30] = left_rot_lo(KL_H, KL_L, 111); 377| 35| SK[31] = left_rot_hi(KL_H, KL_L, 111); 378| 35| SK[32] = left_rot_lo(KB_H, KB_L, 111); 379| 35| SK[33] = left_rot_hi(KB_H, KB_L, 111); 380| 35| } 381| 67|} camellia.cpp:_ZZN5Botan12_GLOBAL__N_110Camellia_F12key_scheduleERNSt3__16vectorImNS_16secure_allocatorImEEEENS2_4spanIKhLm18446744073709551615EEEENK3$_0clEv: 278| 67| const uint64_t KR_L = [&]() -> uint64_t { 279| 67| if(key.size() == 32) { ------------------ | Branch (279:10): [True: 35, False: 32] ------------------ 280| 35| return load_be(key.data(), 3); 281| 35| } else if(key.size() == 24) { ------------------ | Branch (281:17): [True: 0, False: 32] ------------------ 282| 0| return ~KR_H; 283| 32| } else { 284| 32| return 0; 285| 32| } 286| 67| }(); camellia.cpp:_ZN5Botan12_GLOBAL__N_110Camellia_F6F_1tabEmm: 131| 402|uint64_t F_1tab(uint64_t v, uint64_t K) { 132| 402| const uint64_t x = v ^ K; 133| | 134| 402| return P(SBOX1[get_byte<0>(x)], 135| 402| rotl<1>(SBOX1[get_byte<1>(x)]), 136| 402| rotl<7>(SBOX1[get_byte<2>(x)]), 137| 402| SBOX1[rotl<1>(get_byte<3>(x))], 138| 402| rotl<1>(SBOX1[get_byte<4>(x)]), 139| 402| rotl<7>(SBOX1[get_byte<5>(x)]), 140| 402| SBOX1[rotl<1>(get_byte<6>(x))], 141| 402| SBOX1[get_byte<7>(x)]); 142| 402|} camellia.cpp:_ZN5Botan12_GLOBAL__N_110Camellia_F11left_rot_hiEmmm: 246| 877|inline uint64_t left_rot_hi(uint64_t h, uint64_t l, size_t shift) { 247| 877| if(shift >= 64) { ------------------ | Branch (247:7): [True: 370, False: 507] ------------------ 248| 370| shift -= 64; 249| 370| } 250| 877| return (h << shift) | (l >> (64 - shift)); 251| 877|} camellia.cpp:_ZN5Botan12_GLOBAL__N_110Camellia_F11left_rot_loEmmm: 253| 877|inline uint64_t left_rot_lo(uint64_t h, uint64_t l, size_t shift) { 254| 877| if(shift >= 64) { ------------------ | Branch (254:7): [True: 370, False: 507] ------------------ 255| 370| shift -= 64; 256| 370| } 257| 877| return (h >> (64 - shift)) | (l << shift); 258| 877|} camellia.cpp:_ZN5Botan12_GLOBAL__N_110Camellia_F11parallelismEv: 405| 134|size_t parallelism() { 406| 134|#if defined(BOTAN_HAS_CAMELLIA_AVX512_GFNI) 407| 134| if(CPUID::has(CPUID::Feature::AVX512, CPUID::Feature::GFNI)) { ------------------ | Branch (407:7): [True: 0, False: 134] ------------------ 408| 0| return 16; 409| 0| } 410| 134|#endif 411| | 412| 134|#if defined(BOTAN_HAS_CAMELLIA_AVX2_GFNI) 413| 134| if(CPUID::has(CPUID::Feature::GFNI)) { ------------------ | Branch (413:7): [True: 0, False: 134] ------------------ 414| 0| return 4; 415| 0| } 416| 134|#endif 417| | 418| 134|#if defined(BOTAN_HAS_CAMELLIA_HWAES) 419| 134| if(CPUID::has(CPUID::Feature::HW_AES)) { ------------------ | Branch (419:7): [True: 134, False: 0] ------------------ 420| 134| return 2; 421| 134| } 422| 0|#endif 423| | 424| 0| return 1; 425| 134|} _ZN5Botan12Camellia_12813hwaes_encryptEPKhPhmNSt3__14spanIKmLm18446744073709551615EEE: 315| 229| std::span SK) { 316| 1.14k| while(blocks >= 2) { ------------------ | Branch (316:10): [True: 916, False: 229] ------------------ 317| 916| Camellia_HWAES::camellia_encrypt_x2_18r(in, out, SK); 318| 916| in += 2 * 16; 319| 916| out += 2 * 16; 320| 916| blocks -= 2; 321| 916| } 322| | 323| 229| if(blocks > 0) { ------------------ | Branch (323:7): [True: 0, False: 229] ------------------ 324| 0| uint8_t ibuf[2 * 16] = {0}; 325| 0| uint8_t obuf[2 * 16] = {0}; 326| 0| copy_mem(ibuf, in, 16); 327| 0| Camellia_HWAES::camellia_encrypt_x2_18r(ibuf, obuf, SK); 328| 0| copy_mem(out, obuf, 16); 329| 0| } 330| 229|} _ZN5Botan12Camellia_25613hwaes_encryptEPKhPhmNSt3__14spanIKmLm18446744073709551615EEE: 399| 216| std::span SK) { 400| 1.08k| while(blocks >= 2) { ------------------ | Branch (400:10): [True: 864, False: 216] ------------------ 401| 864| Camellia_HWAES::camellia_encrypt_x2_24r(in, out, SK); 402| 864| in += 2 * 16; 403| 864| out += 2 * 16; 404| 864| blocks -= 2; 405| 864| } 406| | 407| 216| if(blocks > 0) { ------------------ | Branch (407:7): [True: 0, False: 216] ------------------ 408| 0| uint8_t ibuf[2 * 16] = {0}; 409| 0| uint8_t obuf[2 * 16] = {0}; 410| 0| copy_mem(ibuf, in, 16); 411| 0| Camellia_HWAES::camellia_encrypt_x2_24r(ibuf, obuf, SK); 412| 0| copy_mem(out, obuf, 16); 413| 0| } 414| 216|} camellia_hwaes.cpp:_ZN5Botan14Camellia_HWAES12_GLOBAL__N_123camellia_encrypt_x2_18rEPKhPhNSt3__14spanIKmLm18446744073709551615EEE: 213| 916|BOTAN_FN_ISA_HWAES void camellia_encrypt_x2_18r(const uint8_t in[], uint8_t out[], std::span SK) { 214| 916| SIMD_4x32 L; 215| 916| SIMD_4x32 R; 216| 916| load_and_deinterleave(in, L, R); 217| | 218| 916| L ^= splat64(SK[0]); 219| 916| R ^= splat64(SK[1]); 220| | 221| 916| six_e_rounds(L, R, &SK[2]); 222| 916| L = FL_2(L, SK[8]); 223| 916| R = FLINV_2(R, SK[9]); 224| 916| six_e_rounds(L, R, &SK[10]); 225| 916| L = FL_2(L, SK[16]); 226| 916| R = FLINV_2(R, SK[17]); 227| 916| six_e_rounds(L, R, &SK[18]); 228| | 229| 916| R ^= splat64(SK[24]); 230| 916| L ^= splat64(SK[25]); 231| | 232| 916| interleave_and_store(out, L, R); 233| 916|} camellia_hwaes.cpp:_ZN5Botan14Camellia_HWAES12_GLOBAL__N_121load_and_deinterleaveEPKhRNS_9SIMD_4x32ES5_: 178| 1.78k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES void load_and_deinterleave(const uint8_t in[], SIMD_4x32& L, SIMD_4x32& R) { 179| 1.78k| const auto A = load_be64(in); // block 0: [L0, R0] 180| 1.78k| const auto B = load_be64(in + 16); // block 1: [L1, R1] 181| 1.78k| const auto mask_upper = SIMD_4x32(0x00000000, 0x00000000, 0xFFFFFFFF, 0xFFFFFFFF); 182| 1.78k| L = SIMD_4x32::byte_blend(mask_upper, B.swap_halves(), A); // [L0, L1] 183| 1.78k| R = SIMD_4x32::byte_blend(mask_upper, B, A.swap_halves()); // [R0, R1] 184| 1.78k|} camellia_hwaes.cpp:_ZN5Botan14Camellia_HWAES12_GLOBAL__N_19load_be64EPKh: 20| 3.56k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES SIMD_4x32 load_be64(const uint8_t* in) { 21| 3.56k| const auto bswap64 = SIMD_4x32(0x04050607, 0x00010203, 0x0C0D0E0F, 0x08090A0B); 22| 3.56k| return SIMD_4x32::byte_shuffle(SIMD_4x32::load_le(in), bswap64); 23| 3.56k|} camellia_hwaes.cpp:_ZN5Botan14Camellia_HWAES12_GLOBAL__N_17splat64Em: 30| 44.3k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES SIMD_4x32 splat64(uint64_t v) { 31| 44.3k| const uint32_t lo = static_cast(v); 32| 44.3k| const uint32_t hi = static_cast(v >> 32); 33| 44.3k| return SIMD_4x32(lo, hi, lo, hi); 34| 44.3k|} camellia_hwaes.cpp:_ZN5Botan14Camellia_HWAES12_GLOBAL__N_112six_e_roundsERNS_9SIMD_4x32ES3_PKm: 195| 6.20k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES void six_e_rounds(SIMD_4x32& L, SIMD_4x32& R, const uint64_t SK[]) { 196| 6.20k| R ^= camellia_f(L ^ splat64(SK[0])); 197| 6.20k| L ^= camellia_f(R ^ splat64(SK[1])); 198| 6.20k| R ^= camellia_f(L ^ splat64(SK[2])); 199| 6.20k| L ^= camellia_f(R ^ splat64(SK[3])); 200| 6.20k| R ^= camellia_f(L ^ splat64(SK[4])); 201| 6.20k| L ^= camellia_f(R ^ splat64(SK[5])); 202| 6.20k|} camellia_hwaes.cpp:_ZN5Botan14Camellia_HWAES12_GLOBAL__N_110camellia_fENS_9SIMD_4x32E: 37| 37.2k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES SIMD_4x32 camellia_f(SIMD_4x32 x) { 38| | // Pre-affine shared by S1/S2/S3 39| 37.2k| constexpr uint64_t pre123_a = gfni_matrix(R"( 40| 37.2k| 1 1 1 0 1 1 0 1 41| 37.2k| 0 0 1 1 0 0 1 0 42| 37.2k| 1 1 0 1 0 0 0 0 43| 37.2k| 1 0 1 1 0 0 1 1 44| 37.2k| 0 0 0 0 1 1 0 0 45| 37.2k| 1 0 1 0 0 1 0 0 46| 37.2k| 0 0 1 0 1 1 0 0 47| 37.2k| 1 0 0 0 0 1 1 0)"); 48| | 49| | // Pre-affine for S4 50| 37.2k| constexpr uint64_t pre4_a = gfni_matrix(R"( 51| 37.2k| 1 1 0 1 1 0 1 1 52| 37.2k| 0 1 1 0 0 1 0 0 53| 37.2k| 1 0 1 0 0 0 0 1 54| 37.2k| 0 1 1 0 0 1 1 1 55| 37.2k| 0 0 0 1 1 0 0 0 56| 37.2k| 0 1 0 0 1 0 0 1 57| 37.2k| 0 1 0 1 1 0 0 0 58| 37.2k| 0 0 0 0 1 1 0 1)"); 59| | 60| 37.2k| constexpr uint8_t pre_c = 0x45; 61| | 62| | // Post-affine for S1 and S4 63| 37.2k| constexpr uint64_t post14_a = gfni_matrix(R"( 64| 37.2k| 0 0 0 0 0 0 0 1 65| 37.2k| 0 1 1 0 0 1 1 0 66| 37.2k| 1 0 1 1 1 1 1 0 67| 37.2k| 0 0 0 1 1 0 1 1 68| 37.2k| 1 0 0 0 1 1 1 0 69| 37.2k| 0 1 0 1 1 1 1 0 70| 37.2k| 0 1 1 1 1 1 1 1 71| 37.2k| 0 0 0 1 1 1 0 0)"); 72| 37.2k| constexpr uint8_t post14_c = 0x6E; 73| | 74| | // Post-affine for S2 75| 37.2k| constexpr uint64_t post2_a = gfni_matrix(R"( 76| 37.2k| 0 0 0 1 1 1 0 0 77| 37.2k| 0 0 0 0 0 0 0 1 78| 37.2k| 0 1 1 0 0 1 1 0 79| 37.2k| 1 0 1 1 1 1 1 0 80| 37.2k| 0 0 0 1 1 0 1 1 81| 37.2k| 1 0 0 0 1 1 1 0 82| 37.2k| 0 1 0 1 1 1 1 0 83| 37.2k| 0 1 1 1 1 1 1 1)"); 84| 37.2k| constexpr uint8_t post2_c = 0xDC; 85| | 86| | // Post-affine for S3 87| 37.2k| constexpr uint64_t post3_a = gfni_matrix(R"( 88| 37.2k| 0 1 1 0 0 1 1 0 89| 37.2k| 1 0 1 1 1 1 1 0 90| 37.2k| 0 0 0 1 1 0 1 1 91| 37.2k| 1 0 0 0 1 1 1 0 92| 37.2k| 0 1 0 1 1 1 1 0 93| 37.2k| 0 1 1 1 1 1 1 1 94| 37.2k| 0 0 0 1 1 1 0 0 95| 37.2k| 0 0 0 0 0 0 0 1)"); 96| 37.2k| constexpr uint8_t post3_c = 0x37; 97| | 98| 37.2k| constexpr auto PRE123 = Gf2AffineTransformation(pre123_a, pre_c); 99| 37.2k| constexpr auto PRE4 = Gf2AffineTransformation(pre4_a, pre_c); 100| 37.2k| constexpr auto POST14 = Gf2AffineTransformation::post_sbox(post14_a, post14_c); 101| 37.2k| constexpr auto POST2 = Gf2AffineTransformation::post_sbox(post2_a, post2_c); 102| 37.2k| constexpr auto POST3 = Gf2AffineTransformation::post_sbox(post3_a, post3_c); 103| | 104| 37.2k| const auto mask_s2 = SIMD_4x32(0xFF000000, 0x00FF0000, 0xFF000000, 0x00FF0000); 105| 37.2k| const auto mask_s3 = SIMD_4x32(0x00FF0000, 0x0000FF00, 0x00FF0000, 0x0000FF00); 106| 37.2k| const auto mask_s4 = SIMD_4x32(0x0000FF00, 0x000000FF, 0x0000FF00, 0x000000FF); 107| | 108| 37.2k| const auto pre123 = PRE123.affine_transform(x); 109| 37.2k| const auto pre4 = PRE4.affine_transform(x); 110| | 111| 37.2k| const auto sub = hw_aes_sbox(SIMD_4x32::byte_blend(mask_s4, pre4, pre123)); 112| | 113| 37.2k| const auto s14 = POST14.affine_transform(sub); 114| 37.2k| const auto s2 = POST2.affine_transform(sub); 115| 37.2k| const auto s3 = POST3.affine_transform(sub); 116| | 117| | // Final merged Sbox output for all bytes 118| 37.2k| const auto sbox = SIMD_4x32::byte_blend(mask_s3, s3, SIMD_4x32::byte_blend(mask_s2, s2, s14)); 119| | 120| | // The linear mixing step 121| 37.2k| const auto P1 = SIMD_4x32(0x00000001, 0x00000001, 0x08080809, 0x08080809); 122| 37.2k| const auto P2 = SIMD_4x32(0x01010202, 0x01010202, 0x09090A0A, 0x09090A0A); 123| 37.2k| const auto P3 = SIMD_4x32(0x02030303, 0x02030303, 0x0A0B0B0B, 0x0A0B0B0B); 124| 37.2k| const auto P4 = SIMD_4x32(0x06050404, 0x04040504, 0x0E0D0C0C, 0x0C0C0D0C); 125| 37.2k| const auto P5 = SIMD_4x32(0x07060507, 0x05060605, 0x0F0E0D0F, 0x0D0E0E0D); 126| 37.2k| const auto P6 = SIMD_4x32(0xFFFFFFFF, 0x07070706, 0xFFFFFFFF, 0x0F0F0F0E); 127| | 128| 37.2k| const auto sxp1 = SIMD_4x32::byte_shuffle(sbox, P1); 129| 37.2k| const auto sxp2 = SIMD_4x32::byte_shuffle(sbox, P2); 130| 37.2k| const auto sxp3 = SIMD_4x32::byte_shuffle(sbox, P3); 131| 37.2k| const auto sxp4 = SIMD_4x32::byte_shuffle(sbox, P4); 132| 37.2k| const auto sxp5 = SIMD_4x32::byte_shuffle(sbox, P5); 133| 37.2k| const auto sxp6 = SIMD_4x32::masked_byte_shuffle(sbox, P6); 134| | 135| 37.2k| return (sxp1 ^ sxp2 ^ sxp3 ^ sxp4 ^ sxp5 ^ sxp6); 136| 37.2k|} camellia_hwaes.cpp:_ZN5Botan14Camellia_HWAES12_GLOBAL__N_14FL_2ENS_9SIMD_4x32Em: 142| 4.42k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES SIMD_4x32 FL_2(SIMD_4x32 v, uint64_t K) { 143| 4.42k| const uint32_t k1 = static_cast(K >> 32); 144| 4.42k| const uint32_t k2 = static_cast(K); 145| | 146| | // Broadcast upper/lower 32-bit halves of each 64-bit element 147| 4.42k| const auto shuf_hi = SIMD_4x32(0x07060504, 0x07060504, 0x0F0E0D0C, 0x0F0E0D0C); 148| 4.42k| const auto shuf_lo = SIMD_4x32(0x03020100, 0x03020100, 0x0B0A0908, 0x0B0A0908); 149| | 150| 4.42k| auto x1 = SIMD_4x32::byte_shuffle(v, shuf_hi); 151| 4.42k| auto x2 = SIMD_4x32::byte_shuffle(v, shuf_lo); 152| | 153| 4.42k| x2 ^= (x1 & SIMD_4x32::splat(k1)).rotl<1>(); 154| 4.42k| x1 ^= x2 | SIMD_4x32::splat(k2); 155| | 156| | // Recombine: lo from x2, hi from x1 157| 4.42k| const auto mask_hi = SIMD_4x32(0x00000000, 0xFFFFFFFF, 0x00000000, 0xFFFFFFFF); 158| 4.42k| return SIMD_4x32::byte_blend(mask_hi, x1, x2); 159| 4.42k|} camellia_hwaes.cpp:_ZN5Botan14Camellia_HWAES12_GLOBAL__N_17FLINV_2ENS_9SIMD_4x32Em: 161| 4.42k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES SIMD_4x32 FLINV_2(SIMD_4x32 v, uint64_t K) { 162| 4.42k| const uint32_t k1 = static_cast(K >> 32); 163| 4.42k| const uint32_t k2 = static_cast(K); 164| | 165| 4.42k| const auto shuf_hi = SIMD_4x32(0x07060504, 0x07060504, 0x0F0E0D0C, 0x0F0E0D0C); 166| 4.42k| const auto shuf_lo = SIMD_4x32(0x03020100, 0x03020100, 0x0B0A0908, 0x0B0A0908); 167| | 168| 4.42k| auto x1 = SIMD_4x32::byte_shuffle(v, shuf_hi); 169| 4.42k| auto x2 = SIMD_4x32::byte_shuffle(v, shuf_lo); 170| | 171| 4.42k| x1 ^= x2 | SIMD_4x32::splat(k2); 172| 4.42k| x2 ^= (x1 & SIMD_4x32::splat(k1)).rotl<1>(); 173| | 174| 4.42k| const auto mask_hi = SIMD_4x32(0x00000000, 0xFFFFFFFF, 0x00000000, 0xFFFFFFFF); 175| 4.42k| return SIMD_4x32::byte_blend(mask_hi, x1, x2); 176| 4.42k|} camellia_hwaes.cpp:_ZN5Botan14Camellia_HWAES12_GLOBAL__N_120interleave_and_storeEPhNS_9SIMD_4x32ES3_: 186| 1.78k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES void interleave_and_store(uint8_t out[], SIMD_4x32 L, SIMD_4x32 R) { 187| | // Camellia output swaps L and R 188| 1.78k| const auto mask_upper = SIMD_4x32(0x00000000, 0x00000000, 0xFFFFFFFF, 0xFFFFFFFF); 189| 1.78k| const auto A = SIMD_4x32::byte_blend(mask_upper, L.swap_halves(), R); // [R0, L0] 190| 1.78k| const auto B = SIMD_4x32::byte_blend(mask_upper, L, R.swap_halves()); // [R1, L1] 191| 1.78k| store_be64(out, A); 192| 1.78k| store_be64(out + 16, B); 193| 1.78k|} camellia_hwaes.cpp:_ZN5Botan14Camellia_HWAES12_GLOBAL__N_110store_be64EPhNS_9SIMD_4x32E: 25| 3.56k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_HWAES void store_be64(uint8_t* out, SIMD_4x32 v) { 26| 3.56k| const auto bswap64 = SIMD_4x32(0x04050607, 0x00010203, 0x0C0D0E0F, 0x08090A0B); 27| 3.56k| SIMD_4x32::byte_shuffle(v, bswap64).store_le(out); 28| 3.56k|} camellia_hwaes.cpp:_ZN5Botan14Camellia_HWAES12_GLOBAL__N_123camellia_encrypt_x2_24rEPKhPhNSt3__14spanIKmLm18446744073709551615EEE: 257| 864|BOTAN_FN_ISA_HWAES void camellia_encrypt_x2_24r(const uint8_t in[], uint8_t out[], std::span SK) { 258| 864| SIMD_4x32 L; 259| 864| SIMD_4x32 R; 260| 864| load_and_deinterleave(in, L, R); 261| | 262| 864| L ^= splat64(SK[0]); 263| 864| R ^= splat64(SK[1]); 264| | 265| 864| six_e_rounds(L, R, &SK[2]); 266| 864| L = FL_2(L, SK[8]); 267| 864| R = FLINV_2(R, SK[9]); 268| 864| six_e_rounds(L, R, &SK[10]); 269| 864| L = FL_2(L, SK[16]); 270| 864| R = FLINV_2(R, SK[17]); 271| 864| six_e_rounds(L, R, &SK[18]); 272| 864| L = FL_2(L, SK[24]); 273| 864| R = FLINV_2(R, SK[25]); 274| 864| six_e_rounds(L, R, &SK[26]); 275| | 276| 864| R ^= splat64(SK[32]); 277| 864| L ^= splat64(SK[33]); 278| | 279| 864| interleave_and_store(out, L, R); 280| 864|} _ZNK5Botan9TripleDES9encrypt_nEPKhPhm: 769| 740|void TripleDES::encrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 770| 740| assert_key_material_set(); 771| | 772| 740| const uint32_t* k1 = m_round_key.data(); 773| 740| const uint32_t* k2 = k1 + 16 * 48; 774| 740| const uint32_t* k3 = k2 + 16 * 48; 775| | 776| 740| uint32_t B[64]; 777| | 778| 740| while(blocks >= 32) { ------------------ | Branch (778:10): [True: 0, False: 740] ------------------ 779| 0| transpose_in(B, in, 32); 780| 0| des_encrypt(&B[0], &B[32], k1); 781| 0| des_decrypt(&B[32], &B[0], k2); 782| 0| des_encrypt(&B[0], &B[32], k3); 783| 0| transpose_out(out, B, 32); 784| | 785| 0| in += 32 * BLOCK_SIZE; 786| 0| out += 32 * BLOCK_SIZE; 787| 0| blocks -= 32; 788| 0| } 789| | 790| 740| if(blocks > 0) { ------------------ | Branch (790:7): [True: 740, False: 0] ------------------ 791| 740| transpose_in(B, in, blocks); 792| 740| des_encrypt(&B[0], &B[32], k1); 793| 740| des_decrypt(&B[32], &B[0], k2); 794| 740| des_encrypt(&B[0], &B[32], k3); 795| 740| transpose_out(out, B, blocks); 796| 740| } 797| 740|} _ZNK5Botan9TripleDES9decrypt_nEPKhPhm: 802| 95|void TripleDES::decrypt_n(const uint8_t in[], uint8_t out[], size_t blocks) const { 803| 95| assert_key_material_set(); 804| | 805| 95| const uint32_t* k1 = m_round_key.data(); 806| 95| const uint32_t* k2 = k1 + 16 * 48; 807| 95| const uint32_t* k3 = k2 + 16 * 48; 808| | 809| 95| uint32_t B[64]; 810| | 811| 361| while(blocks >= 32) { ------------------ | Branch (811:10): [True: 266, False: 95] ------------------ 812| 266| transpose_in(B, in, 32); 813| 266| des_decrypt(&B[0], &B[32], k3); 814| 266| des_encrypt(&B[32], &B[0], k2); 815| 266| des_decrypt(&B[0], &B[32], k1); 816| 266| transpose_out(out, B, 32); 817| | 818| 266| in += 32 * BLOCK_SIZE; 819| 266| out += 32 * BLOCK_SIZE; 820| 266| blocks -= 32; 821| 266| } 822| | 823| 95| if(blocks > 0) { ------------------ | Branch (823:7): [True: 36, False: 59] ------------------ 824| 36| transpose_in(B, in, blocks); 825| 36| des_decrypt(&B[0], &B[32], k3); 826| 36| des_encrypt(&B[32], &B[0], k2); 827| 36| des_decrypt(&B[0], &B[32], k1); 828| 36| transpose_out(out, B, blocks); 829| 36| } 830| 95|} _ZNK5Botan9TripleDES19has_keying_materialEv: 832| 835|bool TripleDES::has_keying_material() const { 833| 835| return !m_round_key.empty(); 834| 835|} _ZN5Botan9TripleDES12key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 839| 150|void TripleDES::key_schedule(std::span key) { 840| 150| m_round_key.resize(3 * 16 * 48); 841| 150| des_key_schedule(m_round_key.data(), key.first(8).data()); 842| 150| des_key_schedule(m_round_key.data() + 16 * 48, key.subspan(8, 8).data()); 843| | 844| 150| if(key.size() == 24) { ------------------ | Branch (844:7): [True: 150, False: 0] ------------------ 845| 150| des_key_schedule(m_round_key.data() + 2 * 16 * 48, key.last(8).data()); 846| 150| } else { 847| 0| copy_mem(m_round_key.data() + 2 * 16 * 48, m_round_key.data(), 16 * 48); 848| 0| } 849| 150|} des.cpp:_ZN5Botan12_GLOBAL__N_112transpose_inEPjPKhm: 537| 1.04k|void transpose_in(uint32_t B[64], const uint8_t in[], size_t n_blocks) { 538| 1.04k| uint64_t M[32] = {}; 539| | 540| 1.04k| load_be(M, in, n_blocks); 541| | 542| 1.04k| des_transpose(M); 543| | 544| | // clang-format off 545| 1.04k| static constexpr uint8_t IP[64] = { 546| 1.04k| 57, 49, 41, 33, 25, 17, 9, 1, 547| 1.04k| 59, 51, 43, 35, 27, 19, 11, 3, 548| 1.04k| 61, 53, 45, 37, 29, 21, 13, 5, 549| 1.04k| 63, 55, 47, 39, 31, 23, 15, 7, 550| 1.04k| 56, 48, 40, 32, 24, 16, 8, 0, 551| 1.04k| 58, 50, 42, 34, 26, 18, 10, 2, 552| 1.04k| 60, 52, 44, 36, 28, 20, 12, 4, 553| 1.04k| 62, 54, 46, 38, 30, 22, 14, 6 554| 1.04k| }; 555| | // clang-format on 556| | 557| 67.7k| for(size_t i = 0; i < 64; ++i) { ------------------ | Branch (557:22): [True: 66.6k, False: 1.04k] ------------------ 558| 66.6k| const uint8_t src = IP[i]; 559| 66.6k| if(src < 32) { ------------------ | Branch (559:10): [True: 33.3k, False: 33.3k] ------------------ 560| 33.3k| B[i] = static_cast(M[31 - src] >> 32); 561| 33.3k| } else { 562| 33.3k| B[i] = static_cast(M[63 - src]); 563| 33.3k| } 564| 66.6k| } 565| 1.04k|} des.cpp:_ZN5Botan12_GLOBAL__N_113des_transposeEPm: 509| 2.08k|void des_transpose(uint64_t M[32]) { 510| 35.4k| for(size_t i = 0; i != 16; ++i) { ------------------ | Branch (510:22): [True: 33.3k, False: 2.08k] ------------------ 511| 33.3k| swap_bits(M[i], M[i + 16], 0x0000FFFF0000FFFF, 16); 512| 33.3k| } 513| | 514| 6.25k| for(size_t i = 0; i != 32; i += 16) { ------------------ | Branch (514:22): [True: 4.16k, False: 2.08k] ------------------ 515| 37.5k| for(size_t j = 0; j != 8; ++j) { ------------------ | Branch (515:25): [True: 33.3k, False: 4.16k] ------------------ 516| 33.3k| swap_bits(M[i + j], M[i + j + 8], 0x00FF00FF00FF00FF, 8); 517| 33.3k| } 518| 4.16k| } 519| | 520| 10.4k| for(size_t i = 0; i != 32; i += 8) { ------------------ | Branch (520:22): [True: 8.33k, False: 2.08k] ------------------ 521| 41.6k| for(size_t j = 0; j != 4; ++j) { ------------------ | Branch (521:25): [True: 33.3k, False: 8.33k] ------------------ 522| 33.3k| swap_bits(M[i + j + 0], M[i + j + 4], 0x0F0F0F0F0F0F0F0F, 4); 523| 33.3k| } 524| 8.33k| } 525| | 526| 18.7k| for(size_t i = 0; i != 32; i += 4) { ------------------ | Branch (526:22): [True: 16.6k, False: 2.08k] ------------------ 527| 50.0k| for(size_t j = 0; j != 2; ++j) { ------------------ | Branch (527:25): [True: 33.3k, False: 16.6k] ------------------ 528| 33.3k| swap_bits(M[i + j + 0], M[i + j + 2], 0x3333333333333333, 2); 529| 33.3k| } 530| 16.6k| } 531| | 532| 35.4k| for(size_t i = 0; i != 32; i += 2) { ------------------ | Branch (532:22): [True: 33.3k, False: 2.08k] ------------------ 533| 33.3k| swap_bits(M[i], M[i + 1], 0x5555555555555555, 1); 534| 33.3k| } 535| 2.08k|} des.cpp:_ZN5Botan12_GLOBAL__N_111des_encryptEPjS1_PKj: 638| 1.78k|void des_encrypt(uint32_t L[32], uint32_t R[32], const uint32_t round_key[]) { 639| 16.0k| for(size_t round = 0; round < 16; round += 2) { ------------------ | Branch (639:26): [True: 14.2k, False: 1.78k] ------------------ 640| 14.2k| des_round(L, R, &round_key[round * 48]); 641| 14.2k| des_round(R, L, &round_key[(round + 1) * 48]); 642| 14.2k| } 643| 1.78k|} des.cpp:_ZN5Botan12_GLOBAL__N_19des_roundEPjPKjS3_: 602| 50.0k|void des_round(uint32_t L[32], const uint32_t R[32], const uint32_t RK[48]) { 603| | // clang-format off 604| 50.0k| SBox1(R[31] ^ RK[ 0], R[ 0] ^ RK[ 1], R[ 1] ^ RK[ 2], 605| 50.0k| R[ 2] ^ RK[ 3], R[ 3] ^ RK[ 4], R[ 4] ^ RK[ 5], 606| 50.0k| L[ 8], L[16], L[22], L[30]); 607| | 608| 50.0k| SBox2(R[ 3] ^ RK[ 6], R[ 4] ^ RK[ 7], R[ 5] ^ RK[ 8], 609| 50.0k| R[ 6] ^ RK[ 9], R[ 7] ^ RK[10], R[ 8] ^ RK[11], 610| 50.0k| L[12], L[27], L[ 1], L[17]); 611| | 612| 50.0k| SBox3(R[ 7] ^ RK[12], R[ 8] ^ RK[13], R[ 9] ^ RK[14], 613| 50.0k| R[10] ^ RK[15], R[11] ^ RK[16], R[12] ^ RK[17], 614| 50.0k| L[23], L[15], L[29], L[ 5]); 615| | 616| 50.0k| SBox4(R[11] ^ RK[18], R[12] ^ RK[19], R[13] ^ RK[20], 617| 50.0k| R[14] ^ RK[21], R[15] ^ RK[22], R[16] ^ RK[23], 618| 50.0k| L[25], L[19], L[ 9], L[ 0]); 619| | 620| 50.0k| SBox5(R[15] ^ RK[24], R[16] ^ RK[25], R[17] ^ RK[26], 621| 50.0k| R[18] ^ RK[27], R[19] ^ RK[28], R[20] ^ RK[29], 622| 50.0k| L[ 7], L[13], L[24], L[ 2]); 623| | 624| 50.0k| SBox6(R[19] ^ RK[30], R[20] ^ RK[31], R[21] ^ RK[32], 625| 50.0k| R[22] ^ RK[33], R[23] ^ RK[34], R[24] ^ RK[35], 626| 50.0k| L[ 3], L[28], L[10], L[18]); 627| | 628| 50.0k| SBox7(R[23] ^ RK[36], R[24] ^ RK[37], R[25] ^ RK[38], 629| 50.0k| R[26] ^ RK[39], R[27] ^ RK[40], R[28] ^ RK[41], 630| 50.0k| L[31], L[11], L[21], L[ 6]); 631| | 632| 50.0k| SBox8(R[27] ^ RK[42], R[28] ^ RK[43], R[29] ^ RK[44], 633| 50.0k| R[30] ^ RK[45], R[31] ^ RK[46], R[ 0] ^ RK[47], 634| 50.0k| L[ 4], L[26], L[14], L[20]); 635| | // clang-format on 636| 50.0k|} des.cpp:_ZN5Botan12_GLOBAL__N_15SBox1ITkNS0_9BitsliceTEjEEvT_S2_S2_S2_S2_S2_RS2_S3_S3_S3_: 38| 50.0k|BOTAN_FORCE_INLINE void SBox1(T a1, T a2, T a3, T a4, T a5, T a6, T& out1, T& out2, T& out3, T& out4) { 39| 50.0k| const T x1 = a1 & ~a5; 40| 50.0k| const T x2 = a4 ^ x1; 41| 50.0k| const T x3 = a3 | a6; 42| 50.0k| const T x4 = a1 ^ a3; 43| 50.0k| const T x5 = x3 & x4; 44| 50.0k| const T x6 = a4 ^ x5; 45| 50.0k| const T x7 = x6 & ~x2; 46| | 47| 50.0k| const T x8 = a5 ^ a6; 48| 50.0k| const T x9 = a3 ^ x8; 49| 50.0k| const T x10 = x2 & ~x9; 50| 50.0k| const T x11 = a6 | x5; 51| 50.0k| const T x12 = x10 ^ x11; 52| 50.0k| const T x13 = x12 & ~x7; 53| | 54| 50.0k| const T x14 = a1 | a6; 55| 50.0k| const T x15 = x12 | x14; 56| 50.0k| const T x16 = a5 & ~x6; 57| 50.0k| const T x17 = x15 ^ x16; 58| | 59| 50.0k| const T x18 = a4 & ~x14; 60| 50.0k| const T x19 = x16 ^ x18; 61| 50.0k| const T x20 = x8 & ~x4; 62| 50.0k| const T x21 = x19 | x20; 63| | 64| 50.0k| const T x22 = a3 & ~x1; 65| 50.0k| const T x23 = x2 ^ x15; 66| 50.0k| const T x24 = x23 & ~x22; 67| 50.0k| const T x25 = ~x24; 68| 50.0k| const T x26 = x3 & x12; 69| 50.0k| const T x27 = x25 ^ x26; 70| 50.0k| const T x28 = x17 & ~a2; 71| 50.0k| const T x29 = x28 ^ x27; 72| 50.0k| out3 ^= x29; 73| | 74| 50.0k| const T x30 = x8 ^ x24; 75| 50.0k| const T x31 = x16 | x30; 76| 50.0k| const T x32 = x3 ^ x31; 77| 50.0k| const T x33 = a1 ^ x32; 78| 50.0k| const T x34 = x27 ^ x33; 79| 50.0k| const T x35 = x7 | a2; 80| 50.0k| const T x36 = x35 ^ x34; 81| 50.0k| out1 ^= x36; 82| | 83| 50.0k| const T x37 = x2 & ~x21; 84| 50.0k| const T x38 = x30 ^ x37; 85| 50.0k| const T x39 = x16 ^ x32; 86| 50.0k| const T x40 = x34 & ~x39; 87| 50.0k| const T x41 = x38 ^ x40; 88| 50.0k| const T x42 = a2 & ~x13; 89| 50.0k| const T x43 = x42 ^ x41; 90| 50.0k| out2 ^= x43; 91| | 92| 50.0k| const T x44 = x9 ^ x20; 93| 50.0k| const T x45 = x14 ^ x40; 94| 50.0k| const T x46 = x45 & ~x44; 95| 50.0k| const T x47 = x41 ^ x46; 96| 50.0k| const T x48 = x47 | a2; 97| 50.0k| const T x49 = x48 ^ x21; 98| 50.0k| out4 ^= x49; 99| 50.0k|} des.cpp:_ZN5Botan12_GLOBAL__N_15SBox2ITkNS0_9BitsliceTEjEEvT_S2_S2_S2_S2_S2_RS2_S3_S3_S3_: 102| 50.0k|BOTAN_FORCE_INLINE void SBox2(T a1, T a2, T a3, T a4, T a5, T a6, T& out1, T& out2, T& out3, T& out4) { 103| 50.0k| const T x1 = a2 ^ a5; 104| | 105| 50.0k| const T x2 = a1 & ~a6; 106| 50.0k| const T x3 = a5 & ~x2; 107| 50.0k| const T x4 = a2 | x3; 108| | 109| 50.0k| const T x5 = x1 & ~a6; 110| 50.0k| const T x6 = a1 & x1; 111| 50.0k| const T x7 = a5 ^ x6; 112| 50.0k| const T x8 = x7 & ~x5; 113| | 114| 50.0k| const T x9 = a3 & a6; 115| 50.0k| const T x10 = x3 ^ x5; 116| 50.0k| const T x11 = x4 & x10; 117| 50.0k| const T x12 = x11 & ~x9; 118| | 119| 50.0k| const T x13 = a3 & x11; 120| 50.0k| const T x14 = ~a1; 121| 50.0k| const T x15 = x13 ^ x14; 122| 50.0k| const T x16 = a6 ^ x1; 123| 50.0k| const T x17 = x16 & ~x9; 124| 50.0k| const T x18 = x15 ^ x17; 125| 50.0k| const T x19 = a4 & ~x12; 126| 50.0k| const T x20 = x19 ^ x18; 127| 50.0k| out2 ^= x20; 128| | 129| 50.0k| const T x21 = a2 & ~x17; 130| 50.0k| const T x22 = x7 ^ x21; 131| 50.0k| const T x23 = x15 & ~x22; 132| 50.0k| const T x24 = a3 ^ x16; 133| 50.0k| const T x25 = x23 ^ x24; 134| 50.0k| const T x26 = x4 & ~a4; 135| 50.0k| const T x27 = x26 ^ x25; 136| 50.0k| out1 ^= x27; 137| | 138| 50.0k| const T x28 = a2 & ~x9; 139| 50.0k| const T x29 = x24 | x28; 140| 50.0k| const T x30 = x4 ^ x18; 141| 50.0k| const T x31 = x9 | x30; 142| 50.0k| const T x32 = x29 ^ x31; 143| | 144| 50.0k| const T x33 = x11 ^ x18; 145| 50.0k| const T x34 = x25 ^ x33; 146| 50.0k| const T x35 = x31 & x34; 147| 50.0k| const T x36 = x1 & x29; 148| 50.0k| const T x37 = x35 ^ x36; 149| 50.0k| const T x38 = x37 | a4; 150| 50.0k| const T x39 = x38 ^ x32; 151| 50.0k| out3 ^= x39; 152| | 153| 50.0k| const T x40 = x37 & ~x22; 154| 50.0k| const T x41 = x16 | x30; 155| 50.0k| const T x42 = x40 ^ x41; 156| 50.0k| const T x43 = x8 | a4; 157| 50.0k| const T x44 = x43 ^ x42; 158| 50.0k| out4 ^= x44; 159| 50.0k|} des.cpp:_ZN5Botan12_GLOBAL__N_15SBox3ITkNS0_9BitsliceTEjEEvT_S2_S2_S2_S2_S2_RS2_S3_S3_S3_: 162| 50.0k|BOTAN_FORCE_INLINE void SBox3(T a1, T a2, T a3, T a4, T a5, T a6, T& out1, T& out2, T& out3, T& out4) { 163| 50.0k| const T x1 = a1 & ~a2; 164| 50.0k| const T x2 = a3 ^ a6; 165| 50.0k| const T x3 = x1 | x2; 166| 50.0k| const T x4 = a4 ^ a6; 167| 50.0k| const T x5 = x4 & ~a1; 168| 50.0k| const T x6 = x3 ^ x5; 169| | 170| 50.0k| const T x7 = a2 ^ x2; 171| 50.0k| const T x8 = x7 & ~a6; 172| 50.0k| const T x9 = x3 ^ x8; 173| 50.0k| const T x10 = x6 & ~x9; 174| | 175| 50.0k| const T x11 = a6 & x6; 176| 50.0k| const T x12 = a4 | x11; 177| 50.0k| const T x13 = a1 & x12; 178| 50.0k| const T x14 = x7 ^ x13; 179| 50.0k| const T x15 = x6 & ~a5; 180| 50.0k| const T x16 = x15 ^ x14; 181| 50.0k| out4 ^= x16; 182| | 183| 50.0k| const T x17 = x2 & x4; 184| 50.0k| const T x18 = a1 ^ a4; 185| 50.0k| const T x19 = x9 ^ x18; 186| 50.0k| const T x20 = a3 | x19; 187| 50.0k| const T x21 = x20 & ~x17; 188| | 189| 50.0k| const T x22 = x5 | x18; 190| 50.0k| const T x23 = x14 & ~x22; 191| 50.0k| const T x24 = a4 & a6; 192| 50.0k| const T x25 = x24 & ~a2; 193| 50.0k| const T x26 = x23 ^ x25; 194| | 195| 50.0k| const T x27 = x9 & x26; 196| 50.0k| const T x28 = x7 | x24; 197| 50.0k| const T x29 = x28 & ~x27; 198| 50.0k| const T x30 = a1 ^ x29; 199| 50.0k| const T x31 = x21 & a5; 200| 50.0k| const T x32 = x31 ^ x30; 201| 50.0k| out2 ^= x32; 202| | 203| 50.0k| const T x33 = x6 & ~a2; 204| 50.0k| const T x34 = x33 & ~a3; 205| 50.0k| const T x35 = ~x7; 206| 50.0k| const T x36 = x22 ^ x35; 207| 50.0k| const T x37 = x34 ^ x36; 208| 50.0k| const T x38 = a5 & ~x10; 209| 50.0k| const T x39 = x38 ^ x37; 210| 50.0k| out1 ^= x39; 211| | 212| 50.0k| const T x40 = x34 | x36; 213| 50.0k| const T x41 = x5 | x33; 214| 50.0k| const T x42 = x40 ^ x41; 215| 50.0k| const T x43 = a4 & ~x6; 216| 50.0k| const T x44 = x42 | x43; 217| 50.0k| const T x45 = a5 & ~x26; 218| 50.0k| const T x46 = x45 ^ x44; 219| 50.0k| out3 ^= x46; 220| 50.0k|} des.cpp:_ZN5Botan12_GLOBAL__N_15SBox4ITkNS0_9BitsliceTEjEEvT_S2_S2_S2_S2_S2_RS2_S3_S3_S3_: 223| 50.0k|BOTAN_FORCE_INLINE void SBox4(T a1, T a2, T a3, T a4, T a5, T a6, T& out1, T& out2, T& out3, T& out4) { 224| 50.0k| const T x1 = a1 ^ a3; 225| 50.0k| const T x2 = a3 ^ a5; 226| 50.0k| const T x3 = a2 | a4; 227| 50.0k| const T x4 = a5 ^ x3; 228| 50.0k| const T x5 = x2 & ~x4; 229| 50.0k| const T x6 = x2 & ~a2; 230| 50.0k| const T x7 = a4 ^ x6; 231| 50.0k| const T x8 = x1 | x7; 232| 50.0k| const T x9 = x8 & ~x5; 233| 50.0k| const T x10 = a2 ^ x9; 234| | 235| 50.0k| const T x11 = x7 & x10; 236| 50.0k| const T x12 = x2 & ~x11; 237| 50.0k| const T x13 = x1 ^ x10; 238| 50.0k| const T x14 = x13 & ~x12; 239| 50.0k| const T x15 = x5 ^ x14; 240| | 241| 50.0k| const T x16 = a2 ^ a4; 242| 50.0k| const T x17 = a5 | x6; 243| 50.0k| const T x18 = x13 ^ x17; 244| 50.0k| const T x19 = x18 & ~x16; 245| 50.0k| const T x20 = x9 ^ x19; 246| 50.0k| const T x21 = a6 & ~x15; 247| 50.0k| const T x22 = x21 ^ x20; 248| 50.0k| out1 ^= x22; 249| | 250| 50.0k| const T x23 = ~x20; 251| 50.0k| const T x24 = x15 & ~a6; 252| 50.0k| const T x25 = x24 ^ x23; 253| 50.0k| out2 ^= x25; 254| | 255| 50.0k| const T x26 = x15 ^ x23; 256| 50.0k| const T x27 = x26 & ~x16; 257| 50.0k| const T x28 = x11 | x27; 258| 50.0k| const T x29 = x18 ^ x28; 259| 50.0k| const T x30 = x10 | a6; 260| 50.0k| const T x31 = x30 ^ x29; 261| 50.0k| out3 ^= x31; 262| | 263| 50.0k| const T x32 = a6 & x10; 264| 50.0k| const T x33 = x32 ^ x29; 265| 50.0k| out4 ^= x33; 266| 50.0k|} des.cpp:_ZN5Botan12_GLOBAL__N_15SBox5ITkNS0_9BitsliceTEjEEvT_S2_S2_S2_S2_S2_RS2_S3_S3_S3_: 269| 50.0k|BOTAN_FORCE_INLINE void SBox5(T a1, T a2, T a3, T a4, T a5, T a6, T& out1, T& out2, T& out3, T& out4) { 270| 50.0k| const T x1 = a1 | a3; 271| 50.0k| const T x2 = x1 & ~a6; 272| 50.0k| const T x3 = a1 ^ x2; 273| 50.0k| const T x4 = a3 ^ x3; 274| 50.0k| const T x5 = a4 | x4; 275| | 276| 50.0k| const T x6 = x2 & ~a4; 277| 50.0k| const T x7 = a3 ^ x6; 278| 50.0k| const T x8 = a5 & x7; 279| 50.0k| const T x9 = a1 | x4; 280| 50.0k| const T x10 = x8 ^ x9; 281| 50.0k| const T x11 = a4 ^ x10; 282| | 283| 50.0k| const T x12 = a6 ^ x11; 284| 50.0k| const T x13 = x3 | x12; 285| 50.0k| const T x14 = a5 & x13; 286| 50.0k| const T x15 = x3 ^ x14; 287| 50.0k| const T x16 = a4 & x9; 288| 50.0k| const T x17 = x15 ^ x16; 289| | 290| 50.0k| const T x18 = x13 & ~a1; 291| 50.0k| const T x19 = x7 ^ x18; 292| 50.0k| const T x20 = a5 ^ x5; 293| 50.0k| const T x21 = x20 & ~x19; 294| 50.0k| const T x22 = ~x21; 295| 50.0k| const T x23 = x22 & ~a2; 296| 50.0k| const T x24 = x23 ^ x11; 297| 50.0k| out3 ^= x24; 298| | 299| 50.0k| const T x25 = x7 & ~x14; 300| 50.0k| const T x26 = x18 ^ x20; 301| 50.0k| const T x27 = x17 | x26; 302| 50.0k| const T x28 = x27 & ~x25; 303| 50.0k| const T x29 = x5 & ~x28; 304| | 305| 50.0k| const T x30 = x12 & x28; 306| 50.0k| const T x31 = x20 ^ x30; 307| 50.0k| const T x32 = x7 & x9; 308| 50.0k| const T x33 = x31 | x32; 309| 50.0k| const T x34 = x14 ^ x33; 310| 50.0k| const T x35 = x34 & a2; 311| 50.0k| const T x36 = x35 ^ x17; 312| 50.0k| out4 ^= x36; 313| | 314| 50.0k| const T x37 = x1 ^ x28; 315| 50.0k| const T x38 = a1 ^ x37; 316| 50.0k| const T x39 = a4 & x31; 317| 50.0k| const T x40 = x38 ^ x39; 318| 50.0k| const T x41 = x29 | a2; 319| 50.0k| const T x42 = x41 ^ x40; 320| 50.0k| out1 ^= x42; 321| | 322| 50.0k| const T x43 = x5 ^ x7; 323| 50.0k| const T x44 = x43 & ~x40; 324| 50.0k| const T x45 = x3 ^ x31; 325| 50.0k| const T x46 = x44 ^ x45; 326| 50.0k| const T x47 = x5 & a2; 327| 50.0k| const T x48 = x47 ^ x46; 328| 50.0k| out2 ^= x48; 329| 50.0k|} des.cpp:_ZN5Botan12_GLOBAL__N_15SBox6ITkNS0_9BitsliceTEjEEvT_S2_S2_S2_S2_S2_RS2_S3_S3_S3_: 332| 50.0k|BOTAN_FORCE_INLINE void SBox6(T a1, T a2, T a3, T a4, T a5, T a6, T& out1, T& out2, T& out3, T& out4) { 333| 50.0k| const T x1 = a2 ^ a5; 334| | 335| 50.0k| const T x2 = a2 | a6; 336| 50.0k| const T x3 = a1 & x2; 337| 50.0k| const T x4 = x1 ^ x3; 338| 50.0k| const T x5 = a6 ^ x4; 339| 50.0k| const T x6 = a5 & ~x5; 340| | 341| 50.0k| const T x7 = a1 & x5; 342| 50.0k| const T x8 = a2 ^ x7; 343| 50.0k| const T x9 = a1 ^ a3; 344| 50.0k| const T x10 = x8 | x9; 345| 50.0k| const T x11 = x4 ^ x10; 346| | 347| 50.0k| const T x12 = a3 & x11; 348| 50.0k| const T x13 = x12 & ~a6; 349| 50.0k| const T x14 = x6 | x8; 350| 50.0k| const T x15 = x13 ^ x14; 351| 50.0k| const T x16 = x15 & a4; 352| 50.0k| const T x17 = x16 ^ x11; 353| 50.0k| out4 ^= x17; 354| | 355| 50.0k| const T x18 = a2 ^ x10; 356| 50.0k| const T x19 = a6 & ~x18; 357| 50.0k| const T x20 = a3 ^ x19; 358| 50.0k| const T x21 = a5 & ~x12; 359| 50.0k| const T x22 = x20 | x21; 360| | 361| 50.0k| const T x23 = a2 | x9; 362| 50.0k| const T x24 = x15 ^ x23; 363| 50.0k| const T x25 = x3 | x22; 364| 50.0k| const T x26 = x24 ^ x25; 365| | 366| 50.0k| const T x27 = a1 | x11; 367| 50.0k| const T x28 = x14 & x27; 368| 50.0k| const T x29 = x20 ^ x28; 369| 50.0k| const T x30 = x29 & ~x13; 370| 50.0k| const T x31 = x6 | a4; 371| 50.0k| const T x32 = x31 ^ x30; 372| 50.0k| out3 ^= x32; 373| | 374| 50.0k| const T x33 = x4 ^ x29; 375| 50.0k| const T x34 = a5 & ~x33; 376| 50.0k| const T x35 = ~x23; 377| 50.0k| const T x36 = x18 ^ x35; 378| 50.0k| const T x37 = x34 ^ x36; 379| 50.0k| const T x38 = x37 & ~a4; 380| 50.0k| const T x39 = x38 ^ x26; 381| 50.0k| out2 ^= x39; 382| | 383| 50.0k| const T x40 = a6 ^ x7; 384| 50.0k| const T x41 = a1 ^ x20; 385| 50.0k| const T x42 = x40 & x41; 386| 50.0k| const T x43 = x12 ^ x36; 387| 50.0k| const T x44 = x42 ^ x43; 388| 50.0k| const T x45 = x22 & ~a4; 389| 50.0k| const T x46 = x45 ^ x44; 390| 50.0k| out1 ^= x46; 391| 50.0k|} des.cpp:_ZN5Botan12_GLOBAL__N_15SBox7ITkNS0_9BitsliceTEjEEvT_S2_S2_S2_S2_S2_RS2_S3_S3_S3_: 394| 50.0k|BOTAN_FORCE_INLINE void SBox7(T a1, T a2, T a3, T a4, T a5, T a6, T& out1, T& out2, T& out3, T& out4) { 395| 50.0k| const T x1 = a4 ^ a5; 396| 50.0k| const T x2 = a3 ^ x1; 397| 50.0k| const T x3 = a6 & x2; 398| 50.0k| const T x4 = a4 & x1; 399| 50.0k| const T x5 = a2 ^ x4; 400| 50.0k| const T x6 = x3 & x5; 401| | 402| 50.0k| const T x7 = a6 & x4; 403| 50.0k| const T x8 = a3 ^ x7; 404| 50.0k| const T x9 = x5 | x8; 405| 50.0k| const T x10 = a6 ^ x1; 406| 50.0k| const T x11 = x9 ^ x10; 407| 50.0k| const T x12 = a1 & ~x6; 408| 50.0k| const T x13 = x12 ^ x11; 409| 50.0k| out4 ^= x13; 410| | 411| 50.0k| const T x14 = a5 & ~x2; 412| 50.0k| const T x15 = x5 | x14; 413| 50.0k| const T x16 = x3 ^ x8; 414| 50.0k| const T x17 = x15 ^ x16; 415| | 416| 50.0k| const T x18 = x3 ^ x10; 417| 50.0k| const T x19 = a4 & ~x18; 418| 50.0k| const T x20 = x5 & ~x19; 419| 50.0k| const T x21 = a5 ^ x16; 420| 50.0k| const T x22 = x20 ^ x21; 421| | 422| 50.0k| const T x23 = x18 & ~x7; 423| 50.0k| const T x24 = x19 | x23; 424| 50.0k| const T x25 = a2 ^ x9; 425| 50.0k| const T x26 = x22 & x25; 426| 50.0k| const T x27 = x24 ^ x26; 427| 50.0k| const T x28 = x27 & a1; 428| 50.0k| const T x29 = x28 ^ x22; 429| 50.0k| out3 ^= x29; 430| | 431| 50.0k| const T x30 = x5 & ~a3; 432| 50.0k| const T x31 = x23 | x30; 433| 50.0k| const T x32 = x4 | x22; 434| 50.0k| const T x33 = x31 & x32; 435| 50.0k| const T x34 = x27 ^ x33; 436| | 437| 50.0k| const T x35 = x17 | x24; 438| 50.0k| const T x36 = x14 ^ x35; 439| 50.0k| const T x37 = a6 & x36; 440| 50.0k| const T x38 = x33 ^ x37; 441| 50.0k| const T x39 = x38 & ~a1; 442| 50.0k| const T x40 = x39 ^ x17; 443| 50.0k| out1 ^= x40; 444| | 445| 50.0k| const T x41 = ~x37; 446| 50.0k| const T x42 = a2 | x41; 447| 50.0k| const T x43 = x17 ^ x33; 448| 50.0k| const T x44 = x42 ^ x43; 449| 50.0k| const T x45 = x34 | a1; 450| 50.0k| const T x46 = x45 ^ x44; 451| 50.0k| out2 ^= x46; 452| 50.0k|} des.cpp:_ZN5Botan12_GLOBAL__N_15SBox8ITkNS0_9BitsliceTEjEEvT_S2_S2_S2_S2_S2_RS2_S3_S3_S3_: 455| 50.0k|BOTAN_FORCE_INLINE void SBox8(T a1, T a2, T a3, T a4, T a5, T a6, T& out1, T& out2, T& out3, T& out4) { 456| 50.0k| const T x1 = a3 & ~a2; 457| 50.0k| const T x2 = a5 & ~a3; 458| 50.0k| const T x3 = a4 ^ x2; 459| 50.0k| const T x4 = a1 & x3; 460| 50.0k| const T x5 = x4 & ~x1; 461| | 462| 50.0k| const T x6 = a2 & ~x3; 463| 50.0k| const T x7 = a1 | x6; 464| 50.0k| const T x8 = a2 & ~a3; 465| 50.0k| const T x9 = a5 ^ x8; 466| 50.0k| const T x10 = x7 & x9; 467| 50.0k| const T x11 = x4 | x10; 468| | 469| 50.0k| const T x12 = ~x3; 470| 50.0k| const T x13 = x10 ^ x12; 471| 50.0k| const T x14 = a3 & ~x7; 472| 50.0k| const T x15 = x13 ^ x14; 473| 50.0k| const T x16 = x1 ^ x15; 474| 50.0k| const T x17 = x5 | a6; 475| 50.0k| const T x18 = x17 ^ x16; 476| 50.0k| out2 ^= x18; 477| | 478| 50.0k| const T x19 = a1 ^ x16; 479| 50.0k| const T x20 = a5 & x19; 480| 50.0k| const T x21 = a2 ^ x15; 481| 50.0k| const T x22 = x20 ^ x21; 482| 50.0k| const T x23 = x6 ^ x22; 483| | 484| 50.0k| const T x24 = x11 ^ x22; 485| 50.0k| const T x25 = a2 | x24; 486| 50.0k| const T x26 = a5 ^ x19; 487| 50.0k| const T x27 = x25 ^ x26; 488| 50.0k| const T x28 = x11 & a6; 489| 50.0k| const T x29 = x28 ^ x27; 490| 50.0k| out3 ^= x29; 491| | 492| 50.0k| const T x30 = x9 ^ x23; 493| 50.0k| const T x31 = a4 | x21; 494| 50.0k| const T x32 = x30 ^ x31; 495| 50.0k| const T x33 = a1 ^ x32; 496| 50.0k| const T x34 = x33 & a6; 497| 50.0k| const T x35 = x34 ^ x23; 498| 50.0k| out4 ^= x35; 499| | 500| 50.0k| const T x36 = x30 & ~a4; 501| 50.0k| const T x37 = x27 & x36; 502| 50.0k| const T x38 = x5 ^ x32; 503| 50.0k| const T x39 = x37 ^ x38; 504| 50.0k| const T x40 = x39 | a6; 505| 50.0k| const T x41 = x40 ^ x23; 506| 50.0k| out1 ^= x41; 507| 50.0k|} des.cpp:_ZN5Botan12_GLOBAL__N_113transpose_outEPhPKjm: 567| 1.04k|void transpose_out(uint8_t out[], const uint32_t B[64], size_t n_blocks) { 568| | // clang-format off 569| 1.04k| static constexpr uint8_t FP[64] = { 570| 1.04k| 39, 7, 47, 15, 55, 23, 63, 31, 571| 1.04k| 38, 6, 46, 14, 54, 22, 62, 30, 572| 1.04k| 37, 5, 45, 13, 53, 21, 61, 29, 573| 1.04k| 36, 4, 44, 12, 52, 20, 60, 28, 574| 1.04k| 35, 3, 43, 11, 51, 19, 59, 27, 575| 1.04k| 34, 2, 42, 10, 50, 18, 58, 26, 576| 1.04k| 33, 1, 41, 9, 49, 17, 57, 25, 577| 1.04k| 32, 0, 40, 8, 48, 16, 56, 24 578| 1.04k| }; 579| | // clang-format on 580| | 581| 1.04k| uint64_t M[32]; 582| 34.3k| for(size_t i = 0; i != 32; ++i) { ------------------ | Branch (582:22): [True: 33.3k, False: 1.04k] ------------------ 583| | // XOR with 32 here absorbs the DES output swap into the FP 584| 33.3k| M[i] = (static_cast(B[FP[31 - i] ^ 32]) << 32) | B[FP[63 - i] ^ 32]; 585| 33.3k| } 586| | 587| 1.04k| des_transpose(M); 588| | 589| 10.7k| for(size_t i = 0; i != n_blocks; ++i) { ------------------ | Branch (589:22): [True: 9.69k, False: 1.04k] ------------------ 590| 9.69k| store_be(out + i * 8, M[i]); 591| 9.69k| } 592| 1.04k|} des.cpp:_ZN5Botan12_GLOBAL__N_111des_decryptEPjS1_PKj: 645| 1.34k|void des_decrypt(uint32_t L[32], uint32_t R[32], const uint32_t round_key[]) { 646| 12.0k| for(size_t round = 16; round > 0; round -= 2) { ------------------ | Branch (646:27): [True: 10.7k, False: 1.34k] ------------------ 647| 10.7k| des_round(L, R, &round_key[(round - 1) * 48]); 648| 10.7k| des_round(R, L, &round_key[(round - 2) * 48]); 649| 10.7k| } 650| 1.34k|} des.cpp:_ZN5Botan12_GLOBAL__N_116des_key_scheduleEPjPKh: 656| 450|void des_key_schedule(uint32_t round_key[], const uint8_t key[8]) { 657| 450| static const uint8_t ROT[16] = {1, 1, 2, 2, 2, 2, 2, 2, 1, 2, 2, 2, 2, 2, 2, 1}; 658| | 659| 450| uint32_t C = ((key[7] & 0x80) << 20) | ((key[6] & 0x80) << 19) | ((key[5] & 0x80) << 18) | ((key[4] & 0x80) << 17) | 660| 450| ((key[3] & 0x80) << 16) | ((key[2] & 0x80) << 15) | ((key[1] & 0x80) << 14) | ((key[0] & 0x80) << 13) | 661| 450| ((key[7] & 0x40) << 13) | ((key[6] & 0x40) << 12) | ((key[5] & 0x40) << 11) | ((key[4] & 0x40) << 10) | 662| 450| ((key[3] & 0x40) << 9) | ((key[2] & 0x40) << 8) | ((key[1] & 0x40) << 7) | ((key[0] & 0x40) << 6) | 663| 450| ((key[7] & 0x20) << 6) | ((key[6] & 0x20) << 5) | ((key[5] & 0x20) << 4) | ((key[4] & 0x20) << 3) | 664| 450| ((key[3] & 0x20) << 2) | ((key[2] & 0x20) << 1) | ((key[1] & 0x20)) | ((key[0] & 0x20) >> 1) | 665| 450| ((key[7] & 0x10) >> 1) | ((key[6] & 0x10) >> 2) | ((key[5] & 0x10) >> 3) | ((key[4] & 0x10) >> 4); 666| 450| uint32_t D = ((key[7] & 0x02) << 26) | ((key[6] & 0x02) << 25) | ((key[5] & 0x02) << 24) | ((key[4] & 0x02) << 23) | 667| 450| ((key[3] & 0x02) << 22) | ((key[2] & 0x02) << 21) | ((key[1] & 0x02) << 20) | ((key[0] & 0x02) << 19) | 668| 450| ((key[7] & 0x04) << 17) | ((key[6] & 0x04) << 16) | ((key[5] & 0x04) << 15) | ((key[4] & 0x04) << 14) | 669| 450| ((key[3] & 0x04) << 13) | ((key[2] & 0x04) << 12) | ((key[1] & 0x04) << 11) | ((key[0] & 0x04) << 10) | 670| 450| ((key[7] & 0x08) << 8) | ((key[6] & 0x08) << 7) | ((key[5] & 0x08) << 6) | ((key[4] & 0x08) << 5) | 671| 450| ((key[3] & 0x08) << 4) | ((key[2] & 0x08) << 3) | ((key[1] & 0x08) << 2) | ((key[0] & 0x08) << 1) | 672| 450| ((key[3] & 0x10) >> 1) | ((key[2] & 0x10) >> 2) | ((key[1] & 0x10) >> 3) | ((key[0] & 0x10) >> 4); 673| | 674| 450| static const uint8_t PC2_C[24] = {13, 16, 10, 23, 0, 4, 2, 27, 14, 5, 20, 9, 675| 450| 22, 18, 11, 3, 25, 7, 15, 6, 26, 19, 12, 1}; 676| | 677| 450| static const uint8_t PC2_D[24] = {12, 23, 2, 8, 18, 26, 1, 11, 22, 16, 4, 19, 678| 450| 15, 20, 10, 27, 5, 24, 17, 13, 21, 7, 0, 3}; 679| | 680| 7.65k| for(size_t i = 0; i != 16; ++i) { ------------------ | Branch (680:22): [True: 7.20k, False: 450] ------------------ 681| 7.20k| C = ((C << ROT[i]) | (C >> (28 - ROT[i]))) & 0x0FFFFFFF; 682| 7.20k| D = ((D << ROT[i]) | (D >> (28 - ROT[i]))) & 0x0FFFFFFF; 683| | 684| 7.20k| uint32_t* rk = &round_key[i * 48]; 685| | 686| 180k| for(size_t j = 0; j < 24; ++j) { ------------------ | Branch (686:25): [True: 172k, False: 7.20k] ------------------ 687| 172k| const uint32_t bit = (C >> (27 - PC2_C[j])) & 1; 688| 172k| rk[j] = static_cast(0) - bit; 689| 172k| } 690| | 691| 180k| for(size_t j = 0; j < 24; ++j) { ------------------ | Branch (691:25): [True: 172k, False: 7.20k] ------------------ 692| 172k| const uint32_t bit = (D >> (27 - PC2_D[j])) & 1; 693| 172k| rk[24 + j] = static_cast(0) - bit; 694| 172k| } 695| 7.20k| } 696| 450|} _ZN5Botan10hex_encodeEPcPKhmb: 34| 5.69k|void hex_encode(char output[], const uint8_t input[], size_t input_length, bool uppercase) { 35| 153k| for(size_t i = 0; i != input_length; ++i) { ------------------ | Branch (35:22): [True: 148k, False: 5.69k] ------------------ 36| 148k| const uint16_t h = hex_encode_2nibble(input[i], uppercase); 37| 148k| output[2 * i] = get_byte<0>(h); 38| 148k| output[2 * i + 1] = get_byte<1>(h); 39| 148k| } 40| 5.69k|} _ZN5Botan10hex_encodeEPKhmb: 42| 5.69k|std::string hex_encode(const uint8_t input[], size_t input_length, bool uppercase) { 43| 5.69k| const size_t output_length = mul_or_throw(2, input_length, "Input too large to hex encode"); 44| 5.69k| std::string output(output_length, 0); 45| | 46| 5.69k| if(input_length > 0) { ------------------ | Branch (46:7): [True: 5.69k, False: 0] ------------------ 47| 5.69k| hex_encode(&output.front(), input, input_length, uppercase); 48| 5.69k| } 49| | 50| 5.69k| return output; 51| 5.69k|} _ZN5Botan10hex_decodeEPhPKcmRmb: 75| 1.69k|size_t hex_decode(uint8_t output[], const char input[], size_t input_length, size_t& input_consumed, bool ignore_ws) { 76| 1.69k| uint8_t* out_ptr = output; 77| 1.69k| bool top_nibble = true; 78| 1.69k| uint8_t next = 0; 79| | 80| 1.69k| input_consumed = 0; 81| | 82| 1.69k| clear_mem(output, input_length / 2); 83| | 84| 194k| for(size_t i = 0; i != input_length; ++i) { ------------------ | Branch (84:22): [True: 192k, False: 1.69k] ------------------ 85| 192k| const uint8_t bin = hex_char_to_bin(input[i]); 86| | 87| 192k| if(bin >= 0x10) { ------------------ | Branch (87:10): [True: 0, False: 192k] ------------------ 88| 0| if(bin == 0x80 && ignore_ws) { ------------------ | Branch (88:13): [True: 0, False: 0] | Branch (88:28): [True: 0, False: 0] ------------------ 89| 0| continue; 90| 0| } 91| | 92| 0| throw Invalid_Argument(fmt("hex_decode: invalid character '{}'", format_char_for_display(input[i]))); 93| 0| } 94| | 95| 192k| if(top_nibble) { ------------------ | Branch (95:10): [True: 96.2k, False: 96.2k] ------------------ 96| 96.2k| next = bin << 4; 97| 96.2k| } else { 98| 96.2k| next |= bin; 99| 96.2k| *out_ptr = next; 100| 96.2k| } 101| | 102| 192k| top_nibble = !top_nibble; 103| 192k| if(top_nibble) { ------------------ | Branch (103:10): [True: 96.2k, False: 96.2k] ------------------ 104| 96.2k| ++out_ptr; 105| 96.2k| input_consumed = i + 1; 106| 96.2k| } 107| 192k| } 108| | 109| | /* 110| | * Consume trailing whitespace following the last full byte; a leftover 111| | * unpaired nibble (if any) stops the scan and is left unconsumed. 112| | */ 113| 1.69k| while(input_consumed < input_length && hex_char_to_bin(input[input_consumed]) == 0x80) { ------------------ | Branch (113:10): [True: 0, False: 1.69k] | Branch (113:43): [True: 0, False: 0] ------------------ 114| 0| ++input_consumed; 115| 0| } 116| | 117| 1.69k| return (out_ptr - output); 118| 1.69k|} _ZN5Botan10hex_decodeEPhPKcmb: 120| 1.69k|size_t hex_decode(uint8_t output[], const char input[], size_t input_length, bool ignore_ws) { 121| 1.69k| size_t consumed = 0; 122| 1.69k| const size_t written = hex_decode(output, input, input_length, consumed, ignore_ws); 123| | 124| 1.69k| if(consumed != input_length) { ------------------ | Branch (124:7): [True: 0, False: 1.69k] ------------------ 125| 0| throw Invalid_Argument("hex_decode: input did not have full bytes"); 126| 0| } 127| | 128| 1.69k| return written; 129| 1.69k|} _ZN5Botan17hex_decode_lockedEPKcmb: 142| 1.69k|secure_vector hex_decode_locked(const char input[], size_t input_length, bool ignore_ws) { 143| 1.69k| secure_vector bin(1 + input_length / 2); 144| | 145| 1.69k| const size_t written = hex_decode(bin.data(), input, input_length, ignore_ws); 146| | 147| 1.69k| bin.resize(written); 148| 1.69k| return bin; 149| 1.69k|} _ZN5Botan17hex_decode_lockedENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEEb: 151| 1.37k|secure_vector hex_decode_locked(std::string_view input, bool ignore_ws) { 152| 1.37k| return hex_decode_locked(input.data(), input.size(), ignore_ws); 153| 1.37k|} hex.cpp:_ZN5Botan12_GLOBAL__N_118hex_encode_2nibbleEhb: 21| 148k|uint16_t hex_encode_2nibble(uint8_t n8, bool uppercase) { 22| | // Offset for upper or lower case 'a' resp 23| 148k| const uint16_t a_mask = uppercase ? 0x0707 : 0x2727; ------------------ | Branch (23:28): [True: 148k, False: 0] ------------------ 24| | 25| 148k| const uint16_t n = (static_cast(n8 & 0xF0) << 4) | (n8 & 0x0F); 26| | // n >= 10? If so add offset 27| 148k| const uint16_t diff = swar_lt(0x0909, n) & a_mask; 28| | // Can't overflow between bytes, so don't need explicit SWAR addition: 29| 148k| return n + 0x3030 + diff; 30| 148k|} hex.cpp:_ZN5Botan12_GLOBAL__N_115hex_char_to_binEc: 55| 192k|uint8_t hex_char_to_bin(char input) { 56| | // Starts of valid value ranges (v_lo) and their lengths (v_range) 57| 192k| constexpr uint64_t v_lo = make_uint64(0, '0', 'a', 'A', ' ', '\n', '\t', '\r'); 58| 192k| constexpr uint64_t v_range = make_uint64(0, 10, 6, 6, 1, 1, 1, 1); 59| 192k| constexpr uint64_t expand8 = 0x0101010101010101; 60| 192k| constexpr uint64_t top64 = 0x8000000000000000; 61| | 62| 192k| const uint8_t x = static_cast(input); 63| 192k| const uint64_t x8 = x * expand8; 64| | 65| 192k| const uint64_t v_mask = swar_in_range(x8, v_lo, v_range) ^ top64; 66| | 67| | // This is the offset added to x to get the value we need 68| 192k| const uint64_t val_v = 0xd0a9c960767773 ^ static_cast(0xFF - x) << 56; 69| | 70| 192k| return x + static_cast(val_v >> (8 * index_of_first_set_byte(v_mask))); 71| 192k|} _ZN5Botan12HashFunction6createENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_: 112| 16.4k|std::unique_ptr HashFunction::create(std::string_view algo_spec, std::string_view provider) { 113| |#if defined(BOTAN_HAS_COMMONCRYPTO) 114| | if(provider.empty() || provider == "commoncrypto") { 115| | if(auto hash = make_commoncrypto_hash(algo_spec)) 116| | return hash; 117| | 118| | if(!provider.empty()) 119| | return nullptr; 120| | } 121| |#endif 122| | 123| 16.4k| if(provider.empty() == false && provider != "base") { ------------------ | Branch (123:7): [True: 0, False: 16.4k] | Branch (123:36): [True: 0, False: 0] ------------------ 124| 0| return nullptr; // unknown provider 125| 0| } 126| | 127| 16.4k|#if defined(BOTAN_HAS_SHA1) 128| 16.4k| if(algo_spec == "SHA-1") { ------------------ | Branch (128:7): [True: 3.03k, False: 13.4k] ------------------ 129| 3.03k| return std::make_unique(); 130| 3.03k| } 131| 13.4k|#endif 132| | 133| 13.4k|#if defined(BOTAN_HAS_SHA2_32) 134| 13.4k| if(algo_spec == "SHA-224") { ------------------ | Branch (134:7): [True: 0, False: 13.4k] ------------------ 135| 0| return std::make_unique(); 136| 0| } 137| | 138| 13.4k| if(algo_spec == "SHA-256") { ------------------ | Branch (138:7): [True: 10.9k, False: 2.56k] ------------------ 139| 10.9k| return std::make_unique(); 140| 10.9k| } 141| 2.56k|#endif 142| | 143| 2.56k|#if defined(BOTAN_HAS_SHA2_64) 144| 2.56k| if(algo_spec == "SHA-384") { ------------------ | Branch (144:7): [True: 1.46k, False: 1.09k] ------------------ 145| 1.46k| return std::make_unique(); 146| 1.46k| } 147| | 148| 1.09k| if(algo_spec == "SHA-512") { ------------------ | Branch (148:7): [True: 1.09k, False: 0] ------------------ 149| 1.09k| return std::make_unique(); 150| 1.09k| } 151| | 152| 0| if(algo_spec == "SHA-512-256") { ------------------ | Branch (152:7): [True: 0, False: 0] ------------------ 153| 0| return std::make_unique(); 154| 0| } 155| 0|#endif 156| | 157| 0|#if defined(BOTAN_HAS_RIPEMD_160) 158| 0| if(algo_spec == "RIPEMD-160") { ------------------ | Branch (158:7): [True: 0, False: 0] ------------------ 159| 0| return std::make_unique(); 160| 0| } 161| 0|#endif 162| | 163| 0|#if defined(BOTAN_HAS_WHIRLPOOL) 164| 0| if(algo_spec == "Whirlpool") { ------------------ | Branch (164:7): [True: 0, False: 0] ------------------ 165| 0| return std::make_unique(); 166| 0| } 167| 0|#endif 168| | 169| 0|#if defined(BOTAN_HAS_MD5) 170| 0| if(algo_spec == "MD5") { ------------------ | Branch (170:7): [True: 0, False: 0] ------------------ 171| 0| return std::make_unique(); 172| 0| } 173| 0|#endif 174| | 175| 0|#if defined(BOTAN_HAS_MD4) 176| 0| if(algo_spec == "MD4") { ------------------ | Branch (176:7): [True: 0, False: 0] ------------------ 177| 0| return std::make_unique(); 178| 0| } 179| 0|#endif 180| | 181| 0|#if defined(BOTAN_HAS_GOST_34_11) 182| 0| if(algo_spec == "GOST-R-34.11-94" || algo_spec == "GOST-34.11") { ------------------ | Branch (182:7): [True: 0, False: 0] | Branch (182:41): [True: 0, False: 0] ------------------ 183| 0| return std::make_unique(); 184| 0| } 185| 0|#endif 186| | 187| 0|#if defined(BOTAN_HAS_ADLER32) 188| 0| if(algo_spec == "Adler32") { ------------------ | Branch (188:7): [True: 0, False: 0] ------------------ 189| 0| return std::make_unique(); 190| 0| } 191| 0|#endif 192| | 193| 0|#if defined(BOTAN_HAS_ASCON_HASH256) 194| 0| if(algo_spec == "Ascon-Hash256") { ------------------ | Branch (194:7): [True: 0, False: 0] ------------------ 195| 0| return std::make_unique(); 196| 0| } 197| 0|#endif 198| | 199| 0|#if defined(BOTAN_HAS_CRC24) 200| 0| if(algo_spec == "CRC24") { ------------------ | Branch (200:7): [True: 0, False: 0] ------------------ 201| 0| return std::make_unique(); 202| 0| } 203| 0|#endif 204| | 205| 0|#if defined(BOTAN_HAS_CRC32) 206| 0| if(algo_spec == "CRC32") { ------------------ | Branch (206:7): [True: 0, False: 0] ------------------ 207| 0| return std::make_unique(); 208| 0| } 209| 0|#endif 210| | 211| 0|#if defined(BOTAN_HAS_STREEBOG) 212| 0| if(algo_spec == "Streebog-256") { ------------------ | Branch (212:7): [True: 0, False: 0] ------------------ 213| 0| return std::make_unique(256); 214| 0| } 215| 0| if(algo_spec == "Streebog-512") { ------------------ | Branch (215:7): [True: 0, False: 0] ------------------ 216| 0| return std::make_unique(512); 217| 0| } 218| 0|#endif 219| | 220| 0|#if defined(BOTAN_HAS_SM3) 221| 0| if(algo_spec == "SM3") { ------------------ | Branch (221:7): [True: 0, False: 0] ------------------ 222| 0| return std::make_unique(); 223| 0| } 224| 0|#endif 225| | 226| 0| const AlgorithmSpec req(algo_spec); 227| | 228| 0|#if defined(BOTAN_HAS_SKEIN_512) 229| 0| if(auto m = req.match("Skein-512({bits:int=512},{personalization:str=})")) { ------------------ | Branch (229:12): [True: 0, False: 0] ------------------ 230| 0| return std::make_unique(m->integer("bits"), m->str("personalization")); 231| 0| } 232| 0|#endif 233| | 234| 0|#if defined(BOTAN_HAS_BLAKE2B) 235| 0| if(auto m = req.match("BLAKE2b|Blake2b({bits:int=512})")) { ------------------ | Branch (235:12): [True: 0, False: 0] ------------------ 236| 0| return std::make_unique(m->integer("bits")); 237| 0| } 238| 0|#endif 239| | 240| 0|#if defined(BOTAN_HAS_BLAKE2S) 241| 0| if(auto m = req.match("BLAKE2s|Blake2s({bits:int=256})")) { ------------------ | Branch (241:12): [True: 0, False: 0] ------------------ 242| 0| return std::make_unique(m->integer("bits")); 243| 0| } 244| 0|#endif 245| | 246| 0|#if defined(BOTAN_HAS_KECCAK) 247| 0| if(auto m = req.match("Keccak-1600({bits:int=512})")) { ------------------ | Branch (247:12): [True: 0, False: 0] ------------------ 248| 0| return std::make_unique(m->integer("bits")); 249| 0| } 250| 0|#endif 251| | 252| 0|#if defined(BOTAN_HAS_SHA3) 253| 0| if(auto m = req.match("SHA-3({bits:int=512})")) { ------------------ | Branch (253:12): [True: 0, False: 0] ------------------ 254| 0| return std::make_unique(m->integer("bits")); 255| 0| } 256| 0|#endif 257| | 258| 0|#if defined(BOTAN_HAS_SHAKE) 259| 0| if(auto m = req.match("SHAKE-128({bits:int})")) { ------------------ | Branch (259:12): [True: 0, False: 0] ------------------ 260| 0| return std::make_unique(m->integer("bits")); 261| 0| } 262| 0| if(auto m = req.match("SHAKE-256({bits:int})")) { ------------------ | Branch (262:12): [True: 0, False: 0] ------------------ 263| 0| return std::make_unique(m->integer("bits")); 264| 0| } 265| 0|#endif 266| | 267| 0|#if defined(BOTAN_HAS_PARALLEL_HASH) 268| 0| if(auto m = req.match("Parallel({hash}...)")) { ------------------ | Branch (268:12): [True: 0, False: 0] ------------------ 269| 0| std::vector> hashes; 270| | 271| 0| for(const auto& hash_spec : m->rest("hash")) { ------------------ | Branch (271:33): [True: 0, False: 0] ------------------ 272| 0| auto h = HashFunction::create(hash_spec.to_string()); 273| 0| if(!h) { ------------------ | Branch (273:13): [True: 0, False: 0] ------------------ 274| 0| return nullptr; 275| 0| } 276| 0| hashes.push_back(std::move(h)); 277| 0| } 278| | 279| 0| return std::make_unique(hashes); 280| 0| } 281| 0|#endif 282| | 283| 0|#if defined(BOTAN_HAS_TRUNCATED_HASH) 284| 0| if(auto m = req.match("Truncated({hash},{bits:int})")) { ------------------ | Branch (284:12): [True: 0, False: 0] ------------------ 285| 0| auto hash = HashFunction::create(m->str("hash")); 286| 0| if(!hash) { ------------------ | Branch (286:10): [True: 0, False: 0] ------------------ 287| 0| return nullptr; 288| 0| } 289| | 290| 0| return std::make_unique(std::move(hash), m->integer("bits")); 291| 0| } 292| 0|#endif 293| | 294| 0|#if defined(BOTAN_HAS_COMB4P) 295| 0| if(auto m = req.match("Comb4P({hash1},{hash2})")) { ------------------ | Branch (295:12): [True: 0, False: 0] ------------------ 296| 0| auto h1 = HashFunction::create(m->str("hash1")); 297| 0| auto h2 = HashFunction::create(m->str("hash2")); 298| | 299| 0| if(h1 && h2) { ------------------ | Branch (299:10): [True: 0, False: 0] | Branch (299:16): [True: 0, False: 0] ------------------ 300| 0| return std::make_unique(std::move(h1), std::move(h2)); 301| 0| } 302| 0| } 303| 0|#endif 304| | 305| 0| BOTAN_UNUSED(req); ------------------ | | 151| 0|#define BOTAN_UNUSED Botan::ignore_params ------------------ 306| | 307| 0| return nullptr; 308| 0|} _ZN5Botan12HashFunction15create_or_throwENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_: 311| 11.4k|std::unique_ptr HashFunction::create_or_throw(std::string_view algo, std::string_view provider) { 312| 11.4k| if(auto hash = HashFunction::create(algo, provider)) { ------------------ | Branch (312:12): [True: 11.4k, False: 0] ------------------ 313| 11.4k| return hash; 314| 11.4k| } 315| 0| throw Lookup_Error("Hash", algo, provider); 316| 11.4k|} _ZN5Botan5SHA_110compress_nERNSt3__16vectorIjNS_16secure_allocatorIjEEEENS1_4spanIKhLm18446744073709551615EEEm: 24| 20.9k|void SHA_1::compress_n(digest_type& digest, std::span input, size_t blocks) { 25| 20.9k| using namespace SHA1_F; 26| | 27| 20.9k|#if defined(BOTAN_HAS_SHA1_X86_SHA_NI) 28| 20.9k| if(CPUID::has(CPUID::Feature::SHA)) { ------------------ | Branch (28:7): [True: 20.9k, False: 0] ------------------ 29| 20.9k| return sha1_compress_x86(digest, input, blocks); 30| 20.9k| } 31| 0|#endif 32| | 33| |#if defined(BOTAN_HAS_SHA1_ARMV8) 34| | if(CPUID::has(CPUID::Feature::SHA1)) { 35| | return sha1_armv8_compress_n(digest, input, blocks); 36| | } 37| |#endif 38| | 39| 0|#if defined(BOTAN_HAS_SHA1_AVX2) 40| 0| if(CPUID::has(CPUID::Feature::AVX2, CPUID::Feature::BMI)) { ------------------ | Branch (40:7): [True: 0, False: 0] ------------------ 41| 0| return avx2_compress_n(digest, input, blocks); 42| 0| } 43| 0|#endif 44| | 45| 0|#if defined(BOTAN_HAS_SHA1_SIMD_4X32) 46| 0| if(CPUID::has(CPUID::Feature::SIMD_4X32)) { ------------------ | Branch (46:7): [True: 0, False: 0] ------------------ 47| 0| return simd_compress_n(digest, input, blocks); 48| 0| } 49| 0|#endif 50| | 51| 0| uint32_t A = digest[0]; 52| 0| uint32_t B = digest[1]; 53| 0| uint32_t C = digest[2]; 54| 0| uint32_t D = digest[3]; 55| 0| uint32_t E = digest[4]; 56| 0| std::array W{}; 57| 0| auto W_in = std::span{W}.first(); 58| | 59| 0| BufferSlicer in(input); 60| | 61| 0| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (61:22): [True: 0, False: 0] ------------------ 62| 0| load_be(W_in, in.take()); 63| | 64| | // clang-format off 65| | 66| 0| for(size_t j = 16; j != 80; j += 8) { ------------------ | Branch (66:26): [True: 0, False: 0] ------------------ 67| 0| W[j + 0] = rotl<1>(W[j - 3] ^ W[j - 8] ^ W[j - 14] ^ W[j - 16]); 68| 0| W[j + 1] = rotl<1>(W[j - 2] ^ W[j - 7] ^ W[j - 13] ^ W[j - 15]); 69| 0| W[j + 2] = rotl<1>(W[j - 1] ^ W[j - 6] ^ W[j - 12] ^ W[j - 14]); 70| 0| W[j + 3] = rotl<1>(W[j ] ^ W[j - 5] ^ W[j - 11] ^ W[j - 13]); 71| 0| W[j + 4] = rotl<1>(W[j + 1] ^ W[j - 4] ^ W[j - 10] ^ W[j - 12]); 72| 0| W[j + 5] = rotl<1>(W[j + 2] ^ W[j - 3] ^ W[j - 9] ^ W[j - 11]); 73| 0| W[j + 6] = rotl<1>(W[j + 3] ^ W[j - 2] ^ W[j - 8] ^ W[j - 10]); 74| 0| W[j + 7] = rotl<1>(W[j + 4] ^ W[j - 1] ^ W[j - 7] ^ W[j - 9]); 75| 0| } 76| | 77| | // clang-format on 78| | 79| 0| F1(A, B, C, D, E, W[0] + K1); 80| 0| F1(E, A, B, C, D, W[1] + K1); 81| 0| F1(D, E, A, B, C, W[2] + K1); 82| 0| F1(C, D, E, A, B, W[3] + K1); 83| 0| F1(B, C, D, E, A, W[4] + K1); 84| 0| F1(A, B, C, D, E, W[5] + K1); 85| 0| F1(E, A, B, C, D, W[6] + K1); 86| 0| F1(D, E, A, B, C, W[7] + K1); 87| 0| F1(C, D, E, A, B, W[8] + K1); 88| 0| F1(B, C, D, E, A, W[9] + K1); 89| 0| F1(A, B, C, D, E, W[10] + K1); 90| 0| F1(E, A, B, C, D, W[11] + K1); 91| 0| F1(D, E, A, B, C, W[12] + K1); 92| 0| F1(C, D, E, A, B, W[13] + K1); 93| 0| F1(B, C, D, E, A, W[14] + K1); 94| 0| F1(A, B, C, D, E, W[15] + K1); 95| 0| F1(E, A, B, C, D, W[16] + K1); 96| 0| F1(D, E, A, B, C, W[17] + K1); 97| 0| F1(C, D, E, A, B, W[18] + K1); 98| 0| F1(B, C, D, E, A, W[19] + K1); 99| | 100| 0| F2(A, B, C, D, E, W[20] + K2); 101| 0| F2(E, A, B, C, D, W[21] + K2); 102| 0| F2(D, E, A, B, C, W[22] + K2); 103| 0| F2(C, D, E, A, B, W[23] + K2); 104| 0| F2(B, C, D, E, A, W[24] + K2); 105| 0| F2(A, B, C, D, E, W[25] + K2); 106| 0| F2(E, A, B, C, D, W[26] + K2); 107| 0| F2(D, E, A, B, C, W[27] + K2); 108| 0| F2(C, D, E, A, B, W[28] + K2); 109| 0| F2(B, C, D, E, A, W[29] + K2); 110| 0| F2(A, B, C, D, E, W[30] + K2); 111| 0| F2(E, A, B, C, D, W[31] + K2); 112| 0| F2(D, E, A, B, C, W[32] + K2); 113| 0| F2(C, D, E, A, B, W[33] + K2); 114| 0| F2(B, C, D, E, A, W[34] + K2); 115| 0| F2(A, B, C, D, E, W[35] + K2); 116| 0| F2(E, A, B, C, D, W[36] + K2); 117| 0| F2(D, E, A, B, C, W[37] + K2); 118| 0| F2(C, D, E, A, B, W[38] + K2); 119| 0| F2(B, C, D, E, A, W[39] + K2); 120| | 121| 0| F3(A, B, C, D, E, W[40] + K3); 122| 0| F3(E, A, B, C, D, W[41] + K3); 123| 0| F3(D, E, A, B, C, W[42] + K3); 124| 0| F3(C, D, E, A, B, W[43] + K3); 125| 0| F3(B, C, D, E, A, W[44] + K3); 126| 0| F3(A, B, C, D, E, W[45] + K3); 127| 0| F3(E, A, B, C, D, W[46] + K3); 128| 0| F3(D, E, A, B, C, W[47] + K3); 129| 0| F3(C, D, E, A, B, W[48] + K3); 130| 0| F3(B, C, D, E, A, W[49] + K3); 131| 0| F3(A, B, C, D, E, W[50] + K3); 132| 0| F3(E, A, B, C, D, W[51] + K3); 133| 0| F3(D, E, A, B, C, W[52] + K3); 134| 0| F3(C, D, E, A, B, W[53] + K3); 135| 0| F3(B, C, D, E, A, W[54] + K3); 136| 0| F3(A, B, C, D, E, W[55] + K3); 137| 0| F3(E, A, B, C, D, W[56] + K3); 138| 0| F3(D, E, A, B, C, W[57] + K3); 139| 0| F3(C, D, E, A, B, W[58] + K3); 140| 0| F3(B, C, D, E, A, W[59] + K3); 141| | 142| 0| F4(A, B, C, D, E, W[60] + K4); 143| 0| F4(E, A, B, C, D, W[61] + K4); 144| 0| F4(D, E, A, B, C, W[62] + K4); 145| 0| F4(C, D, E, A, B, W[63] + K4); 146| 0| F4(B, C, D, E, A, W[64] + K4); 147| 0| F4(A, B, C, D, E, W[65] + K4); 148| 0| F4(E, A, B, C, D, W[66] + K4); 149| 0| F4(D, E, A, B, C, W[67] + K4); 150| 0| F4(C, D, E, A, B, W[68] + K4); 151| 0| F4(B, C, D, E, A, W[69] + K4); 152| 0| F4(A, B, C, D, E, W[70] + K4); 153| 0| F4(E, A, B, C, D, W[71] + K4); 154| 0| F4(D, E, A, B, C, W[72] + K4); 155| 0| F4(C, D, E, A, B, W[73] + K4); 156| 0| F4(B, C, D, E, A, W[74] + K4); 157| 0| F4(A, B, C, D, E, W[75] + K4); 158| 0| F4(E, A, B, C, D, W[76] + K4); 159| 0| F4(D, E, A, B, C, W[77] + K4); 160| 0| F4(C, D, E, A, B, W[78] + K4); 161| 0| F4(B, C, D, E, A, W[79] + K4); 162| | 163| 0| A = (digest[0] += A); 164| 0| B = (digest[1] += B); 165| 0| C = (digest[2] += C); 166| 0| D = (digest[3] += D); 167| 0| E = (digest[4] += E); 168| 0| } 169| 0|} _ZN5Botan5SHA_14initERNSt3__16vectorIjNS_16secure_allocatorIjEEEE: 174| 15.1k|void SHA_1::init(digest_type& digest) { 175| 15.1k| digest.assign({0x67452301, 0xEFCDAB89, 0x98BADCFE, 0x10325476, 0xC3D2E1F0}); 176| 15.1k|} _ZN5Botan5SHA_18add_dataENSt3__14spanIKhLm18446744073709551615EEE: 214| 12.9k|void SHA_1::add_data(std::span input) { 215| 12.9k| m_md.update(input); 216| 12.9k|} _ZN5Botan5SHA_112final_resultENSt3__14spanIhLm18446744073709551615EEE: 218| 11.9k|void SHA_1::final_result(std::span output) { 219| 11.9k| m_md.final(output); 220| 11.9k|} _ZN5Botan5SHA_117sha1_compress_x86ERNSt3__16vectorIjNS_16secure_allocatorIjEEEENS1_4spanIKhLm18446744073709551615EEEm: 76| 20.9k| size_t blocks) { 77| 20.9k| const uint8_t* input = input_span.data(); 78| | 79| 20.9k| SIMD_4x32 ABCD = rev_words(SIMD_4x32::load_le(&digest[0])); // NOLINT(*-container-data-pointer) 80| 20.9k| SIMD_4x32 E0 = SIMD_4x32(0, 0, 0, digest[4]); 81| | 82| 79.7k| while(blocks > 0) { ------------------ | Branch (82:10): [True: 58.7k, False: 20.9k] ------------------ 83| | // Save current hash 84| 58.7k| const auto ABCD_SAVE = ABCD; 85| 58.7k| const auto E0_SAVE = E0; 86| | 87| 58.7k| auto W0 = rev_words(SIMD_4x32::load_be(input)); 88| 58.7k| auto W1 = rev_words(SIMD_4x32::load_be(input + 16)); 89| 58.7k| auto W2 = rev_words(SIMD_4x32::load_be(input + 32)); 90| 58.7k| auto W3 = rev_words(SIMD_4x32::load_be(input + 48)); 91| | 92| 58.7k| sha1_x86_first8<0>(ABCD, E0, W0, W1); 93| 58.7k| sha1_x86_rnds8<0>(ABCD, E0, W2, W3); 94| | 95| 58.7k| W0 = sha1_x86_msg1(W0, W1); 96| 58.7k| W1 = sha1_x86_msg1(W1, W2); 97| 58.7k| W0 ^= W2; 98| | 99| 58.7k| sha1_x86_next_msg(W3, W0, W1, W2); 100| 58.7k| sha1_x86_next_msg(W0, W1, W2, W3); 101| 58.7k| sha1_x86_rnds8<0, 1>(ABCD, E0, W0, W1); 102| | 103| 58.7k| sha1_x86_next_msg(W1, W2, W3, W0); 104| 58.7k| sha1_x86_next_msg(W2, W3, W0, W1); 105| 58.7k| sha1_x86_rnds8<1>(ABCD, E0, W2, W3); 106| | 107| 58.7k| sha1_x86_next_msg(W3, W0, W1, W2); 108| 58.7k| sha1_x86_next_msg(W0, W1, W2, W3); 109| 58.7k| sha1_x86_rnds8<1>(ABCD, E0, W0, W1); 110| | 111| 58.7k| sha1_x86_next_msg(W1, W2, W3, W0); 112| 58.7k| sha1_x86_next_msg(W2, W3, W0, W1); 113| 58.7k| sha1_x86_rnds8<2>(ABCD, E0, W2, W3); 114| | 115| 58.7k| sha1_x86_next_msg(W3, W0, W1, W2); 116| 58.7k| sha1_x86_next_msg(W0, W1, W2, W3); 117| 58.7k| sha1_x86_rnds8<2>(ABCD, E0, W0, W1); 118| | 119| 58.7k| sha1_x86_next_msg(W1, W2, W3, W0); 120| 58.7k| sha1_x86_next_msg(W2, W3, W0, W1); 121| 58.7k| sha1_x86_rnds8<2, 3>(ABCD, E0, W2, W3); 122| | 123| 58.7k| sha1_x86_next_msg(W3, W0, W1, W2); 124| 58.7k| sha1_x86_next_msg(W0, W1, W2, W3); 125| 58.7k| sha1_x86_rnds8<3>(ABCD, E0, W0, W1); 126| | 127| 58.7k| sha1_x86_next_msg(W1, W2, W3, W0); 128| 58.7k| sha1_x86_next_msg(W2, W3, W0, W1); 129| 58.7k| sha1_x86_rnds8<3>(ABCD, E0, W2, W3); 130| | 131| 58.7k| ABCD += ABCD_SAVE; 132| 58.7k| E0 = sha1_x86_nexte(E0, E0_SAVE); 133| | 134| 58.7k| input += 64; 135| 58.7k| blocks--; 136| 58.7k| } 137| | 138| 20.9k| rev_words(ABCD).store_le(&digest[0]); // NOLINT(*-container-data-pointer) 139| 20.9k| digest[4] = E0.extract_word<3>(); 140| 20.9k|} sha1_x86.cpp:_ZN5Botan12_GLOBAL__N_19rev_wordsERKNS_9SIMD_4x32E: 66| 277k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_SHANI SIMD_4x32 rev_words(const SIMD_4x32& v) { 67| | return SIMD_4x32(_mm_shuffle_epi32(v.raw(), 0b00011011)); 68| 277k|} sha1_x86.cpp:_ZN5Botan12_GLOBAL__N_113sha1_x86_msg1ERKNS_9SIMD_4x32ES3_: 29| 117k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_SHANI SIMD_4x32 sha1_x86_msg1(const SIMD_4x32& W0, const SIMD_4x32& W1) { 30| 117k| return SIMD_4x32(_mm_sha1msg1_epu32(W0.raw(), W1.raw())); 31| 117k|} sha1_x86.cpp:_ZN5Botan12_GLOBAL__N_117sha1_x86_next_msgERKNS_9SIMD_4x32ERS1_S4_S4_: 36| 940k| SIMD_4x32& W3) { 37| 940k| W3 = SIMD_4x32(_mm_sha1msg1_epu32(W3.raw(), W0.raw())); 38| 940k| W1 = SIMD_4x32(_mm_sha1msg2_epu32(W1.raw(), W0.raw())); 39| 940k| W2 ^= W0; 40| 940k|} sha1_x86.cpp:_ZN5Botan12_GLOBAL__N_114sha1_x86_nexteERKNS_9SIMD_4x32ES3_: 25| 1.17M|BOTAN_FORCE_INLINE BOTAN_FN_ISA_SHANI SIMD_4x32 sha1_x86_nexte(const SIMD_4x32& x, const SIMD_4x32& y) { 26| 1.17M| return SIMD_4x32(_mm_sha1nexte_epu32(x.raw(), y.raw())); 27| 1.17M|} sha1_x86.cpp:_ZN5Botan12_GLOBAL__N_115sha1_x86_first8ILh0ELh0EEEvRNS_9SIMD_4x32ES3_RKS2_S5_: 46| 58.7k| const SIMD_4x32& W1) { 47| 58.7k| const auto TE = ABCD; 48| 58.7k| ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), (E + W0).raw(), R1)); 49| | 50| 58.7k| E = ABCD; 51| | ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), sha1_x86_nexte(TE, W1).raw(), R2)); 52| 58.7k|} sha1_x86.cpp:_ZN5Botan12_GLOBAL__N_114sha1_x86_rnds8ILh0ELh0EEEvRNS_9SIMD_4x32ES3_RKS2_S5_: 58| 58.7k| const SIMD_4x32& W1) { 59| 58.7k| const auto TE = ABCD; 60| 58.7k| ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), sha1_x86_nexte(E, W0).raw(), R1)); 61| | 62| 58.7k| E = ABCD; 63| | ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), sha1_x86_nexte(TE, W1).raw(), R2)); 64| 58.7k|} sha1_x86.cpp:_ZN5Botan12_GLOBAL__N_114sha1_x86_rnds8ILh0ELh1EEEvRNS_9SIMD_4x32ES3_RKS2_S5_: 58| 58.7k| const SIMD_4x32& W1) { 59| 58.7k| const auto TE = ABCD; 60| 58.7k| ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), sha1_x86_nexte(E, W0).raw(), R1)); 61| | 62| 58.7k| E = ABCD; 63| | ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), sha1_x86_nexte(TE, W1).raw(), R2)); 64| 58.7k|} sha1_x86.cpp:_ZN5Botan12_GLOBAL__N_114sha1_x86_rnds8ILh1ELh1EEEvRNS_9SIMD_4x32ES3_RKS2_S5_: 58| 117k| const SIMD_4x32& W1) { 59| 117k| const auto TE = ABCD; 60| 117k| ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), sha1_x86_nexte(E, W0).raw(), R1)); 61| | 62| 117k| E = ABCD; 63| | ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), sha1_x86_nexte(TE, W1).raw(), R2)); 64| 117k|} sha1_x86.cpp:_ZN5Botan12_GLOBAL__N_114sha1_x86_rnds8ILh2ELh2EEEvRNS_9SIMD_4x32ES3_RKS2_S5_: 58| 117k| const SIMD_4x32& W1) { 59| 117k| const auto TE = ABCD; 60| 117k| ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), sha1_x86_nexte(E, W0).raw(), R1)); 61| | 62| 117k| E = ABCD; 63| | ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), sha1_x86_nexte(TE, W1).raw(), R2)); 64| 117k|} sha1_x86.cpp:_ZN5Botan12_GLOBAL__N_114sha1_x86_rnds8ILh2ELh3EEEvRNS_9SIMD_4x32ES3_RKS2_S5_: 58| 58.7k| const SIMD_4x32& W1) { 59| 58.7k| const auto TE = ABCD; 60| 58.7k| ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), sha1_x86_nexte(E, W0).raw(), R1)); 61| | 62| 58.7k| E = ABCD; 63| | ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), sha1_x86_nexte(TE, W1).raw(), R2)); 64| 58.7k|} sha1_x86.cpp:_ZN5Botan12_GLOBAL__N_114sha1_x86_rnds8ILh3ELh3EEEvRNS_9SIMD_4x32ES3_RKS2_S5_: 58| 117k| const SIMD_4x32& W1) { 59| 117k| const auto TE = ABCD; 60| 117k| ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), sha1_x86_nexte(E, W0).raw(), R1)); 61| | 62| 117k| E = ABCD; 63| | ABCD = SIMD_4x32(_mm_sha1rnds4_epu32(ABCD.raw(), sha1_x86_nexte(TE, W1).raw(), R2)); 64| 117k|} _ZN5Botan7SHA_25615compress_digestERNSt3__16vectorIjNS_16secure_allocatorIjEEEENS1_4spanIKhLm18446744073709551615EEEm: 59| 47.7k| size_t blocks) { 60| 47.7k|#if defined(BOTAN_HAS_SHA2_32_X86) 61| 47.7k| if(CPUID::has(CPUID::Feature::SHA)) { ------------------ | Branch (61:7): [True: 47.7k, False: 0] ------------------ 62| 47.7k| return SHA_256::compress_digest_x86(digest, input, blocks); 63| 47.7k| } 64| 0|#endif 65| | 66| |#if defined(BOTAN_HAS_SHA2_32_ARMV8) 67| | if(CPUID::has(CPUID::Feature::SHA2)) { 68| | return SHA_256::compress_digest_armv8(digest, input, blocks); 69| | } 70| |#endif 71| | 72| 0|#if defined(BOTAN_HAS_SHA2_32_X86_AVX2) 73| 0| if(CPUID::has(CPUID::Feature::AVX2, CPUID::Feature::BMI)) { ------------------ | Branch (73:7): [True: 0, False: 0] ------------------ 74| 0| return SHA_256::compress_digest_x86_avx2(digest, input, blocks); 75| 0| } 76| 0|#endif 77| | 78| 0|#if defined(BOTAN_HAS_SHA2_32_SIMD) 79| 0| if(CPUID::has(CPUID::Feature::SIMD_4X32)) { ------------------ | Branch (79:7): [True: 0, False: 0] ------------------ 80| 0| return SHA_256::compress_digest_x86_simd(digest, input, blocks); 81| 0| } 82| 0|#endif 83| | 84| 0| uint32_t A = digest[0]; 85| 0| uint32_t B = digest[1]; 86| 0| uint32_t C = digest[2]; 87| 0| uint32_t D = digest[3]; 88| 0| uint32_t E = digest[4]; 89| 0| uint32_t F = digest[5]; 90| 0| uint32_t G = digest[6]; 91| 0| uint32_t H = digest[7]; 92| | 93| 0| std::array W{}; 94| | 95| 0| BufferSlicer in(input); 96| | 97| 0| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (97:22): [True: 0, False: 0] ------------------ 98| 0| load_be(W, in.take()); 99| | 100| | // clang-format off 101| | 102| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], SHA256_K[ 0]); 103| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], SHA256_K[ 1]); 104| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], SHA256_K[ 2]); 105| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], SHA256_K[ 3]); 106| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], SHA256_K[ 4]); 107| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], SHA256_K[ 5]); 108| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], SHA256_K[ 6]); 109| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], SHA256_K[ 7]); 110| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], SHA256_K[ 8]); 111| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], SHA256_K[ 9]); 112| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], SHA256_K[10]); 113| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], SHA256_K[11]); 114| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], SHA256_K[12]); 115| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], SHA256_K[13]); 116| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], SHA256_K[14]); 117| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], SHA256_K[15]); 118| | 119| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], SHA256_K[16]); 120| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], SHA256_K[17]); 121| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], SHA256_K[18]); 122| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], SHA256_K[19]); 123| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], SHA256_K[20]); 124| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], SHA256_K[21]); 125| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], SHA256_K[22]); 126| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], SHA256_K[23]); 127| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], SHA256_K[24]); 128| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], SHA256_K[25]); 129| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], SHA256_K[26]); 130| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], SHA256_K[27]); 131| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], SHA256_K[28]); 132| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], SHA256_K[29]); 133| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], SHA256_K[30]); 134| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], SHA256_K[31]); 135| | 136| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], SHA256_K[32]); 137| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], SHA256_K[33]); 138| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], SHA256_K[34]); 139| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], SHA256_K[35]); 140| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], SHA256_K[36]); 141| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], SHA256_K[37]); 142| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], SHA256_K[38]); 143| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], SHA256_K[39]); 144| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], SHA256_K[40]); 145| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], SHA256_K[41]); 146| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], SHA256_K[42]); 147| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], SHA256_K[43]); 148| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], SHA256_K[44]); 149| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], SHA256_K[45]); 150| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], SHA256_K[46]); 151| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], SHA256_K[47]); 152| | 153| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], SHA256_K[48]); 154| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], SHA256_K[49]); 155| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], SHA256_K[50]); 156| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], SHA256_K[51]); 157| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], SHA256_K[52]); 158| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], SHA256_K[53]); 159| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], SHA256_K[54]); 160| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], SHA256_K[55]); 161| 0| SHA2_32_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], SHA256_K[56]); 162| 0| SHA2_32_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], SHA256_K[57]); 163| 0| SHA2_32_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], SHA256_K[58]); 164| 0| SHA2_32_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], SHA256_K[59]); 165| 0| SHA2_32_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], SHA256_K[60]); 166| 0| SHA2_32_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], SHA256_K[61]); 167| 0| SHA2_32_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], SHA256_K[62]); 168| 0| SHA2_32_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], SHA256_K[63]); 169| | 170| | // clang-format on 171| | 172| 0| A = (digest[0] += A); 173| 0| B = (digest[1] += B); 174| 0| C = (digest[2] += C); 175| 0| D = (digest[3] += D); 176| 0| E = (digest[4] += E); 177| 0| F = (digest[5] += F); 178| 0| G = (digest[6] += G); 179| 0| H = (digest[7] += H); 180| 0| } 181| 0|} _ZN5Botan7SHA_25610compress_nERNSt3__16vectorIjNS_16secure_allocatorIjEEEENS1_4spanIKhLm18446744073709551615EEEm: 215| 47.7k|void SHA_256::compress_n(digest_type& digest, std::span input, size_t blocks) { 216| 47.7k| SHA_256::compress_digest(digest, input, blocks); 217| 47.7k|} _ZN5Botan7SHA_2564initERNSt3__16vectorIjNS_16secure_allocatorIjEEEE: 219| 38.9k|void SHA_256::init(digest_type& digest) { 220| 38.9k| digest.assign({0x6A09E667, 0xBB67AE85, 0x3C6EF372, 0xA54FF53A, 0x510E527F, 0x9B05688C, 0x1F83D9AB, 0x5BE0CD19}); 221| 38.9k|} _ZN5Botan7SHA_2568add_dataENSt3__14spanIKhLm18446744073709551615EEE: 231| 40.5k|void SHA_256::add_data(std::span input) { 232| 40.5k| m_md.update(input); 233| 40.5k|} _ZN5Botan7SHA_25612final_resultENSt3__14spanIhLm18446744073709551615EEE: 235| 26.9k|void SHA_256::final_result(std::span output) { 236| 26.9k| m_md.final(output); 237| 26.9k|} _ZN5Botan7SHA_25619compress_digest_x86ERNSt3__16vectorIjNS_16secure_allocatorIjEEEENS1_4spanIKhLm18446744073709551615EEEm: 59| 47.7k| size_t blocks) { 60| 47.7k| const uint8_t* input = input_span.data(); 61| | 62| 47.7k| SIMD_4x32 S0 = SIMD_4x32::load_le(&digest[0]); // NOLINT(*container-data-pointer) 63| 47.7k| SIMD_4x32 S1 = SIMD_4x32::load_le(&digest[4]); 64| | 65| 47.7k| sha256_permute_state(S0, S1); 66| | 67| 137k| while(blocks > 0) { ------------------ | Branch (67:10): [True: 89.8k, False: 47.7k] ------------------ 68| 89.8k| const auto S0_SAVE = S0; 69| 89.8k| const auto S1_SAVE = S1; 70| | 71| 89.8k| auto W0 = SIMD_4x32::load_be(input); 72| 89.8k| auto W1 = SIMD_4x32::load_be(input + 16); 73| 89.8k| auto W2 = SIMD_4x32::load_be(input + 32); 74| 89.8k| auto W3 = SIMD_4x32::load_be(input + 48); 75| | 76| 89.8k| sha256_rnds4(S0, S1, W0, SIMD_4x32::load_le(&SHA256_K[0])); 77| 89.8k| sha256_rnds4(S0, S1, W1, SIMD_4x32::load_le(&SHA256_K[4])); 78| 89.8k| sha256_rnds4(S0, S1, W2, SIMD_4x32::load_le(&SHA256_K[8])); 79| 89.8k| sha256_rnds4(S0, S1, W3, SIMD_4x32::load_le(&SHA256_K[12])); 80| | 81| 89.8k| W0 = SIMD_4x32(_mm_sha256msg1_epu32(W0.raw(), W1.raw())); 82| 89.8k| W1 = SIMD_4x32(_mm_sha256msg1_epu32(W1.raw(), W2.raw())); 83| | 84| 89.8k| sha256_msg_exp(W2, W3, W0, W1); 85| | 86| 89.8k| sha256_rnds4(S0, S1, W0, SIMD_4x32::load_le(&SHA256_K[4 * 4])); 87| 89.8k| sha256_rnds4(S0, S1, W1, SIMD_4x32::load_le(&SHA256_K[4 * 5])); 88| | 89| 89.8k| sha256_msg_exp(W0, W1, W2, W3); 90| | 91| 89.8k| sha256_rnds4(S0, S1, W2, SIMD_4x32::load_le(&SHA256_K[4 * 6])); 92| 89.8k| sha256_rnds4(S0, S1, W3, SIMD_4x32::load_le(&SHA256_K[4 * 7])); 93| | 94| 89.8k| sha256_msg_exp(W2, W3, W0, W1); 95| | 96| 89.8k| sha256_rnds4(S0, S1, W0, SIMD_4x32::load_le(&SHA256_K[4 * 8])); 97| 89.8k| sha256_rnds4(S0, S1, W1, SIMD_4x32::load_le(&SHA256_K[4 * 9])); 98| | 99| 89.8k| sha256_msg_exp(W0, W1, W2, W3); 100| | 101| 89.8k| sha256_rnds4(S0, S1, W2, SIMD_4x32::load_le(&SHA256_K[4 * 10])); 102| 89.8k| sha256_rnds4(S0, S1, W3, SIMD_4x32::load_le(&SHA256_K[4 * 11])); 103| | 104| 89.8k| sha256_msg_exp(W2, W3, W0, W1); 105| | 106| 89.8k| sha256_rnds4(S0, S1, W0, SIMD_4x32::load_le(&SHA256_K[4 * 12])); 107| 89.8k| sha256_rnds4(S0, S1, W1, SIMD_4x32::load_le(&SHA256_K[4 * 13])); 108| | 109| 89.8k| sha256_msg_exp(W0, W1, W2, W3); 110| | 111| 89.8k| sha256_rnds4(S0, S1, W2, SIMD_4x32::load_le(&SHA256_K[4 * 14])); 112| 89.8k| sha256_rnds4(S0, S1, W3, SIMD_4x32::load_le(&SHA256_K[4 * 15])); 113| | 114| | // Add values back to state 115| 89.8k| S0 += S0_SAVE; 116| 89.8k| S1 += S1_SAVE; 117| | 118| 89.8k| input += 64; 119| 89.8k| blocks--; 120| 89.8k| } 121| | 122| 47.7k| sha256_permute_state(S1, S0); 123| | 124| 47.7k| S0.store_le(&digest[0]); // NOLINT(*container-data-pointer) 125| 47.7k| S1.store_le(&digest[4]); 126| 47.7k|} sha2_32_x86.cpp:_ZN5Botan12_GLOBAL__N_120sha256_permute_stateERNS_9SIMD_4x32ES2_: 44| 95.4k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_SHANI void sha256_permute_state(SIMD_4x32& S0, SIMD_4x32& S1) { 45| 95.4k| S0 = SIMD_4x32(_mm_shuffle_epi32(S0.raw(), 0b10110001)); // CDAB 46| 95.4k| S1 = SIMD_4x32(_mm_shuffle_epi32(S1.raw(), 0b00011011)); // EFGH 47| | 48| 95.4k| const auto T = SIMD_4x32::alignr8(S0, S1); // ABEF 49| | S1 = SIMD_4x32(_mm_blend_epi16(S1.raw(), S0.raw(), 0xF0)); // CDGH 50| 95.4k| S0 = T; 51| 95.4k|} sha2_32_x86.cpp:_ZN5Botan12_GLOBAL__N_112sha256_rnds4ERNS_9SIMD_4x32ES2_RKS1_S4_: 28| 1.43M| const SIMD_4x32& k) { 29| 1.43M| const auto mk = msg + k; 30| 1.43M| S1 = SIMD_4x32(_mm_sha256rnds2_epu32(S1.raw(), S0.raw(), mk.raw())); 31| 1.43M| S0 = SIMD_4x32(_mm_sha256rnds2_epu32(S0.raw(), S1.raw(), mk.shift_elems_right<2>().raw())); 32| 1.43M|} sha2_32_x86.cpp:_ZN5Botan12_GLOBAL__N_114sha256_msg_expERNS_9SIMD_4x32ES2_S2_S2_: 34| 538k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_SHANI void sha256_msg_exp(SIMD_4x32& W0, SIMD_4x32& W1, SIMD_4x32& W2, SIMD_4x32& W3) { 35| 538k| W2 += SIMD_4x32::alignr4(W1, W0); 36| 538k| W0 = SIMD_4x32(_mm_sha256msg1_epu32(W0.raw(), W1.raw())); 37| 538k| W2 = SIMD_4x32(_mm_sha256msg2_epu32(W2.raw(), W1.raw())); 38| | 39| 538k| W3 += SIMD_4x32::alignr4(W2, W1); 40| 538k| W1 = SIMD_4x32(_mm_sha256msg1_epu32(W1.raw(), W2.raw())); 41| 538k| W3 = SIMD_4x32(_mm_sha256msg2_epu32(W3.raw(), W2.raw())); 42| 538k|} _ZN5Botan7SHA_51215compress_digestERNSt3__16vectorImNS_16secure_allocatorImEEEENS1_4spanIKhLm18446744073709551615EEEm: 56| 17.0k|void SHA_512::compress_digest(digest_type& digest, std::span input, size_t blocks) { 57| 17.0k|#if defined(BOTAN_HAS_SHA2_64_X86) 58| 17.0k| if(CPUID::has(CPUID::Feature::SHA512)) { ------------------ | Branch (58:7): [True: 0, False: 17.0k] ------------------ 59| 0| return compress_digest_x86(digest, input, blocks); 60| 0| } 61| 17.0k|#endif 62| | 63| |#if defined(BOTAN_HAS_SHA2_64_ARMV8) 64| | if(CPUID::has(CPUID::Feature::SHA2_512)) { 65| | return compress_digest_armv8(digest, input, blocks); 66| | } 67| |#endif 68| | 69| 17.0k|#if defined(BOTAN_HAS_SHA2_64_X86_AVX512) 70| 17.0k| if(CPUID::has(CPUID::Feature::AVX512, CPUID::Feature::BMI)) { ------------------ | Branch (70:7): [True: 0, False: 17.0k] ------------------ 71| 0| return compress_digest_x86_avx512(digest, input, blocks); 72| 0| } 73| 17.0k|#endif 74| | 75| 17.0k|#if defined(BOTAN_HAS_SHA2_64_X86_AVX2) 76| 17.0k| if(CPUID::has(CPUID::Feature::AVX2, CPUID::Feature::BMI)) { ------------------ | Branch (76:7): [True: 17.0k, False: 0] ------------------ 77| 17.0k| return compress_digest_x86_avx2(digest, input, blocks); 78| 17.0k| } 79| 0|#endif 80| | 81| 0| uint64_t A = digest[0]; 82| 0| uint64_t B = digest[1]; 83| 0| uint64_t C = digest[2]; 84| 0| uint64_t D = digest[3]; 85| 0| uint64_t E = digest[4]; 86| 0| uint64_t F = digest[5]; 87| 0| uint64_t G = digest[6]; 88| 0| uint64_t H = digest[7]; 89| | 90| 0| std::array W{}; 91| | 92| 0| BufferSlicer in(input); 93| | 94| 0| for(size_t i = 0; i != blocks; ++i) { ------------------ | Branch (94:22): [True: 0, False: 0] ------------------ 95| 0| load_be(W, in.take()); 96| | 97| | // clang-format off 98| | 99| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], SHA512_K[ 0]); 100| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], SHA512_K[ 1]); 101| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], SHA512_K[ 2]); 102| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], SHA512_K[ 3]); 103| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], SHA512_K[ 4]); 104| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], SHA512_K[ 5]); 105| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], SHA512_K[ 6]); 106| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], SHA512_K[ 7]); 107| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], SHA512_K[ 8]); 108| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], SHA512_K[ 9]); 109| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], SHA512_K[10]); 110| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], SHA512_K[11]); 111| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], SHA512_K[12]); 112| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], SHA512_K[13]); 113| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], SHA512_K[14]); 114| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], SHA512_K[15]); 115| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], SHA512_K[16]); 116| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], SHA512_K[17]); 117| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], SHA512_K[18]); 118| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], SHA512_K[19]); 119| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], SHA512_K[20]); 120| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], SHA512_K[21]); 121| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], SHA512_K[22]); 122| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], SHA512_K[23]); 123| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], SHA512_K[24]); 124| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], SHA512_K[25]); 125| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], SHA512_K[26]); 126| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], SHA512_K[27]); 127| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], SHA512_K[28]); 128| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], SHA512_K[29]); 129| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], SHA512_K[30]); 130| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], SHA512_K[31]); 131| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], SHA512_K[32]); 132| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], SHA512_K[33]); 133| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], SHA512_K[34]); 134| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], SHA512_K[35]); 135| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], SHA512_K[36]); 136| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], SHA512_K[37]); 137| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], SHA512_K[38]); 138| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], SHA512_K[39]); 139| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], SHA512_K[40]); 140| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], SHA512_K[41]); 141| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], SHA512_K[42]); 142| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], SHA512_K[43]); 143| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], SHA512_K[44]); 144| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], SHA512_K[45]); 145| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], SHA512_K[46]); 146| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], SHA512_K[47]); 147| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], SHA512_K[48]); 148| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], SHA512_K[49]); 149| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], SHA512_K[50]); 150| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], SHA512_K[51]); 151| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], SHA512_K[52]); 152| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], SHA512_K[53]); 153| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], SHA512_K[54]); 154| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], SHA512_K[55]); 155| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], SHA512_K[56]); 156| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], SHA512_K[57]); 157| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], SHA512_K[58]); 158| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], SHA512_K[59]); 159| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], SHA512_K[60]); 160| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], SHA512_K[61]); 161| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], SHA512_K[62]); 162| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], SHA512_K[63]); 163| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], SHA512_K[64]); 164| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], SHA512_K[65]); 165| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], SHA512_K[66]); 166| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], SHA512_K[67]); 167| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], SHA512_K[68]); 168| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], SHA512_K[69]); 169| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], SHA512_K[70]); 170| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], SHA512_K[71]); 171| 0| SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], SHA512_K[72]); 172| 0| SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], SHA512_K[73]); 173| 0| SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], SHA512_K[74]); 174| 0| SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], SHA512_K[75]); 175| 0| SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], SHA512_K[76]); 176| 0| SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], SHA512_K[77]); 177| 0| SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], SHA512_K[78]); 178| 0| SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], SHA512_K[79]); 179| | 180| | // clang-format on 181| | 182| 0| A = (digest[0] += A); 183| 0| B = (digest[1] += B); 184| 0| C = (digest[2] += C); 185| 0| D = (digest[3] += D); 186| 0| E = (digest[4] += E); 187| 0| F = (digest[5] += F); 188| 0| G = (digest[6] += G); 189| 0| H = (digest[7] += H); 190| 0| } 191| 0|} _ZN5Botan7SHA_38410compress_nERNSt3__16vectorImNS_16secure_allocatorImEEEENS1_4spanIKhLm18446744073709551615EEEm: 209| 15.9k|void SHA_384::compress_n(digest_type& digest, std::span input, size_t blocks) { 210| 15.9k| SHA_512::compress_digest(digest, input, blocks); 211| 15.9k|} _ZN5Botan7SHA_51210compress_nERNSt3__16vectorImNS_16secure_allocatorImEEEENS1_4spanIKhLm18446744073709551615EEEm: 213| 1.10k|void SHA_512::compress_n(digest_type& digest, std::span input, size_t blocks) { 214| 1.10k| SHA_512::compress_digest(digest, input, blocks); 215| 1.10k|} _ZN5Botan7SHA_3844initERNSt3__16vectorImNS_16secure_allocatorImEEEE: 228| 9.42k|void SHA_384::init(digest_type& digest) { 229| 9.42k| digest.assign({0xCBBB9D5DC1059ED8, 230| 9.42k| 0x629A292A367CD507, 231| 9.42k| 0x9159015A3070DD17, 232| 9.42k| 0x152FECD8F70E5939, 233| 9.42k| 0x67332667FFC00B31, 234| 9.42k| 0x8EB44A8768581511, 235| 9.42k| 0xDB0C2E0D64F98FA7, 236| 9.42k| 0x47B5481DBEFA4FA4}); 237| 9.42k|} _ZN5Botan7SHA_5124initERNSt3__16vectorImNS_16secure_allocatorImEEEE: 239| 1.65k|void SHA_512::init(digest_type& digest) { 240| 1.65k| digest.assign({0x6A09E667F3BCC908, 241| 1.65k| 0xBB67AE8584CAA73B, 242| 1.65k| 0x3C6EF372FE94F82B, 243| 1.65k| 0xA54FF53A5F1D36F1, 244| 1.65k| 0x510E527FADE682D1, 245| 1.65k| 0x9B05688C2B3E6C1F, 246| 1.65k| 0x1F83D9ABFB41BD6B, 247| 1.65k| 0x5BE0CD19137E2179}); 248| 1.65k|} _ZN5Botan7SHA_3848add_dataENSt3__14spanIKhLm18446744073709551615EEE: 274| 16.8k|void SHA_384::add_data(std::span input) { 275| 16.8k| m_md.update(input); 276| 16.8k|} _ZN5Botan7SHA_5128add_dataENSt3__14spanIKhLm18446744073709551615EEE: 278| 569|void SHA_512::add_data(std::span input) { 279| 569| m_md.update(input); 280| 569|} _ZN5Botan7SHA_38412final_resultENSt3__14spanIhLm18446744073709551615EEE: 286| 6.86k|void SHA_384::final_result(std::span output) { 287| 6.86k| m_md.final(output); 288| 6.86k|} _ZN5Botan7SHA_51212final_resultENSt3__14spanIhLm18446744073709551615EEE: 290| 558|void SHA_512::final_result(std::span output) { 291| 558| m_md.final(output); 292| 558|} _ZN5Botan7SHA_51224compress_digest_x86_avx2ERNSt3__16vectorImNS_16secure_allocatorImEEEENS1_4spanIKhLm18446744073709551615EEEm: 44| 17.0k| size_t blocks) { 45| 17.0k| alignas(64) uint64_t W[16] = {0}; 46| 17.0k| alignas(64) uint64_t W2[80]; 47| | 48| 17.0k| uint64_t A = digest[0]; 49| 17.0k| uint64_t B = digest[1]; 50| 17.0k| uint64_t C = digest[2]; 51| 17.0k| uint64_t D = digest[3]; 52| 17.0k| uint64_t E = digest[4]; 53| 17.0k| uint64_t F = digest[5]; 54| 17.0k| uint64_t G = digest[6]; 55| 17.0k| uint64_t H = digest[7]; 56| | 57| 17.0k| const uint8_t* data = input.data(); 58| | 59| 24.3k| while(blocks >= 2) { ------------------ | Branch (59:10): [True: 7.27k, False: 17.0k] ------------------ 60| 7.27k| SIMD_4x64 WS[8]; 61| | 62| 65.4k| for(size_t i = 0; i < 8; i++) { ------------------ | Branch (62:25): [True: 58.2k, False: 7.27k] ------------------ 63| 58.2k| WS[i] = SIMD_4x64::load_be2(&data[16 * i], &data[128 + 16 * i]); 64| 58.2k| auto WK = WS[i] + SIMD_4x64::broadcast_2x64(&SHA512_K[2 * i]); 65| 58.2k| WK.store_le2(&W[2 * i], &W2[2 * i]); 66| 58.2k| } 67| | 68| 7.27k| data += 2 * 128; 69| 7.27k| blocks -= 2; 70| | 71| | // First 64 rounds of SHA-512 72| 36.3k| for(size_t r = 0; r != 64; r += 16) { ------------------ | Branch (72:25): [True: 29.1k, False: 7.27k] ------------------ 73| 29.1k| auto w = sha512_next_w(WS) + SIMD_4x64::broadcast_2x64(&SHA512_K[r + 16]); 74| 29.1k| SHA2_64_F(A, B, C, D, E, F, G, H, W[0]); 75| 29.1k| SHA2_64_F(H, A, B, C, D, E, F, G, W[1]); 76| 29.1k| w.store_le2(&W[0], &W2[r + 16]); 77| | 78| 29.1k| w = sha512_next_w(WS) + SIMD_4x64::broadcast_2x64(&SHA512_K[r + 18]); 79| 29.1k| SHA2_64_F(G, H, A, B, C, D, E, F, W[2]); 80| 29.1k| SHA2_64_F(F, G, H, A, B, C, D, E, W[3]); 81| 29.1k| w.store_le2(&W[2], &W2[r + 18]); 82| | 83| 29.1k| w = sha512_next_w(WS) + SIMD_4x64::broadcast_2x64(&SHA512_K[r + 20]); 84| 29.1k| SHA2_64_F(E, F, G, H, A, B, C, D, W[4]); 85| 29.1k| SHA2_64_F(D, E, F, G, H, A, B, C, W[5]); 86| 29.1k| w.store_le2(&W[4], &W2[r + 20]); 87| | 88| 29.1k| w = sha512_next_w(WS) + SIMD_4x64::broadcast_2x64(&SHA512_K[r + 22]); 89| 29.1k| SHA2_64_F(C, D, E, F, G, H, A, B, W[6]); 90| 29.1k| SHA2_64_F(B, C, D, E, F, G, H, A, W[7]); 91| 29.1k| w.store_le2(&W[6], &W2[r + 22]); 92| | 93| 29.1k| w = sha512_next_w(WS) + SIMD_4x64::broadcast_2x64(&SHA512_K[r + 24]); 94| 29.1k| SHA2_64_F(A, B, C, D, E, F, G, H, W[8]); 95| 29.1k| SHA2_64_F(H, A, B, C, D, E, F, G, W[9]); 96| 29.1k| w.store_le2(&W[8], &W2[r + 24]); 97| | 98| 29.1k| w = sha512_next_w(WS) + SIMD_4x64::broadcast_2x64(&SHA512_K[r + 26]); 99| 29.1k| SHA2_64_F(G, H, A, B, C, D, E, F, W[10]); 100| 29.1k| SHA2_64_F(F, G, H, A, B, C, D, E, W[11]); 101| 29.1k| w.store_le2(&W[10], &W2[r + 26]); 102| | 103| 29.1k| w = sha512_next_w(WS) + SIMD_4x64::broadcast_2x64(&SHA512_K[r + 28]); 104| 29.1k| SHA2_64_F(E, F, G, H, A, B, C, D, W[12]); 105| 29.1k| SHA2_64_F(D, E, F, G, H, A, B, C, W[13]); 106| 29.1k| w.store_le2(&W[12], &W2[r + 28]); 107| | 108| 29.1k| w = sha512_next_w(WS) + SIMD_4x64::broadcast_2x64(&SHA512_K[r + 30]); 109| 29.1k| SHA2_64_F(C, D, E, F, G, H, A, B, W[14]); 110| 29.1k| SHA2_64_F(B, C, D, E, F, G, H, A, W[15]); 111| 29.1k| w.store_le2(&W[14], &W2[r + 30]); 112| 29.1k| } 113| | 114| | // Final 16 rounds of SHA-512 115| 7.27k| SHA2_64_F(A, B, C, D, E, F, G, H, W[0]); 116| 7.27k| SHA2_64_F(H, A, B, C, D, E, F, G, W[1]); 117| 7.27k| SHA2_64_F(G, H, A, B, C, D, E, F, W[2]); 118| 7.27k| SHA2_64_F(F, G, H, A, B, C, D, E, W[3]); 119| 7.27k| SHA2_64_F(E, F, G, H, A, B, C, D, W[4]); 120| 7.27k| SHA2_64_F(D, E, F, G, H, A, B, C, W[5]); 121| 7.27k| SHA2_64_F(C, D, E, F, G, H, A, B, W[6]); 122| 7.27k| SHA2_64_F(B, C, D, E, F, G, H, A, W[7]); 123| 7.27k| SHA2_64_F(A, B, C, D, E, F, G, H, W[8]); 124| 7.27k| SHA2_64_F(H, A, B, C, D, E, F, G, W[9]); 125| 7.27k| SHA2_64_F(G, H, A, B, C, D, E, F, W[10]); 126| 7.27k| SHA2_64_F(F, G, H, A, B, C, D, E, W[11]); 127| 7.27k| SHA2_64_F(E, F, G, H, A, B, C, D, W[12]); 128| 7.27k| SHA2_64_F(D, E, F, G, H, A, B, C, W[13]); 129| 7.27k| SHA2_64_F(C, D, E, F, G, H, A, B, W[14]); 130| 7.27k| SHA2_64_F(B, C, D, E, F, G, H, A, W[15]); 131| | 132| 7.27k| A = (digest[0] += A); 133| 7.27k| B = (digest[1] += B); 134| 7.27k| C = (digest[2] += C); 135| 7.27k| D = (digest[3] += D); 136| 7.27k| E = (digest[4] += E); 137| 7.27k| F = (digest[5] += F); 138| 7.27k| G = (digest[6] += G); 139| 7.27k| H = (digest[7] += H); 140| | 141| | // Second block of SHA-512 compression, with pre-expanded message 142| 7.27k| SHA2_64_F(A, B, C, D, E, F, G, H, W2[0]); 143| 7.27k| SHA2_64_F(H, A, B, C, D, E, F, G, W2[1]); 144| 7.27k| SHA2_64_F(G, H, A, B, C, D, E, F, W2[2]); 145| 7.27k| SHA2_64_F(F, G, H, A, B, C, D, E, W2[3]); 146| 7.27k| SHA2_64_F(E, F, G, H, A, B, C, D, W2[4]); 147| 7.27k| SHA2_64_F(D, E, F, G, H, A, B, C, W2[5]); 148| 7.27k| SHA2_64_F(C, D, E, F, G, H, A, B, W2[6]); 149| 7.27k| SHA2_64_F(B, C, D, E, F, G, H, A, W2[7]); 150| 7.27k| SHA2_64_F(A, B, C, D, E, F, G, H, W2[8]); 151| 7.27k| SHA2_64_F(H, A, B, C, D, E, F, G, W2[9]); 152| 7.27k| SHA2_64_F(G, H, A, B, C, D, E, F, W2[10]); 153| 7.27k| SHA2_64_F(F, G, H, A, B, C, D, E, W2[11]); 154| 7.27k| SHA2_64_F(E, F, G, H, A, B, C, D, W2[12]); 155| 7.27k| SHA2_64_F(D, E, F, G, H, A, B, C, W2[13]); 156| 7.27k| SHA2_64_F(C, D, E, F, G, H, A, B, W2[14]); 157| 7.27k| SHA2_64_F(B, C, D, E, F, G, H, A, W2[15]); 158| | 159| 7.27k| SHA2_64_F(A, B, C, D, E, F, G, H, W2[16]); 160| 7.27k| SHA2_64_F(H, A, B, C, D, E, F, G, W2[17]); 161| 7.27k| SHA2_64_F(G, H, A, B, C, D, E, F, W2[18]); 162| 7.27k| SHA2_64_F(F, G, H, A, B, C, D, E, W2[19]); 163| 7.27k| SHA2_64_F(E, F, G, H, A, B, C, D, W2[20]); 164| 7.27k| SHA2_64_F(D, E, F, G, H, A, B, C, W2[21]); 165| 7.27k| SHA2_64_F(C, D, E, F, G, H, A, B, W2[22]); 166| 7.27k| SHA2_64_F(B, C, D, E, F, G, H, A, W2[23]); 167| 7.27k| SHA2_64_F(A, B, C, D, E, F, G, H, W2[24]); 168| 7.27k| SHA2_64_F(H, A, B, C, D, E, F, G, W2[25]); 169| 7.27k| SHA2_64_F(G, H, A, B, C, D, E, F, W2[26]); 170| 7.27k| SHA2_64_F(F, G, H, A, B, C, D, E, W2[27]); 171| 7.27k| SHA2_64_F(E, F, G, H, A, B, C, D, W2[28]); 172| 7.27k| SHA2_64_F(D, E, F, G, H, A, B, C, W2[29]); 173| 7.27k| SHA2_64_F(C, D, E, F, G, H, A, B, W2[30]); 174| 7.27k| SHA2_64_F(B, C, D, E, F, G, H, A, W2[31]); 175| | 176| 7.27k| SHA2_64_F(A, B, C, D, E, F, G, H, W2[32]); 177| 7.27k| SHA2_64_F(H, A, B, C, D, E, F, G, W2[33]); 178| 7.27k| SHA2_64_F(G, H, A, B, C, D, E, F, W2[34]); 179| 7.27k| SHA2_64_F(F, G, H, A, B, C, D, E, W2[35]); 180| 7.27k| SHA2_64_F(E, F, G, H, A, B, C, D, W2[36]); 181| 7.27k| SHA2_64_F(D, E, F, G, H, A, B, C, W2[37]); 182| 7.27k| SHA2_64_F(C, D, E, F, G, H, A, B, W2[38]); 183| 7.27k| SHA2_64_F(B, C, D, E, F, G, H, A, W2[39]); 184| 7.27k| SHA2_64_F(A, B, C, D, E, F, G, H, W2[40]); 185| 7.27k| SHA2_64_F(H, A, B, C, D, E, F, G, W2[41]); 186| 7.27k| SHA2_64_F(G, H, A, B, C, D, E, F, W2[42]); 187| 7.27k| SHA2_64_F(F, G, H, A, B, C, D, E, W2[43]); 188| 7.27k| SHA2_64_F(E, F, G, H, A, B, C, D, W2[44]); 189| 7.27k| SHA2_64_F(D, E, F, G, H, A, B, C, W2[45]); 190| 7.27k| SHA2_64_F(C, D, E, F, G, H, A, B, W2[46]); 191| 7.27k| SHA2_64_F(B, C, D, E, F, G, H, A, W2[47]); 192| | 193| 7.27k| SHA2_64_F(A, B, C, D, E, F, G, H, W2[48]); 194| 7.27k| SHA2_64_F(H, A, B, C, D, E, F, G, W2[49]); 195| 7.27k| SHA2_64_F(G, H, A, B, C, D, E, F, W2[50]); 196| 7.27k| SHA2_64_F(F, G, H, A, B, C, D, E, W2[51]); 197| 7.27k| SHA2_64_F(E, F, G, H, A, B, C, D, W2[52]); 198| 7.27k| SHA2_64_F(D, E, F, G, H, A, B, C, W2[53]); 199| 7.27k| SHA2_64_F(C, D, E, F, G, H, A, B, W2[54]); 200| 7.27k| SHA2_64_F(B, C, D, E, F, G, H, A, W2[55]); 201| 7.27k| SHA2_64_F(A, B, C, D, E, F, G, H, W2[56]); 202| 7.27k| SHA2_64_F(H, A, B, C, D, E, F, G, W2[57]); 203| 7.27k| SHA2_64_F(G, H, A, B, C, D, E, F, W2[58]); 204| 7.27k| SHA2_64_F(F, G, H, A, B, C, D, E, W2[59]); 205| 7.27k| SHA2_64_F(E, F, G, H, A, B, C, D, W2[60]); 206| 7.27k| SHA2_64_F(D, E, F, G, H, A, B, C, W2[61]); 207| 7.27k| SHA2_64_F(C, D, E, F, G, H, A, B, W2[62]); 208| 7.27k| SHA2_64_F(B, C, D, E, F, G, H, A, W2[63]); 209| | 210| 7.27k| SHA2_64_F(A, B, C, D, E, F, G, H, W2[64]); 211| 7.27k| SHA2_64_F(H, A, B, C, D, E, F, G, W2[65]); 212| 7.27k| SHA2_64_F(G, H, A, B, C, D, E, F, W2[66]); 213| 7.27k| SHA2_64_F(F, G, H, A, B, C, D, E, W2[67]); 214| 7.27k| SHA2_64_F(E, F, G, H, A, B, C, D, W2[68]); 215| 7.27k| SHA2_64_F(D, E, F, G, H, A, B, C, W2[69]); 216| 7.27k| SHA2_64_F(C, D, E, F, G, H, A, B, W2[70]); 217| 7.27k| SHA2_64_F(B, C, D, E, F, G, H, A, W2[71]); 218| 7.27k| SHA2_64_F(A, B, C, D, E, F, G, H, W2[72]); 219| 7.27k| SHA2_64_F(H, A, B, C, D, E, F, G, W2[73]); 220| 7.27k| SHA2_64_F(G, H, A, B, C, D, E, F, W2[74]); 221| 7.27k| SHA2_64_F(F, G, H, A, B, C, D, E, W2[75]); 222| 7.27k| SHA2_64_F(E, F, G, H, A, B, C, D, W2[76]); 223| 7.27k| SHA2_64_F(D, E, F, G, H, A, B, C, W2[77]); 224| 7.27k| SHA2_64_F(C, D, E, F, G, H, A, B, W2[78]); 225| 7.27k| SHA2_64_F(B, C, D, E, F, G, H, A, W2[79]); 226| | 227| 7.27k| A = (digest[0] += A); 228| 7.27k| B = (digest[1] += B); 229| 7.27k| C = (digest[2] += C); 230| 7.27k| D = (digest[3] += D); 231| 7.27k| E = (digest[4] += E); 232| 7.27k| F = (digest[5] += F); 233| 7.27k| G = (digest[6] += G); 234| 7.27k| H = (digest[7] += H); 235| 7.27k| } 236| | 237| 33.1k| while(blocks > 0) { ------------------ | Branch (237:10): [True: 16.0k, False: 17.0k] ------------------ 238| 16.0k| SIMD_2x64 WS[8]; 239| | 240| 144k| for(size_t i = 0; i < 8; i++) { ------------------ | Branch (240:25): [True: 128k, False: 16.0k] ------------------ 241| 128k| WS[i] = SIMD_2x64::load_be(&data[16 * i]); 242| 128k| const auto WK = WS[i] + SIMD_2x64::load_le(&SHA512_K[2 * i]); 243| 128k| WK.store_le(&W[2 * i]); 244| 128k| } 245| | 246| 16.0k| data += 128; 247| 16.0k| blocks -= 1; 248| | 249| | // First 64 rounds of SHA-512 250| 80.2k| for(size_t r = 0; r != 64; r += 16) { ------------------ | Branch (250:25): [True: 64.1k, False: 16.0k] ------------------ 251| 64.1k| auto w = sha512_next_w(WS) + SIMD_2x64::load_le(&SHA512_K[r + 16]); 252| 64.1k| SHA2_64_F(A, B, C, D, E, F, G, H, W[0]); 253| 64.1k| SHA2_64_F(H, A, B, C, D, E, F, G, W[1]); 254| 64.1k| w.store_le(&W[0]); 255| | 256| 64.1k| w = sha512_next_w(WS) + SIMD_2x64::load_le(&SHA512_K[r + 18]); 257| 64.1k| SHA2_64_F(G, H, A, B, C, D, E, F, W[2]); 258| 64.1k| SHA2_64_F(F, G, H, A, B, C, D, E, W[3]); 259| 64.1k| w.store_le(&W[2]); 260| | 261| 64.1k| w = sha512_next_w(WS) + SIMD_2x64::load_le(&SHA512_K[r + 20]); 262| 64.1k| SHA2_64_F(E, F, G, H, A, B, C, D, W[4]); 263| 64.1k| SHA2_64_F(D, E, F, G, H, A, B, C, W[5]); 264| 64.1k| w.store_le(&W[4]); 265| | 266| 64.1k| w = sha512_next_w(WS) + SIMD_2x64::load_le(&SHA512_K[r + 22]); 267| 64.1k| SHA2_64_F(C, D, E, F, G, H, A, B, W[6]); 268| 64.1k| SHA2_64_F(B, C, D, E, F, G, H, A, W[7]); 269| 64.1k| w.store_le(&W[6]); 270| | 271| 64.1k| w = sha512_next_w(WS) + SIMD_2x64::load_le(&SHA512_K[r + 24]); 272| 64.1k| SHA2_64_F(A, B, C, D, E, F, G, H, W[8]); 273| 64.1k| SHA2_64_F(H, A, B, C, D, E, F, G, W[9]); 274| 64.1k| w.store_le(&W[8]); 275| | 276| 64.1k| w = sha512_next_w(WS) + SIMD_2x64::load_le(&SHA512_K[r + 26]); 277| 64.1k| SHA2_64_F(G, H, A, B, C, D, E, F, W[10]); 278| 64.1k| SHA2_64_F(F, G, H, A, B, C, D, E, W[11]); 279| 64.1k| w.store_le(&W[10]); 280| | 281| 64.1k| w = sha512_next_w(WS) + SIMD_2x64::load_le(&SHA512_K[r + 28]); 282| 64.1k| SHA2_64_F(E, F, G, H, A, B, C, D, W[12]); 283| 64.1k| SHA2_64_F(D, E, F, G, H, A, B, C, W[13]); 284| 64.1k| w.store_le(&W[12]); 285| | 286| 64.1k| w = sha512_next_w(WS) + SIMD_2x64::load_le(&SHA512_K[r + 30]); 287| 64.1k| SHA2_64_F(C, D, E, F, G, H, A, B, W[14]); 288| 64.1k| SHA2_64_F(B, C, D, E, F, G, H, A, W[15]); 289| 64.1k| w.store_le(&W[14]); 290| 64.1k| } 291| | 292| | // Final 16 rounds of SHA-512 293| 16.0k| SHA2_64_F(A, B, C, D, E, F, G, H, W[0]); 294| 16.0k| SHA2_64_F(H, A, B, C, D, E, F, G, W[1]); 295| 16.0k| SHA2_64_F(G, H, A, B, C, D, E, F, W[2]); 296| 16.0k| SHA2_64_F(F, G, H, A, B, C, D, E, W[3]); 297| 16.0k| SHA2_64_F(E, F, G, H, A, B, C, D, W[4]); 298| 16.0k| SHA2_64_F(D, E, F, G, H, A, B, C, W[5]); 299| 16.0k| SHA2_64_F(C, D, E, F, G, H, A, B, W[6]); 300| 16.0k| SHA2_64_F(B, C, D, E, F, G, H, A, W[7]); 301| 16.0k| SHA2_64_F(A, B, C, D, E, F, G, H, W[8]); 302| 16.0k| SHA2_64_F(H, A, B, C, D, E, F, G, W[9]); 303| 16.0k| SHA2_64_F(G, H, A, B, C, D, E, F, W[10]); 304| 16.0k| SHA2_64_F(F, G, H, A, B, C, D, E, W[11]); 305| 16.0k| SHA2_64_F(E, F, G, H, A, B, C, D, W[12]); 306| 16.0k| SHA2_64_F(D, E, F, G, H, A, B, C, W[13]); 307| 16.0k| SHA2_64_F(C, D, E, F, G, H, A, B, W[14]); 308| 16.0k| SHA2_64_F(B, C, D, E, F, G, H, A, W[15]); 309| | 310| 16.0k| A = (digest[0] += A); 311| 16.0k| B = (digest[1] += B); 312| 16.0k| C = (digest[2] += C); 313| 16.0k| D = (digest[3] += D); 314| 16.0k| E = (digest[4] += E); 315| 16.0k| F = (digest[5] += F); 316| 16.0k| G = (digest[6] += G); 317| 16.0k| H = (digest[7] += H); 318| 16.0k| } 319| 17.0k|} sha2_64_avx2.cpp:_ZN5Botan12_GLOBAL__N_113sha512_next_wINS_9SIMD_4x64EEET_PS3_: 19| 232k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_AVX2_BMI2 SIMD_T sha512_next_w(SIMD_T x[8]) { 20| 232k| const auto t0 = SIMD_T::alignr8(x[1], x[0]); 21| 232k| const auto t1 = SIMD_T::alignr8(x[5], x[4]); 22| | 23| 232k| const auto s0 = t0.template rotr<1>() ^ t0.template rotr<8>() ^ t0.template shr<7>(); 24| 232k| const auto s1 = x[7].template rotr<19>() ^ x[7].template rotr<61>() ^ x[7].template shr<6>(); 25| | 26| 232k| const auto nx = x[0] + s0 + s1 + t1; 27| | 28| 232k| x[0] = x[1]; 29| 232k| x[1] = x[2]; 30| 232k| x[2] = x[3]; 31| 232k| x[3] = x[4]; 32| 232k| x[4] = x[5]; 33| 232k| x[5] = x[6]; 34| 232k| x[6] = x[7]; 35| 232k| x[7] = nx; 36| | 37| 232k| return x[7]; 38| 232k|} sha2_64_avx2.cpp:_ZN5Botan12_GLOBAL__N_113sha512_next_wINS_9SIMD_2x64EEET_PS3_: 19| 513k|BOTAN_FORCE_INLINE BOTAN_FN_ISA_AVX2_BMI2 SIMD_T sha512_next_w(SIMD_T x[8]) { 20| 513k| const auto t0 = SIMD_T::alignr8(x[1], x[0]); 21| 513k| const auto t1 = SIMD_T::alignr8(x[5], x[4]); 22| | 23| 513k| const auto s0 = t0.template rotr<1>() ^ t0.template rotr<8>() ^ t0.template shr<7>(); 24| 513k| const auto s1 = x[7].template rotr<19>() ^ x[7].template rotr<61>() ^ x[7].template shr<6>(); 25| | 26| 513k| const auto nx = x[0] + s0 + s1 + t1; 27| | 28| 513k| x[0] = x[1]; 29| 513k| x[1] = x[2]; 30| 513k| x[2] = x[3]; 31| 513k| x[3] = x[4]; 32| 513k| x[4] = x[5]; 33| 513k| x[5] = x[6]; 34| 513k| x[6] = x[7]; 35| 513k| x[7] = nx; 36| | 37| 513k| return x[7]; 38| 513k|} _ZN5Botan3KDF6createENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_: 74| 1.40k|std::unique_ptr KDF::create(std::string_view algo_spec, std::string_view provider) { 75| 1.40k| const AlgorithmSpec req(algo_spec); 76| | 77| 1.40k|#if defined(BOTAN_HAS_HKDF) 78| 1.40k| if(auto m = req.match("HKDF({prf})")) { ------------------ | Branch (78:12): [True: 0, False: 1.40k] ------------------ 79| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (79:10): [True: 0, False: 0] | Branch (79:30): [True: 0, False: 0] ------------------ 80| 0| return kdf_create_mac_or_hash(m->str("prf")); 81| 0| } 82| 0| } 83| | 84| 1.40k| if(auto m = req.match("HKDF-Extract({prf})")) { ------------------ | Branch (84:12): [True: 0, False: 1.40k] ------------------ 85| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (85:10): [True: 0, False: 0] | Branch (85:30): [True: 0, False: 0] ------------------ 86| 0| return kdf_create_mac_or_hash(m->str("prf")); 87| 0| } 88| 0| } 89| | 90| 1.40k| if(auto m = req.match("HKDF-Expand({prf})")) { ------------------ | Branch (90:12): [True: 0, False: 1.40k] ------------------ 91| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (91:10): [True: 0, False: 0] | Branch (91:30): [True: 0, False: 0] ------------------ 92| 0| return kdf_create_mac_or_hash(m->str("prf")); 93| 0| } 94| 0| } 95| 1.40k|#endif 96| | 97| 1.40k|#if defined(BOTAN_HAS_KDF2) 98| 1.40k| if(auto m = req.match("KDF2({hash})")) { ------------------ | Branch (98:12): [True: 0, False: 1.40k] ------------------ 99| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (99:10): [True: 0, False: 0] | Branch (99:30): [True: 0, False: 0] ------------------ 100| 0| if(auto hash = HashFunction::create(m->str("hash"))) { ------------------ | Branch (100:18): [True: 0, False: 0] ------------------ 101| 0| return std::make_unique(std::move(hash)); 102| 0| } 103| 0| } 104| 0| } 105| 1.40k|#endif 106| | 107| 1.40k|#if defined(BOTAN_HAS_KDF1_18033) 108| 1.40k| if(auto m = req.match("KDF1-18033({hash})")) { ------------------ | Branch (108:12): [True: 0, False: 1.40k] ------------------ 109| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (109:10): [True: 0, False: 0] | Branch (109:30): [True: 0, False: 0] ------------------ 110| 0| if(auto hash = HashFunction::create(m->str("hash"))) { ------------------ | Branch (110:18): [True: 0, False: 0] ------------------ 111| 0| return std::make_unique(std::move(hash)); 112| 0| } 113| 0| } 114| 0| } 115| 1.40k|#endif 116| | 117| 1.40k|#if defined(BOTAN_HAS_KDF1) 118| 1.40k| if(auto m = req.match("KDF1({hash})")) { ------------------ | Branch (118:12): [True: 0, False: 1.40k] ------------------ 119| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (119:10): [True: 0, False: 0] | Branch (119:30): [True: 0, False: 0] ------------------ 120| 0| if(auto hash = HashFunction::create(m->str("hash"))) { ------------------ | Branch (120:18): [True: 0, False: 0] ------------------ 121| 0| return std::make_unique(std::move(hash)); 122| 0| } 123| 0| } 124| 0| } 125| 1.40k|#endif 126| | 127| 1.40k|#if defined(BOTAN_HAS_TLS_V12_PRF) 128| 1.40k| if(auto m = req.match("TLS-12-PRF({prf})")) { ------------------ | Branch (128:12): [True: 1.40k, False: 0] ------------------ 129| 1.40k| if(provider.empty() || provider == "base") { ------------------ | Branch (129:10): [True: 1.40k, False: 0] | Branch (129:30): [True: 0, False: 0] ------------------ 130| 1.40k| return kdf_create_mac_or_hash(m->str("prf")); 131| 1.40k| } 132| 1.40k| } 133| 0|#endif 134| | 135| 0|#if defined(BOTAN_HAS_X942_PRF) 136| 0| if(auto m = req.match("X9.42-PRF({kek:str})")) { ------------------ | Branch (136:12): [True: 0, False: 0] ------------------ 137| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (137:10): [True: 0, False: 0] | Branch (137:30): [True: 0, False: 0] ------------------ 138| 0| return std::make_unique(m->str("kek")); 139| 0| } 140| 0| } 141| 0|#endif 142| | 143| 0|#if defined(BOTAN_HAS_SP800_108) 144| 0| if(auto m = req.match("SP800-108-Counter({prf},{r:int=32},{L:int=32})")) { ------------------ | Branch (144:12): [True: 0, False: 0] ------------------ 145| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (145:10): [True: 0, False: 0] | Branch (145:30): [True: 0, False: 0] ------------------ 146| 0| return kdf_create_mac_or_hash(m->str("prf"), m->integer("r"), m->integer("L")); 147| 0| } 148| 0| } 149| | 150| 0| if(auto m = req.match("SP800-108-Feedback({prf},{r:int=32},{L:int=32})")) { ------------------ | Branch (150:12): [True: 0, False: 0] ------------------ 151| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (151:10): [True: 0, False: 0] | Branch (151:30): [True: 0, False: 0] ------------------ 152| 0| return kdf_create_mac_or_hash(m->str("prf"), m->integer("r"), m->integer("L")); 153| 0| } 154| 0| } 155| | 156| 0| if(auto m = req.match("SP800-108-Pipeline({prf},{r:int=32},{L:int=32})")) { ------------------ | Branch (156:12): [True: 0, False: 0] ------------------ 157| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (157:10): [True: 0, False: 0] | Branch (157:30): [True: 0, False: 0] ------------------ 158| 0| return kdf_create_mac_or_hash(m->str("prf"), m->integer("r"), m->integer("L")); 159| 0| } 160| 0| } 161| 0|#endif 162| | 163| 0|#if defined(BOTAN_HAS_SP800_56A) 164| 0| if(auto m = req.match("SP800-56A({fn})")) { ------------------ | Branch (164:12): [True: 0, False: 0] ------------------ 165| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (165:10): [True: 0, False: 0] | Branch (165:30): [True: 0, False: 0] ------------------ 166| 0| const auto fn = m->str("fn"); 167| 0| if(auto hash = HashFunction::create(fn)) { ------------------ | Branch (167:18): [True: 0, False: 0] ------------------ 168| 0| return std::make_unique(std::move(hash)); 169| 0| } 170| 0| if(fn == "KMAC-128") { ------------------ | Branch (170:13): [True: 0, False: 0] ------------------ 171| 0| return std::make_unique(); 172| 0| } 173| 0| if(fn == "KMAC-256") { ------------------ | Branch (173:13): [True: 0, False: 0] ------------------ 174| 0| return std::make_unique(); 175| 0| } 176| 0| if(auto mac = MessageAuthenticationCode::create(fn)) { ------------------ | Branch (176:18): [True: 0, False: 0] ------------------ 177| 0| return std::make_unique(std::move(mac)); 178| 0| } 179| 0| } 180| 0| } 181| 0|#endif 182| | 183| 0|#if defined(BOTAN_HAS_SP800_56C) 184| 0| if(auto m = req.match("SP800-56C({prf})")) { ------------------ | Branch (184:12): [True: 0, False: 0] ------------------ 185| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (185:10): [True: 0, False: 0] | Branch (185:30): [True: 0, False: 0] ------------------ 186| 0| const auto prf = m->str("prf"); 187| 0| std::unique_ptr exp(kdf_create_mac_or_hash(prf, 32, 32)); 188| 0| if(exp) { ------------------ | Branch (188:13): [True: 0, False: 0] ------------------ 189| 0| if(auto mac = MessageAuthenticationCode::create(fmt("HMAC({})", prf))) { ------------------ | Branch (189:21): [True: 0, False: 0] ------------------ 190| 0| return std::make_unique(std::move(mac), std::move(exp)); 191| 0| } 192| | 193| 0| if(auto mac = MessageAuthenticationCode::create(prf)) { ------------------ | Branch (193:21): [True: 0, False: 0] ------------------ 194| 0| return std::make_unique(std::move(mac), std::move(exp)); 195| 0| } 196| 0| } 197| 0| } 198| 0| } 199| 0|#endif 200| | 201| 0| BOTAN_UNUSED(req); ------------------ | | 151| 0|#define BOTAN_UNUSED Botan::ignore_params ------------------ 202| 0| BOTAN_UNUSED(provider); ------------------ | | 151| 0|#define BOTAN_UNUSED Botan::ignore_params ------------------ 203| | 204| 0| return nullptr; 205| 0|} _ZN5Botan3KDF15create_or_throwENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_: 208| 1.40k|std::unique_ptr KDF::create_or_throw(std::string_view algo, std::string_view provider) { 209| 1.40k| if(auto kdf = KDF::create(algo, provider)) { ------------------ | Branch (209:12): [True: 1.40k, False: 0] ------------------ 210| 1.40k| return kdf; 211| 1.40k| } 212| 0| throw Lookup_Error("KDF", algo, provider); 213| 1.40k|} kdf.cpp:_ZN5Botan12_GLOBAL__N_122kdf_create_mac_or_hashINS_10TLS_12_PRFEJEEENSt3__110unique_ptrINS_3KDFENS3_14default_deleteIS5_EEEENS3_17basic_string_viewIcNS3_11char_traitsIcEEEEDpOT0_: 60| 1.40k|std::unique_ptr kdf_create_mac_or_hash(std::string_view nm, ParamTs&&... params) { 61| 1.40k| if(auto mac = MessageAuthenticationCode::create(fmt("HMAC({})", nm))) { ------------------ | Branch (61:12): [True: 1.40k, False: 0] ------------------ 62| 1.40k| return std::make_unique(std::move(mac), std::forward(params)...); 63| 1.40k| } 64| | 65| 0| if(auto mac = MessageAuthenticationCode::create(nm)) { ------------------ | Branch (65:12): [True: 0, False: 0] ------------------ 66| 0| return std::make_unique(std::move(mac), std::forward(params)...); 67| 0| } 68| | 69| 0| return nullptr; 70| 0|} _ZNK5Botan10TLS_12_PRF11perform_kdfENSt3__14spanIhLm18446744073709551615EEENS2_IKhLm18446744073709551615EEES5_S5_: 24| 2.10k| std::span label) const { 25| 2.10k| try { 26| 2.10k| m_mac->set_key(secret); 27| 2.10k| } catch(Invalid_Key_Length&) { 28| 0| throw Internal_Error(fmt("The premaster secret of {} bytes is too long for TLS-PRF", secret.size())); 29| 0| } 30| | 31| 2.10k| auto A = concat>(label, salt); 32| 2.10k| secure_vector h; 33| | 34| 2.10k| BufferStuffer o(key); 35| 5.58k| while(!o.full()) { ------------------ | Branch (35:10): [True: 3.47k, False: 2.10k] ------------------ 36| 3.47k| A = m_mac->process(A); 37| | 38| 3.47k| m_mac->update(A); 39| 3.47k| m_mac->update(label); 40| 3.47k| m_mac->update(salt); 41| 3.47k| m_mac->final(h); 42| | 43| 3.47k| const size_t writing = std::min(h.size(), o.remaining_capacity()); 44| 3.47k| o.append(std::span{h}.first(writing)); 45| 3.47k| } 46| 2.10k|} _ZN5Botan4HMAC8add_dataENSt3__14spanIKhLm18446744073709551615EEE: 21| 14.7k|void HMAC::add_data(std::span input) { 22| 14.7k| assert_key_material_set(); 23| 14.7k| m_hash->update(input); 24| 14.7k|} _ZN5Botan4HMAC12final_resultENSt3__14spanIhLm18446744073709551615EEE: 29| 7.34k|void HMAC::final_result(std::span mac) { 30| 7.34k| assert_key_material_set(); 31| 7.34k| m_hash->final(mac); 32| 7.34k| m_hash->update(m_okey); 33| 7.34k| m_hash->update(mac.first(m_hash_output_length)); 34| 7.34k| m_hash->final(mac); 35| 7.34k| m_hash->update(m_ikey); 36| 7.34k|} _ZNK5Botan4HMAC8key_specEv: 48| 2.65k|Key_Length_Specification HMAC::key_spec() const { 49| | // Support very long lengths for things like PBKDF2 and the TLS PRF 50| 2.65k| return Key_Length_Specification(0, 8192); 51| 2.65k|} _ZNK5Botan4HMAC13output_lengthEv: 53| 7.62k|size_t HMAC::output_length() const { 54| 7.62k| return m_hash_output_length; 55| 7.62k|} _ZNK5Botan4HMAC19has_keying_materialEv: 57| 22.1k|bool HMAC::has_keying_material() const { 58| 22.1k| return !m_okey.empty(); 59| 22.1k|} _ZN5Botan4HMAC12key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 64| 2.38k|void HMAC::key_schedule(std::span key) { 65| 2.38k| const uint8_t ipad = 0x36; 66| 2.38k| const uint8_t opad = 0x5C; 67| | 68| 2.38k| m_hash->clear(); 69| | 70| 2.38k| m_ikey.resize(m_hash_block_size); 71| 2.38k| m_okey.resize(m_hash_block_size); 72| | 73| 2.38k| clear_mem(m_ikey.data(), m_ikey.size()); 74| 2.38k| clear_mem(m_okey.data(), m_okey.size()); 75| | 76| | /* 77| | * Sometimes the HMAC key length itself is sensitive, as with PBKDF2 where it 78| | * reveals the length of the passphrase. Make some attempt to hide this to 79| | * side channels. Clearly if the secret is longer than the block size then the 80| | * branch to hash first reveals that. In addition, counting the number of 81| | * compression functions executed reveals the size at the granularity of the 82| | * hash function's block size. 83| | * 84| | * The greater concern is for smaller keys; being able to detect when a 85| | * passphrase is say 4 bytes may assist choosing weaker targets. Even though 86| | * the loop bounds are constant, we can only actually read key[0..length] so 87| | * it doesn't seem possible to make this computation truly constant time. 88| | * 89| | * We don't mind leaking if the length is exactly zero since that's 90| | * trivial to simply check. 91| | */ 92| | 93| 2.38k| if(key.size() > m_hash_block_size) { ------------------ | Branch (93:7): [True: 272, False: 2.10k] ------------------ 94| 272| m_hash->update(key); 95| 272| m_hash->final(m_ikey.data()); 96| 2.10k| } else if(key.size() >= 20) { ------------------ | Branch (96:14): [True: 2.10k, False: 0] ------------------ 97| | // For long keys we just leak the length either it is a cryptovariable 98| | // or a long enough password that just the length is not a useful signal 99| 2.10k| copy_mem(std::span{m_ikey}.first(key.size()), key); 100| 2.10k| } else if(!key.empty()) { ------------------ | Branch (100:14): [True: 0, False: 0] ------------------ 101| 0| for(size_t i = 0, i_mod_length = 0; i != m_hash_block_size; ++i) { ------------------ | Branch (101:43): [True: 0, False: 0] ------------------ 102| | /* 103| | access key[i % length] but avoiding division due to variable 104| | time computation on some processors. 105| | */ 106| 0| const auto needs_reduction = CT::Mask::is_lte(key.size(), i_mod_length); 107| 0| i_mod_length = needs_reduction.select(0, i_mod_length); 108| 0| const uint8_t kb = key[i_mod_length]; 109| | 110| 0| const auto in_range = CT::Mask::is_lt(i, key.size()); 111| 0| m_ikey[i] = static_cast(in_range.if_set_return(kb)); 112| 0| i_mod_length += 1; 113| 0| } 114| 0| } 115| | 116| 224k| for(size_t i = 0; i != m_hash_block_size; ++i) { ------------------ | Branch (116:22): [True: 222k, False: 2.38k] ------------------ 117| 222k| m_ikey[i] ^= ipad; 118| 222k| m_okey[i] = m_ikey[i] ^ ipad ^ opad; 119| 222k| } 120| | 121| 2.38k| m_hash->update(m_ikey); 122| 2.38k|} _ZNK5Botan4HMAC4nameEv: 136| 351|std::string HMAC::name() const { 137| 351| return fmt("HMAC({})", m_hash->name()); 138| 351|} _ZN5Botan4HMACC2ENSt3__110unique_ptrINS_12HashFunctionENS1_14default_deleteIS3_EEEE: 151| 1.68k| m_hash(std::move(hash)), 152| 1.68k| m_hash_output_length(m_hash->output_length()), 153| 1.68k| m_hash_block_size(m_hash->hash_block_size()) { 154| 1.68k| BOTAN_ARG_CHECK(m_hash_output_length >= 8, "HMAC is not compatible with this hash function"); ------------------ | | 35| 1.68k| do { \ | | 36| 1.68k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 1.68k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 1.68k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 1.68k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 1.68k] | | ------------------ ------------------ 155| 1.68k| BOTAN_ARG_CHECK(m_hash_block_size >= m_hash_output_length, "HMAC is not compatible with this hash function"); ------------------ | | 35| 1.68k| do { \ | | 36| 1.68k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 1.68k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 1.68k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 1.68k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 1.68k] | | ------------------ ------------------ 156| 1.68k|} _ZN5Botan25MessageAuthenticationCode6createENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_: 52| 1.76k| std::string_view provider) { 53| 1.76k| const AlgorithmSpec req(algo_spec); 54| | 55| 1.76k|#if defined(BOTAN_HAS_BLAKE2BMAC) 56| 1.76k| if(auto m = req.match("BLAKE2b|Blake2b({bits:int=512})")) { ------------------ | Branch (56:12): [True: 0, False: 1.76k] ------------------ 57| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (57:10): [True: 0, False: 0] | Branch (57:30): [True: 0, False: 0] ------------------ 58| 0| return std::make_unique(m->integer("bits")); 59| 0| } 60| 0| } 61| 1.76k|#endif 62| | 63| 1.76k|#if defined(BOTAN_HAS_GMAC) 64| 1.76k| if(auto m = req.match("GMAC({cipher})")) { ------------------ | Branch (64:12): [True: 0, False: 1.76k] ------------------ 65| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (65:10): [True: 0, False: 0] | Branch (65:30): [True: 0, False: 0] ------------------ 66| 0| if(auto bc = BlockCipher::create(m->str("cipher"))) { ------------------ | Branch (66:18): [True: 0, False: 0] ------------------ 67| 0| return std::make_unique(std::move(bc)); 68| 0| } 69| 0| } 70| 0| } 71| 1.76k|#endif 72| | 73| 1.76k|#if defined(BOTAN_HAS_HMAC) 74| 1.76k| if(auto m = req.match("HMAC({hash})")) { ------------------ | Branch (74:12): [True: 1.68k, False: 82] ------------------ 75| 1.68k| if(provider.empty() || provider == "base") { ------------------ | Branch (75:10): [True: 1.68k, False: 0] | Branch (75:30): [True: 0, False: 0] ------------------ 76| 1.68k| if(auto hash = HashFunction::create(m->str("hash"))) { ------------------ | Branch (76:18): [True: 1.68k, False: 0] ------------------ 77| 1.68k| return std::make_unique(std::move(hash)); 78| 1.68k| } 79| 1.68k| } 80| 1.68k| } 81| 82|#endif 82| | 83| 82|#if defined(BOTAN_HAS_POLY1305) 84| 82| if(req.matches("Poly1305")) { ------------------ | Branch (84:7): [True: 82, False: 0] ------------------ 85| 82| if(provider.empty() || provider == "base") { ------------------ | Branch (85:10): [True: 82, False: 0] | Branch (85:30): [True: 0, False: 0] ------------------ 86| 82| return std::make_unique(); 87| 82| } 88| 82| } 89| 0|#endif 90| | 91| 0|#if defined(BOTAN_HAS_SIPHASH) 92| 0| if(auto m = req.match("SipHash({c:int=2},{d:int=4})")) { ------------------ | Branch (92:12): [True: 0, False: 0] ------------------ 93| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (93:10): [True: 0, False: 0] | Branch (93:30): [True: 0, False: 0] ------------------ 94| 0| return std::make_unique(m->integer("c"), m->integer("d")); 95| 0| } 96| 0| } 97| 0|#endif 98| | 99| 0|#if defined(BOTAN_HAS_CMAC) 100| 0| if(auto m = req.match("CMAC|OMAC({cipher})")) { ------------------ | Branch (100:12): [True: 0, False: 0] ------------------ 101| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (101:10): [True: 0, False: 0] | Branch (101:30): [True: 0, False: 0] ------------------ 102| 0| if(auto bc = BlockCipher::create(m->str("cipher"))) { ------------------ | Branch (102:18): [True: 0, False: 0] ------------------ 103| 0| return std::make_unique(std::move(bc)); 104| 0| } 105| 0| } 106| 0| } 107| 0|#endif 108| | 109| 0|#if defined(BOTAN_HAS_ANSI_X919_MAC) 110| 0| if(req.matches("X9.19-MAC")) { ------------------ | Branch (110:7): [True: 0, False: 0] ------------------ 111| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (111:10): [True: 0, False: 0] | Branch (111:30): [True: 0, False: 0] ------------------ 112| 0| return std::make_unique(); 113| 0| } 114| 0| } 115| 0|#endif 116| | 117| 0|#if defined(BOTAN_HAS_KMAC) 118| 0| if(auto m = req.match("KMAC-128({bits:int})")) { ------------------ | Branch (118:12): [True: 0, False: 0] ------------------ 119| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (119:10): [True: 0, False: 0] | Branch (119:30): [True: 0, False: 0] ------------------ 120| 0| return std::make_unique(m->integer("bits")); 121| 0| } 122| 0| } 123| | 124| 0| if(auto m = req.match("KMAC-256({bits:int})")) { ------------------ | Branch (124:12): [True: 0, False: 0] ------------------ 125| 0| if(provider.empty() || provider == "base") { ------------------ | Branch (125:10): [True: 0, False: 0] | Branch (125:30): [True: 0, False: 0] ------------------ 126| 0| return std::make_unique(m->integer("bits")); 127| 0| } 128| 0| } 129| 0|#endif 130| | 131| 0| BOTAN_UNUSED(req); ------------------ | | 151| 0|#define BOTAN_UNUSED Botan::ignore_params ------------------ 132| 0| BOTAN_UNUSED(provider); ------------------ | | 151| 0|#define BOTAN_UNUSED Botan::ignore_params ------------------ 133| | 134| 0| return nullptr; 135| 0|} _ZN5Botan25MessageAuthenticationCode15create_or_throwENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_: 143| 274| std::string_view provider) { 144| 274| if(auto mac = MessageAuthenticationCode::create(algo, provider)) { ------------------ | Branch (144:12): [True: 274, False: 0] ------------------ 145| 274| return mac; 146| 274| } 147| 0| throw Lookup_Error("MAC", algo, provider); 148| 274|} _ZNK5Botan8Poly130519has_keying_materialEv: 338| 767|bool Poly1305::has_keying_material() const { 339| | // Minimum size: pad(2) + accum(3) + r(3) + r^2(3) = 11 340| 767| return m_poly.size() >= 11; 341| 767|} _ZN5Botan8Poly130512key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 355| 117|void Poly1305::key_schedule(std::span key) { 356| 117| m_buffer.clear(); 357| | 358| 117| poly1305_init(m_poly, key.data()); 359| 117|} _ZN5Botan8Poly13058add_dataENSt3__14spanIKhLm18446744073709551615EEE: 377| 650|void Poly1305::add_data(std::span input) { 378| 650| assert_key_material_set(); 379| | 380| 650| BufferSlicer in(input); 381| | 382| 1.32k| while(!in.empty()) { ------------------ | Branch (382:10): [True: 676, False: 650] ------------------ 383| 676| if(const auto one_block = m_buffer.handle_unaligned_data(in)) { ------------------ | Branch (383:21): [True: 300, False: 376] ------------------ 384| 300| poly1305_blocks(m_poly, one_block->data(), 1); 385| 300| } 386| | 387| 676| if(m_buffer.in_alignment()) { ------------------ | Branch (387:10): [True: 376, False: 300] ------------------ 388| 376| const auto [aligned_data, full_blocks] = m_buffer.aligned_data_to_process(in); 389| 376| if(full_blocks > 0) { ------------------ | Branch (389:13): [True: 76, False: 300] ------------------ 390| 76| const uint8_t* data_ptr = aligned_data.data(); 391| 76| size_t blocks_remaining = full_blocks; 392| | 393| 76|#if defined(BOTAN_HAS_POLY1305_AVX512) 394| 76| if(blocks_remaining >= 8 * 3 && CPUID::has(CPUID::Feature::AVX512)) { ------------------ | Branch (394:16): [True: 16, False: 60] | Branch (394:45): [True: 0, False: 16] ------------------ 395| | // Lazily compute r^3 through r^8 on first AVX512 use 396| 0| poly1305_extend_powers(m_poly, 8); 397| 0| const size_t processed = poly1305_avx512_blocks(m_poly, data_ptr, blocks_remaining); 398| 0| data_ptr += processed * 16; 399| 0| blocks_remaining -= processed; 400| 0| } 401| 76|#endif 402| | 403| 76|#if defined(BOTAN_HAS_POLY1305_AVX2) 404| 76| if(blocks_remaining >= 4 * 6 && CPUID::has(CPUID::Feature::AVX2)) { ------------------ | Branch (404:16): [True: 16, False: 60] | Branch (404:45): [True: 16, False: 0] ------------------ 405| | // Lazily compute r^3 and r^4 on first AVX2 use 406| 16| poly1305_extend_powers(m_poly, 4); 407| 16| const size_t processed = poly1305_avx2_blocks(m_poly, data_ptr, blocks_remaining); 408| 16| data_ptr += processed * 16; 409| 16| blocks_remaining -= processed; 410| 16| } 411| 76|#endif 412| | 413| 76| if(blocks_remaining > 0) { ------------------ | Branch (413:16): [True: 72, False: 4] ------------------ 414| 72| poly1305_blocks(m_poly, data_ptr, blocks_remaining); 415| 72| } 416| 76| } 417| 376| } 418| 676| } 419| 650|} _ZN5Botan8Poly130512final_resultENSt3__14spanIhLm18446744073709551615EEE: 421| 117|void Poly1305::final_result(std::span out) { 422| 117| assert_key_material_set(); 423| | 424| 117| if(!m_buffer.in_alignment()) { ------------------ | Branch (424:7): [True: 0, False: 117] ------------------ 425| 0| const uint8_t final_byte = 0x01; 426| 0| m_buffer.append({&final_byte, 1}); 427| 0| m_buffer.fill_up_with_zeros(); 428| 0| poly1305_blocks(m_poly, m_buffer.consume().data(), 1, true); 429| 0| } 430| | 431| 117| poly1305_finish(m_poly, out.data()); 432| | 433| 117| m_poly.clear(); 434| 117| m_buffer.clear(); 435| 117|} poly1305.cpp:_ZN5Botan12_GLOBAL__N_113poly1305_initERNSt3__16vectorImNS_16secure_allocatorImEEEEPKh: 93| 117|void poly1305_init(secure_vector& X, const uint8_t key[32]) { 94| 117| X.clear(); 95| 117| X.reserve(2 + 3 + 2 * 3); 96| 117| X.resize(2 + 3 + 3); 97| | 98| | /* Save pad for later (first 2 slots) */ 99| 117| X[PAD_BASE + 0] = load_le(key, 2); 100| 117| X[PAD_BASE + 1] = load_le(key, 3); 101| | 102| | /* h = 0 (accumulator, next 3 slots) */ 103| 117| X[H_BASE + 0] = 0; 104| 117| X[H_BASE + 1] = 0; 105| 117| X[H_BASE + 2] = 0; 106| | 107| | /* r &= 0xffffffc0ffffffc0ffffffc0fffffff (clamping) */ 108| 117| const uint64_t t0 = load_le(key, 0); 109| 117| const uint64_t t1 = load_le(key, 1); 110| | 111| 117| const uint64_t r0 = (t0) & 0xffc0fffffff; 112| 117| const uint64_t r1 = ((t0 >> 44) | (t1 << 20)) & 0xfffffc0ffff; 113| 117| const uint64_t r2 = ((t1 >> 24)) & 0x00ffffffc0f; 114| | 115| | // Store r^1 116| 117| X[R_BASE + 0] = r0; 117| 117| X[R_BASE + 1] = r1; 118| 117| X[R_BASE + 2] = r2; 119| | 120| 117| poly1305_extend_powers(X, 2); 121| 117|} poly1305.cpp:_ZN5Botan12_GLOBAL__N_115poly1305_blocksERNSt3__16vectorImNS_16secure_allocatorImEEEEPKhmb: 224| 372|void poly1305_blocks(secure_vector& X, const uint8_t* m, size_t blocks, bool is_final = false) { 225| 372| const uint64_t hibit = is_final ? 0 : (static_cast(1) << 40); ------------------ | Branch (225:27): [True: 0, False: 372] ------------------ 226| | 227| | // Load r (at R_BASE + 0) 228| 372| const uint64_t r0 = X[R_BASE + 0]; 229| 372| const uint64_t r1 = X[R_BASE + 1]; 230| 372| const uint64_t r2 = X[R_BASE + 2]; 231| 372| const uint64_t s1 = r1 * 20; 232| 372| const uint64_t s2 = r2 * 20; 233| | 234| | // Load r^2 (at R_BASE + 3) 235| 372| const uint64_t rr0 = X[R_BASE + 3]; 236| 372| const uint64_t rr1 = X[R_BASE + 4]; 237| 372| const uint64_t rr2 = X[R_BASE + 5]; 238| | 239| | // Precompute 240| 372| const uint64_t ss1 = rr1 * 20; 241| 372| const uint64_t ss2 = rr2 * 20; 242| | 243| | // Load accumulator 244| 372| uint64_t h0 = X[H_BASE + 0]; 245| 372| uint64_t h1 = X[H_BASE + 1]; 246| 372| uint64_t h2 = X[H_BASE + 2]; 247| | 248| 456| while(blocks >= 2) { ------------------ | Branch (248:10): [True: 84, False: 372] ------------------ 249| 84| poly1305_block_pair(h0, h1, h2, r0, r1, r2, s1, s2, rr0, rr1, rr2, ss1, ss2, m, hibit); 250| 84| m += 32; 251| 84| blocks -= 2; 252| 84| } 253| | 254| | // Final block? 255| 372| if(blocks > 0) { ------------------ | Branch (255:7): [True: 359, False: 13] ------------------ 256| 359| poly1305_block_single(h0, h1, h2, r0, r1, r2, s1, s2, m, hibit); 257| 359| } 258| | 259| | // Store accumulator 260| 372| X[H_BASE + 0] = h0; 261| 372| X[H_BASE + 1] = h1; 262| 372| X[H_BASE + 2] = h2; 263| 372|} poly1305.cpp:_ZN5Botan12_GLOBAL__N_119poly1305_block_pairERmS1_S1_mmmmmmmmmmPKhm: 179| 84| uint64_t hibit) { 180| 84| constexpr uint64_t M44 = 0xFFFFFFFFFFF; 181| 84| constexpr uint64_t M42 = 0x3FFFFFFFFFF; 182| | 183| |#if !defined(BOTAN_TARGET_HAS_NATIVE_UINT128) 184| | typedef donna128 uint128_t; 185| |#endif 186| | 187| | // Load first block (will be multiplied by r^2) 188| 84| const uint64_t m0_t0 = load_le(m, 0); 189| 84| const uint64_t m0_t1 = load_le(m, 1); 190| | 191| | // Load second block (will be multiplied by r) 192| 84| const uint64_t m1_t0 = load_le(m + 16, 0); 193| 84| const uint64_t m1_t1 = load_le(m + 16, 1); 194| | 195| | // Add first block to h 196| 84| h0 += (m0_t0 & M44); 197| 84| h1 += ((m0_t0 >> 44) | (m0_t1 << 20)) & M44; 198| 84| h2 += ((m0_t1 >> 24) & M42) | hibit; 199| | 200| | // Convert second block to limbs 201| 84| const uint64_t b0 = (m1_t0 & M44); 202| 84| const uint64_t b1 = ((m1_t0 >> 44) | (m1_t1 << 20)) & M44; 203| 84| const uint64_t b2 = ((m1_t1 >> 24) & M42) | hibit; 204| | 205| | // Compute (h + m0) * r^2 + m1 * r 206| 84| const uint128_t d0 = uint128_t(h0) * rr0 + uint128_t(h1) * ss2 + uint128_t(h2) * ss1 + uint128_t(b0) * r0 + 207| 84| uint128_t(b1) * s2 + uint128_t(b2) * s1; 208| 84| const uint64_t c0 = carry_shift(d0, 44); 209| | 210| 84| const uint128_t d1 = uint128_t(h0) * rr1 + uint128_t(h1) * rr0 + uint128_t(h2) * ss2 + uint128_t(b0) * r1 + 211| 84| uint128_t(b1) * r0 + uint128_t(b2) * s2 + c0; 212| 84| const uint64_t c1 = carry_shift(d1, 44); 213| | 214| 84| const uint128_t d2 = uint128_t(h0) * rr2 + uint128_t(h1) * rr1 + uint128_t(h2) * rr0 + uint128_t(b0) * r2 + 215| 84| uint128_t(b1) * r1 + uint128_t(b2) * r0 + c1; 216| 84| const uint64_t c2 = carry_shift(d2, 42); 217| | 218| 84| h0 = (d0 & M44) + c2 * 5; 219| 84| h1 = (d1 & M44) + (h0 >> 44); 220| 84| h0 &= M44; 221| 84| h2 = d2 & M42; 222| 84|} poly1305.cpp:_ZN5Botan12_GLOBAL__N_121poly1305_block_singleERmS1_S1_mmmmmPKhm: 133| 359| uint64_t hibit) { 134| 359| constexpr uint64_t M44 = 0xFFFFFFFFFFF; 135| 359| constexpr uint64_t M42 = 0x3FFFFFFFFFF; 136| | 137| |#if !defined(BOTAN_TARGET_HAS_NATIVE_UINT128) 138| | typedef donna128 uint128_t; 139| |#endif 140| | 141| 359| const uint64_t t0 = load_le(m, 0); 142| 359| const uint64_t t1 = load_le(m, 1); 143| | 144| 359| h0 += (t0 & M44); 145| 359| h1 += ((t0 >> 44) | (t1 << 20)) & M44; 146| 359| h2 += ((t1 >> 24) & M42) | hibit; 147| | 148| 359| const uint128_t d0 = uint128_t(h0) * r0 + uint128_t(h1) * s2 + uint128_t(h2) * s1; 149| 359| const uint64_t c0 = carry_shift(d0, 44); 150| | 151| 359| const uint128_t d1 = uint128_t(h0) * r1 + uint128_t(h1) * r0 + uint128_t(h2) * s2 + c0; 152| 359| const uint64_t c1 = carry_shift(d1, 44); 153| | 154| 359| const uint128_t d2 = uint128_t(h0) * r2 + uint128_t(h1) * r1 + uint128_t(h2) * r0 + c1; 155| 359| const uint64_t c2 = carry_shift(d2, 42); 156| | 157| 359| h0 = (d0 & M44) + c2 * 5; 158| 359| h1 = (d1 & M44) + (h0 >> 44); 159| 359| h0 &= M44; 160| 359| h2 = d2 & M42; 161| 359|} poly1305.cpp:_ZN5Botan12_GLOBAL__N_122poly1305_extend_powersERNSt3__16vectorImNS_16secure_allocatorImEEEEm: 70| 133|void poly1305_extend_powers(secure_vector& X, size_t target_powers) { 71| 133| const size_t current_powers = (X.size() - 5) / 3; 72| | 73| 133| if(current_powers >= target_powers) { ------------------ | Branch (73:7): [True: 0, False: 133] ------------------ 74| 0| return; 75| 0| } 76| | 77| | // Load r^1 for multiplication 78| 133| const uint64_t r0 = X[R_BASE + 0]; 79| 133| const uint64_t r1 = X[R_BASE + 1]; 80| 133| const uint64_t r2 = X[R_BASE + 2]; 81| | 82| 133| X.resize(5 + target_powers * 3); 83| | 84| | // Compute r^(current+1) through r^target 85| 282| for(size_t i = current_powers + 1; i <= target_powers; ++i) { ------------------ | Branch (85:39): [True: 149, False: 133] ------------------ 86| 149| const size_t offset = R_BASE + (i - 1) * 3; 87| 149| poly1305_mul_44( 88| 149| X[offset + 0], X[offset + 1], X[offset + 2], X[offset - 3], X[offset - 2], X[offset - 1], r0, r1, r2); 89| 149| } 90| 133|} poly1305.cpp:_ZN5Botan12_GLOBAL__N_115poly1305_mul_44ERmS1_S1_mmmmmm: 43| 149| uint64_t b2) { 44| 149| constexpr uint64_t M44 = 0xFFFFFFFFFFF; 45| 149| constexpr uint64_t M42 = 0x3FFFFFFFFFF; 46| | 47| |#if !defined(BOTAN_TARGET_HAS_NATIVE_UINT128) 48| | typedef donna128 uint128_t; 49| |#endif 50| | 51| 149| const uint64_t s1 = b1 * 20; 52| 149| const uint64_t s2 = b2 * 20; 53| | 54| 149| const uint128_t d0 = uint128_t(a0) * b0 + uint128_t(a1) * s2 + uint128_t(a2) * s1; 55| 149| const uint64_t c0 = carry_shift(d0, 44); 56| | 57| 149| const uint128_t d1 = uint128_t(a0) * b1 + uint128_t(a1) * b0 + uint128_t(a2) * s2 + c0; 58| 149| const uint64_t c1 = carry_shift(d1, 44); 59| | 60| 149| const uint128_t d2 = uint128_t(a0) * b2 + uint128_t(a1) * b1 + uint128_t(a2) * b0 + c1; 61| 149| const uint64_t c2 = carry_shift(d2, 42); 62| | 63| 149| h0 = (d0 & M44) + c2 * 5; 64| 149| h1 = (d1 & M44) + (h0 >> 44); 65| 149| h0 &= M44; 66| 149| h2 = d2 & M42; 67| 149|} poly1305.cpp:_ZN5Botan12_GLOBAL__N_115poly1305_finishERNSt3__16vectorImNS_16secure_allocatorImEEEEPh: 265| 117|void poly1305_finish(secure_vector& X, uint8_t mac[16]) { 266| 117| constexpr uint64_t M44 = 0xFFFFFFFFFFF; 267| 117| constexpr uint64_t M42 = 0x3FFFFFFFFFF; 268| | 269| | /* fully carry h */ 270| 117| uint64_t h0 = X[H_BASE + 0]; 271| 117| uint64_t h1 = X[H_BASE + 1]; 272| 117| uint64_t h2 = X[H_BASE + 2]; 273| | 274| 117| uint64_t c = (h1 >> 44); 275| 117| h1 &= M44; 276| 117| h2 += c; 277| 117| c = (h2 >> 42); 278| 117| h2 &= M42; 279| 117| h0 += c * 5; 280| 117| c = (h0 >> 44); 281| 117| h0 &= M44; 282| 117| h1 += c; 283| 117| c = (h1 >> 44); 284| 117| h1 &= M44; 285| 117| h2 += c; 286| 117| c = (h2 >> 42); 287| 117| h2 &= M42; 288| 117| h0 += c * 5; 289| 117| c = (h0 >> 44); 290| 117| h0 &= M44; 291| 117| h1 += c; 292| | 293| | /* compute h + -p */ 294| 117| uint64_t g0 = h0 + 5; 295| 117| c = (g0 >> 44); 296| 117| g0 &= M44; 297| 117| uint64_t g1 = h1 + c; 298| 117| c = (g1 >> 44); 299| 117| g1 &= M44; 300| 117| const uint64_t g2 = h2 + c - (static_cast(1) << 42); 301| | 302| | /* select h if h < p, or h + -p if h >= p */ 303| 117| const auto h_mask = CT::Mask::expand_top_bit(g2); 304| 117| h0 = h_mask.select(h0, g0); 305| 117| h1 = h_mask.select(h1, g1); 306| 117| h2 = h_mask.select(h2, g2); 307| | 308| | /* h = (h + pad) */ 309| 117| const uint64_t t0 = X[PAD_BASE + 0]; 310| 117| const uint64_t t1 = X[PAD_BASE + 1]; 311| | 312| 117| h0 += ((t0)&M44); 313| 117| c = (h0 >> 44); 314| 117| h0 &= M44; 315| 117| h1 += (((t0 >> 44) | (t1 << 20)) & M44) + c; 316| 117| c = (h1 >> 44); 317| 117| h1 &= M44; 318| 117| h2 += (((t1 >> 24)) & M42) + c; 319| 117| h2 &= M42; 320| | 321| | /* mac = h % (2^128) */ 322| 117| h0 = ((h0) | (h1 << 44)); 323| 117| h1 = ((h1 >> 20) | (h2 << 24)); 324| | 325| 117| store_le(mac, h0, h1); 326| | 327| | /* zero out the state */ 328| 117| clear_mem(X.data(), X.size()); 329| 117|} _ZN5Botan8Poly130520poly1305_avx2_blocksERNSt3__16vectorImNS_16secure_allocatorImEEEEPKhm: 211| 16|size_t BOTAN_FN_ISA_AVX2 Poly1305::poly1305_avx2_blocks(secure_vector& X, const uint8_t m[], size_t blocks) { 212| 16| if(blocks < 4) { ------------------ | Branch (212:7): [True: 0, False: 16] ------------------ 213| 0| return 0; 214| 0| } 215| | 216| 16| const size_t incoming_blocks = blocks; 217| | 218| 16| auto h = convert_44_to_26(X[2], X[3], X[4]); 219| | 220| 16| SIMD_4x26 r0; 221| 16| SIMD_4x26 r1; 222| 16| SIMD_4x26 r2; 223| 16| SIMD_4x26 r3; 224| 16| SIMD_4x26 r4; 225| 16| load_r(r0, r1, r2, r3, r4, X); 226| | 227| 16| const auto r1_5 = r1.mul_5(); 228| 16| const auto r2_5 = r2.mul_5(); 229| 16| const auto r3_5 = r3.mul_5(); 230| 16| const auto r4_5 = r4.mul_5(); 231| | 232| 397| while(blocks >= 4) { ------------------ | Branch (232:10): [True: 381, False: 16] ------------------ 233| | // Load 4 message blocks, convert to radix 2^26, and add h to block 0 234| 381| SIMD_4x26 m0; 235| 381| SIMD_4x26 m1; 236| 381| SIMD_4x26 m2; 237| 381| SIMD_4x26 m3; 238| 381| SIMD_4x26 m4; 239| 381| load_4_blocks_26(m0, m1, m2, m3, m4, m, h); 240| | 241| 381| const auto d0 = m0 * r0 + m1 * r4_5 + m2 * r3_5 + m3 * r2_5 + m4 * r1_5; 242| 381| const auto d1 = m0 * r1 + m1 * r0 + m2 * r4_5 + m3 * r3_5 + m4 * r2_5; 243| 381| const auto d2 = m0 * r2 + m1 * r1 + m2 * r0 + m3 * r4_5 + m4 * r3_5; 244| 381| const auto d3 = m0 * r3 + m1 * r2 + m2 * r1 + m3 * r0 + m4 * r4_5; 245| 381| const auto d4 = m0 * r4 + m1 * r3 + m2 * r2 + m3 * r1 + m4 * r0; 246| | 247| 381| const uint64_t h0_64 = d0.horizontal_add64(); 248| 381| uint64_t h1_64 = d1.horizontal_add64(); 249| 381| uint64_t h2_64 = d2.horizontal_add64(); 250| 381| uint64_t h3_64 = d3.horizontal_add64(); 251| 381| uint64_t h4_64 = d4.horizontal_add64(); 252| | 253| 381| h1_64 += h0_64 >> 26; 254| 381| h[0] = static_cast(h0_64) & MASK26; 255| 381| h2_64 += h1_64 >> 26; 256| 381| h[1] = static_cast(h1_64) & MASK26; 257| 381| h3_64 += h2_64 >> 26; 258| 381| h[2] = static_cast(h2_64) & MASK26; 259| 381| h4_64 += h3_64 >> 26; 260| 381| h[3] = static_cast(h3_64) & MASK26; 261| | 262| 381| const uint64_t c = h4_64 >> 26; 263| 381| h[4] = static_cast(h4_64) & MASK26; 264| | 265| 381| uint64_t carry = c * 5; 266| 381| carry += h[0]; 267| 381| h[0] = static_cast(carry) & MASK26; 268| 381| carry >>= 26; 269| 381| carry += h[1]; 270| 381| h[1] = static_cast(carry) & MASK26; 271| 381| carry >>= 26; 272| 381| carry += h[2]; 273| 381| h[2] = static_cast(carry) & MASK26; 274| 381| carry >>= 26; 275| 381| carry += h[3]; 276| 381| h[3] = static_cast(carry) & MASK26; 277| 381| carry >>= 26; 278| 381| h[4] += static_cast(carry); 279| | 280| 381| m += 64; 281| 381| blocks -= 4; 282| 381| } 283| | 284| 16| convert_26_to_44(X[2], X[3], X[4], h); 285| | 286| 16| return (incoming_blocks - blocks); 287| 16|} poly1305_avx2.cpp:_ZN5Botan12_GLOBAL__N_116convert_44_to_26Emmm: 164| 80|BOTAN_FORCE_INLINE std::array convert_44_to_26(uint64_t r0, uint64_t r1, uint64_t r2) { 165| 80| constexpr uint64_t M44 = 0xFFFFFFFFFFF; 166| 80| constexpr uint64_t M42 = 0x3FFFFFFFFFF; 167| | 168| | // The radix-2^44 scalar reduction leaves r1 in a lazy form that may carry a 169| | // bit at position 44; fully carry before the bit-packing below, which 170| | // requires each limb to be within its nominal width. 171| 80| uint64_t c = r1 >> 44; 172| 80| r1 &= M44; 173| 80| r2 += c; 174| 80| c = r2 >> 42; 175| 80| r2 &= M42; 176| 80| r0 += c * 5; 177| 80| c = r0 >> 44; 178| 80| r0 &= M44; 179| 80| r1 += c; 180| | 181| 80| std::array out{}; 182| 80| out[0] = static_cast(r0) & MASK26; // bits 0-25 183| 80| out[1] = static_cast((r0 >> 26) | (r1 << 18)) & MASK26; // bits 26-51 184| 80| out[2] = static_cast(r1 >> 8) & MASK26; // bits 52-77 185| 80| out[3] = static_cast((r1 >> 34) | (r2 << 10)) & MASK26; // bits 78-103 186| 80| out[4] = static_cast(r2 >> 16) & MASK26; // bits 104-129 187| 80| return out; 188| 80|} poly1305_avx2.cpp:_ZN5Botan12_GLOBAL__N_19SIMD_4x26C2Ev: 30| 1.98k| BOTAN_FN_ISA_AVX2 SIMD_4x26() : m_v(_mm256_setzero_si256()) {} poly1305_avx2.cpp:_ZN5Botan12_GLOBAL__N_16load_rERNS0_9SIMD_4x26ES2_S2_S2_S2_RKNSt3__16vectorImNS_16secure_allocatorImEEEE: 191| 16|load_r(SIMD_4x26& r0, SIMD_4x26& r1, SIMD_4x26& r2, SIMD_4x26& r3, SIMD_4x26& r4, const secure_vector& X) { 192| | // TODO do this in vector registers instead 193| 16| const auto t = convert_44_to_26(X[5], X[6], X[7]); 194| 16| const auto t2 = convert_44_to_26(X[8], X[9], X[10]); 195| 16| const auto t3 = convert_44_to_26(X[11], X[12], X[13]); 196| 16| const auto t4 = convert_44_to_26(X[14], X[15], X[16]); 197| | 198| 16| r0 = SIMD_4x26::set(t4[0], t3[0], t2[0], t[0]); 199| 16| r1 = SIMD_4x26::set(t4[1], t3[1], t2[1], t[1]); 200| 16| r2 = SIMD_4x26::set(t4[2], t3[2], t2[2], t[2]); 201| 16| r3 = SIMD_4x26::set(t4[3], t3[3], t2[3], t[3]); 202| 16| r4 = SIMD_4x26::set(t4[4], t3[4], t2[4], t[4]); 203| 16|} poly1305_avx2.cpp:_ZN5Botan12_GLOBAL__N_19SIMD_4x263setEjjjj: 36| 80| static BOTAN_FN_ISA_AVX2 SIMD_4x26 set(uint32_t v3, uint32_t v2, uint32_t v1, uint32_t v0) { 37| 80| return SIMD_4x26(_mm256_set_epi32(0, v3, 0, v2, 0, v1, 0, v0)); 38| 80| } poly1305_avx2.cpp:_ZN5Botan12_GLOBAL__N_19SIMD_4x26C2EDv4_x: 61| 19.1k| explicit BOTAN_FN_ISA_AVX2 SIMD_4x26(__m256i v) : m_v(v) {} poly1305_avx2.cpp:_ZNK5Botan12_GLOBAL__N_19SIMD_4x265mul_5Ev: 41| 64| BOTAN_FN_ISA_AVX2 SIMD_4x26 mul_5() const { return SIMD_4x26(_mm256_add_epi32(_mm256_slli_epi32(m_v, 2), m_v)); } poly1305_avx2.cpp:_ZN5Botan12_GLOBAL__N_116load_4_blocks_26ERNS0_9SIMD_4x26ES2_S2_S2_S2_PKhNSt3__15arrayIjLm5EEE: 80| 381| std::array h) { 81| | // Load 64 bytes (4 blocks of 16 bytes each) 82| 381| const __m256i d0 = _mm256_loadu_si256(reinterpret_cast(m)); 83| 381| const __m256i d1 = _mm256_loadu_si256(reinterpret_cast(m + 32)); 84| | 85| | // Deinterleave: extract low 64-bit (t0) and high 64-bit (t1) from each block 86| | // unpacklo/hi work within 128-bit lanes: pairs adjacent blocks 87| 381| const __m256i t0_mixed = _mm256_unpacklo_epi64(d0, d1); // [blk3_lo, blk1_lo, blk2_lo, blk0_lo] 88| 381| const __m256i t1_mixed = _mm256_unpackhi_epi64(d0, d1); // [blk3_hi, blk1_hi, blk2_hi, blk0_hi] 89| | 90| 381| const __m256i t0 = _mm256_permute4x64_epi64(t0_mixed, 0b00100111); 91| 381| const __m256i t1 = _mm256_permute4x64_epi64(t1_mixed, 0b00100111); 92| | 93| | // Constants for radix conversion 94| 381| const __m256i mask26 = _mm256_set1_epi64x(MASK26); 95| 381| const __m256i hibit_vec = _mm256_set1_epi64x(1 << 24); 96| | 97| | // Convert to radix 2^26: 98| | // limb0 = t0[25:0] 99| | // limb1 = t0[51:26] 100| | // limb2 = t0[63:52] | t1[13:0] << 12 (bits 52-77) 101| | // limb3 = t1[39:14] (bits 78-103) 102| | // limb4 = t1[63:40] | hibit (bits 104-127 + 2^128 marker) 103| 381| __m256i limb0 = _mm256_and_si256(t0, mask26); 104| 381| __m256i limb1 = _mm256_and_si256(_mm256_srli_epi64(t0, 26), mask26); 105| 381| __m256i limb2 = _mm256_and_si256(_mm256_or_si256(_mm256_srli_epi64(t0, 52), _mm256_slli_epi64(t1, 12)), mask26); 106| 381| __m256i limb3 = _mm256_and_si256(_mm256_srli_epi64(t1, 14), mask26); 107| 381| __m256i limb4 = _mm256_or_si256(_mm256_srli_epi64(t1, 40), hibit_vec); 108| | 109| | // Add h to lane 3 (block 0): h + m[0] before multiply by r^4 110| 381| limb0 = _mm256_add_epi64(limb0, _mm256_set_epi64x(h[0], 0, 0, 0)); 111| 381| limb1 = _mm256_add_epi64(limb1, _mm256_set_epi64x(h[1], 0, 0, 0)); 112| 381| limb2 = _mm256_add_epi64(limb2, _mm256_set_epi64x(h[2], 0, 0, 0)); 113| 381| limb3 = _mm256_add_epi64(limb3, _mm256_set_epi64x(h[3], 0, 0, 0)); 114| 381| limb4 = _mm256_add_epi64(limb4, _mm256_set_epi64x(h[4], 0, 0, 0)); 115| | 116| 381| msg_0 = SIMD_4x26::from_raw(limb0); 117| 381| msg_1 = SIMD_4x26::from_raw(limb1); 118| 381| msg_2 = SIMD_4x26::from_raw(limb2); 119| 381| msg_3 = SIMD_4x26::from_raw(limb3); 120| 381| msg_4 = SIMD_4x26::from_raw(limb4); 121| 381|} poly1305_avx2.cpp:_ZN5Botan12_GLOBAL__N_19SIMD_4x268from_rawEDv4_x: 33| 1.90k| static BOTAN_FN_ISA_AVX2 SIMD_4x26 from_raw(__m256i v) { return SIMD_4x26(v); } poly1305_avx2.cpp:_ZN5Botan12_GLOBAL__N_1plERKNS0_9SIMD_4x26ES3_: 43| 7.62k| friend SIMD_4x26 BOTAN_FN_ISA_AVX2 operator+(const SIMD_4x26& x, const SIMD_4x26& y) { 44| 7.62k| return SIMD_4x26(_mm256_add_epi64(x.raw(), y.raw())); 45| 7.62k| } poly1305_avx2.cpp:_ZNK5Botan12_GLOBAL__N_19SIMD_4x263rawEv: 58| 34.2k| __m256i BOTAN_FN_ISA_AVX2 raw() const { return m_v; } poly1305_avx2.cpp:_ZN5Botan12_GLOBAL__N_1mlERKNS0_9SIMD_4x26ES3_: 47| 9.52k| friend SIMD_4x26 BOTAN_FN_ISA_AVX2 operator*(const SIMD_4x26& x, const SIMD_4x26& y) { 48| 9.52k| return SIMD_4x26(_mm256_mul_epi32(x.raw(), y.raw())); 49| 9.52k| } poly1305_avx2.cpp:_ZNK5Botan12_GLOBAL__N_19SIMD_4x2616horizontal_add64Ev: 52| 1.90k| BOTAN_FN_ISA_AVX2 uint64_t horizontal_add64() const { 53| 1.90k| uint64_t tmp[4]; 54| 1.90k| _mm256_storeu_si256(reinterpret_cast<__m256i*>(tmp), m_v); 55| 1.90k| return tmp[0] + tmp[1] + tmp[2] + tmp[3]; 56| 1.90k| } poly1305_avx2.cpp:_ZN5Botan12_GLOBAL__N_116convert_26_to_44ERmS1_S1_NSt3__15arrayIjLm5EEE: 129| 16| const std::array in) { 130| 16| constexpr uint64_t M44 = 0xFFFFFFFFFFF; 131| 16| constexpr uint64_t M42 = 0x3FFFFFFFFFF; 132| | 133| | // Expand to 64 bits 134| 16| uint64_t i0 = in[0]; 135| 16| uint64_t i1 = in[1]; 136| 16| uint64_t i2 = in[2]; 137| 16| uint64_t i3 = in[3]; 138| 16| uint64_t i4 = in[4]; 139| | 140| | // i4 may hold a bit at position 26 (a 2^130 term); fully carry before the 141| | // bit-packing below, which requires each limb to be within 26 bits. 142| 16| uint64_t c = i4 >> 26; 143| 16| i4 &= MASK26; 144| 16| i0 += c * 5; 145| 16| c = i0 >> 26; 146| 16| i0 &= MASK26; 147| 16| i1 += c; 148| 16| c = i1 >> 26; 149| 16| i1 &= MASK26; 150| 16| i2 += c; 151| 16| c = i2 >> 26; 152| 16| i2 &= MASK26; 153| 16| i3 += c; 154| 16| c = i3 >> 26; 155| 16| i3 &= MASK26; 156| 16| i4 += c; 157| | 158| 16| r0 = (i0 | (i1 << 26)) & M44; 159| 16| r1 = ((i1 >> 18) | (i2 << 8) | (i3 << 34)) & M44; 160| 16| r2 = ((i3 >> 10) | (i4 << 16)) & M42; 161| 16|} _ZN5Botan6BigInt17from_radix_digitsENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEm: 126| 662|BigInt BigInt::from_radix_digits(std::string_view digits, size_t radix) { 127| 662| if(radix == 16) { ------------------ | Branch (127:7): [True: 662, False: 0] ------------------ 128| 662| secure_vector binary; 129| | 130| 662| if(digits.size() % 2 == 1) { ------------------ | Branch (130:10): [True: 309, False: 353] ------------------ 131| | // Handle lack of leading 0 132| 309| const char buf0_with_leading_0[2] = {'0', digits[0]}; 133| | 134| 309| binary = hex_decode_locked(buf0_with_leading_0, 2); 135| | 136| 309| if(digits.size() > 1) { ------------------ | Branch (136:13): [True: 9, False: 300] ------------------ 137| 9| binary += hex_decode_locked(&digits[1], digits.size() - 1, false); 138| 9| } 139| 353| } else { 140| 353| binary = hex_decode_locked(digits, false); 141| 353| } 142| | 143| 662| return BigInt::from_bytes(binary); 144| 662| } else if(radix == 10) { ------------------ | Branch (144:14): [True: 0, False: 0] ------------------ 145| | // Use the largest power of 10 that fits in a word, accumulating 146| | // groups of digits into word-sized chunks to minimize the number 147| | // of multiprecision multiplications. 148| 0| constexpr word conversion_radix = decimal_conversion_radix(); 149| 0| constexpr size_t radix_digits = decimal_conversion_radix_digits(); 150| | 151| 0| BigInt r; 152| | 153| | // Handle the initial partial block (if digit count is not a multiple of radix_digits) 154| 0| const size_t partial_block = digits.size() % radix_digits; 155| | 156| 0| if(partial_block > 0) { ------------------ | Branch (156:10): [True: 0, False: 0] ------------------ 157| 0| word acc = 0; 158| 0| for(size_t i = 0; i < partial_block; ++i) { ------------------ | Branch (158:28): [True: 0, False: 0] ------------------ 159| 0| const char c = digits[i]; 160| 0| BOTAN_ARG_CHECK(c >= '0' && c <= '9', "Invalid decimal character"); ------------------ | | 35| 0| do { \ | | 36| 0| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 0| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 0, False: 0] | | | Branch (37:12): [True: 0, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 0| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 0] | | ------------------ ------------------ 161| 0| acc = acc * 10 + static_cast(c - '0'); 162| 0| } 163| 0| r += acc; 164| 0| } 165| | 166| | // Process full blocks of radix_digits 167| 0| for(size_t i = partial_block; i != digits.size(); i += radix_digits) { ------------------ | Branch (167:37): [True: 0, False: 0] ------------------ 168| 0| word acc = 0; 169| 0| for(size_t j = 0; j < radix_digits; ++j) { ------------------ | Branch (169:28): [True: 0, False: 0] ------------------ 170| 0| const char c = digits[i + j]; 171| 0| BOTAN_ARG_CHECK(c >= '0' && c <= '9', "Invalid decimal character"); ------------------ | | 35| 0| do { \ | | 36| 0| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 0| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 0, False: 0] | | | Branch (37:12): [True: 0, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 0| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 0] | | ------------------ ------------------ 172| 0| acc = acc * 10 + static_cast(c - '0'); 173| 0| } 174| 0| r *= conversion_radix; 175| 0| r += acc; 176| 0| } 177| | 178| 0| return r; 179| 0| } else { 180| 0| throw Invalid_Argument("BigInt::from_radix_digits unknown radix"); 181| 0| } 182| 662|} _ZN5Botan6BigInt3addEPKmmNS0_4SignE: 32| 606|BigInt& BigInt::add(const word y[], size_t y_words, Sign y_sign) { 33| 606| const size_t x_sw = sig_words(); 34| | 35| 606| grow_to(std::max(x_sw, y_words) + 1); 36| | 37| 606| if(sign() == y_sign) { ------------------ | Branch (37:7): [True: 0, False: 606] ------------------ 38| 0| const word carry = bigint_add2(mutable_data(), size() - 1, y, y_words); 39| 0| mutable_data()[size() - 1] += carry; 40| 606| } else { 41| 606| const int32_t relative_size = bigint_cmp(_data(), x_sw, y, y_words); 42| | 43| 606| if(relative_size >= 0) { ------------------ | Branch (43:10): [True: 0, False: 606] ------------------ 44| | // *this >= y 45| 0| bigint_sub2(mutable_data(), x_sw, y, y_words); 46| 606| } else { 47| | // *this < y: compute *this = y - *this 48| 606| bigint_sub2_rev(mutable_data(), y, y_words); 49| 606| } 50| | 51| 606| if(relative_size < 0) { ------------------ | Branch (51:10): [True: 606, False: 0] ------------------ 52| 606| set_sign(y_sign); 53| 606| } else if(relative_size == 0) { ------------------ | Branch (53:17): [True: 0, False: 0] ------------------ 54| 0| set_sign(Positive); 55| 0| } 56| 606| } 57| | 58| 606| return (*this); 59| 606|} _ZN5Botan6BigInt7mod_addERKS0_S2_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 61| 486|BigInt& BigInt::mod_add(const BigInt& s, const BigInt& mod, secure_vector& ws) { 62| 486| if(this->signum() < 0 || s.signum() < 0 || mod.signum() < 0) { ------------------ | Branch (62:7): [True: 0, False: 486] | Branch (62:29): [True: 0, False: 486] | Branch (62:47): [True: 0, False: 486] ------------------ 63| 0| throw Invalid_Argument("BigInt::mod_add expects all arguments are positive"); 64| 0| } 65| | 66| 486| BOTAN_DEBUG_ASSERT(*this < mod); ------------------ | | 137| 486| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 486| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 486] | | ------------------ ------------------ 67| 486| BOTAN_DEBUG_ASSERT(s < mod); ------------------ | | 137| 486| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 486| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 486] | | ------------------ ------------------ 68| | 69| | /* 70| | t + s or t + s - p == t - (p - s) 71| | 72| | So first compute ws = p - s 73| | 74| | Then compute t + s and t - ws 75| | 76| | If t - ws does not borrow, then that is the correct valued 77| | */ 78| | 79| 486| const size_t mod_sw = mod.sig_words(); 80| 486| BOTAN_ARG_CHECK(mod_sw > 0, "BigInt::mod_add modulus must be positive"); ------------------ | | 35| 486| do { \ | | 36| 486| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 486| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 486] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 486| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 486] | | ------------------ ------------------ 81| | 82| 486| this->grow_to(mod_sw); 83| 486| s.grow_to(mod_sw); 84| | 85| | // First mod_sw for p - s, 2*mod_sw for bigint_addsub workspace 86| 486| if(ws.size() < 3 * mod_sw) { ------------------ | Branch (86:7): [True: 376, False: 110] ------------------ 87| 376| ws.resize(3 * mod_sw); 88| 376| } 89| | 90| | // NOLINTBEGIN(readability-container-data-pointer) 91| | 92| 486| word borrow = bigint_sub3(&ws[0], mod._data(), mod_sw, s._data(), mod_sw); 93| 486| BOTAN_DEBUG_ASSERT(borrow == 0); ------------------ | | 137| 486| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 486| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 486] | | ------------------ ------------------ 94| 486| BOTAN_UNUSED(borrow); ------------------ | | 151| 486|#define BOTAN_UNUSED Botan::ignore_params ------------------ 95| | 96| | // Compute t - ws 97| 486| borrow = bigint_sub3(&ws[mod_sw], this->_data(), mod_sw, &ws[0], mod_sw); 98| | 99| | // Compute t + s 100| 486| bigint_add3(&ws[mod_sw * 2], this->_data(), mod_sw, s._data(), mod_sw); 101| | 102| 486| CT::conditional_copy_mem(borrow, &ws[0], &ws[mod_sw * 2], &ws[mod_sw], mod_sw); 103| 486| set_words(&ws[0], mod_sw); 104| | 105| | // NOLINTEND(readability-container-data-pointer) 106| | 107| 486| return (*this); 108| 486|} _ZN5Botan6BigInt7mod_subERKS0_S2_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 110| 14.7k|BigInt& BigInt::mod_sub(const BigInt& s, const BigInt& mod, secure_vector& ws) { 111| 14.7k| if(this->signum() < 0 || s.signum() < 0 || mod.signum() < 0) { ------------------ | Branch (111:7): [True: 0, False: 14.7k] | Branch (111:29): [True: 0, False: 14.7k] | Branch (111:47): [True: 0, False: 14.7k] ------------------ 112| 0| throw Invalid_Argument("BigInt::mod_sub expects all arguments are positive"); 113| 0| } 114| | 115| | // We are assuming in this function that *this and s are no more than mod_sw words long 116| 14.7k| BOTAN_DEBUG_ASSERT(*this < mod); ------------------ | | 137| 14.7k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 14.7k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 14.7k] | | ------------------ ------------------ 117| 14.7k| BOTAN_DEBUG_ASSERT(s < mod); ------------------ | | 137| 14.7k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 14.7k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 14.7k] | | ------------------ ------------------ 118| | 119| 14.7k| const size_t mod_sw = mod.sig_words(); 120| | 121| 14.7k| this->grow_to(mod_sw); 122| 14.7k| s.grow_to(mod_sw); 123| | 124| 14.7k| if(ws.size() < mod_sw) { ------------------ | Branch (124:7): [True: 0, False: 14.7k] ------------------ 125| 0| ws.resize(mod_sw); 126| 0| } 127| | 128| 14.7k| const word borrow = bigint_sub3(ws.data(), mutable_data(), mod_sw, s._data(), mod_sw); 129| | 130| | // Conditionally add back the modulus 131| 14.7k| bigint_cnd_add(borrow, ws.data(), mod._data(), mod_sw); 132| | 133| 14.7k| unchecked_copy_memory(mutable_data(), ws.data(), mod_sw); 134| | 135| 14.7k| return (*this); 136| 14.7k|} _ZN5Botan6BigInt7mod_mulEhRKS0_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 138| 4.27k|BigInt& BigInt::mod_mul(uint8_t y, const BigInt& mod, secure_vector& ws) { 139| 4.27k| BOTAN_ARG_CHECK(this->signum() >= 0, "*this must be positive"); ------------------ | | 35| 4.27k| do { \ | | 36| 4.27k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 4.27k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 4.27k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 4.27k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 4.27k] | | ------------------ ------------------ 140| 4.27k| BOTAN_ARG_CHECK(y < 16, "y too large"); ------------------ | | 35| 4.27k| do { \ | | 36| 4.27k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 4.27k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 4.27k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 4.27k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 4.27k] | | ------------------ ------------------ 141| | 142| 4.27k| BOTAN_DEBUG_ASSERT(*this < mod); ------------------ | | 137| 4.27k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 4.27k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 4.27k] | | ------------------ ------------------ 143| | 144| 4.27k| *this *= static_cast(y); 145| 4.27k| this->reduce_below(mod, ws); 146| 4.27k| return (*this); 147| 4.27k|} _ZN5Botan6BigIntmLEm: 205| 4.27k|BigInt& BigInt::operator*=(word y) { 206| 4.27k| if(y == 0) { ------------------ | Branch (206:7): [True: 0, False: 4.27k] ------------------ 207| 0| clear(); 208| 0| set_sign(Positive); 209| 0| } 210| | 211| 4.27k| const word carry = bigint_linmul2(mutable_data(), size(), y); 212| 4.27k| set_word_at(size(), carry); 213| | 214| 4.27k| return (*this); 215| 4.27k|} _ZN5Botan6BigIntrMERKS0_: 232| 3.20k|BigInt& BigInt::operator%=(const BigInt& mod) { 233| 3.20k| return (*this = (*this) % mod); 234| 3.20k|} _ZN5Botan6BigIntrSEm: 287| 3.95k|BigInt& BigInt::operator>>=(size_t shift) { 288| 3.95k| bigint_shr1(m_data.mutable_data(), m_data.size(), shift); 289| | 290| 3.95k| if(sig_words() == 0 && m_signedness == Negative) { ------------------ | Branch (290:7): [True: 0, False: 3.95k] | Branch (290:27): [True: 0, False: 0] ------------------ 291| 0| m_signedness = Positive; 292| 0| } 293| | 294| 3.95k| return (*this); 295| 3.95k|} _ZN5Botan6BigInt4add2ERKS0_PKmmNS0_4SignE: 20| 8.76k|BigInt BigInt::add2(const BigInt& x, const word y[], size_t y_size, BigInt::Sign y_sign) { 21| 8.76k| const size_t x_sw = x.sig_words(); 22| | 23| 8.76k| BigInt z = BigInt::with_capacity(std::max(x_sw, y_size) + 1); 24| | 25| 8.76k| if(x.sign() == y_sign) { ------------------ | Branch (25:7): [True: 3.73k, False: 5.02k] ------------------ 26| 3.73k| const word carry = bigint_add3(z.mutable_data(), x._data(), x_sw, y, y_size); 27| 3.73k| z.mutable_data()[std::max(x_sw, y_size)] += carry; 28| 3.73k| z.set_sign(x.sign()); 29| 5.02k| } else { 30| 5.02k| const int32_t relative_size = bigint_cmp(x.data(), x_sw, y, y_size); 31| | 32| 5.02k| if(relative_size < 0) { ------------------ | Branch (32:10): [True: 0, False: 5.02k] ------------------ 33| | // x < y so z = abs(y - x) 34| | // NOLINTNEXTLINE(*-suspicious-call-argument) intentionally swapping x and y here 35| 0| bigint_sub3(z.mutable_data(), y, y_size, x.data(), x_sw); 36| 0| z.set_sign(y_sign); 37| 5.02k| } else if(relative_size == 0) { ------------------ | Branch (37:17): [True: 0, False: 5.02k] ------------------ 38| | // Positive zero (nothing to do in this case) 39| 5.02k| } else { 40| | /* 41| | * We know at this point that x >= y so if y_size is larger than 42| | * x_sw, we are guaranteed they are just leading zeros which can 43| | * be ignored 44| | */ 45| 5.02k| y_size = std::min(x_sw, y_size); 46| 5.02k| bigint_sub3(z.mutable_data(), x.data(), x_sw, y, y_size); 47| 5.02k| z.set_sign(x.sign()); 48| 5.02k| } 49| 5.02k| } 50| | 51| 8.76k| return z; 52| 8.76k|} _ZN5BotanmlERKNS_6BigIntES2_: 57| 764|BigInt operator*(const BigInt& x, const BigInt& y) { 58| 764| const size_t x_sw = x.sig_words(); 59| 764| const size_t y_sw = y.sig_words(); 60| | 61| 764| BigInt z = BigInt::with_capacity(x.size() + y.size()); 62| | 63| 764| if(x_sw == 1 && y_sw > 0) { ------------------ | Branch (63:7): [True: 0, False: 764] | Branch (63:20): [True: 0, False: 0] ------------------ 64| 0| bigint_linmul3(z.mutable_data(), y._data(), y_sw, x.word_at(0)); 65| 764| } else if(y_sw == 1 && x_sw > 0) { ------------------ | Branch (65:14): [True: 0, False: 764] | Branch (65:27): [True: 0, False: 0] ------------------ 66| 0| bigint_linmul3(z.mutable_data(), x._data(), x_sw, y.word_at(0)); 67| 764| } else if(x_sw > 0 && y_sw > 0) { ------------------ | Branch (67:14): [True: 764, False: 0] | Branch (67:26): [True: 764, False: 0] ------------------ 68| 764| secure_vector workspace(z.size()); 69| | 70| 764| bigint_mul(z.mutable_data(), 71| 764| z.size(), 72| 764| x._data(), 73| 764| x.size(), 74| 764| x_sw, 75| 764| y._data(), 76| 764| y.size(), 77| 764| y_sw, 78| 764| workspace.data(), 79| 764| workspace.size()); 80| 764| } 81| | 82| 764| z.cond_flip_sign(x_sw > 0 && y_sw > 0 && x.sign() != y.sign()); ------------------ | Branch (82:21): [True: 764, False: 0] | Branch (82:33): [True: 764, False: 0] | Branch (82:45): [True: 0, False: 764] ------------------ 83| | 84| 764| return z; 85| 764|} _ZN5BotanmlERKNS_6BigIntEm: 90| 687|BigInt operator*(const BigInt& x, word y) { 91| 687| const size_t x_sw = x.sig_words(); 92| | 93| 687| BigInt z = BigInt::with_capacity(x_sw + 1); 94| | 95| 687| if(x_sw > 0 && y > 0) { ------------------ | Branch (95:7): [True: 687, False: 0] | Branch (95:19): [True: 687, False: 0] ------------------ 96| 687| bigint_linmul3(z.mutable_data(), x._data(), x_sw, y); 97| 687| z.set_sign(x.sign()); 98| 687| } 99| | 100| 687| return z; 101| 687|} _ZN5BotandvERKNS_6BigIntES2_: 106| 687|BigInt operator/(const BigInt& x, const BigInt& y) { 107| 687| if(y.sig_words() == 1 && y.signum() >= 0) { ------------------ | Branch (107:7): [True: 0, False: 687] | Branch (107:29): [True: 0, False: 0] ------------------ 108| 0| return x / y.word_at(0); 109| 0| } 110| | 111| 687| BigInt q; 112| 687| BigInt r; 113| 687| ct_divide(x, y, q, r); 114| 687| return q; 115| 687|} _ZN5BotandvERKNS_6BigIntEm: 120| 295|BigInt operator/(const BigInt& x, word y) { 121| 295| if(y == 0) { ------------------ | Branch (121:7): [True: 0, False: 295] ------------------ 122| 0| throw Invalid_Argument("BigInt::operator/ divide by zero"); 123| 0| } 124| | 125| 295| BigInt q; 126| 295| word r = 0; 127| 295| ct_divide_word(x, y, q, r); 128| 295| return q; 129| 295|} _ZN5BotanrmERKNS_6BigIntES2_: 134| 3.20k|BigInt operator%(const BigInt& n, const BigInt& mod) { 135| 3.20k| if(mod.is_zero()) { ------------------ | Branch (135:7): [True: 0, False: 3.20k] ------------------ 136| 0| throw Invalid_Argument("BigInt::operator% divide by zero"); 137| 0| } 138| 3.20k| if(mod.signum() < 0) { ------------------ | Branch (138:7): [True: 0, False: 3.20k] ------------------ 139| 0| throw Invalid_Argument("BigInt::operator% modulus must be > 0"); 140| 0| } 141| 3.20k| if(n.signum() >= 0 && mod.signum() >= 0 && n < mod) { ------------------ | Branch (141:7): [True: 2.60k, False: 606] | Branch (141:26): [True: 2.60k, False: 0] | Branch (141:47): [True: 0, False: 2.60k] ------------------ 142| 0| return n; 143| 0| } 144| | 145| 3.20k| if(mod.sig_words() == 1) { ------------------ | Branch (145:7): [True: 1.99k, False: 1.21k] ------------------ 146| 1.99k| return BigInt::from_word(n % mod.word_at(0)); 147| 1.99k| } 148| | 149| 1.21k| BigInt q; 150| 1.21k| BigInt r; 151| 1.21k| ct_divide(n, mod, q, r); 152| 1.21k| return r; 153| 3.20k|} _ZN5BotanrmERKNS_6BigIntEm: 158| 3.55k|word operator%(const BigInt& n, word mod) { 159| 3.55k| if(mod == 0) { ------------------ | Branch (159:7): [True: 0, False: 3.55k] ------------------ 160| 0| throw Invalid_Argument("BigInt::operator% divide by zero"); 161| 0| } 162| | 163| 3.55k| if(mod == 1) { ------------------ | Branch (163:7): [True: 0, False: 3.55k] ------------------ 164| 0| return 0; 165| 0| } 166| | 167| 3.55k| word remainder = 0; 168| | 169| 3.55k| if(n.signum() >= 0 && is_power_of_2(mod)) { ------------------ | Branch (169:7): [True: 3.55k, False: 0] | Branch (169:26): [True: 1.55k, False: 1.99k] ------------------ 170| 1.55k| remainder = (n.word_at(0) & (mod - 1)); 171| 1.99k| } else { 172| 1.99k| const auto redc_mod = divide_precomp::setup_vartime(mod); 173| 1.99k| const size_t sw = n.sig_words(); 174| 57.3k| for(size_t i = sw; i > 0; --i) { ------------------ | Branch (174:26): [True: 55.3k, False: 1.99k] ------------------ 175| 55.3k| remainder = redc_mod.mod_2to1(remainder, n.word_at(i - 1)); 176| 55.3k| } 177| 1.99k| } 178| | 179| 3.55k| if(remainder != 0 && n.sign() == BigInt::Negative) { ------------------ | Branch (179:7): [True: 3.55k, False: 0] | Branch (179:25): [True: 0, False: 3.55k] ------------------ 180| 0| return mod - remainder; 181| 0| } 182| 3.55k| return remainder; 183| 3.55k|} _ZN5BotanrsERKNS_6BigIntEm: 209| 480|BigInt operator>>(const BigInt& x, size_t shift) { 210| 480| const size_t shift_words = shift / WordInfo::bits; 211| 480| const size_t x_sw = x.sig_words(); 212| | 213| 480| if(shift_words >= x_sw) { ------------------ | Branch (213:7): [True: 0, False: 480] ------------------ 214| 0| return BigInt::zero(); 215| 0| } 216| | 217| 480| const size_t new_size = x_sw - shift_words; 218| 480| BigInt y = BigInt::with_capacity(new_size); 219| 480| bigint_shr2(y.mutable_data(), new_size, x._data(), x_sw, shift); 220| | 221| 480| if(x.signum() < 0 && y.is_zero()) { ------------------ | Branch (221:7): [True: 0, False: 480] | Branch (221:25): [True: 0, False: 0] ------------------ 222| 0| y.set_sign(BigInt::Positive); 223| 480| } else { 224| 480| y.set_sign(x.sign()); 225| 480| } 226| | 227| 480| return y; 228| 480|} _ZN5Botan6BigInt9randomizeERNS_21RandomNumberGeneratorEmb: 20| 4.23k|void BigInt::randomize(RandomNumberGenerator& rng, size_t bitsize, bool set_high_bit) { 21| 4.23k| set_sign(Positive); 22| | 23| 4.23k| if(bitsize == 0) { ------------------ | Branch (23:7): [True: 0, False: 4.23k] ------------------ 24| 0| clear(); 25| 4.23k| } else { 26| 4.23k| secure_vector array = rng.random_vec(ceil_tobytes(bitsize)); 27| | 28| | // Always cut unwanted bits 29| 4.23k| if(bitsize % 8 > 0) { ------------------ | Branch (29:10): [True: 2.13k, False: 2.10k] ------------------ 30| 2.13k| array[0] &= 0xFF >> (8 - (bitsize % 8)); 31| 2.13k| } 32| | 33| | // Set the highest bit if wanted 34| 4.23k| if(set_high_bit) { ------------------ | Branch (34:10): [True: 588, False: 3.64k] ------------------ 35| 588| array[0] |= 0x80 >> ((bitsize % 8) > 0 ? (8 - bitsize % 8) : 0); ------------------ | Branch (35:31): [True: 254, False: 334] ------------------ 36| 588| } 37| | 38| 4.23k| assign_from_bytes(array); 39| 4.23k| } 40| 4.23k|} _ZN5Botan6BigInt14random_integerERNS_21RandomNumberGeneratorERKS0_S4_: 45| 4.75k|BigInt BigInt::random_integer(RandomNumberGenerator& rng, const BigInt& min, const BigInt& max) { 46| 4.75k| if(min.signum() < 0 || max.signum() < 0 || max <= min) { ------------------ | Branch (46:7): [True: 0, False: 4.75k] | Branch (46:27): [True: 0, False: 4.75k] | Branch (46:47): [True: 0, False: 4.75k] ------------------ 47| 0| throw Invalid_Argument("BigInt::random_integer invalid range"); 48| 0| } 49| | 50| | /* 51| | If min is > 1 then we generate a random number `r` in [0,max-min) 52| | and return min + r. 53| | 54| | This same logic could also be reasonably chosen for min == 1, but 55| | that breaks certain tests which expect stability of this function 56| | when generating within [1,n) 57| | */ 58| 4.75k| if(min > 1) { ------------------ | Branch (58:7): [True: 2.37k, False: 2.37k] ------------------ 59| 2.37k| const BigInt diff = max - min; 60| | // This call is recursive, but will not recurse further 61| 2.37k| return min + BigInt::random_integer(rng, BigInt::zero(), diff); 62| 2.37k| } 63| | 64| 2.37k| BOTAN_DEBUG_ASSERT(min <= 1); ------------------ | | 137| 2.37k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 2.37k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 2.37k] | | ------------------ ------------------ 65| | 66| 2.37k| const size_t bits = max.bits(); 67| | 68| 3.64k| for(;;) { 69| 3.64k| BigInt r; 70| 3.64k| r.randomize(rng, bits, false); 71| 3.64k| if(r >= min && r < max) { ------------------ | Branch (71:10): [True: 3.64k, False: 0] | Branch (71:22): [True: 2.37k, False: 1.27k] ------------------ 72| 2.37k| return r; 73| 2.37k| } 74| 3.64k| } 75| 2.37k|} _ZN5Botan6BigIntC2Em: 18| 13|BigInt::BigInt(uint64_t n) { 19| 13| if constexpr(sizeof(word) == 8) { 20| 13| m_data.set_word_at(0, static_cast(n)); 21| | } else { 22| | m_data.set_word_at(1, static_cast(n >> 32)); 23| | m_data.set_word_at(0, static_cast(n)); 24| | } 25| 13|} _ZN5Botan6BigInt9from_wordEm: 33| 36.6k|BigInt BigInt::from_word(word n) { 34| 36.6k| BigInt bn; 35| 36.6k| bn.set_word_at(0, n); 36| 36.6k| return bn; 37| 36.6k|} _ZN5Botan6BigInt13with_capacityEm: 49| 18.8k|BigInt BigInt::with_capacity(size_t size) { 50| 18.8k| BigInt bn; 51| 18.8k| bn.grow_to(size); 52| 18.8k| return bn; 53| 18.8k|} _ZN5Botan6BigInt11from_stringENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 55| 662|BigInt BigInt::from_string(std::string_view str) { 56| 662| size_t prefix_bytes = 0; 57| 662| bool negative = false; 58| 662| size_t radix = 10; 59| | 60| 662| if(!str.empty() && str[0] == '-') { ------------------ | Branch (60:7): [True: 662, False: 0] | Branch (60:23): [True: 0, False: 662] ------------------ 61| 0| prefix_bytes += 1; 62| 0| negative = true; 63| 0| } 64| | 65| 662| if(str.length() > prefix_bytes + 2 && str[prefix_bytes] == '0' && str[prefix_bytes + 1] == 'x') { ------------------ | Branch (65:7): [True: 662, False: 0] | Branch (65:42): [True: 662, False: 0] | Branch (65:70): [True: 662, False: 0] ------------------ 66| 662| prefix_bytes += 2; 67| 662| radix = 16; 68| 662| } 69| | 70| 662| BigInt r = BigInt::from_radix_digits(str.substr(prefix_bytes), radix); 71| | 72| 662| if(negative) { ------------------ | Branch (72:7): [True: 0, False: 662] ------------------ 73| 0| r.set_sign(Negative); 74| 662| } else { 75| 662| r.set_sign(Positive); 76| 662| } 77| | 78| 662| return r; 79| 662|} _ZN5Botan6BigInt10from_bytesENSt3__14spanIKhLm18446744073709551615EEE: 81| 4.38k|BigInt BigInt::from_bytes(std::span input) { 82| 4.38k| BigInt r; 83| 4.38k| r.assign_from_bytes(input); 84| 4.38k| return r; 85| 4.38k|} _ZN5Botan6BigIntC2ERNS_21RandomNumberGeneratorEmb: 112| 588|BigInt::BigInt(RandomNumberGenerator& rng, size_t bits, bool set_high_bit) { 113| 588| randomize(rng, bits, set_high_bit); 114| 588|} _ZNK5Botan6BigInt7byte_atEm: 116| 14.9k|uint8_t BigInt::byte_at(size_t n) const { 117| 14.9k| return get_byte_var(sizeof(word) - (n % sizeof(word)) - 1, word_at(n / sizeof(word))); 118| 14.9k|} _ZNK5Botan6BigInt8cmp_wordEm: 120| 64.9k|int32_t BigInt::cmp_word(word other) const { 121| 64.9k| if(signum() < 0) { ------------------ | Branch (121:7): [True: 784, False: 64.1k] ------------------ 122| 784| return -1; // other is positive ... 123| 784| } 124| | 125| 64.1k| const size_t sw = this->sig_words(); 126| 64.1k| if(sw > 1) { ------------------ | Branch (126:7): [True: 47.1k, False: 16.9k] ------------------ 127| 47.1k| return 1; // must be larger since other is just one word ... 128| 47.1k| } 129| | 130| 16.9k| return bigint_cmp(this->_data(), sw, &other, 1); 131| 64.1k|} _ZNK5Botan6BigInt3cmpERKS0_b: 136| 14.2k|int32_t BigInt::cmp(const BigInt& other, bool check_signs) const { 137| 14.2k| if(check_signs) { ------------------ | Branch (137:7): [True: 14.2k, False: 0] ------------------ 138| 14.2k| if(other.signum() >= 0 && this->signum() < 0) { ------------------ | Branch (138:10): [True: 14.2k, False: 0] | Branch (138:33): [True: 0, False: 14.2k] ------------------ 139| 0| return -1; 140| 0| } 141| | 142| 14.2k| if(other.signum() < 0 && this->signum() >= 0) { ------------------ | Branch (142:10): [True: 0, False: 14.2k] | Branch (142:32): [True: 0, False: 0] ------------------ 143| 0| return 1; 144| 0| } 145| | 146| 14.2k| if(other.signum() < 0 && this->signum() < 0) { ------------------ | Branch (146:10): [True: 0, False: 14.2k] | Branch (146:32): [True: 0, False: 0] ------------------ 147| 0| return (-bigint_cmp(this->_data(), this->size(), other._data(), other.size())); 148| 0| } 149| 14.2k| } 150| | 151| 14.2k| return bigint_cmp(this->_data(), this->size(), other._data(), other.size()); 152| 14.2k|} _ZNK5Botan6BigInt8is_equalERKS0_: 154| 647|bool BigInt::is_equal(const BigInt& other) const { 155| 647| if(this->sign() != other.sign()) { ------------------ | Branch (155:7): [True: 0, False: 647] ------------------ 156| 0| return false; 157| 0| } 158| | 159| 647| return bigint_ct_is_eq(this->_data(), this->size(), other._data(), other.size()).as_bool(); 160| 647|} _ZNK5Botan6BigInt12is_less_thanERKS0_: 162| 20.2k|bool BigInt::is_less_than(const BigInt& other) const { 163| 20.2k| if(this->signum() < 0 && other.signum() >= 0) { ------------------ | Branch (163:7): [True: 0, False: 20.2k] | Branch (163:29): [True: 0, False: 0] ------------------ 164| 0| return true; 165| 0| } 166| | 167| 20.2k| if(this->signum() >= 0 && other.signum() < 0) { ------------------ | Branch (167:7): [True: 20.2k, False: 0] | Branch (167:30): [True: 0, False: 20.2k] ------------------ 168| 0| return false; 169| 0| } 170| | 171| 20.2k| if(other.signum() < 0 && this->signum() < 0) { ------------------ | Branch (171:7): [True: 0, False: 20.2k] | Branch (171:29): [True: 0, False: 0] ------------------ 172| 0| return bigint_ct_is_lt(other._data(), other.size(), this->_data(), this->size()).as_bool(); 173| 0| } 174| | 175| 20.2k| return bigint_ct_is_lt(this->_data(), this->size(), other._data(), other.size()).as_bool(); 176| 20.2k|} _ZNK5Botan6BigInt12encode_wordsEPmm: 178| 4.98k|void BigInt::encode_words(word out[], size_t size) const { 179| 4.98k| const size_t words = sig_words(); 180| | 181| 4.98k| if(words > size) { ------------------ | Branch (181:7): [True: 0, False: 4.98k] ------------------ 182| 0| throw Encoding_Error("BigInt::encode_words value too large to encode"); 183| 0| } 184| | 185| 4.98k| clear_mem(out, size); 186| 4.98k| copy_mem(out, _data(), words); 187| 4.98k|} _ZN5Botan6BigInt4Data11set_to_zeroEv: 189| 18.5k|void BigInt::Data::set_to_zero() { 190| 18.5k| m_reg.resize(m_reg.capacity()); 191| 18.5k| clear_mem(m_reg.data(), m_reg.size()); 192| 18.5k| m_sig_words = 0; 193| 18.5k|} _ZNK5Botan6BigInt4Data14calc_sig_wordsEv: 213| 163k|size_t BigInt::Data::calc_sig_words() const { 214| 163k| const size_t sz = m_reg.size(); 215| 163k| size_t sig = sz; 216| | 217| 163k| word sub = 1; 218| | 219| 5.54M| for(size_t i = 0; i != sz; ++i) { ------------------ | Branch (219:22): [True: 5.38M, False: 163k] ------------------ 220| 5.38M| const word w = m_reg[sz - i - 1]; 221| 5.38M| sub &= ct_is_zero(w); 222| 5.38M| sig -= sub; 223| 5.38M| } 224| | 225| | /* 226| | * This depends on the data so is poisoned, but unpoison it here as 227| | * later conditionals are made on the size. 228| | */ 229| 163k| CT::unpoison(sig); 230| | 231| 163k| return sig; 232| 163k|} _ZNK5Botan6BigInt13get_substringEmm: 237| 1.06M|uint32_t BigInt::get_substring(size_t offset, size_t length) const { 238| 1.06M| if(length == 0 || length > 32) { ------------------ | Branch (238:7): [True: 0, False: 1.06M] | Branch (238:22): [True: 0, False: 1.06M] ------------------ 239| 0| throw Invalid_Argument("BigInt::get_substring invalid substring length"); 240| 0| } 241| | 242| 1.06M| const uint32_t mask = 0xFFFFFFFF >> (32 - length); 243| | 244| 1.06M| const size_t word_offset = offset / WordInfo::bits; 245| 1.06M| const size_t wshift = (offset % WordInfo::bits); 246| | 247| | /* 248| | * The substring is contained within one or at most two words. The 249| | * offset and length are not secret, so we can perform conditional 250| | * operations on those values. 251| | */ 252| 1.06M| const word w0 = word_at(word_offset); 253| | 254| 1.06M| if(wshift == 0 || (offset + length) / WordInfo::bits == word_offset) { ------------------ | Branch (254:7): [True: 55.6k, False: 1.01M] | Branch (254:22): [True: 910k, False: 100k] ------------------ 255| 965k| return static_cast(w0 >> wshift) & mask; 256| 965k| } else { 257| 100k| const word w1 = word_at(word_offset + 1); 258| 100k| return static_cast((w0 >> wshift) | (w1 << (WordInfo::bits - wshift))) & mask; 259| 100k| } 260| 1.06M|} _ZNK5Botan6BigInt5bytesEv: 292| 10.1k|size_t BigInt::bytes() const { 293| 10.1k| return ceil_tobytes(bits()); 294| 10.1k|} _ZNK5Botan6BigInt13top_bits_freeEv: 296| 63.7k|size_t BigInt::top_bits_free() const { 297| 63.7k| const size_t words = sig_words(); 298| | 299| 63.7k| const word top_word = word_at(words - 1); 300| 63.7k| const size_t bits_used = high_bit(CT::value_barrier(top_word)); 301| 63.7k| CT::unpoison(bits_used); 302| 63.7k| return WordInfo::bits - bits_used; 303| 63.7k|} _ZNK5Botan6BigInt4bitsEv: 305| 63.7k|size_t BigInt::bits() const { 306| 63.7k| const size_t words = sig_words(); 307| | 308| 63.7k| if(words == 0) { ------------------ | Branch (308:7): [True: 20, False: 63.7k] ------------------ 309| 20| return 0; 310| 20| } 311| | 312| 63.7k| const size_t full_words = (words - 1) * WordInfo::bits; 313| 63.7k| const size_t top_bits = WordInfo::bits - top_bits_free(); 314| | 315| 63.7k| return full_words + top_bits; 316| 63.7k|} _ZN5Botan6BigInt12reduce_belowERKS0_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 327| 4.27k|size_t BigInt::reduce_below(const BigInt& p, secure_vector& ws) { 328| 4.27k| if(p.signum() < 0 || this->signum() < 0) { ------------------ | Branch (328:7): [True: 0, False: 4.27k] | Branch (328:25): [True: 0, False: 4.27k] ------------------ 329| 0| throw Invalid_Argument("BigInt::reduce_below both values must be positive"); 330| 0| } 331| | 332| 4.27k| const size_t p_words = p.sig_words(); 333| | 334| 4.27k| if(size() < p_words + 1) { ------------------ | Branch (334:7): [True: 0, False: 4.27k] ------------------ 335| 0| grow_to(p_words + 1); 336| 0| } 337| | 338| 4.27k| if(ws.size() < p_words + 1) { ------------------ | Branch (338:7): [True: 0, False: 4.27k] ------------------ 339| 0| ws.resize(p_words + 1); 340| 0| } 341| | 342| 4.27k| clear_mem(ws.data(), ws.size()); 343| | 344| 4.27k| size_t reductions = 0; 345| | 346| 11.1k| for(;;) { 347| 11.1k| const word borrow = bigint_sub3(ws.data(), _data(), p_words + 1, p._data(), p_words); 348| 11.1k| if(borrow > 0) { ------------------ | Branch (348:10): [True: 4.27k, False: 6.90k] ------------------ 349| 4.27k| break; 350| 4.27k| } 351| | 352| 6.90k| ++reductions; 353| 6.90k| swap_reg(ws); 354| 6.90k| } 355| | 356| 4.27k| return reductions; 357| 4.27k|} _ZNK5Botan6BigInt3absEv: 384| 1.21k|BigInt BigInt::abs() const { 385| 1.21k| BigInt x = (*this); 386| 1.21k| x.set_sign(Positive); 387| 1.21k| return x; 388| 1.21k|} _ZNK5Botan6BigInt12serialize_toENSt3__14spanIhLm18446744073709551615EEE: 393| 4.99k|void BigInt::serialize_to(std::span output) const { 394| 4.99k| BOTAN_ARG_CHECK(this->bytes() <= output.size(), "Insufficient output space"); ------------------ | | 35| 4.99k| do { \ | | 36| 4.99k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 4.99k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 4.99k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 4.99k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 4.99k] | | ------------------ ------------------ 395| | 396| 4.99k| this->binary_encode(output.data(), output.size()); 397| 4.99k|} _ZNK5Botan6BigInt13binary_encodeEPhm: 402| 4.99k|void BigInt::binary_encode(uint8_t output[], size_t len) const { 403| 4.99k| const size_t full_words = len / sizeof(word); 404| 4.99k| const size_t extra_bytes = len % sizeof(word); 405| | 406| 59.3k| for(size_t i = 0; i != full_words; ++i) { ------------------ | Branch (406:22): [True: 54.3k, False: 4.99k] ------------------ 407| 54.3k| const word w = word_at(i); 408| 54.3k| store_be(w, output + (len - (i + 1) * sizeof(word))); 409| 54.3k| } 410| | 411| 4.99k| if(extra_bytes > 0) { ------------------ | Branch (411:7): [True: 4.23k, False: 759] ------------------ 412| 4.23k| const word w = word_at(full_words); 413| | 414| 11.2k| for(size_t i = 0; i != extra_bytes; ++i) { ------------------ | Branch (414:25): [True: 7.05k, False: 4.23k] ------------------ 415| 7.05k| output[extra_bytes - i - 1] = get_byte_var(sizeof(word) - i - 1, w); 416| 7.05k| } 417| 4.23k| } 418| 4.99k|} _ZN5Botan6BigInt17assign_from_bytesENSt3__14spanIKhLm18446744073709551615EEE: 423| 18.5k|void BigInt::assign_from_bytes(std::span bytes) { 424| 18.5k| clear(); 425| | 426| 18.5k| const size_t length = bytes.size(); 427| 18.5k| const size_t full_words = length / sizeof(word); 428| 18.5k| const size_t extra_bytes = length % sizeof(word); 429| | 430| 18.5k| const size_t total_words = full_words + (extra_bytes > 0 ? 1 : 0); ------------------ | Branch (430:45): [True: 12.0k, False: 6.43k] ------------------ 431| | 432| 18.5k| secure_vector reg(8 * ceil_division(total_words, 8)); 433| | 434| 316k| for(size_t i = 0; i != full_words; ++i) { ------------------ | Branch (434:22): [True: 297k, False: 18.5k] ------------------ 435| 297k| reg[i] = load_be(bytes.last()); 436| 297k| bytes = bytes.first(bytes.size() - sizeof(word)); 437| 297k| } 438| | 439| 18.5k| if(!bytes.empty()) { ------------------ | Branch (439:7): [True: 12.0k, False: 6.43k] ------------------ 440| 12.0k| BOTAN_ASSERT_NOMSG(extra_bytes == bytes.size()); ------------------ | | 84| 12.0k| do { \ | | 85| 12.0k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 12.0k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 12.0k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 12.0k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 12.0k] | | ------------------ ------------------ 441| 12.0k| std::array last_partial_word = {0}; 442| 12.0k| copy_mem(std::span{last_partial_word}.last(extra_bytes), bytes); 443| 12.0k| reg[full_words] = load_be(last_partial_word); 444| 12.0k| } 445| | 446| 18.5k| m_data.swap(reg); 447| 18.5k|} _ZN5Botan6BigInt14cond_flip_signEb: 521| 4.01k|void BigInt::cond_flip_sign(bool predicate) { 522| | // This code is assuming Negative == 0, Positive == 1 523| | 524| 4.01k| const auto mask = CT::Mask::expand_bool(predicate); 525| | 526| 4.01k| const uint8_t current_sign = static_cast(sign()); 527| | 528| 4.01k| const uint8_t new_sign = mask.select(current_sign ^ 1, current_sign); 529| | 530| 4.01k| set_sign(static_cast(new_sign)); 531| 4.01k|} _ZNK5Botan6BigInt20_const_time_unpoisonEv: 559| 202k|void BigInt::_const_time_unpoison() const { 560| 202k| CT::unpoison(m_data.const_data(), m_data.size()); 561| 202k|} _ZN5Botan9ct_divideERKNS_6BigIntES2_RS0_S3_: 180| 1.89k|void ct_divide(const BigInt& x, const BigInt& y, BigInt& q_out, BigInt& r_out) { 181| 1.89k| if(y.is_zero()) { ------------------ | Branch (181:7): [True: 0, False: 1.89k] ------------------ 182| 0| throw Invalid_Argument("ct_divide: cannot divide by zero"); 183| 0| } 184| | 185| 1.89k| BigInt q; 186| 1.89k| BigInt r; 187| 1.89k| ct_divide_impl(q, r, x, y); 188| | 189| 1.89k| sign_fixup(x, y, q, r); 190| 1.89k| r_out = std::move(r); 191| 1.89k| q_out = std::move(q); 192| 1.89k|} _ZN5Botan15ct_divide_pow2kEmRKNS_6BigIntE: 194| 2.54k|BigInt ct_divide_pow2k(size_t k, const BigInt& y) { 195| 2.54k| BOTAN_ARG_CHECK(y.signum() != 0, "Cannot divide by zero"); ------------------ | | 35| 2.54k| do { \ | | 36| 2.54k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 2.54k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 2.54k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 2.54k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 2.54k] | | ------------------ ------------------ 196| 2.54k| BOTAN_ARG_CHECK(y.signum() >= 0, "Negative divisor not supported"); ------------------ | | 35| 2.54k| do { \ | | 36| 2.54k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 2.54k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 2.54k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 2.54k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 2.54k] | | ------------------ ------------------ 197| 2.54k| BOTAN_ARG_CHECK(k > 1, "Invalid k"); ------------------ | | 35| 2.54k| do { \ | | 36| 2.54k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 2.54k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 2.54k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 2.54k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 2.54k] | | ------------------ ------------------ 198| | 199| 2.54k| BigInt q; 200| 2.54k| BigInt r; 201| 2.54k| ct_divide_impl(q, r, BigInt::power_of_2(k), y); 202| 2.54k| return q; 203| 2.54k|} _ZN5Botan14ct_divide_wordERKNS_6BigIntEmRS0_Rm: 205| 295|void ct_divide_word(const BigInt& x, word y, BigInt& q_out, word& r_out) { 206| 295| if(y == 0) { ------------------ | Branch (206:7): [True: 0, False: 295] ------------------ 207| 0| throw Invalid_Argument("ct_divide_word: cannot divide by zero"); 208| 0| } 209| | 210| 295| const size_t x_words = x.sig_words(); 211| | 212| | // The divisor is public here; setup is variable time in it 213| 295| const auto div_y = divide_precomp::setup_vartime(y); 214| | 215| 295| secure_vector qw(x_words); 216| 295| word r = 0; 217| | 218| | // Each step depends on r < y, which holds since r is a remainder mod y 219| 9.93k| for(size_t i = x_words; i > 0; --i) { ------------------ | Branch (219:28): [True: 9.64k, False: 295] ------------------ 220| 9.64k| const auto [qi, ri] = div_y.divmod_2to1_vartime(r, x._data()[i - 1]); 221| 9.64k| qw[i - 1] = qi; 222| 9.64k| r = ri; 223| 9.64k| } 224| | 225| 295| BigInt q = BigInt::_from_words(qw); 226| | 227| 295| if(x.signum() < 0) { ------------------ | Branch (227:7): [True: 0, False: 295] ------------------ 228| 0| q.flip_sign(); 229| 0| if(r != 0) { ------------------ | Branch (229:10): [True: 0, False: 0] ------------------ 230| 0| --q; 231| 0| r = y - r; 232| 0| } 233| 0| } 234| | 235| 295| r_out = r; 236| 295| q_out = std::move(q); 237| 295|} divide.cpp:_ZN5Botan12_GLOBAL__N_114ct_divide_implERNS_6BigIntES2_RKS1_S4_: 66| 4.44k|void ct_divide_impl(BigInt& q_out, BigInt& r_out, const BigInt& x, const BigInt& y) { 67| 4.44k| constexpr size_t WB = WordInfo::bits; 68| | 69| 4.44k| const size_t x_words = x.sig_words(); 70| 4.44k| const size_t y_words = y.sig_words(); 71| 4.44k| BOTAN_ASSERT_NOMSG(y_words > 0); ------------------ | | 84| 4.44k| do { \ | | 85| 4.44k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 4.44k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 4.44k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 4.44k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 4.44k] | | ------------------ ------------------ 72| | 73| 4.44k| if(x_words < y_words) { ------------------ | Branch (73:7): [True: 606, False: 3.83k] ------------------ 74| | // Here |x| < |y| so q = 0 and r = |x| 75| 606| r_out = x.abs(); 76| 606| q_out = BigInt::zero(); 77| 606| return; 78| 606| } 79| | 80| 3.83k| const size_t r_words = x_words + 1; 81| 3.83k| const size_t q_words = x_words - y_words + 1; 82| | 83| | // The number of leading zero bits of y, in [0,WB) 84| 3.83k| const word s = static_cast(WB) - static_cast(high_bit(CT::value_barrier(y._data()[y_words - 1]))); 85| 3.83k| const auto s_mask = CT::Mask::expand(s); 86| 3.83k| const word s_comp = s_mask.if_set_return(static_cast(WB) - s); 87| | 88| 3.83k| secure_vector yn(y_words); 89| 3.83k| secure_vector rw(r_words); 90| 3.83k| secure_vector qw(q_words); 91| | 92| | // Normalize: yn = |y| << s (which sets the top bit of yn) and rw = |x| << s; 93| | // shifting y stays within y_words words, shifting x adds at most one word 94| 3.83k| word carry = 0; 95| 135k| for(size_t i = 0; i != y_words; ++i) { ------------------ | Branch (95:22): [True: 132k, False: 3.83k] ------------------ 96| 132k| const word w = y._data()[i]; 97| 132k| yn[i] = (w << s) | carry; 98| 132k| carry = s_mask.if_set_return(w >> s_comp); 99| 132k| } 100| | 101| 3.83k| carry = 0; 102| 245k| for(size_t i = 0; i != x_words; ++i) { ------------------ | Branch (102:22): [True: 241k, False: 3.83k] ------------------ 103| 241k| const word w = x._data()[i]; 104| 241k| rw[i] = (w << s) | carry; 105| 241k| carry = s_mask.if_set_return(w >> s_comp); 106| 241k| } 107| 3.83k| rw[x_words] = carry; 108| | 109| 3.83k| const auto div_by_yn = divide_precomp::setup(CT::value_barrier(yn[y_words - 1])); 110| | 111| 3.83k| if(y_words == 1) { ------------------ | Branch (111:7): [True: 0, False: 3.83k] ------------------ 112| | /* 113| | * 2/1 word-serial division. The initial remainder is the shift-out 114| | * carry, which is less than 2^s and so less than the divisor. 115| | */ 116| 0| word r = rw[x_words]; 117| 0| for(size_t i = x_words; i > 0; --i) { ------------------ | Branch (117:31): [True: 0, False: 0] ------------------ 118| 0| const auto [qi, ri] = div_by_yn.divmod_2to1_ct(r, rw[i - 1]); 119| 0| qw[i - 1] = qi; 120| 0| r = ri; 121| 0| } 122| | 123| 0| rw[0] = r >> s; 124| 3.83k| } else { 125| 3.83k| const word yn1 = yn[y_words - 1]; 126| 3.83k| const word yn2 = yn[y_words - 2]; 127| | 128| 117k| for(size_t i = q_words; i > 0; --i) { ------------------ | Branch (128:31): [True: 113k, False: 3.83k] ------------------ 129| 113k| const size_t j = i - 1; // current window is rw[j ... j + y_words] 130| | 131| 113k| const word u2 = rw[j + y_words]; 132| 113k| const word u1 = rw[j + y_words - 1]; 133| 113k| const word u0 = rw[j + y_words - 2]; 134| | 135| | /* 136| | * Estimate the quotient digit from the top two words of the window. 137| | * The window invariant gives u2 <= yn1; if u2 == yn1 the 2/1 138| | * division precondition does not hold, and instead the digit 139| | * estimate is the maximum word value. 140| | */ 141| 113k| const auto top_eq = CT::Mask::is_equal(u2, yn1); 142| 113k| const word q_est = div_by_yn.divmod_2to1_ct(u2, u1).first; 143| 113k| word qhat = top_eq.select(WordInfo::max, q_est); 144| | 145| | // Per HAC 14.23, this correction is required at most twice 146| 113k| qhat -= division_check_ct(qhat, yn1, yn2, u2, u1, u0).if_set_return(1); 147| 113k| qhat -= division_check_ct(qhat, yn1, yn2, u2, u1, u0).if_set_return(1); 148| | 149| | // Subtract qhat * yn from the window 150| 113k| const word bw = bigint_submul(&rw[j], yn.data(), y_words, qhat); 151| 113k| word borrow = 0; 152| 113k| rw[j + y_words] = word_sub(u2, bw, &borrow); 153| | 154| | // If the digit was still one too large, the subtraction 155| | // underflowed; add back and decrement the digit 156| 113k| const word cb = bigint_cnd_add(borrow, &rw[j], yn.data(), y_words); 157| 113k| rw[j + y_words] += cb; 158| 113k| qhat -= borrow; 159| | 160| 113k| qw[j] = qhat; 161| 113k| } 162| | 163| | // The remainder is in rw[0:y_words], still shifted left by s, and 164| | // rw[y_words] is zero 165| 135k| for(size_t i = 0; i != y_words; ++i) { ------------------ | Branch (165:25): [True: 132k, False: 3.83k] ------------------ 166| 132k| rw[i] = (rw[i] >> s) | s_mask.if_set_return(CT::value_barrier(rw[i + 1]) << s_comp); 167| 132k| } 168| 3.83k| } 169| | 170| 3.83k| BigInt q = BigInt::_from_words(qw); 171| 3.83k| rw.resize(y_words); 172| 3.83k| BigInt r = BigInt::_from_words(rw); 173| | 174| 3.83k| r_out = std::move(r); 175| 3.83k| q_out = std::move(q); 176| 3.83k|} divide.cpp:_ZN5Botan12_GLOBAL__N_117division_check_ctEmmmmmm: 39| 227k|inline CT::Mask division_check_ct(word q, word y2, word y1, word x3, word x2, word x1) { 40| 227k| word y3 = 0; 41| 227k| y1 = word_madd2(q, y1, &y3); 42| 227k| y2 = word_madd2(q, y2, &y3); 43| | 44| 227k| const auto gt3 = CT::Mask::is_gt(y3, x3); 45| 227k| const auto eq3 = CT::Mask::is_equal(y3, x3); 46| 227k| const auto gt2 = CT::Mask::is_gt(y2, x2); 47| 227k| const auto eq2 = CT::Mask::is_equal(y2, x2); 48| 227k| const auto gt1 = CT::Mask::is_gt(y1, x1); 49| | 50| 227k| return gt3 | (eq3 & (gt2 | (eq2 & gt1))); 51| 227k|} divide.cpp:_ZN5Botan12_GLOBAL__N_110sign_fixupERKNS_6BigIntES3_RS1_S4_: 22| 1.89k|void sign_fixup(const BigInt& x, const BigInt& y, BigInt& q, BigInt& r) { 23| 1.89k| q.cond_flip_sign(x.sign() != y.sign()); 24| | 25| 1.89k| if(x.signum() < 0 && r.signum() != 0) { ------------------ | Branch (25:7): [True: 606, False: 1.29k] | Branch (25:25): [True: 606, False: 0] ------------------ 26| 606| if(y.signum() > 0) { ------------------ | Branch (26:10): [True: 606, False: 0] ------------------ 27| 606| q -= 1; 28| 606| } else { 29| 0| q += 1; 30| 0| } 31| 606| r = y.abs() - r; 32| 606| } 33| 1.89k|} _ZN5Botan17bigint_comba_sqr4EPmPKm: 22| 122k|void bigint_comba_sqr4(word z[8], const word x[4]) { 23| 122k|#if defined(BOTAN_HAS_MP_MULX) 24| 122k| if(CPUID::has(CPUID::Feature::BMI, CPUID::Feature::ADX)) { ------------------ | Branch (24:7): [True: 122k, False: 0] ------------------ 25| 122k| return bigint_mulx_sqr4(z, x); 26| 122k| } 27| 0|#endif 28| | 29| 0| word3 accum; 30| | 31| 0| accum.mul(x[0], x[0]); 32| 0| z[0] = accum.extract(); 33| 0| accum.mul_x2(x[0], x[1]); 34| 0| z[1] = accum.extract(); 35| 0| accum.mul_x2(x[0], x[2]); 36| 0| accum.mul(x[1], x[1]); 37| 0| z[2] = accum.extract(); 38| 0| accum.mul_x2(x[0], x[3]); 39| 0| accum.mul_x2(x[1], x[2]); 40| 0| z[3] = accum.extract(); 41| 0| accum.mul_x2(x[1], x[3]); 42| 0| accum.mul(x[2], x[2]); 43| 0| z[4] = accum.extract(); 44| 0| accum.mul_x2(x[2], x[3]); 45| 0| z[5] = accum.extract(); 46| 0| accum.mul(x[3], x[3]); 47| 0| z[6] = accum.extract(); 48| 0| z[7] = accum.extract(); 49| 0|} _ZN5Botan17bigint_comba_mul4EPmPKmS2_: 54| 204k|void bigint_comba_mul4(word z[8], const word x[4], const word y[4]) { 55| 204k|#if defined(BOTAN_HAS_MP_MULX) 56| 204k| if(CPUID::has(CPUID::Feature::BMI, CPUID::Feature::ADX)) { ------------------ | Branch (56:7): [True: 204k, False: 0] ------------------ 57| 204k| return bigint_mulx_mul4(z, x, y); 58| 204k| } 59| 0|#endif 60| | 61| 0| word3 accum; 62| | 63| 0| accum.mul(x[0], y[0]); 64| 0| z[0] = accum.extract(); 65| 0| accum.mul(x[0], y[1]); 66| 0| accum.mul(x[1], y[0]); 67| 0| z[1] = accum.extract(); 68| 0| accum.mul(x[0], y[2]); 69| 0| accum.mul(x[1], y[1]); 70| 0| accum.mul(x[2], y[0]); 71| 0| z[2] = accum.extract(); 72| 0| accum.mul(x[0], y[3]); 73| 0| accum.mul(x[1], y[2]); 74| 0| accum.mul(x[2], y[1]); 75| 0| accum.mul(x[3], y[0]); 76| 0| z[3] = accum.extract(); 77| 0| accum.mul(x[1], y[3]); 78| 0| accum.mul(x[2], y[2]); 79| 0| accum.mul(x[3], y[1]); 80| 0| z[4] = accum.extract(); 81| 0| accum.mul(x[2], y[3]); 82| 0| accum.mul(x[3], y[2]); 83| 0| z[5] = accum.extract(); 84| 0| accum.mul(x[3], y[3]); 85| 0| z[6] = accum.extract(); 86| 0| z[7] = accum.extract(); 87| 0|} _ZN5Botan17bigint_comba_sqr6EPmPKm: 92| 176k|void bigint_comba_sqr6(word z[12], const word x[6]) { 93| 176k|#if defined(BOTAN_HAS_MP_MULX) 94| 176k| if(CPUID::has(CPUID::Feature::BMI, CPUID::Feature::ADX)) { ------------------ | Branch (94:7): [True: 176k, False: 0] ------------------ 95| 176k| return bigint_mulx_sqr6(z, x); 96| 176k| } 97| 0|#endif 98| | 99| 0| word3 accum; 100| | 101| 0| accum.mul(x[0], x[0]); 102| 0| z[0] = accum.extract(); 103| 0| accum.mul_x2(x[0], x[1]); 104| 0| z[1] = accum.extract(); 105| 0| accum.mul_x2(x[0], x[2]); 106| 0| accum.mul(x[1], x[1]); 107| 0| z[2] = accum.extract(); 108| 0| accum.mul_x2(x[0], x[3]); 109| 0| accum.mul_x2(x[1], x[2]); 110| 0| z[3] = accum.extract(); 111| 0| accum.mul_x2(x[0], x[4]); 112| 0| accum.mul_x2(x[1], x[3]); 113| 0| accum.mul(x[2], x[2]); 114| 0| z[4] = accum.extract(); 115| 0| accum.mul_x2(x[0], x[5]); 116| 0| accum.mul_x2(x[1], x[4]); 117| 0| accum.mul_x2(x[2], x[3]); 118| 0| z[5] = accum.extract(); 119| 0| accum.mul_x2(x[1], x[5]); 120| 0| accum.mul_x2(x[2], x[4]); 121| 0| accum.mul(x[3], x[3]); 122| 0| z[6] = accum.extract(); 123| 0| accum.mul_x2(x[2], x[5]); 124| 0| accum.mul_x2(x[3], x[4]); 125| 0| z[7] = accum.extract(); 126| 0| accum.mul_x2(x[3], x[5]); 127| 0| accum.mul(x[4], x[4]); 128| 0| z[8] = accum.extract(); 129| 0| accum.mul_x2(x[4], x[5]); 130| 0| z[9] = accum.extract(); 131| 0| accum.mul(x[5], x[5]); 132| 0| z[10] = accum.extract(); 133| 0| z[11] = accum.extract(); 134| 0|} _ZN5Botan17bigint_comba_mul6EPmPKmS2_: 139| 225k|void bigint_comba_mul6(word z[12], const word x[6], const word y[6]) { 140| 225k|#if defined(BOTAN_HAS_MP_MULX) 141| 225k| if(CPUID::has(CPUID::Feature::BMI, CPUID::Feature::ADX)) { ------------------ | Branch (141:7): [True: 225k, False: 0] ------------------ 142| 225k| return bigint_mulx_mul6(z, x, y); 143| 225k| } 144| 0|#endif 145| | 146| 0| word3 accum; 147| | 148| 0| accum.mul(x[0], y[0]); 149| 0| z[0] = accum.extract(); 150| 0| accum.mul(x[0], y[1]); 151| 0| accum.mul(x[1], y[0]); 152| 0| z[1] = accum.extract(); 153| 0| accum.mul(x[0], y[2]); 154| 0| accum.mul(x[1], y[1]); 155| 0| accum.mul(x[2], y[0]); 156| 0| z[2] = accum.extract(); 157| 0| accum.mul(x[0], y[3]); 158| 0| accum.mul(x[1], y[2]); 159| 0| accum.mul(x[2], y[1]); 160| 0| accum.mul(x[3], y[0]); 161| 0| z[3] = accum.extract(); 162| 0| accum.mul(x[0], y[4]); 163| 0| accum.mul(x[1], y[3]); 164| 0| accum.mul(x[2], y[2]); 165| 0| accum.mul(x[3], y[1]); 166| 0| accum.mul(x[4], y[0]); 167| 0| z[4] = accum.extract(); 168| 0| accum.mul(x[0], y[5]); 169| 0| accum.mul(x[1], y[4]); 170| 0| accum.mul(x[2], y[3]); 171| 0| accum.mul(x[3], y[2]); 172| 0| accum.mul(x[4], y[1]); 173| 0| accum.mul(x[5], y[0]); 174| 0| z[5] = accum.extract(); 175| 0| accum.mul(x[1], y[5]); 176| 0| accum.mul(x[2], y[4]); 177| 0| accum.mul(x[3], y[3]); 178| 0| accum.mul(x[4], y[2]); 179| 0| accum.mul(x[5], y[1]); 180| 0| z[6] = accum.extract(); 181| 0| accum.mul(x[2], y[5]); 182| 0| accum.mul(x[3], y[4]); 183| 0| accum.mul(x[4], y[3]); 184| 0| accum.mul(x[5], y[2]); 185| 0| z[7] = accum.extract(); 186| 0| accum.mul(x[3], y[5]); 187| 0| accum.mul(x[4], y[4]); 188| 0| accum.mul(x[5], y[3]); 189| 0| z[8] = accum.extract(); 190| 0| accum.mul(x[4], y[5]); 191| 0| accum.mul(x[5], y[4]); 192| 0| z[9] = accum.extract(); 193| 0| accum.mul(x[5], y[5]); 194| 0| z[10] = accum.extract(); 195| 0| z[11] = accum.extract(); 196| 0|} _ZN5Botan17bigint_comba_sqr7EPmPKm: 201| 2.23k|void bigint_comba_sqr7(word z[14], const word x[7]) { 202| 2.23k| word3 accum; 203| | 204| 2.23k| accum.mul(x[0], x[0]); 205| 2.23k| z[0] = accum.extract(); 206| 2.23k| accum.mul_x2(x[0], x[1]); 207| 2.23k| z[1] = accum.extract(); 208| 2.23k| accum.mul_x2(x[0], x[2]); 209| 2.23k| accum.mul(x[1], x[1]); 210| 2.23k| z[2] = accum.extract(); 211| 2.23k| accum.mul_x2(x[0], x[3]); 212| 2.23k| accum.mul_x2(x[1], x[2]); 213| 2.23k| z[3] = accum.extract(); 214| 2.23k| accum.mul_x2(x[0], x[4]); 215| 2.23k| accum.mul_x2(x[1], x[3]); 216| 2.23k| accum.mul(x[2], x[2]); 217| 2.23k| z[4] = accum.extract(); 218| 2.23k| accum.mul_x2(x[0], x[5]); 219| 2.23k| accum.mul_x2(x[1], x[4]); 220| 2.23k| accum.mul_x2(x[2], x[3]); 221| 2.23k| z[5] = accum.extract(); 222| 2.23k| accum.mul_x2(x[0], x[6]); 223| 2.23k| accum.mul_x2(x[1], x[5]); 224| 2.23k| accum.mul_x2(x[2], x[4]); 225| 2.23k| accum.mul(x[3], x[3]); 226| 2.23k| z[6] = accum.extract(); 227| 2.23k| accum.mul_x2(x[1], x[6]); 228| 2.23k| accum.mul_x2(x[2], x[5]); 229| 2.23k| accum.mul_x2(x[3], x[4]); 230| 2.23k| z[7] = accum.extract(); 231| 2.23k| accum.mul_x2(x[2], x[6]); 232| 2.23k| accum.mul_x2(x[3], x[5]); 233| 2.23k| accum.mul(x[4], x[4]); 234| 2.23k| z[8] = accum.extract(); 235| 2.23k| accum.mul_x2(x[3], x[6]); 236| 2.23k| accum.mul_x2(x[4], x[5]); 237| 2.23k| z[9] = accum.extract(); 238| 2.23k| accum.mul_x2(x[4], x[6]); 239| 2.23k| accum.mul(x[5], x[5]); 240| 2.23k| z[10] = accum.extract(); 241| 2.23k| accum.mul_x2(x[5], x[6]); 242| 2.23k| z[11] = accum.extract(); 243| 2.23k| accum.mul(x[6], x[6]); 244| 2.23k| z[12] = accum.extract(); 245| 2.23k| z[13] = accum.extract(); 246| 2.23k|} _ZN5Botan17bigint_comba_mul7EPmPKmS2_: 251| 2.25k|void bigint_comba_mul7(word z[14], const word x[7], const word y[7]) { 252| 2.25k| word3 accum; 253| | 254| 2.25k| accum.mul(x[0], y[0]); 255| 2.25k| z[0] = accum.extract(); 256| 2.25k| accum.mul(x[0], y[1]); 257| 2.25k| accum.mul(x[1], y[0]); 258| 2.25k| z[1] = accum.extract(); 259| 2.25k| accum.mul(x[0], y[2]); 260| 2.25k| accum.mul(x[1], y[1]); 261| 2.25k| accum.mul(x[2], y[0]); 262| 2.25k| z[2] = accum.extract(); 263| 2.25k| accum.mul(x[0], y[3]); 264| 2.25k| accum.mul(x[1], y[2]); 265| 2.25k| accum.mul(x[2], y[1]); 266| 2.25k| accum.mul(x[3], y[0]); 267| 2.25k| z[3] = accum.extract(); 268| 2.25k| accum.mul(x[0], y[4]); 269| 2.25k| accum.mul(x[1], y[3]); 270| 2.25k| accum.mul(x[2], y[2]); 271| 2.25k| accum.mul(x[3], y[1]); 272| 2.25k| accum.mul(x[4], y[0]); 273| 2.25k| z[4] = accum.extract(); 274| 2.25k| accum.mul(x[0], y[5]); 275| 2.25k| accum.mul(x[1], y[4]); 276| 2.25k| accum.mul(x[2], y[3]); 277| 2.25k| accum.mul(x[3], y[2]); 278| 2.25k| accum.mul(x[4], y[1]); 279| 2.25k| accum.mul(x[5], y[0]); 280| 2.25k| z[5] = accum.extract(); 281| 2.25k| accum.mul(x[0], y[6]); 282| 2.25k| accum.mul(x[1], y[5]); 283| 2.25k| accum.mul(x[2], y[4]); 284| 2.25k| accum.mul(x[3], y[3]); 285| 2.25k| accum.mul(x[4], y[2]); 286| 2.25k| accum.mul(x[5], y[1]); 287| 2.25k| accum.mul(x[6], y[0]); 288| 2.25k| z[6] = accum.extract(); 289| 2.25k| accum.mul(x[1], y[6]); 290| 2.25k| accum.mul(x[2], y[5]); 291| 2.25k| accum.mul(x[3], y[4]); 292| 2.25k| accum.mul(x[4], y[3]); 293| 2.25k| accum.mul(x[5], y[2]); 294| 2.25k| accum.mul(x[6], y[1]); 295| 2.25k| z[7] = accum.extract(); 296| 2.25k| accum.mul(x[2], y[6]); 297| 2.25k| accum.mul(x[3], y[5]); 298| 2.25k| accum.mul(x[4], y[4]); 299| 2.25k| accum.mul(x[5], y[3]); 300| 2.25k| accum.mul(x[6], y[2]); 301| 2.25k| z[8] = accum.extract(); 302| 2.25k| accum.mul(x[3], y[6]); 303| 2.25k| accum.mul(x[4], y[5]); 304| 2.25k| accum.mul(x[5], y[4]); 305| 2.25k| accum.mul(x[6], y[3]); 306| 2.25k| z[9] = accum.extract(); 307| 2.25k| accum.mul(x[4], y[6]); 308| 2.25k| accum.mul(x[5], y[5]); 309| 2.25k| accum.mul(x[6], y[4]); 310| 2.25k| z[10] = accum.extract(); 311| 2.25k| accum.mul(x[5], y[6]); 312| 2.25k| accum.mul(x[6], y[5]); 313| 2.25k| z[11] = accum.extract(); 314| 2.25k| accum.mul(x[6], y[6]); 315| 2.25k| z[12] = accum.extract(); 316| 2.25k| z[13] = accum.extract(); 317| 2.25k|} _ZN5Botan17bigint_comba_sqr8EPmPKm: 322| 91.8k|void bigint_comba_sqr8(word z[16], const word x[8]) { 323| 91.8k|#if defined(BOTAN_HAS_MP_MULX) 324| 91.8k| if(CPUID::has(CPUID::Feature::BMI, CPUID::Feature::ADX)) { ------------------ | Branch (324:7): [True: 91.8k, False: 0] ------------------ 325| 91.8k| return bigint_mulx_sqr8(z, x); 326| 91.8k| } 327| 0|#endif 328| | 329| 0| word3 accum; 330| | 331| 0| accum.mul(x[0], x[0]); 332| 0| z[0] = accum.extract(); 333| 0| accum.mul_x2(x[0], x[1]); 334| 0| z[1] = accum.extract(); 335| 0| accum.mul_x2(x[0], x[2]); 336| 0| accum.mul(x[1], x[1]); 337| 0| z[2] = accum.extract(); 338| 0| accum.mul_x2(x[0], x[3]); 339| 0| accum.mul_x2(x[1], x[2]); 340| 0| z[3] = accum.extract(); 341| 0| accum.mul_x2(x[0], x[4]); 342| 0| accum.mul_x2(x[1], x[3]); 343| 0| accum.mul(x[2], x[2]); 344| 0| z[4] = accum.extract(); 345| 0| accum.mul_x2(x[0], x[5]); 346| 0| accum.mul_x2(x[1], x[4]); 347| 0| accum.mul_x2(x[2], x[3]); 348| 0| z[5] = accum.extract(); 349| 0| accum.mul_x2(x[0], x[6]); 350| 0| accum.mul_x2(x[1], x[5]); 351| 0| accum.mul_x2(x[2], x[4]); 352| 0| accum.mul(x[3], x[3]); 353| 0| z[6] = accum.extract(); 354| 0| accum.mul_x2(x[0], x[7]); 355| 0| accum.mul_x2(x[1], x[6]); 356| 0| accum.mul_x2(x[2], x[5]); 357| 0| accum.mul_x2(x[3], x[4]); 358| 0| z[7] = accum.extract(); 359| 0| accum.mul_x2(x[1], x[7]); 360| 0| accum.mul_x2(x[2], x[6]); 361| 0| accum.mul_x2(x[3], x[5]); 362| 0| accum.mul(x[4], x[4]); 363| 0| z[8] = accum.extract(); 364| 0| accum.mul_x2(x[2], x[7]); 365| 0| accum.mul_x2(x[3], x[6]); 366| 0| accum.mul_x2(x[4], x[5]); 367| 0| z[9] = accum.extract(); 368| 0| accum.mul_x2(x[3], x[7]); 369| 0| accum.mul_x2(x[4], x[6]); 370| 0| accum.mul(x[5], x[5]); 371| 0| z[10] = accum.extract(); 372| 0| accum.mul_x2(x[4], x[7]); 373| 0| accum.mul_x2(x[5], x[6]); 374| 0| z[11] = accum.extract(); 375| 0| accum.mul_x2(x[5], x[7]); 376| 0| accum.mul(x[6], x[6]); 377| 0| z[12] = accum.extract(); 378| 0| accum.mul_x2(x[6], x[7]); 379| 0| z[13] = accum.extract(); 380| 0| accum.mul(x[7], x[7]); 381| 0| z[14] = accum.extract(); 382| 0| z[15] = accum.extract(); 383| 0|} _ZN5Botan17bigint_comba_mul8EPmPKmS2_: 388| 123k|void bigint_comba_mul8(word z[16], const word x[8], const word y[8]) { 389| 123k|#if defined(BOTAN_HAS_MP_MULX) 390| 123k| if(CPUID::has(CPUID::Feature::BMI, CPUID::Feature::ADX)) { ------------------ | Branch (390:7): [True: 123k, False: 0] ------------------ 391| 123k| return bigint_mulx_mul8(z, x, y); 392| 123k| } 393| 0|#endif 394| | 395| 0| word3 accum; 396| | 397| 0| accum.mul(x[0], y[0]); 398| 0| z[0] = accum.extract(); 399| 0| accum.mul(x[0], y[1]); 400| 0| accum.mul(x[1], y[0]); 401| 0| z[1] = accum.extract(); 402| 0| accum.mul(x[0], y[2]); 403| 0| accum.mul(x[1], y[1]); 404| 0| accum.mul(x[2], y[0]); 405| 0| z[2] = accum.extract(); 406| 0| accum.mul(x[0], y[3]); 407| 0| accum.mul(x[1], y[2]); 408| 0| accum.mul(x[2], y[1]); 409| 0| accum.mul(x[3], y[0]); 410| 0| z[3] = accum.extract(); 411| 0| accum.mul(x[0], y[4]); 412| 0| accum.mul(x[1], y[3]); 413| 0| accum.mul(x[2], y[2]); 414| 0| accum.mul(x[3], y[1]); 415| 0| accum.mul(x[4], y[0]); 416| 0| z[4] = accum.extract(); 417| 0| accum.mul(x[0], y[5]); 418| 0| accum.mul(x[1], y[4]); 419| 0| accum.mul(x[2], y[3]); 420| 0| accum.mul(x[3], y[2]); 421| 0| accum.mul(x[4], y[1]); 422| 0| accum.mul(x[5], y[0]); 423| 0| z[5] = accum.extract(); 424| 0| accum.mul(x[0], y[6]); 425| 0| accum.mul(x[1], y[5]); 426| 0| accum.mul(x[2], y[4]); 427| 0| accum.mul(x[3], y[3]); 428| 0| accum.mul(x[4], y[2]); 429| 0| accum.mul(x[5], y[1]); 430| 0| accum.mul(x[6], y[0]); 431| 0| z[6] = accum.extract(); 432| 0| accum.mul(x[0], y[7]); 433| 0| accum.mul(x[1], y[6]); 434| 0| accum.mul(x[2], y[5]); 435| 0| accum.mul(x[3], y[4]); 436| 0| accum.mul(x[4], y[3]); 437| 0| accum.mul(x[5], y[2]); 438| 0| accum.mul(x[6], y[1]); 439| 0| accum.mul(x[7], y[0]); 440| 0| z[7] = accum.extract(); 441| 0| accum.mul(x[1], y[7]); 442| 0| accum.mul(x[2], y[6]); 443| 0| accum.mul(x[3], y[5]); 444| 0| accum.mul(x[4], y[4]); 445| 0| accum.mul(x[5], y[3]); 446| 0| accum.mul(x[6], y[2]); 447| 0| accum.mul(x[7], y[1]); 448| 0| z[8] = accum.extract(); 449| 0| accum.mul(x[2], y[7]); 450| 0| accum.mul(x[3], y[6]); 451| 0| accum.mul(x[4], y[5]); 452| 0| accum.mul(x[5], y[4]); 453| 0| accum.mul(x[6], y[3]); 454| 0| accum.mul(x[7], y[2]); 455| 0| z[9] = accum.extract(); 456| 0| accum.mul(x[3], y[7]); 457| 0| accum.mul(x[4], y[6]); 458| 0| accum.mul(x[5], y[5]); 459| 0| accum.mul(x[6], y[4]); 460| 0| accum.mul(x[7], y[3]); 461| 0| z[10] = accum.extract(); 462| 0| accum.mul(x[4], y[7]); 463| 0| accum.mul(x[5], y[6]); 464| 0| accum.mul(x[6], y[5]); 465| 0| accum.mul(x[7], y[4]); 466| 0| z[11] = accum.extract(); 467| 0| accum.mul(x[5], y[7]); 468| 0| accum.mul(x[6], y[6]); 469| 0| accum.mul(x[7], y[5]); 470| 0| z[12] = accum.extract(); 471| 0| accum.mul(x[6], y[7]); 472| 0| accum.mul(x[7], y[6]); 473| 0| z[13] = accum.extract(); 474| 0| accum.mul(x[7], y[7]); 475| 0| z[14] = accum.extract(); 476| 0| z[15] = accum.extract(); 477| 0|} _ZN5Botan17bigint_comba_sqr9EPmPKm: 482| 72.7k|void bigint_comba_sqr9(word z[18], const word x[9]) { 483| 72.7k|#if defined(BOTAN_HAS_MP_MULX) 484| 72.7k| if(CPUID::has(CPUID::Feature::BMI, CPUID::Feature::ADX)) { ------------------ | Branch (484:7): [True: 72.7k, False: 0] ------------------ 485| 72.7k| return bigint_mulx_sqr9(z, x); 486| 72.7k| } 487| 0|#endif 488| | 489| 0| word3 accum; 490| | 491| 0| accum.mul(x[0], x[0]); 492| 0| z[0] = accum.extract(); 493| 0| accum.mul_x2(x[0], x[1]); 494| 0| z[1] = accum.extract(); 495| 0| accum.mul_x2(x[0], x[2]); 496| 0| accum.mul(x[1], x[1]); 497| 0| z[2] = accum.extract(); 498| 0| accum.mul_x2(x[0], x[3]); 499| 0| accum.mul_x2(x[1], x[2]); 500| 0| z[3] = accum.extract(); 501| 0| accum.mul_x2(x[0], x[4]); 502| 0| accum.mul_x2(x[1], x[3]); 503| 0| accum.mul(x[2], x[2]); 504| 0| z[4] = accum.extract(); 505| 0| accum.mul_x2(x[0], x[5]); 506| 0| accum.mul_x2(x[1], x[4]); 507| 0| accum.mul_x2(x[2], x[3]); 508| 0| z[5] = accum.extract(); 509| 0| accum.mul_x2(x[0], x[6]); 510| 0| accum.mul_x2(x[1], x[5]); 511| 0| accum.mul_x2(x[2], x[4]); 512| 0| accum.mul(x[3], x[3]); 513| 0| z[6] = accum.extract(); 514| 0| accum.mul_x2(x[0], x[7]); 515| 0| accum.mul_x2(x[1], x[6]); 516| 0| accum.mul_x2(x[2], x[5]); 517| 0| accum.mul_x2(x[3], x[4]); 518| 0| z[7] = accum.extract(); 519| 0| accum.mul_x2(x[0], x[8]); 520| 0| accum.mul_x2(x[1], x[7]); 521| 0| accum.mul_x2(x[2], x[6]); 522| 0| accum.mul_x2(x[3], x[5]); 523| 0| accum.mul(x[4], x[4]); 524| 0| z[8] = accum.extract(); 525| 0| accum.mul_x2(x[1], x[8]); 526| 0| accum.mul_x2(x[2], x[7]); 527| 0| accum.mul_x2(x[3], x[6]); 528| 0| accum.mul_x2(x[4], x[5]); 529| 0| z[9] = accum.extract(); 530| 0| accum.mul_x2(x[2], x[8]); 531| 0| accum.mul_x2(x[3], x[7]); 532| 0| accum.mul_x2(x[4], x[6]); 533| 0| accum.mul(x[5], x[5]); 534| 0| z[10] = accum.extract(); 535| 0| accum.mul_x2(x[3], x[8]); 536| 0| accum.mul_x2(x[4], x[7]); 537| 0| accum.mul_x2(x[5], x[6]); 538| 0| z[11] = accum.extract(); 539| 0| accum.mul_x2(x[4], x[8]); 540| 0| accum.mul_x2(x[5], x[7]); 541| 0| accum.mul(x[6], x[6]); 542| 0| z[12] = accum.extract(); 543| 0| accum.mul_x2(x[5], x[8]); 544| 0| accum.mul_x2(x[6], x[7]); 545| 0| z[13] = accum.extract(); 546| 0| accum.mul_x2(x[6], x[8]); 547| 0| accum.mul(x[7], x[7]); 548| 0| z[14] = accum.extract(); 549| 0| accum.mul_x2(x[7], x[8]); 550| 0| z[15] = accum.extract(); 551| 0| accum.mul(x[8], x[8]); 552| 0| z[16] = accum.extract(); 553| 0| z[17] = accum.extract(); 554| 0|} _ZN5Botan17bigint_comba_mul9EPmPKmS2_: 559| 99.0k|void bigint_comba_mul9(word z[18], const word x[9], const word y[9]) { 560| 99.0k|#if defined(BOTAN_HAS_MP_MULX) 561| 99.0k| if(CPUID::has(CPUID::Feature::BMI, CPUID::Feature::ADX)) { ------------------ | Branch (561:7): [True: 99.0k, False: 0] ------------------ 562| 99.0k| return bigint_mulx_mul9(z, x, y); 563| 99.0k| } 564| 0|#endif 565| | 566| 0| word3 accum; 567| | 568| 0| accum.mul(x[0], y[0]); 569| 0| z[0] = accum.extract(); 570| 0| accum.mul(x[0], y[1]); 571| 0| accum.mul(x[1], y[0]); 572| 0| z[1] = accum.extract(); 573| 0| accum.mul(x[0], y[2]); 574| 0| accum.mul(x[1], y[1]); 575| 0| accum.mul(x[2], y[0]); 576| 0| z[2] = accum.extract(); 577| 0| accum.mul(x[0], y[3]); 578| 0| accum.mul(x[1], y[2]); 579| 0| accum.mul(x[2], y[1]); 580| 0| accum.mul(x[3], y[0]); 581| 0| z[3] = accum.extract(); 582| 0| accum.mul(x[0], y[4]); 583| 0| accum.mul(x[1], y[3]); 584| 0| accum.mul(x[2], y[2]); 585| 0| accum.mul(x[3], y[1]); 586| 0| accum.mul(x[4], y[0]); 587| 0| z[4] = accum.extract(); 588| 0| accum.mul(x[0], y[5]); 589| 0| accum.mul(x[1], y[4]); 590| 0| accum.mul(x[2], y[3]); 591| 0| accum.mul(x[3], y[2]); 592| 0| accum.mul(x[4], y[1]); 593| 0| accum.mul(x[5], y[0]); 594| 0| z[5] = accum.extract(); 595| 0| accum.mul(x[0], y[6]); 596| 0| accum.mul(x[1], y[5]); 597| 0| accum.mul(x[2], y[4]); 598| 0| accum.mul(x[3], y[3]); 599| 0| accum.mul(x[4], y[2]); 600| 0| accum.mul(x[5], y[1]); 601| 0| accum.mul(x[6], y[0]); 602| 0| z[6] = accum.extract(); 603| 0| accum.mul(x[0], y[7]); 604| 0| accum.mul(x[1], y[6]); 605| 0| accum.mul(x[2], y[5]); 606| 0| accum.mul(x[3], y[4]); 607| 0| accum.mul(x[4], y[3]); 608| 0| accum.mul(x[5], y[2]); 609| 0| accum.mul(x[6], y[1]); 610| 0| accum.mul(x[7], y[0]); 611| 0| z[7] = accum.extract(); 612| 0| accum.mul(x[0], y[8]); 613| 0| accum.mul(x[1], y[7]); 614| 0| accum.mul(x[2], y[6]); 615| 0| accum.mul(x[3], y[5]); 616| 0| accum.mul(x[4], y[4]); 617| 0| accum.mul(x[5], y[3]); 618| 0| accum.mul(x[6], y[2]); 619| 0| accum.mul(x[7], y[1]); 620| 0| accum.mul(x[8], y[0]); 621| 0| z[8] = accum.extract(); 622| 0| accum.mul(x[1], y[8]); 623| 0| accum.mul(x[2], y[7]); 624| 0| accum.mul(x[3], y[6]); 625| 0| accum.mul(x[4], y[5]); 626| 0| accum.mul(x[5], y[4]); 627| 0| accum.mul(x[6], y[3]); 628| 0| accum.mul(x[7], y[2]); 629| 0| accum.mul(x[8], y[1]); 630| 0| z[9] = accum.extract(); 631| 0| accum.mul(x[2], y[8]); 632| 0| accum.mul(x[3], y[7]); 633| 0| accum.mul(x[4], y[6]); 634| 0| accum.mul(x[5], y[5]); 635| 0| accum.mul(x[6], y[4]); 636| 0| accum.mul(x[7], y[3]); 637| 0| accum.mul(x[8], y[2]); 638| 0| z[10] = accum.extract(); 639| 0| accum.mul(x[3], y[8]); 640| 0| accum.mul(x[4], y[7]); 641| 0| accum.mul(x[5], y[6]); 642| 0| accum.mul(x[6], y[5]); 643| 0| accum.mul(x[7], y[4]); 644| 0| accum.mul(x[8], y[3]); 645| 0| z[11] = accum.extract(); 646| 0| accum.mul(x[4], y[8]); 647| 0| accum.mul(x[5], y[7]); 648| 0| accum.mul(x[6], y[6]); 649| 0| accum.mul(x[7], y[5]); 650| 0| accum.mul(x[8], y[4]); 651| 0| z[12] = accum.extract(); 652| 0| accum.mul(x[5], y[8]); 653| 0| accum.mul(x[6], y[7]); 654| 0| accum.mul(x[7], y[6]); 655| 0| accum.mul(x[8], y[5]); 656| 0| z[13] = accum.extract(); 657| 0| accum.mul(x[6], y[8]); 658| 0| accum.mul(x[7], y[7]); 659| 0| accum.mul(x[8], y[6]); 660| 0| z[14] = accum.extract(); 661| 0| accum.mul(x[7], y[8]); 662| 0| accum.mul(x[8], y[7]); 663| 0| z[15] = accum.extract(); 664| 0| accum.mul(x[8], y[8]); 665| 0| z[16] = accum.extract(); 666| 0| z[17] = accum.extract(); 667| 0|} _ZN5Botan18bigint_comba_sqr16EPmPKm: 672| 3.51k|void bigint_comba_sqr16(word z[32], const word x[16]) { 673| 3.51k| word3 accum; 674| | 675| 3.51k| accum.mul(x[0], x[0]); 676| 3.51k| z[0] = accum.extract(); 677| 3.51k| accum.mul_x2(x[0], x[1]); 678| 3.51k| z[1] = accum.extract(); 679| 3.51k| accum.mul_x2(x[0], x[2]); 680| 3.51k| accum.mul(x[1], x[1]); 681| 3.51k| z[2] = accum.extract(); 682| 3.51k| accum.mul_x2(x[0], x[3]); 683| 3.51k| accum.mul_x2(x[1], x[2]); 684| 3.51k| z[3] = accum.extract(); 685| 3.51k| accum.mul_x2(x[0], x[4]); 686| 3.51k| accum.mul_x2(x[1], x[3]); 687| 3.51k| accum.mul(x[2], x[2]); 688| 3.51k| z[4] = accum.extract(); 689| 3.51k| accum.mul_x2(x[0], x[5]); 690| 3.51k| accum.mul_x2(x[1], x[4]); 691| 3.51k| accum.mul_x2(x[2], x[3]); 692| 3.51k| z[5] = accum.extract(); 693| 3.51k| accum.mul_x2(x[0], x[6]); 694| 3.51k| accum.mul_x2(x[1], x[5]); 695| 3.51k| accum.mul_x2(x[2], x[4]); 696| 3.51k| accum.mul(x[3], x[3]); 697| 3.51k| z[6] = accum.extract(); 698| 3.51k| accum.mul_x2(x[0], x[7]); 699| 3.51k| accum.mul_x2(x[1], x[6]); 700| 3.51k| accum.mul_x2(x[2], x[5]); 701| 3.51k| accum.mul_x2(x[3], x[4]); 702| 3.51k| z[7] = accum.extract(); 703| 3.51k| accum.mul_x2(x[0], x[8]); 704| 3.51k| accum.mul_x2(x[1], x[7]); 705| 3.51k| accum.mul_x2(x[2], x[6]); 706| 3.51k| accum.mul_x2(x[3], x[5]); 707| 3.51k| accum.mul(x[4], x[4]); 708| 3.51k| z[8] = accum.extract(); 709| 3.51k| accum.mul_x2(x[0], x[9]); 710| 3.51k| accum.mul_x2(x[1], x[8]); 711| 3.51k| accum.mul_x2(x[2], x[7]); 712| 3.51k| accum.mul_x2(x[3], x[6]); 713| 3.51k| accum.mul_x2(x[4], x[5]); 714| 3.51k| z[9] = accum.extract(); 715| 3.51k| accum.mul_x2(x[0], x[10]); 716| 3.51k| accum.mul_x2(x[1], x[9]); 717| 3.51k| accum.mul_x2(x[2], x[8]); 718| 3.51k| accum.mul_x2(x[3], x[7]); 719| 3.51k| accum.mul_x2(x[4], x[6]); 720| 3.51k| accum.mul(x[5], x[5]); 721| 3.51k| z[10] = accum.extract(); 722| 3.51k| accum.mul_x2(x[0], x[11]); 723| 3.51k| accum.mul_x2(x[1], x[10]); 724| 3.51k| accum.mul_x2(x[2], x[9]); 725| 3.51k| accum.mul_x2(x[3], x[8]); 726| 3.51k| accum.mul_x2(x[4], x[7]); 727| 3.51k| accum.mul_x2(x[5], x[6]); 728| 3.51k| z[11] = accum.extract(); 729| 3.51k| accum.mul_x2(x[0], x[12]); 730| 3.51k| accum.mul_x2(x[1], x[11]); 731| 3.51k| accum.mul_x2(x[2], x[10]); 732| 3.51k| accum.mul_x2(x[3], x[9]); 733| 3.51k| accum.mul_x2(x[4], x[8]); 734| 3.51k| accum.mul_x2(x[5], x[7]); 735| 3.51k| accum.mul(x[6], x[6]); 736| 3.51k| z[12] = accum.extract(); 737| 3.51k| accum.mul_x2(x[0], x[13]); 738| 3.51k| accum.mul_x2(x[1], x[12]); 739| 3.51k| accum.mul_x2(x[2], x[11]); 740| 3.51k| accum.mul_x2(x[3], x[10]); 741| 3.51k| accum.mul_x2(x[4], x[9]); 742| 3.51k| accum.mul_x2(x[5], x[8]); 743| 3.51k| accum.mul_x2(x[6], x[7]); 744| 3.51k| z[13] = accum.extract(); 745| 3.51k| accum.mul_x2(x[0], x[14]); 746| 3.51k| accum.mul_x2(x[1], x[13]); 747| 3.51k| accum.mul_x2(x[2], x[12]); 748| 3.51k| accum.mul_x2(x[3], x[11]); 749| 3.51k| accum.mul_x2(x[4], x[10]); 750| 3.51k| accum.mul_x2(x[5], x[9]); 751| 3.51k| accum.mul_x2(x[6], x[8]); 752| 3.51k| accum.mul(x[7], x[7]); 753| 3.51k| z[14] = accum.extract(); 754| 3.51k| accum.mul_x2(x[0], x[15]); 755| 3.51k| accum.mul_x2(x[1], x[14]); 756| 3.51k| accum.mul_x2(x[2], x[13]); 757| 3.51k| accum.mul_x2(x[3], x[12]); 758| 3.51k| accum.mul_x2(x[4], x[11]); 759| 3.51k| accum.mul_x2(x[5], x[10]); 760| 3.51k| accum.mul_x2(x[6], x[9]); 761| 3.51k| accum.mul_x2(x[7], x[8]); 762| 3.51k| z[15] = accum.extract(); 763| 3.51k| accum.mul_x2(x[1], x[15]); 764| 3.51k| accum.mul_x2(x[2], x[14]); 765| 3.51k| accum.mul_x2(x[3], x[13]); 766| 3.51k| accum.mul_x2(x[4], x[12]); 767| 3.51k| accum.mul_x2(x[5], x[11]); 768| 3.51k| accum.mul_x2(x[6], x[10]); 769| 3.51k| accum.mul_x2(x[7], x[9]); 770| 3.51k| accum.mul(x[8], x[8]); 771| 3.51k| z[16] = accum.extract(); 772| 3.51k| accum.mul_x2(x[2], x[15]); 773| 3.51k| accum.mul_x2(x[3], x[14]); 774| 3.51k| accum.mul_x2(x[4], x[13]); 775| 3.51k| accum.mul_x2(x[5], x[12]); 776| 3.51k| accum.mul_x2(x[6], x[11]); 777| 3.51k| accum.mul_x2(x[7], x[10]); 778| 3.51k| accum.mul_x2(x[8], x[9]); 779| 3.51k| z[17] = accum.extract(); 780| 3.51k| accum.mul_x2(x[3], x[15]); 781| 3.51k| accum.mul_x2(x[4], x[14]); 782| 3.51k| accum.mul_x2(x[5], x[13]); 783| 3.51k| accum.mul_x2(x[6], x[12]); 784| 3.51k| accum.mul_x2(x[7], x[11]); 785| 3.51k| accum.mul_x2(x[8], x[10]); 786| 3.51k| accum.mul(x[9], x[9]); 787| 3.51k| z[18] = accum.extract(); 788| 3.51k| accum.mul_x2(x[4], x[15]); 789| 3.51k| accum.mul_x2(x[5], x[14]); 790| 3.51k| accum.mul_x2(x[6], x[13]); 791| 3.51k| accum.mul_x2(x[7], x[12]); 792| 3.51k| accum.mul_x2(x[8], x[11]); 793| 3.51k| accum.mul_x2(x[9], x[10]); 794| 3.51k| z[19] = accum.extract(); 795| 3.51k| accum.mul_x2(x[5], x[15]); 796| 3.51k| accum.mul_x2(x[6], x[14]); 797| 3.51k| accum.mul_x2(x[7], x[13]); 798| 3.51k| accum.mul_x2(x[8], x[12]); 799| 3.51k| accum.mul_x2(x[9], x[11]); 800| 3.51k| accum.mul(x[10], x[10]); 801| 3.51k| z[20] = accum.extract(); 802| 3.51k| accum.mul_x2(x[6], x[15]); 803| 3.51k| accum.mul_x2(x[7], x[14]); 804| 3.51k| accum.mul_x2(x[8], x[13]); 805| 3.51k| accum.mul_x2(x[9], x[12]); 806| 3.51k| accum.mul_x2(x[10], x[11]); 807| 3.51k| z[21] = accum.extract(); 808| 3.51k| accum.mul_x2(x[7], x[15]); 809| 3.51k| accum.mul_x2(x[8], x[14]); 810| 3.51k| accum.mul_x2(x[9], x[13]); 811| 3.51k| accum.mul_x2(x[10], x[12]); 812| 3.51k| accum.mul(x[11], x[11]); 813| 3.51k| z[22] = accum.extract(); 814| 3.51k| accum.mul_x2(x[8], x[15]); 815| 3.51k| accum.mul_x2(x[9], x[14]); 816| 3.51k| accum.mul_x2(x[10], x[13]); 817| 3.51k| accum.mul_x2(x[11], x[12]); 818| 3.51k| z[23] = accum.extract(); 819| 3.51k| accum.mul_x2(x[9], x[15]); 820| 3.51k| accum.mul_x2(x[10], x[14]); 821| 3.51k| accum.mul_x2(x[11], x[13]); 822| 3.51k| accum.mul(x[12], x[12]); 823| 3.51k| z[24] = accum.extract(); 824| 3.51k| accum.mul_x2(x[10], x[15]); 825| 3.51k| accum.mul_x2(x[11], x[14]); 826| 3.51k| accum.mul_x2(x[12], x[13]); 827| 3.51k| z[25] = accum.extract(); 828| 3.51k| accum.mul_x2(x[11], x[15]); 829| 3.51k| accum.mul_x2(x[12], x[14]); 830| 3.51k| accum.mul(x[13], x[13]); 831| 3.51k| z[26] = accum.extract(); 832| 3.51k| accum.mul_x2(x[12], x[15]); 833| 3.51k| accum.mul_x2(x[13], x[14]); 834| 3.51k| z[27] = accum.extract(); 835| 3.51k| accum.mul_x2(x[13], x[15]); 836| 3.51k| accum.mul(x[14], x[14]); 837| 3.51k| z[28] = accum.extract(); 838| 3.51k| accum.mul_x2(x[14], x[15]); 839| 3.51k| z[29] = accum.extract(); 840| 3.51k| accum.mul(x[15], x[15]); 841| 3.51k| z[30] = accum.extract(); 842| 3.51k| z[31] = accum.extract(); 843| 3.51k|} _ZN5Botan18bigint_comba_mul16EPmPKmS2_: 848| 3.94k|void bigint_comba_mul16(word z[32], const word x[16], const word y[16]) { 849| 3.94k| word3 accum; 850| | 851| 3.94k| accum.mul(x[0], y[0]); 852| 3.94k| z[0] = accum.extract(); 853| 3.94k| accum.mul(x[0], y[1]); 854| 3.94k| accum.mul(x[1], y[0]); 855| 3.94k| z[1] = accum.extract(); 856| 3.94k| accum.mul(x[0], y[2]); 857| 3.94k| accum.mul(x[1], y[1]); 858| 3.94k| accum.mul(x[2], y[0]); 859| 3.94k| z[2] = accum.extract(); 860| 3.94k| accum.mul(x[0], y[3]); 861| 3.94k| accum.mul(x[1], y[2]); 862| 3.94k| accum.mul(x[2], y[1]); 863| 3.94k| accum.mul(x[3], y[0]); 864| 3.94k| z[3] = accum.extract(); 865| 3.94k| accum.mul(x[0], y[4]); 866| 3.94k| accum.mul(x[1], y[3]); 867| 3.94k| accum.mul(x[2], y[2]); 868| 3.94k| accum.mul(x[3], y[1]); 869| 3.94k| accum.mul(x[4], y[0]); 870| 3.94k| z[4] = accum.extract(); 871| 3.94k| accum.mul(x[0], y[5]); 872| 3.94k| accum.mul(x[1], y[4]); 873| 3.94k| accum.mul(x[2], y[3]); 874| 3.94k| accum.mul(x[3], y[2]); 875| 3.94k| accum.mul(x[4], y[1]); 876| 3.94k| accum.mul(x[5], y[0]); 877| 3.94k| z[5] = accum.extract(); 878| 3.94k| accum.mul(x[0], y[6]); 879| 3.94k| accum.mul(x[1], y[5]); 880| 3.94k| accum.mul(x[2], y[4]); 881| 3.94k| accum.mul(x[3], y[3]); 882| 3.94k| accum.mul(x[4], y[2]); 883| 3.94k| accum.mul(x[5], y[1]); 884| 3.94k| accum.mul(x[6], y[0]); 885| 3.94k| z[6] = accum.extract(); 886| 3.94k| accum.mul(x[0], y[7]); 887| 3.94k| accum.mul(x[1], y[6]); 888| 3.94k| accum.mul(x[2], y[5]); 889| 3.94k| accum.mul(x[3], y[4]); 890| 3.94k| accum.mul(x[4], y[3]); 891| 3.94k| accum.mul(x[5], y[2]); 892| 3.94k| accum.mul(x[6], y[1]); 893| 3.94k| accum.mul(x[7], y[0]); 894| 3.94k| z[7] = accum.extract(); 895| 3.94k| accum.mul(x[0], y[8]); 896| 3.94k| accum.mul(x[1], y[7]); 897| 3.94k| accum.mul(x[2], y[6]); 898| 3.94k| accum.mul(x[3], y[5]); 899| 3.94k| accum.mul(x[4], y[4]); 900| 3.94k| accum.mul(x[5], y[3]); 901| 3.94k| accum.mul(x[6], y[2]); 902| 3.94k| accum.mul(x[7], y[1]); 903| 3.94k| accum.mul(x[8], y[0]); 904| 3.94k| z[8] = accum.extract(); 905| 3.94k| accum.mul(x[0], y[9]); 906| 3.94k| accum.mul(x[1], y[8]); 907| 3.94k| accum.mul(x[2], y[7]); 908| 3.94k| accum.mul(x[3], y[6]); 909| 3.94k| accum.mul(x[4], y[5]); 910| 3.94k| accum.mul(x[5], y[4]); 911| 3.94k| accum.mul(x[6], y[3]); 912| 3.94k| accum.mul(x[7], y[2]); 913| 3.94k| accum.mul(x[8], y[1]); 914| 3.94k| accum.mul(x[9], y[0]); 915| 3.94k| z[9] = accum.extract(); 916| 3.94k| accum.mul(x[0], y[10]); 917| 3.94k| accum.mul(x[1], y[9]); 918| 3.94k| accum.mul(x[2], y[8]); 919| 3.94k| accum.mul(x[3], y[7]); 920| 3.94k| accum.mul(x[4], y[6]); 921| 3.94k| accum.mul(x[5], y[5]); 922| 3.94k| accum.mul(x[6], y[4]); 923| 3.94k| accum.mul(x[7], y[3]); 924| 3.94k| accum.mul(x[8], y[2]); 925| 3.94k| accum.mul(x[9], y[1]); 926| 3.94k| accum.mul(x[10], y[0]); 927| 3.94k| z[10] = accum.extract(); 928| 3.94k| accum.mul(x[0], y[11]); 929| 3.94k| accum.mul(x[1], y[10]); 930| 3.94k| accum.mul(x[2], y[9]); 931| 3.94k| accum.mul(x[3], y[8]); 932| 3.94k| accum.mul(x[4], y[7]); 933| 3.94k| accum.mul(x[5], y[6]); 934| 3.94k| accum.mul(x[6], y[5]); 935| 3.94k| accum.mul(x[7], y[4]); 936| 3.94k| accum.mul(x[8], y[3]); 937| 3.94k| accum.mul(x[9], y[2]); 938| 3.94k| accum.mul(x[10], y[1]); 939| 3.94k| accum.mul(x[11], y[0]); 940| 3.94k| z[11] = accum.extract(); 941| 3.94k| accum.mul(x[0], y[12]); 942| 3.94k| accum.mul(x[1], y[11]); 943| 3.94k| accum.mul(x[2], y[10]); 944| 3.94k| accum.mul(x[3], y[9]); 945| 3.94k| accum.mul(x[4], y[8]); 946| 3.94k| accum.mul(x[5], y[7]); 947| 3.94k| accum.mul(x[6], y[6]); 948| 3.94k| accum.mul(x[7], y[5]); 949| 3.94k| accum.mul(x[8], y[4]); 950| 3.94k| accum.mul(x[9], y[3]); 951| 3.94k| accum.mul(x[10], y[2]); 952| 3.94k| accum.mul(x[11], y[1]); 953| 3.94k| accum.mul(x[12], y[0]); 954| 3.94k| z[12] = accum.extract(); 955| 3.94k| accum.mul(x[0], y[13]); 956| 3.94k| accum.mul(x[1], y[12]); 957| 3.94k| accum.mul(x[2], y[11]); 958| 3.94k| accum.mul(x[3], y[10]); 959| 3.94k| accum.mul(x[4], y[9]); 960| 3.94k| accum.mul(x[5], y[8]); 961| 3.94k| accum.mul(x[6], y[7]); 962| 3.94k| accum.mul(x[7], y[6]); 963| 3.94k| accum.mul(x[8], y[5]); 964| 3.94k| accum.mul(x[9], y[4]); 965| 3.94k| accum.mul(x[10], y[3]); 966| 3.94k| accum.mul(x[11], y[2]); 967| 3.94k| accum.mul(x[12], y[1]); 968| 3.94k| accum.mul(x[13], y[0]); 969| 3.94k| z[13] = accum.extract(); 970| 3.94k| accum.mul(x[0], y[14]); 971| 3.94k| accum.mul(x[1], y[13]); 972| 3.94k| accum.mul(x[2], y[12]); 973| 3.94k| accum.mul(x[3], y[11]); 974| 3.94k| accum.mul(x[4], y[10]); 975| 3.94k| accum.mul(x[5], y[9]); 976| 3.94k| accum.mul(x[6], y[8]); 977| 3.94k| accum.mul(x[7], y[7]); 978| 3.94k| accum.mul(x[8], y[6]); 979| 3.94k| accum.mul(x[9], y[5]); 980| 3.94k| accum.mul(x[10], y[4]); 981| 3.94k| accum.mul(x[11], y[3]); 982| 3.94k| accum.mul(x[12], y[2]); 983| 3.94k| accum.mul(x[13], y[1]); 984| 3.94k| accum.mul(x[14], y[0]); 985| 3.94k| z[14] = accum.extract(); 986| 3.94k| accum.mul(x[0], y[15]); 987| 3.94k| accum.mul(x[1], y[14]); 988| 3.94k| accum.mul(x[2], y[13]); 989| 3.94k| accum.mul(x[3], y[12]); 990| 3.94k| accum.mul(x[4], y[11]); 991| 3.94k| accum.mul(x[5], y[10]); 992| 3.94k| accum.mul(x[6], y[9]); 993| 3.94k| accum.mul(x[7], y[8]); 994| 3.94k| accum.mul(x[8], y[7]); 995| 3.94k| accum.mul(x[9], y[6]); 996| 3.94k| accum.mul(x[10], y[5]); 997| 3.94k| accum.mul(x[11], y[4]); 998| 3.94k| accum.mul(x[12], y[3]); 999| 3.94k| accum.mul(x[13], y[2]); 1000| 3.94k| accum.mul(x[14], y[1]); 1001| 3.94k| accum.mul(x[15], y[0]); 1002| 3.94k| z[15] = accum.extract(); 1003| 3.94k| accum.mul(x[1], y[15]); 1004| 3.94k| accum.mul(x[2], y[14]); 1005| 3.94k| accum.mul(x[3], y[13]); 1006| 3.94k| accum.mul(x[4], y[12]); 1007| 3.94k| accum.mul(x[5], y[11]); 1008| 3.94k| accum.mul(x[6], y[10]); 1009| 3.94k| accum.mul(x[7], y[9]); 1010| 3.94k| accum.mul(x[8], y[8]); 1011| 3.94k| accum.mul(x[9], y[7]); 1012| 3.94k| accum.mul(x[10], y[6]); 1013| 3.94k| accum.mul(x[11], y[5]); 1014| 3.94k| accum.mul(x[12], y[4]); 1015| 3.94k| accum.mul(x[13], y[3]); 1016| 3.94k| accum.mul(x[14], y[2]); 1017| 3.94k| accum.mul(x[15], y[1]); 1018| 3.94k| z[16] = accum.extract(); 1019| 3.94k| accum.mul(x[2], y[15]); 1020| 3.94k| accum.mul(x[3], y[14]); 1021| 3.94k| accum.mul(x[4], y[13]); 1022| 3.94k| accum.mul(x[5], y[12]); 1023| 3.94k| accum.mul(x[6], y[11]); 1024| 3.94k| accum.mul(x[7], y[10]); 1025| 3.94k| accum.mul(x[8], y[9]); 1026| 3.94k| accum.mul(x[9], y[8]); 1027| 3.94k| accum.mul(x[10], y[7]); 1028| 3.94k| accum.mul(x[11], y[6]); 1029| 3.94k| accum.mul(x[12], y[5]); 1030| 3.94k| accum.mul(x[13], y[4]); 1031| 3.94k| accum.mul(x[14], y[3]); 1032| 3.94k| accum.mul(x[15], y[2]); 1033| 3.94k| z[17] = accum.extract(); 1034| 3.94k| accum.mul(x[3], y[15]); 1035| 3.94k| accum.mul(x[4], y[14]); 1036| 3.94k| accum.mul(x[5], y[13]); 1037| 3.94k| accum.mul(x[6], y[12]); 1038| 3.94k| accum.mul(x[7], y[11]); 1039| 3.94k| accum.mul(x[8], y[10]); 1040| 3.94k| accum.mul(x[9], y[9]); 1041| 3.94k| accum.mul(x[10], y[8]); 1042| 3.94k| accum.mul(x[11], y[7]); 1043| 3.94k| accum.mul(x[12], y[6]); 1044| 3.94k| accum.mul(x[13], y[5]); 1045| 3.94k| accum.mul(x[14], y[4]); 1046| 3.94k| accum.mul(x[15], y[3]); 1047| 3.94k| z[18] = accum.extract(); 1048| 3.94k| accum.mul(x[4], y[15]); 1049| 3.94k| accum.mul(x[5], y[14]); 1050| 3.94k| accum.mul(x[6], y[13]); 1051| 3.94k| accum.mul(x[7], y[12]); 1052| 3.94k| accum.mul(x[8], y[11]); 1053| 3.94k| accum.mul(x[9], y[10]); 1054| 3.94k| accum.mul(x[10], y[9]); 1055| 3.94k| accum.mul(x[11], y[8]); 1056| 3.94k| accum.mul(x[12], y[7]); 1057| 3.94k| accum.mul(x[13], y[6]); 1058| 3.94k| accum.mul(x[14], y[5]); 1059| 3.94k| accum.mul(x[15], y[4]); 1060| 3.94k| z[19] = accum.extract(); 1061| 3.94k| accum.mul(x[5], y[15]); 1062| 3.94k| accum.mul(x[6], y[14]); 1063| 3.94k| accum.mul(x[7], y[13]); 1064| 3.94k| accum.mul(x[8], y[12]); 1065| 3.94k| accum.mul(x[9], y[11]); 1066| 3.94k| accum.mul(x[10], y[10]); 1067| 3.94k| accum.mul(x[11], y[9]); 1068| 3.94k| accum.mul(x[12], y[8]); 1069| 3.94k| accum.mul(x[13], y[7]); 1070| 3.94k| accum.mul(x[14], y[6]); 1071| 3.94k| accum.mul(x[15], y[5]); 1072| 3.94k| z[20] = accum.extract(); 1073| 3.94k| accum.mul(x[6], y[15]); 1074| 3.94k| accum.mul(x[7], y[14]); 1075| 3.94k| accum.mul(x[8], y[13]); 1076| 3.94k| accum.mul(x[9], y[12]); 1077| 3.94k| accum.mul(x[10], y[11]); 1078| 3.94k| accum.mul(x[11], y[10]); 1079| 3.94k| accum.mul(x[12], y[9]); 1080| 3.94k| accum.mul(x[13], y[8]); 1081| 3.94k| accum.mul(x[14], y[7]); 1082| 3.94k| accum.mul(x[15], y[6]); 1083| 3.94k| z[21] = accum.extract(); 1084| 3.94k| accum.mul(x[7], y[15]); 1085| 3.94k| accum.mul(x[8], y[14]); 1086| 3.94k| accum.mul(x[9], y[13]); 1087| 3.94k| accum.mul(x[10], y[12]); 1088| 3.94k| accum.mul(x[11], y[11]); 1089| 3.94k| accum.mul(x[12], y[10]); 1090| 3.94k| accum.mul(x[13], y[9]); 1091| 3.94k| accum.mul(x[14], y[8]); 1092| 3.94k| accum.mul(x[15], y[7]); 1093| 3.94k| z[22] = accum.extract(); 1094| 3.94k| accum.mul(x[8], y[15]); 1095| 3.94k| accum.mul(x[9], y[14]); 1096| 3.94k| accum.mul(x[10], y[13]); 1097| 3.94k| accum.mul(x[11], y[12]); 1098| 3.94k| accum.mul(x[12], y[11]); 1099| 3.94k| accum.mul(x[13], y[10]); 1100| 3.94k| accum.mul(x[14], y[9]); 1101| 3.94k| accum.mul(x[15], y[8]); 1102| 3.94k| z[23] = accum.extract(); 1103| 3.94k| accum.mul(x[9], y[15]); 1104| 3.94k| accum.mul(x[10], y[14]); 1105| 3.94k| accum.mul(x[11], y[13]); 1106| 3.94k| accum.mul(x[12], y[12]); 1107| 3.94k| accum.mul(x[13], y[11]); 1108| 3.94k| accum.mul(x[14], y[10]); 1109| 3.94k| accum.mul(x[15], y[9]); 1110| 3.94k| z[24] = accum.extract(); 1111| 3.94k| accum.mul(x[10], y[15]); 1112| 3.94k| accum.mul(x[11], y[14]); 1113| 3.94k| accum.mul(x[12], y[13]); 1114| 3.94k| accum.mul(x[13], y[12]); 1115| 3.94k| accum.mul(x[14], y[11]); 1116| 3.94k| accum.mul(x[15], y[10]); 1117| 3.94k| z[25] = accum.extract(); 1118| 3.94k| accum.mul(x[11], y[15]); 1119| 3.94k| accum.mul(x[12], y[14]); 1120| 3.94k| accum.mul(x[13], y[13]); 1121| 3.94k| accum.mul(x[14], y[12]); 1122| 3.94k| accum.mul(x[15], y[11]); 1123| 3.94k| z[26] = accum.extract(); 1124| 3.94k| accum.mul(x[12], y[15]); 1125| 3.94k| accum.mul(x[13], y[14]); 1126| 3.94k| accum.mul(x[14], y[13]); 1127| 3.94k| accum.mul(x[15], y[12]); 1128| 3.94k| z[27] = accum.extract(); 1129| 3.94k| accum.mul(x[13], y[15]); 1130| 3.94k| accum.mul(x[14], y[14]); 1131| 3.94k| accum.mul(x[15], y[13]); 1132| 3.94k| z[28] = accum.extract(); 1133| 3.94k| accum.mul(x[14], y[15]); 1134| 3.94k| accum.mul(x[15], y[14]); 1135| 3.94k| z[29] = accum.extract(); 1136| 3.94k| accum.mul(x[15], y[15]); 1137| 3.94k| z[30] = accum.extract(); 1138| 3.94k| z[31] = accum.extract(); 1139| 3.94k|} _ZN5Botan18bigint_comba_sqr24EPmPKm: 1144| 315|void bigint_comba_sqr24(word z[48], const word x[24]) { 1145| 315| word3 accum; 1146| | 1147| 315| accum.mul(x[0], x[0]); 1148| 315| z[0] = accum.extract(); 1149| 315| accum.mul_x2(x[0], x[1]); 1150| 315| z[1] = accum.extract(); 1151| 315| accum.mul_x2(x[0], x[2]); 1152| 315| accum.mul(x[1], x[1]); 1153| 315| z[2] = accum.extract(); 1154| 315| accum.mul_x2(x[0], x[3]); 1155| 315| accum.mul_x2(x[1], x[2]); 1156| 315| z[3] = accum.extract(); 1157| 315| accum.mul_x2(x[0], x[4]); 1158| 315| accum.mul_x2(x[1], x[3]); 1159| 315| accum.mul(x[2], x[2]); 1160| 315| z[4] = accum.extract(); 1161| 315| accum.mul_x2(x[0], x[5]); 1162| 315| accum.mul_x2(x[1], x[4]); 1163| 315| accum.mul_x2(x[2], x[3]); 1164| 315| z[5] = accum.extract(); 1165| 315| accum.mul_x2(x[0], x[6]); 1166| 315| accum.mul_x2(x[1], x[5]); 1167| 315| accum.mul_x2(x[2], x[4]); 1168| 315| accum.mul(x[3], x[3]); 1169| 315| z[6] = accum.extract(); 1170| 315| accum.mul_x2(x[0], x[7]); 1171| 315| accum.mul_x2(x[1], x[6]); 1172| 315| accum.mul_x2(x[2], x[5]); 1173| 315| accum.mul_x2(x[3], x[4]); 1174| 315| z[7] = accum.extract(); 1175| 315| accum.mul_x2(x[0], x[8]); 1176| 315| accum.mul_x2(x[1], x[7]); 1177| 315| accum.mul_x2(x[2], x[6]); 1178| 315| accum.mul_x2(x[3], x[5]); 1179| 315| accum.mul(x[4], x[4]); 1180| 315| z[8] = accum.extract(); 1181| 315| accum.mul_x2(x[0], x[9]); 1182| 315| accum.mul_x2(x[1], x[8]); 1183| 315| accum.mul_x2(x[2], x[7]); 1184| 315| accum.mul_x2(x[3], x[6]); 1185| 315| accum.mul_x2(x[4], x[5]); 1186| 315| z[9] = accum.extract(); 1187| 315| accum.mul_x2(x[0], x[10]); 1188| 315| accum.mul_x2(x[1], x[9]); 1189| 315| accum.mul_x2(x[2], x[8]); 1190| 315| accum.mul_x2(x[3], x[7]); 1191| 315| accum.mul_x2(x[4], x[6]); 1192| 315| accum.mul(x[5], x[5]); 1193| 315| z[10] = accum.extract(); 1194| 315| accum.mul_x2(x[0], x[11]); 1195| 315| accum.mul_x2(x[1], x[10]); 1196| 315| accum.mul_x2(x[2], x[9]); 1197| 315| accum.mul_x2(x[3], x[8]); 1198| 315| accum.mul_x2(x[4], x[7]); 1199| 315| accum.mul_x2(x[5], x[6]); 1200| 315| z[11] = accum.extract(); 1201| 315| accum.mul_x2(x[0], x[12]); 1202| 315| accum.mul_x2(x[1], x[11]); 1203| 315| accum.mul_x2(x[2], x[10]); 1204| 315| accum.mul_x2(x[3], x[9]); 1205| 315| accum.mul_x2(x[4], x[8]); 1206| 315| accum.mul_x2(x[5], x[7]); 1207| 315| accum.mul(x[6], x[6]); 1208| 315| z[12] = accum.extract(); 1209| 315| accum.mul_x2(x[0], x[13]); 1210| 315| accum.mul_x2(x[1], x[12]); 1211| 315| accum.mul_x2(x[2], x[11]); 1212| 315| accum.mul_x2(x[3], x[10]); 1213| 315| accum.mul_x2(x[4], x[9]); 1214| 315| accum.mul_x2(x[5], x[8]); 1215| 315| accum.mul_x2(x[6], x[7]); 1216| 315| z[13] = accum.extract(); 1217| 315| accum.mul_x2(x[0], x[14]); 1218| 315| accum.mul_x2(x[1], x[13]); 1219| 315| accum.mul_x2(x[2], x[12]); 1220| 315| accum.mul_x2(x[3], x[11]); 1221| 315| accum.mul_x2(x[4], x[10]); 1222| 315| accum.mul_x2(x[5], x[9]); 1223| 315| accum.mul_x2(x[6], x[8]); 1224| 315| accum.mul(x[7], x[7]); 1225| 315| z[14] = accum.extract(); 1226| 315| accum.mul_x2(x[0], x[15]); 1227| 315| accum.mul_x2(x[1], x[14]); 1228| 315| accum.mul_x2(x[2], x[13]); 1229| 315| accum.mul_x2(x[3], x[12]); 1230| 315| accum.mul_x2(x[4], x[11]); 1231| 315| accum.mul_x2(x[5], x[10]); 1232| 315| accum.mul_x2(x[6], x[9]); 1233| 315| accum.mul_x2(x[7], x[8]); 1234| 315| z[15] = accum.extract(); 1235| 315| accum.mul_x2(x[0], x[16]); 1236| 315| accum.mul_x2(x[1], x[15]); 1237| 315| accum.mul_x2(x[2], x[14]); 1238| 315| accum.mul_x2(x[3], x[13]); 1239| 315| accum.mul_x2(x[4], x[12]); 1240| 315| accum.mul_x2(x[5], x[11]); 1241| 315| accum.mul_x2(x[6], x[10]); 1242| 315| accum.mul_x2(x[7], x[9]); 1243| 315| accum.mul(x[8], x[8]); 1244| 315| z[16] = accum.extract(); 1245| 315| accum.mul_x2(x[0], x[17]); 1246| 315| accum.mul_x2(x[1], x[16]); 1247| 315| accum.mul_x2(x[2], x[15]); 1248| 315| accum.mul_x2(x[3], x[14]); 1249| 315| accum.mul_x2(x[4], x[13]); 1250| 315| accum.mul_x2(x[5], x[12]); 1251| 315| accum.mul_x2(x[6], x[11]); 1252| 315| accum.mul_x2(x[7], x[10]); 1253| 315| accum.mul_x2(x[8], x[9]); 1254| 315| z[17] = accum.extract(); 1255| 315| accum.mul_x2(x[0], x[18]); 1256| 315| accum.mul_x2(x[1], x[17]); 1257| 315| accum.mul_x2(x[2], x[16]); 1258| 315| accum.mul_x2(x[3], x[15]); 1259| 315| accum.mul_x2(x[4], x[14]); 1260| 315| accum.mul_x2(x[5], x[13]); 1261| 315| accum.mul_x2(x[6], x[12]); 1262| 315| accum.mul_x2(x[7], x[11]); 1263| 315| accum.mul_x2(x[8], x[10]); 1264| 315| accum.mul(x[9], x[9]); 1265| 315| z[18] = accum.extract(); 1266| 315| accum.mul_x2(x[0], x[19]); 1267| 315| accum.mul_x2(x[1], x[18]); 1268| 315| accum.mul_x2(x[2], x[17]); 1269| 315| accum.mul_x2(x[3], x[16]); 1270| 315| accum.mul_x2(x[4], x[15]); 1271| 315| accum.mul_x2(x[5], x[14]); 1272| 315| accum.mul_x2(x[6], x[13]); 1273| 315| accum.mul_x2(x[7], x[12]); 1274| 315| accum.mul_x2(x[8], x[11]); 1275| 315| accum.mul_x2(x[9], x[10]); 1276| 315| z[19] = accum.extract(); 1277| 315| accum.mul_x2(x[0], x[20]); 1278| 315| accum.mul_x2(x[1], x[19]); 1279| 315| accum.mul_x2(x[2], x[18]); 1280| 315| accum.mul_x2(x[3], x[17]); 1281| 315| accum.mul_x2(x[4], x[16]); 1282| 315| accum.mul_x2(x[5], x[15]); 1283| 315| accum.mul_x2(x[6], x[14]); 1284| 315| accum.mul_x2(x[7], x[13]); 1285| 315| accum.mul_x2(x[8], x[12]); 1286| 315| accum.mul_x2(x[9], x[11]); 1287| 315| accum.mul(x[10], x[10]); 1288| 315| z[20] = accum.extract(); 1289| 315| accum.mul_x2(x[0], x[21]); 1290| 315| accum.mul_x2(x[1], x[20]); 1291| 315| accum.mul_x2(x[2], x[19]); 1292| 315| accum.mul_x2(x[3], x[18]); 1293| 315| accum.mul_x2(x[4], x[17]); 1294| 315| accum.mul_x2(x[5], x[16]); 1295| 315| accum.mul_x2(x[6], x[15]); 1296| 315| accum.mul_x2(x[7], x[14]); 1297| 315| accum.mul_x2(x[8], x[13]); 1298| 315| accum.mul_x2(x[9], x[12]); 1299| 315| accum.mul_x2(x[10], x[11]); 1300| 315| z[21] = accum.extract(); 1301| 315| accum.mul_x2(x[0], x[22]); 1302| 315| accum.mul_x2(x[1], x[21]); 1303| 315| accum.mul_x2(x[2], x[20]); 1304| 315| accum.mul_x2(x[3], x[19]); 1305| 315| accum.mul_x2(x[4], x[18]); 1306| 315| accum.mul_x2(x[5], x[17]); 1307| 315| accum.mul_x2(x[6], x[16]); 1308| 315| accum.mul_x2(x[7], x[15]); 1309| 315| accum.mul_x2(x[8], x[14]); 1310| 315| accum.mul_x2(x[9], x[13]); 1311| 315| accum.mul_x2(x[10], x[12]); 1312| 315| accum.mul(x[11], x[11]); 1313| 315| z[22] = accum.extract(); 1314| 315| accum.mul_x2(x[0], x[23]); 1315| 315| accum.mul_x2(x[1], x[22]); 1316| 315| accum.mul_x2(x[2], x[21]); 1317| 315| accum.mul_x2(x[3], x[20]); 1318| 315| accum.mul_x2(x[4], x[19]); 1319| 315| accum.mul_x2(x[5], x[18]); 1320| 315| accum.mul_x2(x[6], x[17]); 1321| 315| accum.mul_x2(x[7], x[16]); 1322| 315| accum.mul_x2(x[8], x[15]); 1323| 315| accum.mul_x2(x[9], x[14]); 1324| 315| accum.mul_x2(x[10], x[13]); 1325| 315| accum.mul_x2(x[11], x[12]); 1326| 315| z[23] = accum.extract(); 1327| 315| accum.mul_x2(x[1], x[23]); 1328| 315| accum.mul_x2(x[2], x[22]); 1329| 315| accum.mul_x2(x[3], x[21]); 1330| 315| accum.mul_x2(x[4], x[20]); 1331| 315| accum.mul_x2(x[5], x[19]); 1332| 315| accum.mul_x2(x[6], x[18]); 1333| 315| accum.mul_x2(x[7], x[17]); 1334| 315| accum.mul_x2(x[8], x[16]); 1335| 315| accum.mul_x2(x[9], x[15]); 1336| 315| accum.mul_x2(x[10], x[14]); 1337| 315| accum.mul_x2(x[11], x[13]); 1338| 315| accum.mul(x[12], x[12]); 1339| 315| z[24] = accum.extract(); 1340| 315| accum.mul_x2(x[2], x[23]); 1341| 315| accum.mul_x2(x[3], x[22]); 1342| 315| accum.mul_x2(x[4], x[21]); 1343| 315| accum.mul_x2(x[5], x[20]); 1344| 315| accum.mul_x2(x[6], x[19]); 1345| 315| accum.mul_x2(x[7], x[18]); 1346| 315| accum.mul_x2(x[8], x[17]); 1347| 315| accum.mul_x2(x[9], x[16]); 1348| 315| accum.mul_x2(x[10], x[15]); 1349| 315| accum.mul_x2(x[11], x[14]); 1350| 315| accum.mul_x2(x[12], x[13]); 1351| 315| z[25] = accum.extract(); 1352| 315| accum.mul_x2(x[3], x[23]); 1353| 315| accum.mul_x2(x[4], x[22]); 1354| 315| accum.mul_x2(x[5], x[21]); 1355| 315| accum.mul_x2(x[6], x[20]); 1356| 315| accum.mul_x2(x[7], x[19]); 1357| 315| accum.mul_x2(x[8], x[18]); 1358| 315| accum.mul_x2(x[9], x[17]); 1359| 315| accum.mul_x2(x[10], x[16]); 1360| 315| accum.mul_x2(x[11], x[15]); 1361| 315| accum.mul_x2(x[12], x[14]); 1362| 315| accum.mul(x[13], x[13]); 1363| 315| z[26] = accum.extract(); 1364| 315| accum.mul_x2(x[4], x[23]); 1365| 315| accum.mul_x2(x[5], x[22]); 1366| 315| accum.mul_x2(x[6], x[21]); 1367| 315| accum.mul_x2(x[7], x[20]); 1368| 315| accum.mul_x2(x[8], x[19]); 1369| 315| accum.mul_x2(x[9], x[18]); 1370| 315| accum.mul_x2(x[10], x[17]); 1371| 315| accum.mul_x2(x[11], x[16]); 1372| 315| accum.mul_x2(x[12], x[15]); 1373| 315| accum.mul_x2(x[13], x[14]); 1374| 315| z[27] = accum.extract(); 1375| 315| accum.mul_x2(x[5], x[23]); 1376| 315| accum.mul_x2(x[6], x[22]); 1377| 315| accum.mul_x2(x[7], x[21]); 1378| 315| accum.mul_x2(x[8], x[20]); 1379| 315| accum.mul_x2(x[9], x[19]); 1380| 315| accum.mul_x2(x[10], x[18]); 1381| 315| accum.mul_x2(x[11], x[17]); 1382| 315| accum.mul_x2(x[12], x[16]); 1383| 315| accum.mul_x2(x[13], x[15]); 1384| 315| accum.mul(x[14], x[14]); 1385| 315| z[28] = accum.extract(); 1386| 315| accum.mul_x2(x[6], x[23]); 1387| 315| accum.mul_x2(x[7], x[22]); 1388| 315| accum.mul_x2(x[8], x[21]); 1389| 315| accum.mul_x2(x[9], x[20]); 1390| 315| accum.mul_x2(x[10], x[19]); 1391| 315| accum.mul_x2(x[11], x[18]); 1392| 315| accum.mul_x2(x[12], x[17]); 1393| 315| accum.mul_x2(x[13], x[16]); 1394| 315| accum.mul_x2(x[14], x[15]); 1395| 315| z[29] = accum.extract(); 1396| 315| accum.mul_x2(x[7], x[23]); 1397| 315| accum.mul_x2(x[8], x[22]); 1398| 315| accum.mul_x2(x[9], x[21]); 1399| 315| accum.mul_x2(x[10], x[20]); 1400| 315| accum.mul_x2(x[11], x[19]); 1401| 315| accum.mul_x2(x[12], x[18]); 1402| 315| accum.mul_x2(x[13], x[17]); 1403| 315| accum.mul_x2(x[14], x[16]); 1404| 315| accum.mul(x[15], x[15]); 1405| 315| z[30] = accum.extract(); 1406| 315| accum.mul_x2(x[8], x[23]); 1407| 315| accum.mul_x2(x[9], x[22]); 1408| 315| accum.mul_x2(x[10], x[21]); 1409| 315| accum.mul_x2(x[11], x[20]); 1410| 315| accum.mul_x2(x[12], x[19]); 1411| 315| accum.mul_x2(x[13], x[18]); 1412| 315| accum.mul_x2(x[14], x[17]); 1413| 315| accum.mul_x2(x[15], x[16]); 1414| 315| z[31] = accum.extract(); 1415| 315| accum.mul_x2(x[9], x[23]); 1416| 315| accum.mul_x2(x[10], x[22]); 1417| 315| accum.mul_x2(x[11], x[21]); 1418| 315| accum.mul_x2(x[12], x[20]); 1419| 315| accum.mul_x2(x[13], x[19]); 1420| 315| accum.mul_x2(x[14], x[18]); 1421| 315| accum.mul_x2(x[15], x[17]); 1422| 315| accum.mul(x[16], x[16]); 1423| 315| z[32] = accum.extract(); 1424| 315| accum.mul_x2(x[10], x[23]); 1425| 315| accum.mul_x2(x[11], x[22]); 1426| 315| accum.mul_x2(x[12], x[21]); 1427| 315| accum.mul_x2(x[13], x[20]); 1428| 315| accum.mul_x2(x[14], x[19]); 1429| 315| accum.mul_x2(x[15], x[18]); 1430| 315| accum.mul_x2(x[16], x[17]); 1431| 315| z[33] = accum.extract(); 1432| 315| accum.mul_x2(x[11], x[23]); 1433| 315| accum.mul_x2(x[12], x[22]); 1434| 315| accum.mul_x2(x[13], x[21]); 1435| 315| accum.mul_x2(x[14], x[20]); 1436| 315| accum.mul_x2(x[15], x[19]); 1437| 315| accum.mul_x2(x[16], x[18]); 1438| 315| accum.mul(x[17], x[17]); 1439| 315| z[34] = accum.extract(); 1440| 315| accum.mul_x2(x[12], x[23]); 1441| 315| accum.mul_x2(x[13], x[22]); 1442| 315| accum.mul_x2(x[14], x[21]); 1443| 315| accum.mul_x2(x[15], x[20]); 1444| 315| accum.mul_x2(x[16], x[19]); 1445| 315| accum.mul_x2(x[17], x[18]); 1446| 315| z[35] = accum.extract(); 1447| 315| accum.mul_x2(x[13], x[23]); 1448| 315| accum.mul_x2(x[14], x[22]); 1449| 315| accum.mul_x2(x[15], x[21]); 1450| 315| accum.mul_x2(x[16], x[20]); 1451| 315| accum.mul_x2(x[17], x[19]); 1452| 315| accum.mul(x[18], x[18]); 1453| 315| z[36] = accum.extract(); 1454| 315| accum.mul_x2(x[14], x[23]); 1455| 315| accum.mul_x2(x[15], x[22]); 1456| 315| accum.mul_x2(x[16], x[21]); 1457| 315| accum.mul_x2(x[17], x[20]); 1458| 315| accum.mul_x2(x[18], x[19]); 1459| 315| z[37] = accum.extract(); 1460| 315| accum.mul_x2(x[15], x[23]); 1461| 315| accum.mul_x2(x[16], x[22]); 1462| 315| accum.mul_x2(x[17], x[21]); 1463| 315| accum.mul_x2(x[18], x[20]); 1464| 315| accum.mul(x[19], x[19]); 1465| 315| z[38] = accum.extract(); 1466| 315| accum.mul_x2(x[16], x[23]); 1467| 315| accum.mul_x2(x[17], x[22]); 1468| 315| accum.mul_x2(x[18], x[21]); 1469| 315| accum.mul_x2(x[19], x[20]); 1470| 315| z[39] = accum.extract(); 1471| 315| accum.mul_x2(x[17], x[23]); 1472| 315| accum.mul_x2(x[18], x[22]); 1473| 315| accum.mul_x2(x[19], x[21]); 1474| 315| accum.mul(x[20], x[20]); 1475| 315| z[40] = accum.extract(); 1476| 315| accum.mul_x2(x[18], x[23]); 1477| 315| accum.mul_x2(x[19], x[22]); 1478| 315| accum.mul_x2(x[20], x[21]); 1479| 315| z[41] = accum.extract(); 1480| 315| accum.mul_x2(x[19], x[23]); 1481| 315| accum.mul_x2(x[20], x[22]); 1482| 315| accum.mul(x[21], x[21]); 1483| 315| z[42] = accum.extract(); 1484| 315| accum.mul_x2(x[20], x[23]); 1485| 315| accum.mul_x2(x[21], x[22]); 1486| 315| z[43] = accum.extract(); 1487| 315| accum.mul_x2(x[21], x[23]); 1488| 315| accum.mul(x[22], x[22]); 1489| 315| z[44] = accum.extract(); 1490| 315| accum.mul_x2(x[22], x[23]); 1491| 315| z[45] = accum.extract(); 1492| 315| accum.mul(x[23], x[23]); 1493| 315| z[46] = accum.extract(); 1494| 315| z[47] = accum.extract(); 1495| 315|} _ZN5Botan18bigint_comba_mul24EPmPKmS2_: 1500| 1.11k|void bigint_comba_mul24(word z[48], const word x[24], const word y[24]) { 1501| 1.11k| word3 accum; 1502| | 1503| 1.11k| accum.mul(x[0], y[0]); 1504| 1.11k| z[0] = accum.extract(); 1505| 1.11k| accum.mul(x[0], y[1]); 1506| 1.11k| accum.mul(x[1], y[0]); 1507| 1.11k| z[1] = accum.extract(); 1508| 1.11k| accum.mul(x[0], y[2]); 1509| 1.11k| accum.mul(x[1], y[1]); 1510| 1.11k| accum.mul(x[2], y[0]); 1511| 1.11k| z[2] = accum.extract(); 1512| 1.11k| accum.mul(x[0], y[3]); 1513| 1.11k| accum.mul(x[1], y[2]); 1514| 1.11k| accum.mul(x[2], y[1]); 1515| 1.11k| accum.mul(x[3], y[0]); 1516| 1.11k| z[3] = accum.extract(); 1517| 1.11k| accum.mul(x[0], y[4]); 1518| 1.11k| accum.mul(x[1], y[3]); 1519| 1.11k| accum.mul(x[2], y[2]); 1520| 1.11k| accum.mul(x[3], y[1]); 1521| 1.11k| accum.mul(x[4], y[0]); 1522| 1.11k| z[4] = accum.extract(); 1523| 1.11k| accum.mul(x[0], y[5]); 1524| 1.11k| accum.mul(x[1], y[4]); 1525| 1.11k| accum.mul(x[2], y[3]); 1526| 1.11k| accum.mul(x[3], y[2]); 1527| 1.11k| accum.mul(x[4], y[1]); 1528| 1.11k| accum.mul(x[5], y[0]); 1529| 1.11k| z[5] = accum.extract(); 1530| 1.11k| accum.mul(x[0], y[6]); 1531| 1.11k| accum.mul(x[1], y[5]); 1532| 1.11k| accum.mul(x[2], y[4]); 1533| 1.11k| accum.mul(x[3], y[3]); 1534| 1.11k| accum.mul(x[4], y[2]); 1535| 1.11k| accum.mul(x[5], y[1]); 1536| 1.11k| accum.mul(x[6], y[0]); 1537| 1.11k| z[6] = accum.extract(); 1538| 1.11k| accum.mul(x[0], y[7]); 1539| 1.11k| accum.mul(x[1], y[6]); 1540| 1.11k| accum.mul(x[2], y[5]); 1541| 1.11k| accum.mul(x[3], y[4]); 1542| 1.11k| accum.mul(x[4], y[3]); 1543| 1.11k| accum.mul(x[5], y[2]); 1544| 1.11k| accum.mul(x[6], y[1]); 1545| 1.11k| accum.mul(x[7], y[0]); 1546| 1.11k| z[7] = accum.extract(); 1547| 1.11k| accum.mul(x[0], y[8]); 1548| 1.11k| accum.mul(x[1], y[7]); 1549| 1.11k| accum.mul(x[2], y[6]); 1550| 1.11k| accum.mul(x[3], y[5]); 1551| 1.11k| accum.mul(x[4], y[4]); 1552| 1.11k| accum.mul(x[5], y[3]); 1553| 1.11k| accum.mul(x[6], y[2]); 1554| 1.11k| accum.mul(x[7], y[1]); 1555| 1.11k| accum.mul(x[8], y[0]); 1556| 1.11k| z[8] = accum.extract(); 1557| 1.11k| accum.mul(x[0], y[9]); 1558| 1.11k| accum.mul(x[1], y[8]); 1559| 1.11k| accum.mul(x[2], y[7]); 1560| 1.11k| accum.mul(x[3], y[6]); 1561| 1.11k| accum.mul(x[4], y[5]); 1562| 1.11k| accum.mul(x[5], y[4]); 1563| 1.11k| accum.mul(x[6], y[3]); 1564| 1.11k| accum.mul(x[7], y[2]); 1565| 1.11k| accum.mul(x[8], y[1]); 1566| 1.11k| accum.mul(x[9], y[0]); 1567| 1.11k| z[9] = accum.extract(); 1568| 1.11k| accum.mul(x[0], y[10]); 1569| 1.11k| accum.mul(x[1], y[9]); 1570| 1.11k| accum.mul(x[2], y[8]); 1571| 1.11k| accum.mul(x[3], y[7]); 1572| 1.11k| accum.mul(x[4], y[6]); 1573| 1.11k| accum.mul(x[5], y[5]); 1574| 1.11k| accum.mul(x[6], y[4]); 1575| 1.11k| accum.mul(x[7], y[3]); 1576| 1.11k| accum.mul(x[8], y[2]); 1577| 1.11k| accum.mul(x[9], y[1]); 1578| 1.11k| accum.mul(x[10], y[0]); 1579| 1.11k| z[10] = accum.extract(); 1580| 1.11k| accum.mul(x[0], y[11]); 1581| 1.11k| accum.mul(x[1], y[10]); 1582| 1.11k| accum.mul(x[2], y[9]); 1583| 1.11k| accum.mul(x[3], y[8]); 1584| 1.11k| accum.mul(x[4], y[7]); 1585| 1.11k| accum.mul(x[5], y[6]); 1586| 1.11k| accum.mul(x[6], y[5]); 1587| 1.11k| accum.mul(x[7], y[4]); 1588| 1.11k| accum.mul(x[8], y[3]); 1589| 1.11k| accum.mul(x[9], y[2]); 1590| 1.11k| accum.mul(x[10], y[1]); 1591| 1.11k| accum.mul(x[11], y[0]); 1592| 1.11k| z[11] = accum.extract(); 1593| 1.11k| accum.mul(x[0], y[12]); 1594| 1.11k| accum.mul(x[1], y[11]); 1595| 1.11k| accum.mul(x[2], y[10]); 1596| 1.11k| accum.mul(x[3], y[9]); 1597| 1.11k| accum.mul(x[4], y[8]); 1598| 1.11k| accum.mul(x[5], y[7]); 1599| 1.11k| accum.mul(x[6], y[6]); 1600| 1.11k| accum.mul(x[7], y[5]); 1601| 1.11k| accum.mul(x[8], y[4]); 1602| 1.11k| accum.mul(x[9], y[3]); 1603| 1.11k| accum.mul(x[10], y[2]); 1604| 1.11k| accum.mul(x[11], y[1]); 1605| 1.11k| accum.mul(x[12], y[0]); 1606| 1.11k| z[12] = accum.extract(); 1607| 1.11k| accum.mul(x[0], y[13]); 1608| 1.11k| accum.mul(x[1], y[12]); 1609| 1.11k| accum.mul(x[2], y[11]); 1610| 1.11k| accum.mul(x[3], y[10]); 1611| 1.11k| accum.mul(x[4], y[9]); 1612| 1.11k| accum.mul(x[5], y[8]); 1613| 1.11k| accum.mul(x[6], y[7]); 1614| 1.11k| accum.mul(x[7], y[6]); 1615| 1.11k| accum.mul(x[8], y[5]); 1616| 1.11k| accum.mul(x[9], y[4]); 1617| 1.11k| accum.mul(x[10], y[3]); 1618| 1.11k| accum.mul(x[11], y[2]); 1619| 1.11k| accum.mul(x[12], y[1]); 1620| 1.11k| accum.mul(x[13], y[0]); 1621| 1.11k| z[13] = accum.extract(); 1622| 1.11k| accum.mul(x[0], y[14]); 1623| 1.11k| accum.mul(x[1], y[13]); 1624| 1.11k| accum.mul(x[2], y[12]); 1625| 1.11k| accum.mul(x[3], y[11]); 1626| 1.11k| accum.mul(x[4], y[10]); 1627| 1.11k| accum.mul(x[5], y[9]); 1628| 1.11k| accum.mul(x[6], y[8]); 1629| 1.11k| accum.mul(x[7], y[7]); 1630| 1.11k| accum.mul(x[8], y[6]); 1631| 1.11k| accum.mul(x[9], y[5]); 1632| 1.11k| accum.mul(x[10], y[4]); 1633| 1.11k| accum.mul(x[11], y[3]); 1634| 1.11k| accum.mul(x[12], y[2]); 1635| 1.11k| accum.mul(x[13], y[1]); 1636| 1.11k| accum.mul(x[14], y[0]); 1637| 1.11k| z[14] = accum.extract(); 1638| 1.11k| accum.mul(x[0], y[15]); 1639| 1.11k| accum.mul(x[1], y[14]); 1640| 1.11k| accum.mul(x[2], y[13]); 1641| 1.11k| accum.mul(x[3], y[12]); 1642| 1.11k| accum.mul(x[4], y[11]); 1643| 1.11k| accum.mul(x[5], y[10]); 1644| 1.11k| accum.mul(x[6], y[9]); 1645| 1.11k| accum.mul(x[7], y[8]); 1646| 1.11k| accum.mul(x[8], y[7]); 1647| 1.11k| accum.mul(x[9], y[6]); 1648| 1.11k| accum.mul(x[10], y[5]); 1649| 1.11k| accum.mul(x[11], y[4]); 1650| 1.11k| accum.mul(x[12], y[3]); 1651| 1.11k| accum.mul(x[13], y[2]); 1652| 1.11k| accum.mul(x[14], y[1]); 1653| 1.11k| accum.mul(x[15], y[0]); 1654| 1.11k| z[15] = accum.extract(); 1655| 1.11k| accum.mul(x[0], y[16]); 1656| 1.11k| accum.mul(x[1], y[15]); 1657| 1.11k| accum.mul(x[2], y[14]); 1658| 1.11k| accum.mul(x[3], y[13]); 1659| 1.11k| accum.mul(x[4], y[12]); 1660| 1.11k| accum.mul(x[5], y[11]); 1661| 1.11k| accum.mul(x[6], y[10]); 1662| 1.11k| accum.mul(x[7], y[9]); 1663| 1.11k| accum.mul(x[8], y[8]); 1664| 1.11k| accum.mul(x[9], y[7]); 1665| 1.11k| accum.mul(x[10], y[6]); 1666| 1.11k| accum.mul(x[11], y[5]); 1667| 1.11k| accum.mul(x[12], y[4]); 1668| 1.11k| accum.mul(x[13], y[3]); 1669| 1.11k| accum.mul(x[14], y[2]); 1670| 1.11k| accum.mul(x[15], y[1]); 1671| 1.11k| accum.mul(x[16], y[0]); 1672| 1.11k| z[16] = accum.extract(); 1673| 1.11k| accum.mul(x[0], y[17]); 1674| 1.11k| accum.mul(x[1], y[16]); 1675| 1.11k| accum.mul(x[2], y[15]); 1676| 1.11k| accum.mul(x[3], y[14]); 1677| 1.11k| accum.mul(x[4], y[13]); 1678| 1.11k| accum.mul(x[5], y[12]); 1679| 1.11k| accum.mul(x[6], y[11]); 1680| 1.11k| accum.mul(x[7], y[10]); 1681| 1.11k| accum.mul(x[8], y[9]); 1682| 1.11k| accum.mul(x[9], y[8]); 1683| 1.11k| accum.mul(x[10], y[7]); 1684| 1.11k| accum.mul(x[11], y[6]); 1685| 1.11k| accum.mul(x[12], y[5]); 1686| 1.11k| accum.mul(x[13], y[4]); 1687| 1.11k| accum.mul(x[14], y[3]); 1688| 1.11k| accum.mul(x[15], y[2]); 1689| 1.11k| accum.mul(x[16], y[1]); 1690| 1.11k| accum.mul(x[17], y[0]); 1691| 1.11k| z[17] = accum.extract(); 1692| 1.11k| accum.mul(x[0], y[18]); 1693| 1.11k| accum.mul(x[1], y[17]); 1694| 1.11k| accum.mul(x[2], y[16]); 1695| 1.11k| accum.mul(x[3], y[15]); 1696| 1.11k| accum.mul(x[4], y[14]); 1697| 1.11k| accum.mul(x[5], y[13]); 1698| 1.11k| accum.mul(x[6], y[12]); 1699| 1.11k| accum.mul(x[7], y[11]); 1700| 1.11k| accum.mul(x[8], y[10]); 1701| 1.11k| accum.mul(x[9], y[9]); 1702| 1.11k| accum.mul(x[10], y[8]); 1703| 1.11k| accum.mul(x[11], y[7]); 1704| 1.11k| accum.mul(x[12], y[6]); 1705| 1.11k| accum.mul(x[13], y[5]); 1706| 1.11k| accum.mul(x[14], y[4]); 1707| 1.11k| accum.mul(x[15], y[3]); 1708| 1.11k| accum.mul(x[16], y[2]); 1709| 1.11k| accum.mul(x[17], y[1]); 1710| 1.11k| accum.mul(x[18], y[0]); 1711| 1.11k| z[18] = accum.extract(); 1712| 1.11k| accum.mul(x[0], y[19]); 1713| 1.11k| accum.mul(x[1], y[18]); 1714| 1.11k| accum.mul(x[2], y[17]); 1715| 1.11k| accum.mul(x[3], y[16]); 1716| 1.11k| accum.mul(x[4], y[15]); 1717| 1.11k| accum.mul(x[5], y[14]); 1718| 1.11k| accum.mul(x[6], y[13]); 1719| 1.11k| accum.mul(x[7], y[12]); 1720| 1.11k| accum.mul(x[8], y[11]); 1721| 1.11k| accum.mul(x[9], y[10]); 1722| 1.11k| accum.mul(x[10], y[9]); 1723| 1.11k| accum.mul(x[11], y[8]); 1724| 1.11k| accum.mul(x[12], y[7]); 1725| 1.11k| accum.mul(x[13], y[6]); 1726| 1.11k| accum.mul(x[14], y[5]); 1727| 1.11k| accum.mul(x[15], y[4]); 1728| 1.11k| accum.mul(x[16], y[3]); 1729| 1.11k| accum.mul(x[17], y[2]); 1730| 1.11k| accum.mul(x[18], y[1]); 1731| 1.11k| accum.mul(x[19], y[0]); 1732| 1.11k| z[19] = accum.extract(); 1733| 1.11k| accum.mul(x[0], y[20]); 1734| 1.11k| accum.mul(x[1], y[19]); 1735| 1.11k| accum.mul(x[2], y[18]); 1736| 1.11k| accum.mul(x[3], y[17]); 1737| 1.11k| accum.mul(x[4], y[16]); 1738| 1.11k| accum.mul(x[5], y[15]); 1739| 1.11k| accum.mul(x[6], y[14]); 1740| 1.11k| accum.mul(x[7], y[13]); 1741| 1.11k| accum.mul(x[8], y[12]); 1742| 1.11k| accum.mul(x[9], y[11]); 1743| 1.11k| accum.mul(x[10], y[10]); 1744| 1.11k| accum.mul(x[11], y[9]); 1745| 1.11k| accum.mul(x[12], y[8]); 1746| 1.11k| accum.mul(x[13], y[7]); 1747| 1.11k| accum.mul(x[14], y[6]); 1748| 1.11k| accum.mul(x[15], y[5]); 1749| 1.11k| accum.mul(x[16], y[4]); 1750| 1.11k| accum.mul(x[17], y[3]); 1751| 1.11k| accum.mul(x[18], y[2]); 1752| 1.11k| accum.mul(x[19], y[1]); 1753| 1.11k| accum.mul(x[20], y[0]); 1754| 1.11k| z[20] = accum.extract(); 1755| 1.11k| accum.mul(x[0], y[21]); 1756| 1.11k| accum.mul(x[1], y[20]); 1757| 1.11k| accum.mul(x[2], y[19]); 1758| 1.11k| accum.mul(x[3], y[18]); 1759| 1.11k| accum.mul(x[4], y[17]); 1760| 1.11k| accum.mul(x[5], y[16]); 1761| 1.11k| accum.mul(x[6], y[15]); 1762| 1.11k| accum.mul(x[7], y[14]); 1763| 1.11k| accum.mul(x[8], y[13]); 1764| 1.11k| accum.mul(x[9], y[12]); 1765| 1.11k| accum.mul(x[10], y[11]); 1766| 1.11k| accum.mul(x[11], y[10]); 1767| 1.11k| accum.mul(x[12], y[9]); 1768| 1.11k| accum.mul(x[13], y[8]); 1769| 1.11k| accum.mul(x[14], y[7]); 1770| 1.11k| accum.mul(x[15], y[6]); 1771| 1.11k| accum.mul(x[16], y[5]); 1772| 1.11k| accum.mul(x[17], y[4]); 1773| 1.11k| accum.mul(x[18], y[3]); 1774| 1.11k| accum.mul(x[19], y[2]); 1775| 1.11k| accum.mul(x[20], y[1]); 1776| 1.11k| accum.mul(x[21], y[0]); 1777| 1.11k| z[21] = accum.extract(); 1778| 1.11k| accum.mul(x[0], y[22]); 1779| 1.11k| accum.mul(x[1], y[21]); 1780| 1.11k| accum.mul(x[2], y[20]); 1781| 1.11k| accum.mul(x[3], y[19]); 1782| 1.11k| accum.mul(x[4], y[18]); 1783| 1.11k| accum.mul(x[5], y[17]); 1784| 1.11k| accum.mul(x[6], y[16]); 1785| 1.11k| accum.mul(x[7], y[15]); 1786| 1.11k| accum.mul(x[8], y[14]); 1787| 1.11k| accum.mul(x[9], y[13]); 1788| 1.11k| accum.mul(x[10], y[12]); 1789| 1.11k| accum.mul(x[11], y[11]); 1790| 1.11k| accum.mul(x[12], y[10]); 1791| 1.11k| accum.mul(x[13], y[9]); 1792| 1.11k| accum.mul(x[14], y[8]); 1793| 1.11k| accum.mul(x[15], y[7]); 1794| 1.11k| accum.mul(x[16], y[6]); 1795| 1.11k| accum.mul(x[17], y[5]); 1796| 1.11k| accum.mul(x[18], y[4]); 1797| 1.11k| accum.mul(x[19], y[3]); 1798| 1.11k| accum.mul(x[20], y[2]); 1799| 1.11k| accum.mul(x[21], y[1]); 1800| 1.11k| accum.mul(x[22], y[0]); 1801| 1.11k| z[22] = accum.extract(); 1802| 1.11k| accum.mul(x[0], y[23]); 1803| 1.11k| accum.mul(x[1], y[22]); 1804| 1.11k| accum.mul(x[2], y[21]); 1805| 1.11k| accum.mul(x[3], y[20]); 1806| 1.11k| accum.mul(x[4], y[19]); 1807| 1.11k| accum.mul(x[5], y[18]); 1808| 1.11k| accum.mul(x[6], y[17]); 1809| 1.11k| accum.mul(x[7], y[16]); 1810| 1.11k| accum.mul(x[8], y[15]); 1811| 1.11k| accum.mul(x[9], y[14]); 1812| 1.11k| accum.mul(x[10], y[13]); 1813| 1.11k| accum.mul(x[11], y[12]); 1814| 1.11k| accum.mul(x[12], y[11]); 1815| 1.11k| accum.mul(x[13], y[10]); 1816| 1.11k| accum.mul(x[14], y[9]); 1817| 1.11k| accum.mul(x[15], y[8]); 1818| 1.11k| accum.mul(x[16], y[7]); 1819| 1.11k| accum.mul(x[17], y[6]); 1820| 1.11k| accum.mul(x[18], y[5]); 1821| 1.11k| accum.mul(x[19], y[4]); 1822| 1.11k| accum.mul(x[20], y[3]); 1823| 1.11k| accum.mul(x[21], y[2]); 1824| 1.11k| accum.mul(x[22], y[1]); 1825| 1.11k| accum.mul(x[23], y[0]); 1826| 1.11k| z[23] = accum.extract(); 1827| 1.11k| accum.mul(x[1], y[23]); 1828| 1.11k| accum.mul(x[2], y[22]); 1829| 1.11k| accum.mul(x[3], y[21]); 1830| 1.11k| accum.mul(x[4], y[20]); 1831| 1.11k| accum.mul(x[5], y[19]); 1832| 1.11k| accum.mul(x[6], y[18]); 1833| 1.11k| accum.mul(x[7], y[17]); 1834| 1.11k| accum.mul(x[8], y[16]); 1835| 1.11k| accum.mul(x[9], y[15]); 1836| 1.11k| accum.mul(x[10], y[14]); 1837| 1.11k| accum.mul(x[11], y[13]); 1838| 1.11k| accum.mul(x[12], y[12]); 1839| 1.11k| accum.mul(x[13], y[11]); 1840| 1.11k| accum.mul(x[14], y[10]); 1841| 1.11k| accum.mul(x[15], y[9]); 1842| 1.11k| accum.mul(x[16], y[8]); 1843| 1.11k| accum.mul(x[17], y[7]); 1844| 1.11k| accum.mul(x[18], y[6]); 1845| 1.11k| accum.mul(x[19], y[5]); 1846| 1.11k| accum.mul(x[20], y[4]); 1847| 1.11k| accum.mul(x[21], y[3]); 1848| 1.11k| accum.mul(x[22], y[2]); 1849| 1.11k| accum.mul(x[23], y[1]); 1850| 1.11k| z[24] = accum.extract(); 1851| 1.11k| accum.mul(x[2], y[23]); 1852| 1.11k| accum.mul(x[3], y[22]); 1853| 1.11k| accum.mul(x[4], y[21]); 1854| 1.11k| accum.mul(x[5], y[20]); 1855| 1.11k| accum.mul(x[6], y[19]); 1856| 1.11k| accum.mul(x[7], y[18]); 1857| 1.11k| accum.mul(x[8], y[17]); 1858| 1.11k| accum.mul(x[9], y[16]); 1859| 1.11k| accum.mul(x[10], y[15]); 1860| 1.11k| accum.mul(x[11], y[14]); 1861| 1.11k| accum.mul(x[12], y[13]); 1862| 1.11k| accum.mul(x[13], y[12]); 1863| 1.11k| accum.mul(x[14], y[11]); 1864| 1.11k| accum.mul(x[15], y[10]); 1865| 1.11k| accum.mul(x[16], y[9]); 1866| 1.11k| accum.mul(x[17], y[8]); 1867| 1.11k| accum.mul(x[18], y[7]); 1868| 1.11k| accum.mul(x[19], y[6]); 1869| 1.11k| accum.mul(x[20], y[5]); 1870| 1.11k| accum.mul(x[21], y[4]); 1871| 1.11k| accum.mul(x[22], y[3]); 1872| 1.11k| accum.mul(x[23], y[2]); 1873| 1.11k| z[25] = accum.extract(); 1874| 1.11k| accum.mul(x[3], y[23]); 1875| 1.11k| accum.mul(x[4], y[22]); 1876| 1.11k| accum.mul(x[5], y[21]); 1877| 1.11k| accum.mul(x[6], y[20]); 1878| 1.11k| accum.mul(x[7], y[19]); 1879| 1.11k| accum.mul(x[8], y[18]); 1880| 1.11k| accum.mul(x[9], y[17]); 1881| 1.11k| accum.mul(x[10], y[16]); 1882| 1.11k| accum.mul(x[11], y[15]); 1883| 1.11k| accum.mul(x[12], y[14]); 1884| 1.11k| accum.mul(x[13], y[13]); 1885| 1.11k| accum.mul(x[14], y[12]); 1886| 1.11k| accum.mul(x[15], y[11]); 1887| 1.11k| accum.mul(x[16], y[10]); 1888| 1.11k| accum.mul(x[17], y[9]); 1889| 1.11k| accum.mul(x[18], y[8]); 1890| 1.11k| accum.mul(x[19], y[7]); 1891| 1.11k| accum.mul(x[20], y[6]); 1892| 1.11k| accum.mul(x[21], y[5]); 1893| 1.11k| accum.mul(x[22], y[4]); 1894| 1.11k| accum.mul(x[23], y[3]); 1895| 1.11k| z[26] = accum.extract(); 1896| 1.11k| accum.mul(x[4], y[23]); 1897| 1.11k| accum.mul(x[5], y[22]); 1898| 1.11k| accum.mul(x[6], y[21]); 1899| 1.11k| accum.mul(x[7], y[20]); 1900| 1.11k| accum.mul(x[8], y[19]); 1901| 1.11k| accum.mul(x[9], y[18]); 1902| 1.11k| accum.mul(x[10], y[17]); 1903| 1.11k| accum.mul(x[11], y[16]); 1904| 1.11k| accum.mul(x[12], y[15]); 1905| 1.11k| accum.mul(x[13], y[14]); 1906| 1.11k| accum.mul(x[14], y[13]); 1907| 1.11k| accum.mul(x[15], y[12]); 1908| 1.11k| accum.mul(x[16], y[11]); 1909| 1.11k| accum.mul(x[17], y[10]); 1910| 1.11k| accum.mul(x[18], y[9]); 1911| 1.11k| accum.mul(x[19], y[8]); 1912| 1.11k| accum.mul(x[20], y[7]); 1913| 1.11k| accum.mul(x[21], y[6]); 1914| 1.11k| accum.mul(x[22], y[5]); 1915| 1.11k| accum.mul(x[23], y[4]); 1916| 1.11k| z[27] = accum.extract(); 1917| 1.11k| accum.mul(x[5], y[23]); 1918| 1.11k| accum.mul(x[6], y[22]); 1919| 1.11k| accum.mul(x[7], y[21]); 1920| 1.11k| accum.mul(x[8], y[20]); 1921| 1.11k| accum.mul(x[9], y[19]); 1922| 1.11k| accum.mul(x[10], y[18]); 1923| 1.11k| accum.mul(x[11], y[17]); 1924| 1.11k| accum.mul(x[12], y[16]); 1925| 1.11k| accum.mul(x[13], y[15]); 1926| 1.11k| accum.mul(x[14], y[14]); 1927| 1.11k| accum.mul(x[15], y[13]); 1928| 1.11k| accum.mul(x[16], y[12]); 1929| 1.11k| accum.mul(x[17], y[11]); 1930| 1.11k| accum.mul(x[18], y[10]); 1931| 1.11k| accum.mul(x[19], y[9]); 1932| 1.11k| accum.mul(x[20], y[8]); 1933| 1.11k| accum.mul(x[21], y[7]); 1934| 1.11k| accum.mul(x[22], y[6]); 1935| 1.11k| accum.mul(x[23], y[5]); 1936| 1.11k| z[28] = accum.extract(); 1937| 1.11k| accum.mul(x[6], y[23]); 1938| 1.11k| accum.mul(x[7], y[22]); 1939| 1.11k| accum.mul(x[8], y[21]); 1940| 1.11k| accum.mul(x[9], y[20]); 1941| 1.11k| accum.mul(x[10], y[19]); 1942| 1.11k| accum.mul(x[11], y[18]); 1943| 1.11k| accum.mul(x[12], y[17]); 1944| 1.11k| accum.mul(x[13], y[16]); 1945| 1.11k| accum.mul(x[14], y[15]); 1946| 1.11k| accum.mul(x[15], y[14]); 1947| 1.11k| accum.mul(x[16], y[13]); 1948| 1.11k| accum.mul(x[17], y[12]); 1949| 1.11k| accum.mul(x[18], y[11]); 1950| 1.11k| accum.mul(x[19], y[10]); 1951| 1.11k| accum.mul(x[20], y[9]); 1952| 1.11k| accum.mul(x[21], y[8]); 1953| 1.11k| accum.mul(x[22], y[7]); 1954| 1.11k| accum.mul(x[23], y[6]); 1955| 1.11k| z[29] = accum.extract(); 1956| 1.11k| accum.mul(x[7], y[23]); 1957| 1.11k| accum.mul(x[8], y[22]); 1958| 1.11k| accum.mul(x[9], y[21]); 1959| 1.11k| accum.mul(x[10], y[20]); 1960| 1.11k| accum.mul(x[11], y[19]); 1961| 1.11k| accum.mul(x[12], y[18]); 1962| 1.11k| accum.mul(x[13], y[17]); 1963| 1.11k| accum.mul(x[14], y[16]); 1964| 1.11k| accum.mul(x[15], y[15]); 1965| 1.11k| accum.mul(x[16], y[14]); 1966| 1.11k| accum.mul(x[17], y[13]); 1967| 1.11k| accum.mul(x[18], y[12]); 1968| 1.11k| accum.mul(x[19], y[11]); 1969| 1.11k| accum.mul(x[20], y[10]); 1970| 1.11k| accum.mul(x[21], y[9]); 1971| 1.11k| accum.mul(x[22], y[8]); 1972| 1.11k| accum.mul(x[23], y[7]); 1973| 1.11k| z[30] = accum.extract(); 1974| 1.11k| accum.mul(x[8], y[23]); 1975| 1.11k| accum.mul(x[9], y[22]); 1976| 1.11k| accum.mul(x[10], y[21]); 1977| 1.11k| accum.mul(x[11], y[20]); 1978| 1.11k| accum.mul(x[12], y[19]); 1979| 1.11k| accum.mul(x[13], y[18]); 1980| 1.11k| accum.mul(x[14], y[17]); 1981| 1.11k| accum.mul(x[15], y[16]); 1982| 1.11k| accum.mul(x[16], y[15]); 1983| 1.11k| accum.mul(x[17], y[14]); 1984| 1.11k| accum.mul(x[18], y[13]); 1985| 1.11k| accum.mul(x[19], y[12]); 1986| 1.11k| accum.mul(x[20], y[11]); 1987| 1.11k| accum.mul(x[21], y[10]); 1988| 1.11k| accum.mul(x[22], y[9]); 1989| 1.11k| accum.mul(x[23], y[8]); 1990| 1.11k| z[31] = accum.extract(); 1991| 1.11k| accum.mul(x[9], y[23]); 1992| 1.11k| accum.mul(x[10], y[22]); 1993| 1.11k| accum.mul(x[11], y[21]); 1994| 1.11k| accum.mul(x[12], y[20]); 1995| 1.11k| accum.mul(x[13], y[19]); 1996| 1.11k| accum.mul(x[14], y[18]); 1997| 1.11k| accum.mul(x[15], y[17]); 1998| 1.11k| accum.mul(x[16], y[16]); 1999| 1.11k| accum.mul(x[17], y[15]); 2000| 1.11k| accum.mul(x[18], y[14]); 2001| 1.11k| accum.mul(x[19], y[13]); 2002| 1.11k| accum.mul(x[20], y[12]); 2003| 1.11k| accum.mul(x[21], y[11]); 2004| 1.11k| accum.mul(x[22], y[10]); 2005| 1.11k| accum.mul(x[23], y[9]); 2006| 1.11k| z[32] = accum.extract(); 2007| 1.11k| accum.mul(x[10], y[23]); 2008| 1.11k| accum.mul(x[11], y[22]); 2009| 1.11k| accum.mul(x[12], y[21]); 2010| 1.11k| accum.mul(x[13], y[20]); 2011| 1.11k| accum.mul(x[14], y[19]); 2012| 1.11k| accum.mul(x[15], y[18]); 2013| 1.11k| accum.mul(x[16], y[17]); 2014| 1.11k| accum.mul(x[17], y[16]); 2015| 1.11k| accum.mul(x[18], y[15]); 2016| 1.11k| accum.mul(x[19], y[14]); 2017| 1.11k| accum.mul(x[20], y[13]); 2018| 1.11k| accum.mul(x[21], y[12]); 2019| 1.11k| accum.mul(x[22], y[11]); 2020| 1.11k| accum.mul(x[23], y[10]); 2021| 1.11k| z[33] = accum.extract(); 2022| 1.11k| accum.mul(x[11], y[23]); 2023| 1.11k| accum.mul(x[12], y[22]); 2024| 1.11k| accum.mul(x[13], y[21]); 2025| 1.11k| accum.mul(x[14], y[20]); 2026| 1.11k| accum.mul(x[15], y[19]); 2027| 1.11k| accum.mul(x[16], y[18]); 2028| 1.11k| accum.mul(x[17], y[17]); 2029| 1.11k| accum.mul(x[18], y[16]); 2030| 1.11k| accum.mul(x[19], y[15]); 2031| 1.11k| accum.mul(x[20], y[14]); 2032| 1.11k| accum.mul(x[21], y[13]); 2033| 1.11k| accum.mul(x[22], y[12]); 2034| 1.11k| accum.mul(x[23], y[11]); 2035| 1.11k| z[34] = accum.extract(); 2036| 1.11k| accum.mul(x[12], y[23]); 2037| 1.11k| accum.mul(x[13], y[22]); 2038| 1.11k| accum.mul(x[14], y[21]); 2039| 1.11k| accum.mul(x[15], y[20]); 2040| 1.11k| accum.mul(x[16], y[19]); 2041| 1.11k| accum.mul(x[17], y[18]); 2042| 1.11k| accum.mul(x[18], y[17]); 2043| 1.11k| accum.mul(x[19], y[16]); 2044| 1.11k| accum.mul(x[20], y[15]); 2045| 1.11k| accum.mul(x[21], y[14]); 2046| 1.11k| accum.mul(x[22], y[13]); 2047| 1.11k| accum.mul(x[23], y[12]); 2048| 1.11k| z[35] = accum.extract(); 2049| 1.11k| accum.mul(x[13], y[23]); 2050| 1.11k| accum.mul(x[14], y[22]); 2051| 1.11k| accum.mul(x[15], y[21]); 2052| 1.11k| accum.mul(x[16], y[20]); 2053| 1.11k| accum.mul(x[17], y[19]); 2054| 1.11k| accum.mul(x[18], y[18]); 2055| 1.11k| accum.mul(x[19], y[17]); 2056| 1.11k| accum.mul(x[20], y[16]); 2057| 1.11k| accum.mul(x[21], y[15]); 2058| 1.11k| accum.mul(x[22], y[14]); 2059| 1.11k| accum.mul(x[23], y[13]); 2060| 1.11k| z[36] = accum.extract(); 2061| 1.11k| accum.mul(x[14], y[23]); 2062| 1.11k| accum.mul(x[15], y[22]); 2063| 1.11k| accum.mul(x[16], y[21]); 2064| 1.11k| accum.mul(x[17], y[20]); 2065| 1.11k| accum.mul(x[18], y[19]); 2066| 1.11k| accum.mul(x[19], y[18]); 2067| 1.11k| accum.mul(x[20], y[17]); 2068| 1.11k| accum.mul(x[21], y[16]); 2069| 1.11k| accum.mul(x[22], y[15]); 2070| 1.11k| accum.mul(x[23], y[14]); 2071| 1.11k| z[37] = accum.extract(); 2072| 1.11k| accum.mul(x[15], y[23]); 2073| 1.11k| accum.mul(x[16], y[22]); 2074| 1.11k| accum.mul(x[17], y[21]); 2075| 1.11k| accum.mul(x[18], y[20]); 2076| 1.11k| accum.mul(x[19], y[19]); 2077| 1.11k| accum.mul(x[20], y[18]); 2078| 1.11k| accum.mul(x[21], y[17]); 2079| 1.11k| accum.mul(x[22], y[16]); 2080| 1.11k| accum.mul(x[23], y[15]); 2081| 1.11k| z[38] = accum.extract(); 2082| 1.11k| accum.mul(x[16], y[23]); 2083| 1.11k| accum.mul(x[17], y[22]); 2084| 1.11k| accum.mul(x[18], y[21]); 2085| 1.11k| accum.mul(x[19], y[20]); 2086| 1.11k| accum.mul(x[20], y[19]); 2087| 1.11k| accum.mul(x[21], y[18]); 2088| 1.11k| accum.mul(x[22], y[17]); 2089| 1.11k| accum.mul(x[23], y[16]); 2090| 1.11k| z[39] = accum.extract(); 2091| 1.11k| accum.mul(x[17], y[23]); 2092| 1.11k| accum.mul(x[18], y[22]); 2093| 1.11k| accum.mul(x[19], y[21]); 2094| 1.11k| accum.mul(x[20], y[20]); 2095| 1.11k| accum.mul(x[21], y[19]); 2096| 1.11k| accum.mul(x[22], y[18]); 2097| 1.11k| accum.mul(x[23], y[17]); 2098| 1.11k| z[40] = accum.extract(); 2099| 1.11k| accum.mul(x[18], y[23]); 2100| 1.11k| accum.mul(x[19], y[22]); 2101| 1.11k| accum.mul(x[20], y[21]); 2102| 1.11k| accum.mul(x[21], y[20]); 2103| 1.11k| accum.mul(x[22], y[19]); 2104| 1.11k| accum.mul(x[23], y[18]); 2105| 1.11k| z[41] = accum.extract(); 2106| 1.11k| accum.mul(x[19], y[23]); 2107| 1.11k| accum.mul(x[20], y[22]); 2108| 1.11k| accum.mul(x[21], y[21]); 2109| 1.11k| accum.mul(x[22], y[20]); 2110| 1.11k| accum.mul(x[23], y[19]); 2111| 1.11k| z[42] = accum.extract(); 2112| 1.11k| accum.mul(x[20], y[23]); 2113| 1.11k| accum.mul(x[21], y[22]); 2114| 1.11k| accum.mul(x[22], y[21]); 2115| 1.11k| accum.mul(x[23], y[20]); 2116| 1.11k| z[43] = accum.extract(); 2117| 1.11k| accum.mul(x[21], y[23]); 2118| 1.11k| accum.mul(x[22], y[22]); 2119| 1.11k| accum.mul(x[23], y[21]); 2120| 1.11k| z[44] = accum.extract(); 2121| 1.11k| accum.mul(x[22], y[23]); 2122| 1.11k| accum.mul(x[23], y[22]); 2123| 1.11k| z[45] = accum.extract(); 2124| 1.11k| accum.mul(x[23], y[23]); 2125| 1.11k| z[46] = accum.extract(); 2126| 1.11k| z[47] = accum.extract(); 2127| 1.11k|} _ZN5Botan12basecase_mulEPmmPKmmS2_m: 20| 73.6k|void basecase_mul(word z[], size_t z_size, const word x[], size_t x_size, const word y[], size_t y_size) { 21| 73.6k| if(z_size < x_size + y_size) { ------------------ | Branch (21:7): [True: 0, False: 73.6k] ------------------ 22| 0| throw Invalid_Argument("basecase_mul z_size too small"); 23| 0| } 24| | 25| 73.6k| const size_t x_size_8 = x_size - (x_size % 8); 26| | 27| 73.6k| zeroize_buffer(z, z_size); 28| | 29| 1.16M| for(size_t i = 0; i != y_size; ++i) { ------------------ | Branch (29:22): [True: 1.09M, False: 73.6k] ------------------ 30| 1.09M| const word y_i = y[i]; 31| | 32| 1.09M| word carry = 0; 33| | 34| 3.66M| for(size_t j = 0; j != x_size_8; j += 8) { ------------------ | Branch (34:25): [True: 2.56M, False: 1.09M] ------------------ 35| 2.56M| carry = word8_madd3(z + i + j, x + j, y_i, carry); 36| 2.56M| } 37| | 38| 3.54M| for(size_t j = x_size_8; j != x_size; ++j) { ------------------ | Branch (38:32): [True: 2.45M, False: 1.09M] ------------------ 39| 2.45M| z[i + j] = word_madd3(x[j], y_i, z[i + j], &carry); 40| 2.45M| } 41| | 42| 1.09M| z[x_size + i] = carry; 43| 1.09M| } 44| 73.6k|} _ZN5Botan12basecase_sqrEPmmPKmm: 46| 13.1k|void basecase_sqr(word z[], size_t z_size, const word x[], size_t x_size) { 47| 13.1k| if(z_size < 2 * x_size) { ------------------ | Branch (47:7): [True: 0, False: 13.1k] ------------------ 48| 0| throw Invalid_Argument("basecase_sqr z_size too small"); 49| 0| } 50| | 51| 13.1k| const size_t x_size_8 = x_size - (x_size % 8); 52| | 53| 13.1k| zeroize_buffer(z, z_size); 54| | 55| 127k| for(size_t i = 0; i != x_size; ++i) { ------------------ | Branch (55:22): [True: 113k, False: 13.1k] ------------------ 56| 113k| const word x_i = x[i]; 57| | 58| 113k| word carry = 0; 59| | 60| 421k| for(size_t j = 0; j != x_size_8; j += 8) { ------------------ | Branch (60:25): [True: 307k, False: 113k] ------------------ 61| 307k| carry = word8_madd3(z + i + j, x + j, x_i, carry); 62| 307k| } 63| | 64| 452k| for(size_t j = x_size_8; j != x_size; ++j) { ------------------ | Branch (64:32): [True: 338k, False: 113k] ------------------ 65| 338k| z[i + j] = word_madd3(x[j], x_i, z[i + j], &carry); 66| 338k| } 67| | 68| 113k| z[x_size + i] = carry; 69| 113k| } 70| 13.1k|} _ZN5Botan10bigint_mulEPmmPKmmmS2_mmS0_m: 292| 72.3k| size_t ws_size) { 293| 72.3k| zeroize_buffer(z, z_size); 294| | 295| 72.3k| if(x_sw == 1) { ------------------ | Branch (295:7): [True: 0, False: 72.3k] ------------------ 296| 0| bigint_linmul3(z, y, y_sw, x[0]); 297| 72.3k| } else if(y_sw == 1) { ------------------ | Branch (297:14): [True: 0, False: 72.3k] ------------------ 298| 0| bigint_linmul3(z, x, x_sw, y[0]); 299| 72.3k| } else if(sized_for_comba_mul<4>(x_sw, x_size, y_sw, y_size, z_size)) { ------------------ | Branch (299:14): [True: 27.2k, False: 45.0k] ------------------ 300| 27.2k| bigint_comba_mul4(z, x, y); 301| 45.0k| } else if(sized_for_comba_mul<6>(x_sw, x_size, y_sw, y_size, z_size)) { ------------------ | Branch (301:14): [True: 586, False: 44.5k] ------------------ 302| 586| bigint_comba_mul6(z, x, y); 303| 44.5k| } else if(sized_for_comba_mul<8>(x_sw, x_size, y_sw, y_size, z_size)) { ------------------ | Branch (303:14): [True: 217, False: 44.2k] ------------------ 304| 217| bigint_comba_mul8(z, x, y); 305| 44.2k| } else if(sized_for_comba_mul<9>(x_sw, x_size, y_sw, y_size, z_size)) { ------------------ | Branch (305:14): [True: 163, False: 44.1k] ------------------ 306| 163| bigint_comba_mul9(z, x, y); 307| 44.1k| } else if(sized_for_comba_mul<16>(x_sw, x_size, y_sw, y_size, z_size)) { ------------------ | Branch (307:14): [True: 430, False: 43.6k] ------------------ 308| 430| bigint_comba_mul16(z, x, y); 309| 43.6k| } else if(sized_for_comba_mul<24>(x_sw, x_size, y_sw, y_size, z_size)) { ------------------ | Branch (309:14): [True: 57, False: 43.6k] ------------------ 310| 57| bigint_comba_mul24(z, x, y); 311| 43.6k| } else if(x_sw < KARATSUBA_MULTIPLY_THRESHOLD || y_sw < KARATSUBA_MULTIPLY_THRESHOLD || workspace == nullptr) { ------------------ | Branch (311:14): [True: 25.4k, False: 18.1k] | Branch (311:53): [True: 0, False: 18.1k] | Branch (311:92): [True: 0, False: 18.1k] ------------------ 312| 25.4k| basecase_mul(z, z_size, x, x_sw, y, y_sw); 313| 25.4k| } else { 314| 18.1k| const size_t N = karatsuba_size(z_size, x_size, x_sw, y_size, y_sw); 315| | 316| 18.1k| if(N > 0 && z_size >= 2 * N && ws_size >= 2 * N) { ------------------ | Branch (316:10): [True: 17.3k, False: 835] | Branch (316:19): [True: 17.3k, False: 0] | Branch (316:38): [True: 17.3k, False: 0] ------------------ 317| 17.3k| karatsuba_mul(z, x, y, N, workspace); 318| 17.3k| } else { 319| 835| basecase_mul(z, z_size, x, x_sw, y, y_sw); 320| 835| } 321| 18.1k| } 322| 72.3k|} _ZN5Botan10bigint_sqrEPmmPKmmmS0_m: 327| 21.7k|void bigint_sqr(word z[], size_t z_size, const word x[], size_t x_size, size_t x_sw, word workspace[], size_t ws_size) { 328| 21.7k| zeroize_buffer(z, z_size); 329| | 330| 21.7k| BOTAN_ASSERT(z_size / 2 >= x_sw, "Output size is sufficient"); ------------------ | | 71| 21.7k| do { \ | | 72| 21.7k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 21.7k| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 21.7k] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 21.7k| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 21.7k] | | ------------------ ------------------ 331| | 332| 21.7k| if(x_sw == 1) { ------------------ | Branch (332:7): [True: 0, False: 21.7k] ------------------ 333| 0| bigint_linmul3(z, x, x_sw, x[0]); 334| 21.7k| } else if(sized_for_comba_sqr<4>(x_sw, x_size, z_size)) { ------------------ | Branch (334:14): [True: 8.53k, False: 13.2k] ------------------ 335| 8.53k| bigint_comba_sqr4(z, x); 336| 13.2k| } else if(sized_for_comba_sqr<6>(x_sw, x_size, z_size)) { ------------------ | Branch (336:14): [True: 6, False: 13.2k] ------------------ 337| 6| bigint_comba_sqr6(z, x); 338| 13.2k| } else if(sized_for_comba_sqr<8>(x_sw, x_size, z_size)) { ------------------ | Branch (338:14): [True: 3, False: 13.2k] ------------------ 339| 3| bigint_comba_sqr8(z, x); 340| 13.2k| } else if(sized_for_comba_sqr<9>(x_sw, x_size, z_size)) { ------------------ | Branch (340:14): [True: 3, False: 13.2k] ------------------ 341| 3| bigint_comba_sqr9(z, x); 342| 13.2k| } else if(sized_for_comba_sqr<16>(x_sw, x_size, z_size)) { ------------------ | Branch (342:14): [True: 2, False: 13.2k] ------------------ 343| 2| bigint_comba_sqr16(z, x); 344| 13.2k| } else if(sized_for_comba_sqr<24>(x_sw, x_size, z_size)) { ------------------ | Branch (344:14): [True: 0, False: 13.2k] ------------------ 345| 0| bigint_comba_sqr24(z, x); 346| 13.2k| } else if(x_size < KARATSUBA_SQUARE_THRESHOLD || workspace == nullptr) { ------------------ | Branch (346:14): [True: 10.4k, False: 2.74k] | Branch (346:53): [True: 0, False: 2.74k] ------------------ 347| 10.4k| basecase_sqr(z, z_size, x, x_sw); 348| 10.4k| } else { 349| 2.74k| const size_t N = karatsuba_size(z_size, x_size, x_sw); 350| | 351| 2.74k| if(N > 0 && z_size >= 2 * N && ws_size >= 2 * N) { ------------------ | Branch (351:10): [True: 1.91k, False: 836] | Branch (351:19): [True: 1.91k, False: 0] | Branch (351:38): [True: 1.91k, False: 0] ------------------ 352| 1.91k| karatsuba_sqr(z, x, N, workspace); 353| 1.91k| } else { 354| 836| basecase_sqr(z, z_size, x, x_sw); 355| 836| } 356| 2.74k| } 357| 21.7k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_114karatsuba_sizeEmmmmm: 203| 18.1k|size_t karatsuba_size(size_t z_size, size_t x_size, size_t x_sw, size_t y_size, size_t y_sw) { 204| 18.1k| if(x_sw > x_size || x_sw > y_size || y_sw > x_size || y_sw > y_size) { ------------------ | Branch (204:7): [True: 0, False: 18.1k] | Branch (204:24): [True: 0, False: 18.1k] | Branch (204:41): [True: 0, False: 18.1k] | Branch (204:58): [True: 0, False: 18.1k] ------------------ 205| 0| return 0; 206| 0| } 207| | 208| 18.1k| if(((x_size == x_sw) && (x_size % 2 != 0)) || ((y_size == y_sw) && (y_size % 2 != 0))) { ------------------ | Branch (208:8): [True: 81, False: 18.0k] | Branch (208:28): [True: 0, False: 81] | Branch (208:51): [True: 0, False: 18.1k] | Branch (208:71): [True: 0, False: 0] ------------------ 209| 0| return 0; 210| 0| } 211| | 212| 18.1k| const size_t start = (x_sw > y_sw) ? x_sw : y_sw; ------------------ | Branch (212:25): [True: 7.70k, False: 10.4k] ------------------ 213| 18.1k| const size_t end = (x_size < y_size) ? x_size : y_size; ------------------ | Branch (213:23): [True: 8.24k, False: 9.90k] ------------------ 214| | 215| 18.1k| if(start == end) { ------------------ | Branch (215:7): [True: 81, False: 18.0k] ------------------ 216| 81| if(start % 2 != 0) { ------------------ | Branch (216:10): [True: 0, False: 81] ------------------ 217| 0| return 0; 218| 0| } 219| 81| return start; 220| 81| } 221| | 222| 29.5k| for(size_t j = start; j <= end; ++j) { ------------------ | Branch (222:26): [True: 29.5k, False: 0] ------------------ 223| 29.5k| if(j % 2 != 0) { ------------------ | Branch (223:10): [True: 11.5k, False: 18.0k] ------------------ 224| 11.5k| continue; 225| 11.5k| } 226| | 227| 18.0k| if(2 * j > z_size) { ------------------ | Branch (227:10): [True: 835, False: 17.2k] ------------------ 228| 835| return 0; 229| 835| } 230| | 231| 17.2k| if(x_sw <= j && j <= x_size && y_sw <= j && j <= y_size) { ------------------ | Branch (231:10): [True: 17.2k, False: 0] | Branch (231:23): [True: 17.2k, False: 0] | Branch (231:38): [True: 17.2k, False: 0] | Branch (231:51): [True: 17.2k, False: 0] ------------------ 232| 17.2k| if(j % 4 == 2 && (j + 2) <= x_size && (j + 2) <= y_size && 2 * (j + 2) <= z_size) { ------------------ | Branch (232:13): [True: 12.8k, False: 4.41k] | Branch (232:27): [True: 8.63k, False: 4.17k] | Branch (232:48): [True: 8.63k, False: 0] | Branch (232:69): [True: 0, False: 8.63k] ------------------ 233| 0| return j + 2; 234| 0| } 235| 17.2k| return j; 236| 17.2k| } 237| 17.2k| } 238| | 239| 0| return 0; 240| 18.0k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_113karatsuba_mulEPmPKmS3_mS1_: 80| 69.2k|void karatsuba_mul(word z[], const word x[], const word y[], size_t N, word workspace[]) { 81| 69.2k| if(N < KARATSUBA_MULTIPLY_THRESHOLD || N % 2 != 0) { ------------------ | Branch (81:7): [True: 51.9k, False: 17.3k] | Branch (81:43): [True: 0, False: 17.3k] ------------------ 82| 51.9k| switch(N) { 83| 0| case 6: ------------------ | Branch (83:10): [True: 0, False: 51.9k] ------------------ 84| 0| return bigint_comba_mul6(z, x, y); 85| 0| case 8: ------------------ | Branch (85:10): [True: 0, False: 51.9k] ------------------ 86| 0| return bigint_comba_mul8(z, x, y); 87| 0| case 9: ------------------ | Branch (87:10): [True: 0, False: 51.9k] ------------------ 88| 0| return bigint_comba_mul9(z, x, y); 89| 3.51k| case 16: ------------------ | Branch (89:10): [True: 3.51k, False: 48.4k] ------------------ 90| 3.51k| return bigint_comba_mul16(z, x, y); 91| 1.05k| case 24: ------------------ | Branch (91:10): [True: 1.05k, False: 50.8k] ------------------ 92| 1.05k| return bigint_comba_mul24(z, x, y); 93| 47.3k| default: ------------------ | Branch (93:10): [True: 47.3k, False: 4.56k] ------------------ 94| 47.3k| return basecase_mul(z, 2 * N, x, N, y, N); 95| 51.9k| } 96| 51.9k| } 97| | 98| 17.3k| const size_t N2 = N / 2; 99| | 100| 17.3k| const word* x0 = x; 101| 17.3k| const word* x1 = x + N2; 102| 17.3k| const word* y0 = y; 103| 17.3k| const word* y1 = y + N2; 104| 17.3k| word* z0 = z; 105| 17.3k| word* z1 = z + N; 106| | 107| 17.3k| word* ws0 = workspace; 108| 17.3k| word* ws1 = workspace + N; 109| | 110| 17.3k| zeroize_buffer(workspace, 2 * N); 111| | 112| | /* 113| | * If either of cmp0 or cmp1 is zero then z0 or z1 resp is zero here, 114| | * resulting in a no-op - z0*z1 will be equal to zero so we don't need to do 115| | * anything, zeroize_buffer above already set the correct result. 116| | * 117| | * However we ignore the result of the comparisons and always perform the 118| | * subtractions and recursively multiply to avoid the timing channel. 119| | */ 120| | 121| | // First compute (X_lo - X_hi)*(Y_hi - Y_lo) 122| 17.3k| const auto cmp0 = bigint_sub_abs(z0, x0, x1, N2, workspace); 123| 17.3k| const auto cmp1 = bigint_sub_abs(z1, y1, y0, N2, workspace); 124| 17.3k| const auto neg_mask = ~(cmp0 ^ cmp1); 125| | 126| 17.3k| karatsuba_mul(ws0, z0, z1, N2, ws1); 127| | 128| | // Compute X_lo * Y_lo 129| 17.3k| karatsuba_mul(z0, x0, y0, N2, ws1); 130| | 131| | // Compute X_hi * Y_hi 132| 17.3k| karatsuba_mul(z1, x1, y1, N2, ws1); 133| | 134| 17.3k| const word ws_carry = bigint_add3(ws1, z0, N, z1, N); 135| 17.3k| word z_carry = bigint_add2(z + N2, N, ws1, N); 136| | 137| 17.3k| z_carry += bigint_add2(z + N + N2, N2, &ws_carry, 1); 138| 17.3k| bigint_add2(z + N + N2, N2, &z_carry, 1); 139| | 140| 17.3k| zeroize_buffer(workspace + N, N2); 141| | 142| 17.3k| bigint_cnd_add(neg_mask.value(), z + N2, workspace, 2 * N - N2); 143| 17.3k| bigint_cnd_sub((~neg_mask).value(), z + N2, workspace, 2 * N - N2); 144| 17.3k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_114karatsuba_sizeEmmm: 245| 2.74k|size_t karatsuba_size(size_t z_size, size_t x_size, size_t x_sw) { 246| 2.74k| if(x_sw == x_size) { ------------------ | Branch (246:7): [True: 81, False: 2.66k] ------------------ 247| 81| if(x_sw % 2 != 0) { ------------------ | Branch (247:10): [True: 0, False: 81] ------------------ 248| 0| return 0; 249| 0| } 250| 81| return x_sw; 251| 81| } 252| | 253| 3.50k| for(size_t j = x_sw; j <= x_size; ++j) { ------------------ | Branch (253:25): [True: 3.50k, False: 0] ------------------ 254| 3.50k| if(j % 2 != 0) { ------------------ | Branch (254:10): [True: 836, False: 2.66k] ------------------ 255| 836| continue; 256| 836| } 257| | 258| 2.66k| if(2 * j > z_size) { ------------------ | Branch (258:10): [True: 836, False: 1.83k] ------------------ 259| 836| return 0; 260| 836| } 261| | 262| 1.83k| if(j % 4 == 2 && (j + 2) <= x_size && 2 * (j + 2) <= z_size) { ------------------ | Branch (262:10): [True: 446, False: 1.38k] | Branch (262:24): [True: 446, False: 0] | Branch (262:45): [True: 0, False: 446] ------------------ 263| 0| return j + 2; 264| 0| } 265| 1.83k| return j; 266| 1.83k| } 267| | 268| 0| return 0; 269| 2.66k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_113karatsuba_sqrEPmPKmmS1_: 149| 7.65k|void karatsuba_sqr(word z[], const word x[], size_t N, word workspace[]) { 150| 7.65k| if(N < KARATSUBA_SQUARE_THRESHOLD || N % 2 != 0) { ------------------ | Branch (150:7): [True: 5.73k, False: 1.91k] | Branch (150:41): [True: 0, False: 1.91k] ------------------ 151| 5.73k| switch(N) { 152| 0| case 6: ------------------ | Branch (152:10): [True: 0, False: 5.73k] ------------------ 153| 0| return bigint_comba_sqr6(z, x); 154| 0| case 8: ------------------ | Branch (154:10): [True: 0, False: 5.73k] ------------------ 155| 0| return bigint_comba_sqr8(z, x); 156| 0| case 9: ------------------ | Branch (156:10): [True: 0, False: 5.73k] ------------------ 157| 0| return bigint_comba_sqr9(z, x); 158| 3.51k| case 16: ------------------ | Branch (158:10): [True: 3.51k, False: 2.22k] ------------------ 159| 3.51k| return bigint_comba_sqr16(z, x); 160| 315| case 24: ------------------ | Branch (160:10): [True: 315, False: 5.42k] ------------------ 161| 315| return bigint_comba_sqr24(z, x); 162| 1.91k| default: ------------------ | Branch (162:10): [True: 1.91k, False: 3.82k] ------------------ 163| 1.91k| return basecase_sqr(z, 2 * N, x, N); 164| 5.73k| } 165| 5.73k| } 166| | 167| 1.91k| const size_t N2 = N / 2; 168| | 169| 1.91k| const word* x0 = x; 170| 1.91k| const word* x1 = x + N2; 171| 1.91k| word* z0 = z; 172| 1.91k| word* z1 = z + N; 173| | 174| 1.91k| word* ws0 = workspace; 175| 1.91k| word* ws1 = workspace + N; 176| | 177| 1.91k| zeroize_buffer(workspace, 2 * N); 178| | 179| | // See comment in karatsuba_mul 180| 1.91k| bigint_sub_abs(z0, x0, x1, N2, workspace); 181| 1.91k| karatsuba_sqr(ws0, z0, N2, ws1); 182| | 183| 1.91k| karatsuba_sqr(z0, x0, N2, ws1); 184| 1.91k| karatsuba_sqr(z1, x1, N2, ws1); 185| | 186| 1.91k| const word ws_carry = bigint_add3(ws1, z0, N, z1, N); 187| 1.91k| word z_carry = bigint_add2(z + N2, N, ws1, N); 188| | 189| 1.91k| z_carry += bigint_add2(z + N + N2, N2, &ws_carry, 1); 190| 1.91k| bigint_add2(z + N + N2, N2, &z_carry, 1); 191| | 192| | /* 193| | * This is only actually required if cmp (result of bigint_sub_abs) is != 0, 194| | * however if cmp==0 then ws0[0:N] == 0 and avoiding the jump hides a 195| | * timing channel. 196| | */ 197| 1.91k| bigint_sub2(z + N2, 2 * N - N2, ws0, N); 198| 1.91k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_mulILm4EEEbmmmmm: 272| 72.3k|inline bool sized_for_comba_mul(size_t x_sw, size_t x_size, size_t y_sw, size_t y_size, size_t z_size) { 273| 72.3k| return (x_sw <= SZ && x_size >= SZ && y_sw <= SZ && y_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (273:12): [True: 52.4k, False: 19.9k] | Branch (273:26): [True: 36.7k, False: 15.7k] | Branch (273:42): [True: 36.7k, False: 0] | Branch (273:56): [True: 32.3k, False: 4.37k] | Branch (273:72): [True: 27.2k, False: 5.09k] ------------------ 274| 72.3k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_mulILm6EEEbmmmmm: 272| 45.0k|inline bool sized_for_comba_mul(size_t x_sw, size_t x_size, size_t y_sw, size_t y_size, size_t z_size) { 273| 45.0k| return (x_sw <= SZ && x_size >= SZ && y_sw <= SZ && y_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (273:12): [True: 25.7k, False: 19.3k] | Branch (273:26): [True: 10.0k, False: 15.7k] | Branch (273:42): [True: 10.0k, False: 0] | Branch (273:56): [True: 5.68k, False: 4.37k] | Branch (273:72): [True: 586, False: 5.09k] ------------------ 274| 45.0k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_mulILm8EEEbmmmmm: 272| 44.5k|inline bool sized_for_comba_mul(size_t x_sw, size_t x_size, size_t y_sw, size_t y_size, size_t z_size) { 273| 44.5k| return (x_sw <= SZ && x_size >= SZ && y_sw <= SZ && y_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (273:12): [True: 25.3k, False: 19.1k] | Branch (273:26): [True: 5.02k, False: 20.3k] | Branch (273:42): [True: 5.02k, False: 0] | Branch (273:56): [True: 1.46k, False: 3.56k] | Branch (273:72): [True: 217, False: 1.24k] ------------------ 274| 44.5k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_mulILm9EEEbmmmmm: 272| 44.2k|inline bool sized_for_comba_mul(size_t x_sw, size_t x_size, size_t y_sw, size_t y_size, size_t z_size) { 273| 44.2k| return (x_sw <= SZ && x_size >= SZ && y_sw <= SZ && y_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (273:12): [True: 25.3k, False: 18.9k] | Branch (273:26): [True: 1.71k, False: 23.6k] | Branch (273:42): [True: 1.71k, False: 0] | Branch (273:56): [True: 399, False: 1.32k] | Branch (273:72): [True: 163, False: 236] ------------------ 274| 44.2k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_mulILm16EEEbmmmmm: 272| 44.1k|inline bool sized_for_comba_mul(size_t x_sw, size_t x_size, size_t y_sw, size_t y_size, size_t z_size) { 273| 44.1k| return (x_sw <= SZ && x_size >= SZ && y_sw <= SZ && y_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (273:12): [True: 25.6k, False: 18.5k] | Branch (273:26): [True: 438, False: 25.1k] | Branch (273:42): [True: 438, False: 0] | Branch (273:56): [True: 438, False: 0] | Branch (273:72): [True: 430, False: 8] ------------------ 274| 44.1k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_mulILm24EEEbmmmmm: 272| 43.6k|inline bool sized_for_comba_mul(size_t x_sw, size_t x_size, size_t y_sw, size_t y_size, size_t z_size) { 273| 43.6k| return (x_sw <= SZ && x_size >= SZ && y_sw <= SZ && y_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (273:12): [True: 25.3k, False: 18.3k] | Branch (273:26): [True: 67, False: 25.3k] | Branch (273:42): [True: 67, False: 0] | Branch (273:56): [True: 67, False: 0] | Branch (273:72): [True: 57, False: 10] ------------------ 274| 43.6k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_sqrILm4EEEbmmm: 277| 21.7k|inline bool sized_for_comba_sqr(size_t x_sw, size_t x_size, size_t z_size) { 278| 21.7k| return (x_sw <= SZ && x_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (278:12): [True: 18.9k, False: 2.76k] | Branch (278:26): [True: 11.8k, False: 7.08k] | Branch (278:42): [True: 8.53k, False: 3.36k] ------------------ 279| 21.7k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_sqrILm6EEEbmmm: 277| 13.2k|inline bool sized_for_comba_sqr(size_t x_sw, size_t x_size, size_t z_size) { 278| 13.2k| return (x_sw <= SZ && x_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (278:12): [True: 10.4k, False: 2.75k] | Branch (278:26): [True: 3.37k, False: 7.08k] | Branch (278:42): [True: 6, False: 3.36k] ------------------ 279| 13.2k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_sqrILm8EEEbmmm: 277| 13.2k|inline bool sized_for_comba_sqr(size_t x_sw, size_t x_size, size_t z_size) { 278| 13.2k| return (x_sw <= SZ && x_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (278:12): [True: 10.4k, False: 2.75k] | Branch (278:26): [True: 2.28k, False: 8.16k] | Branch (278:42): [True: 3, False: 2.28k] ------------------ 279| 13.2k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_sqrILm9EEEbmmm: 277| 13.2k|inline bool sized_for_comba_sqr(size_t x_sw, size_t x_size, size_t z_size) { 278| 13.2k| return (x_sw <= SZ && x_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (278:12): [True: 10.4k, False: 2.75k] | Branch (278:26): [True: 1.06k, False: 9.38k] | Branch (278:42): [True: 3, False: 1.06k] ------------------ 279| 13.2k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_sqrILm16EEEbmmm: 277| 13.2k|inline bool sized_for_comba_sqr(size_t x_sw, size_t x_size, size_t z_size) { 278| 13.2k| return (x_sw <= SZ && x_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (278:12): [True: 10.4k, False: 2.74k] | Branch (278:26): [True: 2, False: 10.4k] | Branch (278:42): [True: 2, False: 0] ------------------ 279| 13.2k|} mp_karat.cpp:_ZN5Botan12_GLOBAL__N_119sized_for_comba_sqrILm24EEEbmmm: 277| 13.2k|inline bool sized_for_comba_sqr(size_t x_sw, size_t x_size, size_t z_size) { 278| 13.2k| return (x_sw <= SZ && x_size >= SZ && z_size >= 2 * SZ); ------------------ | Branch (278:12): [True: 10.4k, False: 2.74k] | Branch (278:26): [True: 1, False: 10.4k] | Branch (278:42): [True: 0, False: 1] ------------------ 279| 13.2k|} _ZN5Botan25bigint_monty_redc_genericEPmPKmmS2_mmS0_: 95| 76.0k| word r[], const word z[], size_t z_size, const word p[], size_t p_size, word p_dash, word ws[]) { 96| 76.0k| BOTAN_ARG_CHECK(z_size >= 2 * p_size && p_size > 0, "Invalid sizes for bigint_monty_redc_generic"); ------------------ | | 35| 76.0k| do { \ | | 36| 76.0k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 152k| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 76.0k, False: 0] | | | Branch (37:12): [True: 76.0k, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 76.0k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 76.0k] | | ------------------ ------------------ 97| | 98| 76.0k| word3 accum; 99| | 100| 76.0k| accum.add(z[0]); 101| | 102| 76.0k| ws[0] = accum.monty_step(p[0], p_dash); 103| | 104| 1.19M| for(size_t i = 1; i != p_size; ++i) { ------------------ | Branch (104:22): [True: 1.12M, False: 76.0k] ------------------ 105| 1.12M| mul_rev_range(accum, ws, p, i); 106| 1.12M| accum.add(z[i]); 107| 1.12M| ws[i] = accum.monty_step(p[0], p_dash); 108| 1.12M| } 109| | 110| 1.19M| for(size_t i = 0; i != p_size - 1; ++i) { ------------------ | Branch (110:22): [True: 1.12M, False: 76.0k] ------------------ 111| 1.12M| mul_rev_range(accum, &ws[i + 1], &p[i], p_size - (i + 1)); 112| 1.12M| accum.add(z[p_size + i]); 113| 1.12M| ws[i] = accum.extract(); 114| 1.12M| } 115| | 116| 76.0k| accum.add(z[2 * p_size - 1]); 117| | 118| 76.0k| ws[p_size - 1] = accum.extract(); 119| | // w1 is the final part, which is not stored in the workspace 120| 76.0k| const word w1 = accum.extract(); 121| | 122| | /* 123| | * The result might need to be reduced mod p. To avoid a timing 124| | * channel, always perform the subtraction. If in the computation 125| | * of x - p a borrow is required then x was already < p. 126| | * 127| | * x starts at ws[0] and is p_size bytes long plus a possible high 128| | * digit left over in w1. 129| | * 130| | * x - p starts at z[0] and is also p_size bytes long 131| | * 132| | * If borrow was set after the subtraction, then x was already less 133| | * than p and the subtraction was not needed. In that case overwrite 134| | * z[0:p_size] with the original x in ws[0:p_size]. 135| | * 136| | * We only copy out p_size in the final step because we know 137| | * the Montgomery result is < P 138| | */ 139| | 140| 76.0k| bigint_monty_maybe_sub(p_size, r, w1, ws, p); 141| 76.0k|} _ZN5Botan16bigint_monty_mulEPmPKmS2_S2_mmS0_m: 144| 1.50M| word z[], const word x[], const word y[], const word p[], size_t p_size, word p_dash, word ws[], size_t ws_size) { 145| 1.50M| BOTAN_ARG_CHECK(ws_size >= 4 * p_size && p_size > 0, "Invalid workspace for Montgomery multiplication"); ------------------ | | 35| 1.50M| do { \ | | 36| 1.50M| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 3.00M| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 1.50M, False: 18.4E] | | | Branch (37:12): [True: 1.50M, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 1.50M| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 1.50M] | | ------------------ ------------------ 146| | 147| 1.50M|#if defined(BOTAN_HAS_MP_MULX) 148| 1.50M| if(use_mulx_monty(p_size)) { ------------------ | Branch (148:7): [True: 1.50M, False: 18.4E] ------------------ 149| 1.50M| return bigint_mulx_monty_mul(z, x, y, p, p_size, p_dash, ws); 150| 1.50M| } 151| 18.4E|#endif 152| | 153| 18.4E| word* prod = ws; 154| 18.4E| word* mul_ws = ws + 2 * p_size; 155| 18.4E| bigint_mul(prod, 2 * p_size, x, p_size, p_size, y, p_size, p_size, mul_ws, 2 * p_size); 156| 18.4E| bigint_monty_redc(z, prod, p, p_size, p_dash, mul_ws, 2 * p_size); 157| 18.4E|} _ZN5Botan16bigint_monty_sqrEPmPKmS2_mmS0_m: 159| 8.77M|void bigint_monty_sqr(word z[], const word x[], const word p[], size_t p_size, word p_dash, word ws[], size_t ws_size) { 160| 8.77M| BOTAN_ARG_CHECK(ws_size >= 4 * p_size && p_size > 0, "Invalid workspace for Montgomery squaring"); ------------------ | | 35| 8.77M| do { \ | | 36| 8.77M| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 17.5M| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 8.77M, False: 53] | | | Branch (37:12): [True: 8.77M, False: 18.4E] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 8.77M| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 8.77M] | | ------------------ ------------------ 161| | 162| 8.77M| word* prod = ws; 163| | 164| 8.77M|#if defined(BOTAN_HAS_MP_MULX) 165| 8.77M| if(use_mulx_monty(p_size)) { ------------------ | Branch (165:7): [True: 8.77M, False: 10] ------------------ 166| 8.77M| return bigint_mulx_monty_sqr(z, x, p, p_size, p_dash, ws); 167| 8.77M| } 168| 10|#endif 169| | 170| 10| word* mul_ws = ws + 2 * p_size; 171| 10| bigint_sqr(prod, 2 * p_size, x, p_size, p_size, mul_ws, 2 * p_size); 172| 10| bigint_monty_redc(z, prod, p, p_size, p_dash, mul_ws, 2 * p_size); 173| 10|} mp_monty.cpp:_ZN5Botan12_GLOBAL__N_113mul_rev_rangeERNS_5word3ImEEPKmS5_m: 22| 2.24M|BOTAN_FORCE_INLINE void mul_rev_range(word3& accum, const word ws[], const word p[], size_t bound) { 23| | /* 24| | Unrolled version of: 25| | 26| | for(size_t i = 0; i < bound; ++i) { 27| | accum.mul(ws[i], p[bound - i]); 28| | } 29| | */ 30| | 31| 2.24M| size_t lower = 0; 32| 8.66M| while(lower < bound) { ------------------ | Branch (32:10): [True: 6.42M, False: 2.24M] ------------------ 33| 6.42M| const size_t upper = bound - lower; 34| | 35| 6.42M| if(upper >= 16) { ------------------ | Branch (35:10): [True: 2.24M, False: 4.18M] ------------------ 36| 2.24M| accum.mul(ws[lower], p[upper]); 37| 2.24M| accum.mul(ws[lower + 1], p[upper - 1]); 38| 2.24M| accum.mul(ws[lower + 2], p[upper - 2]); 39| 2.24M| accum.mul(ws[lower + 3], p[upper - 3]); 40| 2.24M| accum.mul(ws[lower + 4], p[upper - 4]); 41| 2.24M| accum.mul(ws[lower + 5], p[upper - 5]); 42| 2.24M| accum.mul(ws[lower + 6], p[upper - 6]); 43| 2.24M| accum.mul(ws[lower + 7], p[upper - 7]); 44| 2.24M| accum.mul(ws[lower + 8], p[upper - 8]); 45| 2.24M| accum.mul(ws[lower + 9], p[upper - 9]); 46| 2.24M| accum.mul(ws[lower + 10], p[upper - 10]); 47| 2.24M| accum.mul(ws[lower + 11], p[upper - 11]); 48| 2.24M| accum.mul(ws[lower + 12], p[upper - 12]); 49| 2.24M| accum.mul(ws[lower + 13], p[upper - 13]); 50| 2.24M| accum.mul(ws[lower + 14], p[upper - 14]); 51| 2.24M| accum.mul(ws[lower + 15], p[upper - 15]); 52| 2.24M| lower += 16; 53| 4.18M| } else if(upper >= 8) { ------------------ | Branch (53:17): [True: 943k, False: 3.23M] ------------------ 54| 943k| accum.mul(ws[lower], p[upper]); 55| 943k| accum.mul(ws[lower + 1], p[upper - 1]); 56| 943k| accum.mul(ws[lower + 2], p[upper - 2]); 57| 943k| accum.mul(ws[lower + 3], p[upper - 3]); 58| 943k| accum.mul(ws[lower + 4], p[upper - 4]); 59| 943k| accum.mul(ws[lower + 5], p[upper - 5]); 60| 943k| accum.mul(ws[lower + 6], p[upper - 6]); 61| 943k| accum.mul(ws[lower + 7], p[upper - 7]); 62| 943k| lower += 8; 63| 3.23M| } else if(upper >= 4) { ------------------ | Branch (63:17): [True: 985k, False: 2.25M] ------------------ 64| 985k| accum.mul(ws[lower], p[upper]); 65| 985k| accum.mul(ws[lower + 1], p[upper - 1]); 66| 985k| accum.mul(ws[lower + 2], p[upper - 2]); 67| 985k| accum.mul(ws[lower + 3], p[upper - 3]); 68| 985k| lower += 4; 69| 2.25M| } else if(upper >= 2) { ------------------ | Branch (69:17): [True: 1.11M, False: 1.13M] ------------------ 70| 1.11M| accum.mul(ws[lower], p[upper]); 71| 1.11M| accum.mul(ws[lower + 1], p[upper - 1]); 72| 1.11M| lower += 2; 73| 1.13M| } else { 74| 1.13M| accum.mul(ws[lower], p[upper]); 75| 1.13M| lower += 1; 76| 1.13M| } 77| 6.42M| } 78| 2.24M|} _ZN5Botan19bigint_monty_redc_4EPmPKmS2_mS0_: 12| 128k|void bigint_monty_redc_4(word r[4], const word z[8], const word p[4], word p_dash, word ws[4]) { 13| 128k| word3 accum; 14| 128k| accum.add(z[0]); 15| 128k| ws[0] = accum.monty_step(p[0], p_dash); 16| 128k| accum.mul(ws[0], p[1]); 17| 128k| accum.add(z[1]); 18| 128k| ws[1] = accum.monty_step(p[0], p_dash); 19| 128k| accum.mul(ws[0], p[2]); 20| 128k| accum.mul(ws[1], p[1]); 21| 128k| accum.add(z[2]); 22| 128k| ws[2] = accum.monty_step(p[0], p_dash); 23| 128k| accum.mul(ws[0], p[3]); 24| 128k| accum.mul(ws[1], p[2]); 25| 128k| accum.mul(ws[2], p[1]); 26| 128k| accum.add(z[3]); 27| 128k| ws[3] = accum.monty_step(p[0], p_dash); 28| 128k| accum.mul(ws[1], p[3]); 29| 128k| accum.mul(ws[2], p[2]); 30| 128k| accum.mul(ws[3], p[1]); 31| 128k| accum.add(z[4]); 32| 128k| ws[0] = accum.extract(); 33| 128k| accum.mul(ws[2], p[3]); 34| 128k| accum.mul(ws[3], p[2]); 35| 128k| accum.add(z[5]); 36| 128k| ws[1] = accum.extract(); 37| 128k| accum.mul(ws[3], p[3]); 38| 128k| accum.add(z[6]); 39| 128k| ws[2] = accum.extract(); 40| 128k| accum.add(z[7]); 41| 128k| ws[3] = accum.extract(); 42| 128k| const word w1 = accum.extract(); 43| 128k| bigint_monty_maybe_sub<4>(r, w1, ws, p); 44| 128k|} _ZN5Botan19bigint_monty_redc_6EPmPKmS2_mS0_: 46| 213k|void bigint_monty_redc_6(word r[6], const word z[12], const word p[6], word p_dash, word ws[6]) { 47| 213k| word3 accum; 48| 213k| accum.add(z[0]); 49| 213k| ws[0] = accum.monty_step(p[0], p_dash); 50| 213k| accum.mul(ws[0], p[1]); 51| 213k| accum.add(z[1]); 52| 213k| ws[1] = accum.monty_step(p[0], p_dash); 53| 213k| accum.mul(ws[0], p[2]); 54| 213k| accum.mul(ws[1], p[1]); 55| 213k| accum.add(z[2]); 56| 213k| ws[2] = accum.monty_step(p[0], p_dash); 57| 213k| accum.mul(ws[0], p[3]); 58| 213k| accum.mul(ws[1], p[2]); 59| 213k| accum.mul(ws[2], p[1]); 60| 213k| accum.add(z[3]); 61| 213k| ws[3] = accum.monty_step(p[0], p_dash); 62| 213k| accum.mul(ws[0], p[4]); 63| 213k| accum.mul(ws[1], p[3]); 64| 213k| accum.mul(ws[2], p[2]); 65| 213k| accum.mul(ws[3], p[1]); 66| 213k| accum.add(z[4]); 67| 213k| ws[4] = accum.monty_step(p[0], p_dash); 68| 213k| accum.mul(ws[0], p[5]); 69| 213k| accum.mul(ws[1], p[4]); 70| 213k| accum.mul(ws[2], p[3]); 71| 213k| accum.mul(ws[3], p[2]); 72| 213k| accum.mul(ws[4], p[1]); 73| 213k| accum.add(z[5]); 74| 213k| ws[5] = accum.monty_step(p[0], p_dash); 75| 213k| accum.mul(ws[1], p[5]); 76| 213k| accum.mul(ws[2], p[4]); 77| 213k| accum.mul(ws[3], p[3]); 78| 213k| accum.mul(ws[4], p[2]); 79| 213k| accum.mul(ws[5], p[1]); 80| 213k| accum.add(z[6]); 81| 213k| ws[0] = accum.extract(); 82| 213k| accum.mul(ws[2], p[5]); 83| 213k| accum.mul(ws[3], p[4]); 84| 213k| accum.mul(ws[4], p[3]); 85| 213k| accum.mul(ws[5], p[2]); 86| 213k| accum.add(z[7]); 87| 213k| ws[1] = accum.extract(); 88| 213k| accum.mul(ws[3], p[5]); 89| 213k| accum.mul(ws[4], p[4]); 90| 213k| accum.mul(ws[5], p[3]); 91| 213k| accum.add(z[8]); 92| 213k| ws[2] = accum.extract(); 93| 213k| accum.mul(ws[4], p[5]); 94| 213k| accum.mul(ws[5], p[4]); 95| 213k| accum.add(z[9]); 96| 213k| ws[3] = accum.extract(); 97| 213k| accum.mul(ws[5], p[5]); 98| 213k| accum.add(z[10]); 99| 213k| ws[4] = accum.extract(); 100| 213k| accum.add(z[11]); 101| 213k| ws[5] = accum.extract(); 102| 213k| const word w1 = accum.extract(); 103| 213k| bigint_monty_maybe_sub<6>(r, w1, ws, p); 104| 213k|} _ZN5Botan19bigint_monty_redc_8EPmPKmS2_mS0_: 106| 216k|void bigint_monty_redc_8(word r[8], const word z[16], const word p[8], word p_dash, word ws[8]) { 107| 216k| word3 accum; 108| 216k| accum.add(z[0]); 109| 216k| ws[0] = accum.monty_step(p[0], p_dash); 110| 216k| accum.mul(ws[0], p[1]); 111| 216k| accum.add(z[1]); 112| 216k| ws[1] = accum.monty_step(p[0], p_dash); 113| 216k| accum.mul(ws[0], p[2]); 114| 216k| accum.mul(ws[1], p[1]); 115| 216k| accum.add(z[2]); 116| 216k| ws[2] = accum.monty_step(p[0], p_dash); 117| 216k| accum.mul(ws[0], p[3]); 118| 216k| accum.mul(ws[1], p[2]); 119| 216k| accum.mul(ws[2], p[1]); 120| 216k| accum.add(z[3]); 121| 216k| ws[3] = accum.monty_step(p[0], p_dash); 122| 216k| accum.mul(ws[0], p[4]); 123| 216k| accum.mul(ws[1], p[3]); 124| 216k| accum.mul(ws[2], p[2]); 125| 216k| accum.mul(ws[3], p[1]); 126| 216k| accum.add(z[4]); 127| 216k| ws[4] = accum.monty_step(p[0], p_dash); 128| 216k| accum.mul(ws[0], p[5]); 129| 216k| accum.mul(ws[1], p[4]); 130| 216k| accum.mul(ws[2], p[3]); 131| 216k| accum.mul(ws[3], p[2]); 132| 216k| accum.mul(ws[4], p[1]); 133| 216k| accum.add(z[5]); 134| 216k| ws[5] = accum.monty_step(p[0], p_dash); 135| 216k| accum.mul(ws[0], p[6]); 136| 216k| accum.mul(ws[1], p[5]); 137| 216k| accum.mul(ws[2], p[4]); 138| 216k| accum.mul(ws[3], p[3]); 139| 216k| accum.mul(ws[4], p[2]); 140| 216k| accum.mul(ws[5], p[1]); 141| 216k| accum.add(z[6]); 142| 216k| ws[6] = accum.monty_step(p[0], p_dash); 143| 216k| accum.mul(ws[0], p[7]); 144| 216k| accum.mul(ws[1], p[6]); 145| 216k| accum.mul(ws[2], p[5]); 146| 216k| accum.mul(ws[3], p[4]); 147| 216k| accum.mul(ws[4], p[3]); 148| 216k| accum.mul(ws[5], p[2]); 149| 216k| accum.mul(ws[6], p[1]); 150| 216k| accum.add(z[7]); 151| 216k| ws[7] = accum.monty_step(p[0], p_dash); 152| 216k| accum.mul(ws[1], p[7]); 153| 216k| accum.mul(ws[2], p[6]); 154| 216k| accum.mul(ws[3], p[5]); 155| 216k| accum.mul(ws[4], p[4]); 156| 216k| accum.mul(ws[5], p[3]); 157| 216k| accum.mul(ws[6], p[2]); 158| 216k| accum.mul(ws[7], p[1]); 159| 216k| accum.add(z[8]); 160| 216k| ws[0] = accum.extract(); 161| 216k| accum.mul(ws[2], p[7]); 162| 216k| accum.mul(ws[3], p[6]); 163| 216k| accum.mul(ws[4], p[5]); 164| 216k| accum.mul(ws[5], p[4]); 165| 216k| accum.mul(ws[6], p[3]); 166| 216k| accum.mul(ws[7], p[2]); 167| 216k| accum.add(z[9]); 168| 216k| ws[1] = accum.extract(); 169| 216k| accum.mul(ws[3], p[7]); 170| 216k| accum.mul(ws[4], p[6]); 171| 216k| accum.mul(ws[5], p[5]); 172| 216k| accum.mul(ws[6], p[4]); 173| 216k| accum.mul(ws[7], p[3]); 174| 216k| accum.add(z[10]); 175| 216k| ws[2] = accum.extract(); 176| 216k| accum.mul(ws[4], p[7]); 177| 216k| accum.mul(ws[5], p[6]); 178| 216k| accum.mul(ws[6], p[5]); 179| 216k| accum.mul(ws[7], p[4]); 180| 216k| accum.add(z[11]); 181| 216k| ws[3] = accum.extract(); 182| 216k| accum.mul(ws[5], p[7]); 183| 216k| accum.mul(ws[6], p[6]); 184| 216k| accum.mul(ws[7], p[5]); 185| 216k| accum.add(z[12]); 186| 216k| ws[4] = accum.extract(); 187| 216k| accum.mul(ws[6], p[7]); 188| 216k| accum.mul(ws[7], p[6]); 189| 216k| accum.add(z[13]); 190| 216k| ws[5] = accum.extract(); 191| 216k| accum.mul(ws[7], p[7]); 192| 216k| accum.add(z[14]); 193| 216k| ws[6] = accum.extract(); 194| 216k| accum.add(z[15]); 195| 216k| ws[7] = accum.extract(); 196| 216k| const word w1 = accum.extract(); 197| 216k| bigint_monty_maybe_sub<8>(r, w1, ws, p); 198| 216k|} _ZN5Botan20bigint_monty_redc_32EPmPKmS2_mS0_: 1350| 11.1k|void bigint_monty_redc_32(word r[32], const word z[64], const word p[32], word p_dash, word ws[32]) { 1351| 11.1k| word3 accum; 1352| 11.1k| accum.add(z[0]); 1353| 11.1k| ws[0] = accum.monty_step(p[0], p_dash); 1354| 11.1k| accum.mul(ws[0], p[1]); 1355| 11.1k| accum.add(z[1]); 1356| 11.1k| ws[1] = accum.monty_step(p[0], p_dash); 1357| 11.1k| accum.mul(ws[0], p[2]); 1358| 11.1k| accum.mul(ws[1], p[1]); 1359| 11.1k| accum.add(z[2]); 1360| 11.1k| ws[2] = accum.monty_step(p[0], p_dash); 1361| 11.1k| accum.mul(ws[0], p[3]); 1362| 11.1k| accum.mul(ws[1], p[2]); 1363| 11.1k| accum.mul(ws[2], p[1]); 1364| 11.1k| accum.add(z[3]); 1365| 11.1k| ws[3] = accum.monty_step(p[0], p_dash); 1366| 11.1k| accum.mul(ws[0], p[4]); 1367| 11.1k| accum.mul(ws[1], p[3]); 1368| 11.1k| accum.mul(ws[2], p[2]); 1369| 11.1k| accum.mul(ws[3], p[1]); 1370| 11.1k| accum.add(z[4]); 1371| 11.1k| ws[4] = accum.monty_step(p[0], p_dash); 1372| 11.1k| accum.mul(ws[0], p[5]); 1373| 11.1k| accum.mul(ws[1], p[4]); 1374| 11.1k| accum.mul(ws[2], p[3]); 1375| 11.1k| accum.mul(ws[3], p[2]); 1376| 11.1k| accum.mul(ws[4], p[1]); 1377| 11.1k| accum.add(z[5]); 1378| 11.1k| ws[5] = accum.monty_step(p[0], p_dash); 1379| 11.1k| accum.mul(ws[0], p[6]); 1380| 11.1k| accum.mul(ws[1], p[5]); 1381| 11.1k| accum.mul(ws[2], p[4]); 1382| 11.1k| accum.mul(ws[3], p[3]); 1383| 11.1k| accum.mul(ws[4], p[2]); 1384| 11.1k| accum.mul(ws[5], p[1]); 1385| 11.1k| accum.add(z[6]); 1386| 11.1k| ws[6] = accum.monty_step(p[0], p_dash); 1387| 11.1k| accum.mul(ws[0], p[7]); 1388| 11.1k| accum.mul(ws[1], p[6]); 1389| 11.1k| accum.mul(ws[2], p[5]); 1390| 11.1k| accum.mul(ws[3], p[4]); 1391| 11.1k| accum.mul(ws[4], p[3]); 1392| 11.1k| accum.mul(ws[5], p[2]); 1393| 11.1k| accum.mul(ws[6], p[1]); 1394| 11.1k| accum.add(z[7]); 1395| 11.1k| ws[7] = accum.monty_step(p[0], p_dash); 1396| 11.1k| accum.mul(ws[0], p[8]); 1397| 11.1k| accum.mul(ws[1], p[7]); 1398| 11.1k| accum.mul(ws[2], p[6]); 1399| 11.1k| accum.mul(ws[3], p[5]); 1400| 11.1k| accum.mul(ws[4], p[4]); 1401| 11.1k| accum.mul(ws[5], p[3]); 1402| 11.1k| accum.mul(ws[6], p[2]); 1403| 11.1k| accum.mul(ws[7], p[1]); 1404| 11.1k| accum.add(z[8]); 1405| 11.1k| ws[8] = accum.monty_step(p[0], p_dash); 1406| 11.1k| accum.mul(ws[0], p[9]); 1407| 11.1k| accum.mul(ws[1], p[8]); 1408| 11.1k| accum.mul(ws[2], p[7]); 1409| 11.1k| accum.mul(ws[3], p[6]); 1410| 11.1k| accum.mul(ws[4], p[5]); 1411| 11.1k| accum.mul(ws[5], p[4]); 1412| 11.1k| accum.mul(ws[6], p[3]); 1413| 11.1k| accum.mul(ws[7], p[2]); 1414| 11.1k| accum.mul(ws[8], p[1]); 1415| 11.1k| accum.add(z[9]); 1416| 11.1k| ws[9] = accum.monty_step(p[0], p_dash); 1417| 11.1k| accum.mul(ws[0], p[10]); 1418| 11.1k| accum.mul(ws[1], p[9]); 1419| 11.1k| accum.mul(ws[2], p[8]); 1420| 11.1k| accum.mul(ws[3], p[7]); 1421| 11.1k| accum.mul(ws[4], p[6]); 1422| 11.1k| accum.mul(ws[5], p[5]); 1423| 11.1k| accum.mul(ws[6], p[4]); 1424| 11.1k| accum.mul(ws[7], p[3]); 1425| 11.1k| accum.mul(ws[8], p[2]); 1426| 11.1k| accum.mul(ws[9], p[1]); 1427| 11.1k| accum.add(z[10]); 1428| 11.1k| ws[10] = accum.monty_step(p[0], p_dash); 1429| 11.1k| accum.mul(ws[0], p[11]); 1430| 11.1k| accum.mul(ws[1], p[10]); 1431| 11.1k| accum.mul(ws[2], p[9]); 1432| 11.1k| accum.mul(ws[3], p[8]); 1433| 11.1k| accum.mul(ws[4], p[7]); 1434| 11.1k| accum.mul(ws[5], p[6]); 1435| 11.1k| accum.mul(ws[6], p[5]); 1436| 11.1k| accum.mul(ws[7], p[4]); 1437| 11.1k| accum.mul(ws[8], p[3]); 1438| 11.1k| accum.mul(ws[9], p[2]); 1439| 11.1k| accum.mul(ws[10], p[1]); 1440| 11.1k| accum.add(z[11]); 1441| 11.1k| ws[11] = accum.monty_step(p[0], p_dash); 1442| 11.1k| accum.mul(ws[0], p[12]); 1443| 11.1k| accum.mul(ws[1], p[11]); 1444| 11.1k| accum.mul(ws[2], p[10]); 1445| 11.1k| accum.mul(ws[3], p[9]); 1446| 11.1k| accum.mul(ws[4], p[8]); 1447| 11.1k| accum.mul(ws[5], p[7]); 1448| 11.1k| accum.mul(ws[6], p[6]); 1449| 11.1k| accum.mul(ws[7], p[5]); 1450| 11.1k| accum.mul(ws[8], p[4]); 1451| 11.1k| accum.mul(ws[9], p[3]); 1452| 11.1k| accum.mul(ws[10], p[2]); 1453| 11.1k| accum.mul(ws[11], p[1]); 1454| 11.1k| accum.add(z[12]); 1455| 11.1k| ws[12] = accum.monty_step(p[0], p_dash); 1456| 11.1k| accum.mul(ws[0], p[13]); 1457| 11.1k| accum.mul(ws[1], p[12]); 1458| 11.1k| accum.mul(ws[2], p[11]); 1459| 11.1k| accum.mul(ws[3], p[10]); 1460| 11.1k| accum.mul(ws[4], p[9]); 1461| 11.1k| accum.mul(ws[5], p[8]); 1462| 11.1k| accum.mul(ws[6], p[7]); 1463| 11.1k| accum.mul(ws[7], p[6]); 1464| 11.1k| accum.mul(ws[8], p[5]); 1465| 11.1k| accum.mul(ws[9], p[4]); 1466| 11.1k| accum.mul(ws[10], p[3]); 1467| 11.1k| accum.mul(ws[11], p[2]); 1468| 11.1k| accum.mul(ws[12], p[1]); 1469| 11.1k| accum.add(z[13]); 1470| 11.1k| ws[13] = accum.monty_step(p[0], p_dash); 1471| 11.1k| accum.mul(ws[0], p[14]); 1472| 11.1k| accum.mul(ws[1], p[13]); 1473| 11.1k| accum.mul(ws[2], p[12]); 1474| 11.1k| accum.mul(ws[3], p[11]); 1475| 11.1k| accum.mul(ws[4], p[10]); 1476| 11.1k| accum.mul(ws[5], p[9]); 1477| 11.1k| accum.mul(ws[6], p[8]); 1478| 11.1k| accum.mul(ws[7], p[7]); 1479| 11.1k| accum.mul(ws[8], p[6]); 1480| 11.1k| accum.mul(ws[9], p[5]); 1481| 11.1k| accum.mul(ws[10], p[4]); 1482| 11.1k| accum.mul(ws[11], p[3]); 1483| 11.1k| accum.mul(ws[12], p[2]); 1484| 11.1k| accum.mul(ws[13], p[1]); 1485| 11.1k| accum.add(z[14]); 1486| 11.1k| ws[14] = accum.monty_step(p[0], p_dash); 1487| 11.1k| accum.mul(ws[0], p[15]); 1488| 11.1k| accum.mul(ws[1], p[14]); 1489| 11.1k| accum.mul(ws[2], p[13]); 1490| 11.1k| accum.mul(ws[3], p[12]); 1491| 11.1k| accum.mul(ws[4], p[11]); 1492| 11.1k| accum.mul(ws[5], p[10]); 1493| 11.1k| accum.mul(ws[6], p[9]); 1494| 11.1k| accum.mul(ws[7], p[8]); 1495| 11.1k| accum.mul(ws[8], p[7]); 1496| 11.1k| accum.mul(ws[9], p[6]); 1497| 11.1k| accum.mul(ws[10], p[5]); 1498| 11.1k| accum.mul(ws[11], p[4]); 1499| 11.1k| accum.mul(ws[12], p[3]); 1500| 11.1k| accum.mul(ws[13], p[2]); 1501| 11.1k| accum.mul(ws[14], p[1]); 1502| 11.1k| accum.add(z[15]); 1503| 11.1k| ws[15] = accum.monty_step(p[0], p_dash); 1504| 11.1k| accum.mul(ws[0], p[16]); 1505| 11.1k| accum.mul(ws[1], p[15]); 1506| 11.1k| accum.mul(ws[2], p[14]); 1507| 11.1k| accum.mul(ws[3], p[13]); 1508| 11.1k| accum.mul(ws[4], p[12]); 1509| 11.1k| accum.mul(ws[5], p[11]); 1510| 11.1k| accum.mul(ws[6], p[10]); 1511| 11.1k| accum.mul(ws[7], p[9]); 1512| 11.1k| accum.mul(ws[8], p[8]); 1513| 11.1k| accum.mul(ws[9], p[7]); 1514| 11.1k| accum.mul(ws[10], p[6]); 1515| 11.1k| accum.mul(ws[11], p[5]); 1516| 11.1k| accum.mul(ws[12], p[4]); 1517| 11.1k| accum.mul(ws[13], p[3]); 1518| 11.1k| accum.mul(ws[14], p[2]); 1519| 11.1k| accum.mul(ws[15], p[1]); 1520| 11.1k| accum.add(z[16]); 1521| 11.1k| ws[16] = accum.monty_step(p[0], p_dash); 1522| 11.1k| accum.mul(ws[0], p[17]); 1523| 11.1k| accum.mul(ws[1], p[16]); 1524| 11.1k| accum.mul(ws[2], p[15]); 1525| 11.1k| accum.mul(ws[3], p[14]); 1526| 11.1k| accum.mul(ws[4], p[13]); 1527| 11.1k| accum.mul(ws[5], p[12]); 1528| 11.1k| accum.mul(ws[6], p[11]); 1529| 11.1k| accum.mul(ws[7], p[10]); 1530| 11.1k| accum.mul(ws[8], p[9]); 1531| 11.1k| accum.mul(ws[9], p[8]); 1532| 11.1k| accum.mul(ws[10], p[7]); 1533| 11.1k| accum.mul(ws[11], p[6]); 1534| 11.1k| accum.mul(ws[12], p[5]); 1535| 11.1k| accum.mul(ws[13], p[4]); 1536| 11.1k| accum.mul(ws[14], p[3]); 1537| 11.1k| accum.mul(ws[15], p[2]); 1538| 11.1k| accum.mul(ws[16], p[1]); 1539| 11.1k| accum.add(z[17]); 1540| 11.1k| ws[17] = accum.monty_step(p[0], p_dash); 1541| 11.1k| accum.mul(ws[0], p[18]); 1542| 11.1k| accum.mul(ws[1], p[17]); 1543| 11.1k| accum.mul(ws[2], p[16]); 1544| 11.1k| accum.mul(ws[3], p[15]); 1545| 11.1k| accum.mul(ws[4], p[14]); 1546| 11.1k| accum.mul(ws[5], p[13]); 1547| 11.1k| accum.mul(ws[6], p[12]); 1548| 11.1k| accum.mul(ws[7], p[11]); 1549| 11.1k| accum.mul(ws[8], p[10]); 1550| 11.1k| accum.mul(ws[9], p[9]); 1551| 11.1k| accum.mul(ws[10], p[8]); 1552| 11.1k| accum.mul(ws[11], p[7]); 1553| 11.1k| accum.mul(ws[12], p[6]); 1554| 11.1k| accum.mul(ws[13], p[5]); 1555| 11.1k| accum.mul(ws[14], p[4]); 1556| 11.1k| accum.mul(ws[15], p[3]); 1557| 11.1k| accum.mul(ws[16], p[2]); 1558| 11.1k| accum.mul(ws[17], p[1]); 1559| 11.1k| accum.add(z[18]); 1560| 11.1k| ws[18] = accum.monty_step(p[0], p_dash); 1561| 11.1k| accum.mul(ws[0], p[19]); 1562| 11.1k| accum.mul(ws[1], p[18]); 1563| 11.1k| accum.mul(ws[2], p[17]); 1564| 11.1k| accum.mul(ws[3], p[16]); 1565| 11.1k| accum.mul(ws[4], p[15]); 1566| 11.1k| accum.mul(ws[5], p[14]); 1567| 11.1k| accum.mul(ws[6], p[13]); 1568| 11.1k| accum.mul(ws[7], p[12]); 1569| 11.1k| accum.mul(ws[8], p[11]); 1570| 11.1k| accum.mul(ws[9], p[10]); 1571| 11.1k| accum.mul(ws[10], p[9]); 1572| 11.1k| accum.mul(ws[11], p[8]); 1573| 11.1k| accum.mul(ws[12], p[7]); 1574| 11.1k| accum.mul(ws[13], p[6]); 1575| 11.1k| accum.mul(ws[14], p[5]); 1576| 11.1k| accum.mul(ws[15], p[4]); 1577| 11.1k| accum.mul(ws[16], p[3]); 1578| 11.1k| accum.mul(ws[17], p[2]); 1579| 11.1k| accum.mul(ws[18], p[1]); 1580| 11.1k| accum.add(z[19]); 1581| 11.1k| ws[19] = accum.monty_step(p[0], p_dash); 1582| 11.1k| accum.mul(ws[0], p[20]); 1583| 11.1k| accum.mul(ws[1], p[19]); 1584| 11.1k| accum.mul(ws[2], p[18]); 1585| 11.1k| accum.mul(ws[3], p[17]); 1586| 11.1k| accum.mul(ws[4], p[16]); 1587| 11.1k| accum.mul(ws[5], p[15]); 1588| 11.1k| accum.mul(ws[6], p[14]); 1589| 11.1k| accum.mul(ws[7], p[13]); 1590| 11.1k| accum.mul(ws[8], p[12]); 1591| 11.1k| accum.mul(ws[9], p[11]); 1592| 11.1k| accum.mul(ws[10], p[10]); 1593| 11.1k| accum.mul(ws[11], p[9]); 1594| 11.1k| accum.mul(ws[12], p[8]); 1595| 11.1k| accum.mul(ws[13], p[7]); 1596| 11.1k| accum.mul(ws[14], p[6]); 1597| 11.1k| accum.mul(ws[15], p[5]); 1598| 11.1k| accum.mul(ws[16], p[4]); 1599| 11.1k| accum.mul(ws[17], p[3]); 1600| 11.1k| accum.mul(ws[18], p[2]); 1601| 11.1k| accum.mul(ws[19], p[1]); 1602| 11.1k| accum.add(z[20]); 1603| 11.1k| ws[20] = accum.monty_step(p[0], p_dash); 1604| 11.1k| accum.mul(ws[0], p[21]); 1605| 11.1k| accum.mul(ws[1], p[20]); 1606| 11.1k| accum.mul(ws[2], p[19]); 1607| 11.1k| accum.mul(ws[3], p[18]); 1608| 11.1k| accum.mul(ws[4], p[17]); 1609| 11.1k| accum.mul(ws[5], p[16]); 1610| 11.1k| accum.mul(ws[6], p[15]); 1611| 11.1k| accum.mul(ws[7], p[14]); 1612| 11.1k| accum.mul(ws[8], p[13]); 1613| 11.1k| accum.mul(ws[9], p[12]); 1614| 11.1k| accum.mul(ws[10], p[11]); 1615| 11.1k| accum.mul(ws[11], p[10]); 1616| 11.1k| accum.mul(ws[12], p[9]); 1617| 11.1k| accum.mul(ws[13], p[8]); 1618| 11.1k| accum.mul(ws[14], p[7]); 1619| 11.1k| accum.mul(ws[15], p[6]); 1620| 11.1k| accum.mul(ws[16], p[5]); 1621| 11.1k| accum.mul(ws[17], p[4]); 1622| 11.1k| accum.mul(ws[18], p[3]); 1623| 11.1k| accum.mul(ws[19], p[2]); 1624| 11.1k| accum.mul(ws[20], p[1]); 1625| 11.1k| accum.add(z[21]); 1626| 11.1k| ws[21] = accum.monty_step(p[0], p_dash); 1627| 11.1k| accum.mul(ws[0], p[22]); 1628| 11.1k| accum.mul(ws[1], p[21]); 1629| 11.1k| accum.mul(ws[2], p[20]); 1630| 11.1k| accum.mul(ws[3], p[19]); 1631| 11.1k| accum.mul(ws[4], p[18]); 1632| 11.1k| accum.mul(ws[5], p[17]); 1633| 11.1k| accum.mul(ws[6], p[16]); 1634| 11.1k| accum.mul(ws[7], p[15]); 1635| 11.1k| accum.mul(ws[8], p[14]); 1636| 11.1k| accum.mul(ws[9], p[13]); 1637| 11.1k| accum.mul(ws[10], p[12]); 1638| 11.1k| accum.mul(ws[11], p[11]); 1639| 11.1k| accum.mul(ws[12], p[10]); 1640| 11.1k| accum.mul(ws[13], p[9]); 1641| 11.1k| accum.mul(ws[14], p[8]); 1642| 11.1k| accum.mul(ws[15], p[7]); 1643| 11.1k| accum.mul(ws[16], p[6]); 1644| 11.1k| accum.mul(ws[17], p[5]); 1645| 11.1k| accum.mul(ws[18], p[4]); 1646| 11.1k| accum.mul(ws[19], p[3]); 1647| 11.1k| accum.mul(ws[20], p[2]); 1648| 11.1k| accum.mul(ws[21], p[1]); 1649| 11.1k| accum.add(z[22]); 1650| 11.1k| ws[22] = accum.monty_step(p[0], p_dash); 1651| 11.1k| accum.mul(ws[0], p[23]); 1652| 11.1k| accum.mul(ws[1], p[22]); 1653| 11.1k| accum.mul(ws[2], p[21]); 1654| 11.1k| accum.mul(ws[3], p[20]); 1655| 11.1k| accum.mul(ws[4], p[19]); 1656| 11.1k| accum.mul(ws[5], p[18]); 1657| 11.1k| accum.mul(ws[6], p[17]); 1658| 11.1k| accum.mul(ws[7], p[16]); 1659| 11.1k| accum.mul(ws[8], p[15]); 1660| 11.1k| accum.mul(ws[9], p[14]); 1661| 11.1k| accum.mul(ws[10], p[13]); 1662| 11.1k| accum.mul(ws[11], p[12]); 1663| 11.1k| accum.mul(ws[12], p[11]); 1664| 11.1k| accum.mul(ws[13], p[10]); 1665| 11.1k| accum.mul(ws[14], p[9]); 1666| 11.1k| accum.mul(ws[15], p[8]); 1667| 11.1k| accum.mul(ws[16], p[7]); 1668| 11.1k| accum.mul(ws[17], p[6]); 1669| 11.1k| accum.mul(ws[18], p[5]); 1670| 11.1k| accum.mul(ws[19], p[4]); 1671| 11.1k| accum.mul(ws[20], p[3]); 1672| 11.1k| accum.mul(ws[21], p[2]); 1673| 11.1k| accum.mul(ws[22], p[1]); 1674| 11.1k| accum.add(z[23]); 1675| 11.1k| ws[23] = accum.monty_step(p[0], p_dash); 1676| 11.1k| accum.mul(ws[0], p[24]); 1677| 11.1k| accum.mul(ws[1], p[23]); 1678| 11.1k| accum.mul(ws[2], p[22]); 1679| 11.1k| accum.mul(ws[3], p[21]); 1680| 11.1k| accum.mul(ws[4], p[20]); 1681| 11.1k| accum.mul(ws[5], p[19]); 1682| 11.1k| accum.mul(ws[6], p[18]); 1683| 11.1k| accum.mul(ws[7], p[17]); 1684| 11.1k| accum.mul(ws[8], p[16]); 1685| 11.1k| accum.mul(ws[9], p[15]); 1686| 11.1k| accum.mul(ws[10], p[14]); 1687| 11.1k| accum.mul(ws[11], p[13]); 1688| 11.1k| accum.mul(ws[12], p[12]); 1689| 11.1k| accum.mul(ws[13], p[11]); 1690| 11.1k| accum.mul(ws[14], p[10]); 1691| 11.1k| accum.mul(ws[15], p[9]); 1692| 11.1k| accum.mul(ws[16], p[8]); 1693| 11.1k| accum.mul(ws[17], p[7]); 1694| 11.1k| accum.mul(ws[18], p[6]); 1695| 11.1k| accum.mul(ws[19], p[5]); 1696| 11.1k| accum.mul(ws[20], p[4]); 1697| 11.1k| accum.mul(ws[21], p[3]); 1698| 11.1k| accum.mul(ws[22], p[2]); 1699| 11.1k| accum.mul(ws[23], p[1]); 1700| 11.1k| accum.add(z[24]); 1701| 11.1k| ws[24] = accum.monty_step(p[0], p_dash); 1702| 11.1k| accum.mul(ws[0], p[25]); 1703| 11.1k| accum.mul(ws[1], p[24]); 1704| 11.1k| accum.mul(ws[2], p[23]); 1705| 11.1k| accum.mul(ws[3], p[22]); 1706| 11.1k| accum.mul(ws[4], p[21]); 1707| 11.1k| accum.mul(ws[5], p[20]); 1708| 11.1k| accum.mul(ws[6], p[19]); 1709| 11.1k| accum.mul(ws[7], p[18]); 1710| 11.1k| accum.mul(ws[8], p[17]); 1711| 11.1k| accum.mul(ws[9], p[16]); 1712| 11.1k| accum.mul(ws[10], p[15]); 1713| 11.1k| accum.mul(ws[11], p[14]); 1714| 11.1k| accum.mul(ws[12], p[13]); 1715| 11.1k| accum.mul(ws[13], p[12]); 1716| 11.1k| accum.mul(ws[14], p[11]); 1717| 11.1k| accum.mul(ws[15], p[10]); 1718| 11.1k| accum.mul(ws[16], p[9]); 1719| 11.1k| accum.mul(ws[17], p[8]); 1720| 11.1k| accum.mul(ws[18], p[7]); 1721| 11.1k| accum.mul(ws[19], p[6]); 1722| 11.1k| accum.mul(ws[20], p[5]); 1723| 11.1k| accum.mul(ws[21], p[4]); 1724| 11.1k| accum.mul(ws[22], p[3]); 1725| 11.1k| accum.mul(ws[23], p[2]); 1726| 11.1k| accum.mul(ws[24], p[1]); 1727| 11.1k| accum.add(z[25]); 1728| 11.1k| ws[25] = accum.monty_step(p[0], p_dash); 1729| 11.1k| accum.mul(ws[0], p[26]); 1730| 11.1k| accum.mul(ws[1], p[25]); 1731| 11.1k| accum.mul(ws[2], p[24]); 1732| 11.1k| accum.mul(ws[3], p[23]); 1733| 11.1k| accum.mul(ws[4], p[22]); 1734| 11.1k| accum.mul(ws[5], p[21]); 1735| 11.1k| accum.mul(ws[6], p[20]); 1736| 11.1k| accum.mul(ws[7], p[19]); 1737| 11.1k| accum.mul(ws[8], p[18]); 1738| 11.1k| accum.mul(ws[9], p[17]); 1739| 11.1k| accum.mul(ws[10], p[16]); 1740| 11.1k| accum.mul(ws[11], p[15]); 1741| 11.1k| accum.mul(ws[12], p[14]); 1742| 11.1k| accum.mul(ws[13], p[13]); 1743| 11.1k| accum.mul(ws[14], p[12]); 1744| 11.1k| accum.mul(ws[15], p[11]); 1745| 11.1k| accum.mul(ws[16], p[10]); 1746| 11.1k| accum.mul(ws[17], p[9]); 1747| 11.1k| accum.mul(ws[18], p[8]); 1748| 11.1k| accum.mul(ws[19], p[7]); 1749| 11.1k| accum.mul(ws[20], p[6]); 1750| 11.1k| accum.mul(ws[21], p[5]); 1751| 11.1k| accum.mul(ws[22], p[4]); 1752| 11.1k| accum.mul(ws[23], p[3]); 1753| 11.1k| accum.mul(ws[24], p[2]); 1754| 11.1k| accum.mul(ws[25], p[1]); 1755| 11.1k| accum.add(z[26]); 1756| 11.1k| ws[26] = accum.monty_step(p[0], p_dash); 1757| 11.1k| accum.mul(ws[0], p[27]); 1758| 11.1k| accum.mul(ws[1], p[26]); 1759| 11.1k| accum.mul(ws[2], p[25]); 1760| 11.1k| accum.mul(ws[3], p[24]); 1761| 11.1k| accum.mul(ws[4], p[23]); 1762| 11.1k| accum.mul(ws[5], p[22]); 1763| 11.1k| accum.mul(ws[6], p[21]); 1764| 11.1k| accum.mul(ws[7], p[20]); 1765| 11.1k| accum.mul(ws[8], p[19]); 1766| 11.1k| accum.mul(ws[9], p[18]); 1767| 11.1k| accum.mul(ws[10], p[17]); 1768| 11.1k| accum.mul(ws[11], p[16]); 1769| 11.1k| accum.mul(ws[12], p[15]); 1770| 11.1k| accum.mul(ws[13], p[14]); 1771| 11.1k| accum.mul(ws[14], p[13]); 1772| 11.1k| accum.mul(ws[15], p[12]); 1773| 11.1k| accum.mul(ws[16], p[11]); 1774| 11.1k| accum.mul(ws[17], p[10]); 1775| 11.1k| accum.mul(ws[18], p[9]); 1776| 11.1k| accum.mul(ws[19], p[8]); 1777| 11.1k| accum.mul(ws[20], p[7]); 1778| 11.1k| accum.mul(ws[21], p[6]); 1779| 11.1k| accum.mul(ws[22], p[5]); 1780| 11.1k| accum.mul(ws[23], p[4]); 1781| 11.1k| accum.mul(ws[24], p[3]); 1782| 11.1k| accum.mul(ws[25], p[2]); 1783| 11.1k| accum.mul(ws[26], p[1]); 1784| 11.1k| accum.add(z[27]); 1785| 11.1k| ws[27] = accum.monty_step(p[0], p_dash); 1786| 11.1k| accum.mul(ws[0], p[28]); 1787| 11.1k| accum.mul(ws[1], p[27]); 1788| 11.1k| accum.mul(ws[2], p[26]); 1789| 11.1k| accum.mul(ws[3], p[25]); 1790| 11.1k| accum.mul(ws[4], p[24]); 1791| 11.1k| accum.mul(ws[5], p[23]); 1792| 11.1k| accum.mul(ws[6], p[22]); 1793| 11.1k| accum.mul(ws[7], p[21]); 1794| 11.1k| accum.mul(ws[8], p[20]); 1795| 11.1k| accum.mul(ws[9], p[19]); 1796| 11.1k| accum.mul(ws[10], p[18]); 1797| 11.1k| accum.mul(ws[11], p[17]); 1798| 11.1k| accum.mul(ws[12], p[16]); 1799| 11.1k| accum.mul(ws[13], p[15]); 1800| 11.1k| accum.mul(ws[14], p[14]); 1801| 11.1k| accum.mul(ws[15], p[13]); 1802| 11.1k| accum.mul(ws[16], p[12]); 1803| 11.1k| accum.mul(ws[17], p[11]); 1804| 11.1k| accum.mul(ws[18], p[10]); 1805| 11.1k| accum.mul(ws[19], p[9]); 1806| 11.1k| accum.mul(ws[20], p[8]); 1807| 11.1k| accum.mul(ws[21], p[7]); 1808| 11.1k| accum.mul(ws[22], p[6]); 1809| 11.1k| accum.mul(ws[23], p[5]); 1810| 11.1k| accum.mul(ws[24], p[4]); 1811| 11.1k| accum.mul(ws[25], p[3]); 1812| 11.1k| accum.mul(ws[26], p[2]); 1813| 11.1k| accum.mul(ws[27], p[1]); 1814| 11.1k| accum.add(z[28]); 1815| 11.1k| ws[28] = accum.monty_step(p[0], p_dash); 1816| 11.1k| accum.mul(ws[0], p[29]); 1817| 11.1k| accum.mul(ws[1], p[28]); 1818| 11.1k| accum.mul(ws[2], p[27]); 1819| 11.1k| accum.mul(ws[3], p[26]); 1820| 11.1k| accum.mul(ws[4], p[25]); 1821| 11.1k| accum.mul(ws[5], p[24]); 1822| 11.1k| accum.mul(ws[6], p[23]); 1823| 11.1k| accum.mul(ws[7], p[22]); 1824| 11.1k| accum.mul(ws[8], p[21]); 1825| 11.1k| accum.mul(ws[9], p[20]); 1826| 11.1k| accum.mul(ws[10], p[19]); 1827| 11.1k| accum.mul(ws[11], p[18]); 1828| 11.1k| accum.mul(ws[12], p[17]); 1829| 11.1k| accum.mul(ws[13], p[16]); 1830| 11.1k| accum.mul(ws[14], p[15]); 1831| 11.1k| accum.mul(ws[15], p[14]); 1832| 11.1k| accum.mul(ws[16], p[13]); 1833| 11.1k| accum.mul(ws[17], p[12]); 1834| 11.1k| accum.mul(ws[18], p[11]); 1835| 11.1k| accum.mul(ws[19], p[10]); 1836| 11.1k| accum.mul(ws[20], p[9]); 1837| 11.1k| accum.mul(ws[21], p[8]); 1838| 11.1k| accum.mul(ws[22], p[7]); 1839| 11.1k| accum.mul(ws[23], p[6]); 1840| 11.1k| accum.mul(ws[24], p[5]); 1841| 11.1k| accum.mul(ws[25], p[4]); 1842| 11.1k| accum.mul(ws[26], p[3]); 1843| 11.1k| accum.mul(ws[27], p[2]); 1844| 11.1k| accum.mul(ws[28], p[1]); 1845| 11.1k| accum.add(z[29]); 1846| 11.1k| ws[29] = accum.monty_step(p[0], p_dash); 1847| 11.1k| accum.mul(ws[0], p[30]); 1848| 11.1k| accum.mul(ws[1], p[29]); 1849| 11.1k| accum.mul(ws[2], p[28]); 1850| 11.1k| accum.mul(ws[3], p[27]); 1851| 11.1k| accum.mul(ws[4], p[26]); 1852| 11.1k| accum.mul(ws[5], p[25]); 1853| 11.1k| accum.mul(ws[6], p[24]); 1854| 11.1k| accum.mul(ws[7], p[23]); 1855| 11.1k| accum.mul(ws[8], p[22]); 1856| 11.1k| accum.mul(ws[9], p[21]); 1857| 11.1k| accum.mul(ws[10], p[20]); 1858| 11.1k| accum.mul(ws[11], p[19]); 1859| 11.1k| accum.mul(ws[12], p[18]); 1860| 11.1k| accum.mul(ws[13], p[17]); 1861| 11.1k| accum.mul(ws[14], p[16]); 1862| 11.1k| accum.mul(ws[15], p[15]); 1863| 11.1k| accum.mul(ws[16], p[14]); 1864| 11.1k| accum.mul(ws[17], p[13]); 1865| 11.1k| accum.mul(ws[18], p[12]); 1866| 11.1k| accum.mul(ws[19], p[11]); 1867| 11.1k| accum.mul(ws[20], p[10]); 1868| 11.1k| accum.mul(ws[21], p[9]); 1869| 11.1k| accum.mul(ws[22], p[8]); 1870| 11.1k| accum.mul(ws[23], p[7]); 1871| 11.1k| accum.mul(ws[24], p[6]); 1872| 11.1k| accum.mul(ws[25], p[5]); 1873| 11.1k| accum.mul(ws[26], p[4]); 1874| 11.1k| accum.mul(ws[27], p[3]); 1875| 11.1k| accum.mul(ws[28], p[2]); 1876| 11.1k| accum.mul(ws[29], p[1]); 1877| 11.1k| accum.add(z[30]); 1878| 11.1k| ws[30] = accum.monty_step(p[0], p_dash); 1879| 11.1k| accum.mul(ws[0], p[31]); 1880| 11.1k| accum.mul(ws[1], p[30]); 1881| 11.1k| accum.mul(ws[2], p[29]); 1882| 11.1k| accum.mul(ws[3], p[28]); 1883| 11.1k| accum.mul(ws[4], p[27]); 1884| 11.1k| accum.mul(ws[5], p[26]); 1885| 11.1k| accum.mul(ws[6], p[25]); 1886| 11.1k| accum.mul(ws[7], p[24]); 1887| 11.1k| accum.mul(ws[8], p[23]); 1888| 11.1k| accum.mul(ws[9], p[22]); 1889| 11.1k| accum.mul(ws[10], p[21]); 1890| 11.1k| accum.mul(ws[11], p[20]); 1891| 11.1k| accum.mul(ws[12], p[19]); 1892| 11.1k| accum.mul(ws[13], p[18]); 1893| 11.1k| accum.mul(ws[14], p[17]); 1894| 11.1k| accum.mul(ws[15], p[16]); 1895| 11.1k| accum.mul(ws[16], p[15]); 1896| 11.1k| accum.mul(ws[17], p[14]); 1897| 11.1k| accum.mul(ws[18], p[13]); 1898| 11.1k| accum.mul(ws[19], p[12]); 1899| 11.1k| accum.mul(ws[20], p[11]); 1900| 11.1k| accum.mul(ws[21], p[10]); 1901| 11.1k| accum.mul(ws[22], p[9]); 1902| 11.1k| accum.mul(ws[23], p[8]); 1903| 11.1k| accum.mul(ws[24], p[7]); 1904| 11.1k| accum.mul(ws[25], p[6]); 1905| 11.1k| accum.mul(ws[26], p[5]); 1906| 11.1k| accum.mul(ws[27], p[4]); 1907| 11.1k| accum.mul(ws[28], p[3]); 1908| 11.1k| accum.mul(ws[29], p[2]); 1909| 11.1k| accum.mul(ws[30], p[1]); 1910| 11.1k| accum.add(z[31]); 1911| 11.1k| ws[31] = accum.monty_step(p[0], p_dash); 1912| 11.1k| accum.mul(ws[1], p[31]); 1913| 11.1k| accum.mul(ws[2], p[30]); 1914| 11.1k| accum.mul(ws[3], p[29]); 1915| 11.1k| accum.mul(ws[4], p[28]); 1916| 11.1k| accum.mul(ws[5], p[27]); 1917| 11.1k| accum.mul(ws[6], p[26]); 1918| 11.1k| accum.mul(ws[7], p[25]); 1919| 11.1k| accum.mul(ws[8], p[24]); 1920| 11.1k| accum.mul(ws[9], p[23]); 1921| 11.1k| accum.mul(ws[10], p[22]); 1922| 11.1k| accum.mul(ws[11], p[21]); 1923| 11.1k| accum.mul(ws[12], p[20]); 1924| 11.1k| accum.mul(ws[13], p[19]); 1925| 11.1k| accum.mul(ws[14], p[18]); 1926| 11.1k| accum.mul(ws[15], p[17]); 1927| 11.1k| accum.mul(ws[16], p[16]); 1928| 11.1k| accum.mul(ws[17], p[15]); 1929| 11.1k| accum.mul(ws[18], p[14]); 1930| 11.1k| accum.mul(ws[19], p[13]); 1931| 11.1k| accum.mul(ws[20], p[12]); 1932| 11.1k| accum.mul(ws[21], p[11]); 1933| 11.1k| accum.mul(ws[22], p[10]); 1934| 11.1k| accum.mul(ws[23], p[9]); 1935| 11.1k| accum.mul(ws[24], p[8]); 1936| 11.1k| accum.mul(ws[25], p[7]); 1937| 11.1k| accum.mul(ws[26], p[6]); 1938| 11.1k| accum.mul(ws[27], p[5]); 1939| 11.1k| accum.mul(ws[28], p[4]); 1940| 11.1k| accum.mul(ws[29], p[3]); 1941| 11.1k| accum.mul(ws[30], p[2]); 1942| 11.1k| accum.mul(ws[31], p[1]); 1943| 11.1k| accum.add(z[32]); 1944| 11.1k| ws[0] = accum.extract(); 1945| 11.1k| accum.mul(ws[2], p[31]); 1946| 11.1k| accum.mul(ws[3], p[30]); 1947| 11.1k| accum.mul(ws[4], p[29]); 1948| 11.1k| accum.mul(ws[5], p[28]); 1949| 11.1k| accum.mul(ws[6], p[27]); 1950| 11.1k| accum.mul(ws[7], p[26]); 1951| 11.1k| accum.mul(ws[8], p[25]); 1952| 11.1k| accum.mul(ws[9], p[24]); 1953| 11.1k| accum.mul(ws[10], p[23]); 1954| 11.1k| accum.mul(ws[11], p[22]); 1955| 11.1k| accum.mul(ws[12], p[21]); 1956| 11.1k| accum.mul(ws[13], p[20]); 1957| 11.1k| accum.mul(ws[14], p[19]); 1958| 11.1k| accum.mul(ws[15], p[18]); 1959| 11.1k| accum.mul(ws[16], p[17]); 1960| 11.1k| accum.mul(ws[17], p[16]); 1961| 11.1k| accum.mul(ws[18], p[15]); 1962| 11.1k| accum.mul(ws[19], p[14]); 1963| 11.1k| accum.mul(ws[20], p[13]); 1964| 11.1k| accum.mul(ws[21], p[12]); 1965| 11.1k| accum.mul(ws[22], p[11]); 1966| 11.1k| accum.mul(ws[23], p[10]); 1967| 11.1k| accum.mul(ws[24], p[9]); 1968| 11.1k| accum.mul(ws[25], p[8]); 1969| 11.1k| accum.mul(ws[26], p[7]); 1970| 11.1k| accum.mul(ws[27], p[6]); 1971| 11.1k| accum.mul(ws[28], p[5]); 1972| 11.1k| accum.mul(ws[29], p[4]); 1973| 11.1k| accum.mul(ws[30], p[3]); 1974| 11.1k| accum.mul(ws[31], p[2]); 1975| 11.1k| accum.add(z[33]); 1976| 11.1k| ws[1] = accum.extract(); 1977| 11.1k| accum.mul(ws[3], p[31]); 1978| 11.1k| accum.mul(ws[4], p[30]); 1979| 11.1k| accum.mul(ws[5], p[29]); 1980| 11.1k| accum.mul(ws[6], p[28]); 1981| 11.1k| accum.mul(ws[7], p[27]); 1982| 11.1k| accum.mul(ws[8], p[26]); 1983| 11.1k| accum.mul(ws[9], p[25]); 1984| 11.1k| accum.mul(ws[10], p[24]); 1985| 11.1k| accum.mul(ws[11], p[23]); 1986| 11.1k| accum.mul(ws[12], p[22]); 1987| 11.1k| accum.mul(ws[13], p[21]); 1988| 11.1k| accum.mul(ws[14], p[20]); 1989| 11.1k| accum.mul(ws[15], p[19]); 1990| 11.1k| accum.mul(ws[16], p[18]); 1991| 11.1k| accum.mul(ws[17], p[17]); 1992| 11.1k| accum.mul(ws[18], p[16]); 1993| 11.1k| accum.mul(ws[19], p[15]); 1994| 11.1k| accum.mul(ws[20], p[14]); 1995| 11.1k| accum.mul(ws[21], p[13]); 1996| 11.1k| accum.mul(ws[22], p[12]); 1997| 11.1k| accum.mul(ws[23], p[11]); 1998| 11.1k| accum.mul(ws[24], p[10]); 1999| 11.1k| accum.mul(ws[25], p[9]); 2000| 11.1k| accum.mul(ws[26], p[8]); 2001| 11.1k| accum.mul(ws[27], p[7]); 2002| 11.1k| accum.mul(ws[28], p[6]); 2003| 11.1k| accum.mul(ws[29], p[5]); 2004| 11.1k| accum.mul(ws[30], p[4]); 2005| 11.1k| accum.mul(ws[31], p[3]); 2006| 11.1k| accum.add(z[34]); 2007| 11.1k| ws[2] = accum.extract(); 2008| 11.1k| accum.mul(ws[4], p[31]); 2009| 11.1k| accum.mul(ws[5], p[30]); 2010| 11.1k| accum.mul(ws[6], p[29]); 2011| 11.1k| accum.mul(ws[7], p[28]); 2012| 11.1k| accum.mul(ws[8], p[27]); 2013| 11.1k| accum.mul(ws[9], p[26]); 2014| 11.1k| accum.mul(ws[10], p[25]); 2015| 11.1k| accum.mul(ws[11], p[24]); 2016| 11.1k| accum.mul(ws[12], p[23]); 2017| 11.1k| accum.mul(ws[13], p[22]); 2018| 11.1k| accum.mul(ws[14], p[21]); 2019| 11.1k| accum.mul(ws[15], p[20]); 2020| 11.1k| accum.mul(ws[16], p[19]); 2021| 11.1k| accum.mul(ws[17], p[18]); 2022| 11.1k| accum.mul(ws[18], p[17]); 2023| 11.1k| accum.mul(ws[19], p[16]); 2024| 11.1k| accum.mul(ws[20], p[15]); 2025| 11.1k| accum.mul(ws[21], p[14]); 2026| 11.1k| accum.mul(ws[22], p[13]); 2027| 11.1k| accum.mul(ws[23], p[12]); 2028| 11.1k| accum.mul(ws[24], p[11]); 2029| 11.1k| accum.mul(ws[25], p[10]); 2030| 11.1k| accum.mul(ws[26], p[9]); 2031| 11.1k| accum.mul(ws[27], p[8]); 2032| 11.1k| accum.mul(ws[28], p[7]); 2033| 11.1k| accum.mul(ws[29], p[6]); 2034| 11.1k| accum.mul(ws[30], p[5]); 2035| 11.1k| accum.mul(ws[31], p[4]); 2036| 11.1k| accum.add(z[35]); 2037| 11.1k| ws[3] = accum.extract(); 2038| 11.1k| accum.mul(ws[5], p[31]); 2039| 11.1k| accum.mul(ws[6], p[30]); 2040| 11.1k| accum.mul(ws[7], p[29]); 2041| 11.1k| accum.mul(ws[8], p[28]); 2042| 11.1k| accum.mul(ws[9], p[27]); 2043| 11.1k| accum.mul(ws[10], p[26]); 2044| 11.1k| accum.mul(ws[11], p[25]); 2045| 11.1k| accum.mul(ws[12], p[24]); 2046| 11.1k| accum.mul(ws[13], p[23]); 2047| 11.1k| accum.mul(ws[14], p[22]); 2048| 11.1k| accum.mul(ws[15], p[21]); 2049| 11.1k| accum.mul(ws[16], p[20]); 2050| 11.1k| accum.mul(ws[17], p[19]); 2051| 11.1k| accum.mul(ws[18], p[18]); 2052| 11.1k| accum.mul(ws[19], p[17]); 2053| 11.1k| accum.mul(ws[20], p[16]); 2054| 11.1k| accum.mul(ws[21], p[15]); 2055| 11.1k| accum.mul(ws[22], p[14]); 2056| 11.1k| accum.mul(ws[23], p[13]); 2057| 11.1k| accum.mul(ws[24], p[12]); 2058| 11.1k| accum.mul(ws[25], p[11]); 2059| 11.1k| accum.mul(ws[26], p[10]); 2060| 11.1k| accum.mul(ws[27], p[9]); 2061| 11.1k| accum.mul(ws[28], p[8]); 2062| 11.1k| accum.mul(ws[29], p[7]); 2063| 11.1k| accum.mul(ws[30], p[6]); 2064| 11.1k| accum.mul(ws[31], p[5]); 2065| 11.1k| accum.add(z[36]); 2066| 11.1k| ws[4] = accum.extract(); 2067| 11.1k| accum.mul(ws[6], p[31]); 2068| 11.1k| accum.mul(ws[7], p[30]); 2069| 11.1k| accum.mul(ws[8], p[29]); 2070| 11.1k| accum.mul(ws[9], p[28]); 2071| 11.1k| accum.mul(ws[10], p[27]); 2072| 11.1k| accum.mul(ws[11], p[26]); 2073| 11.1k| accum.mul(ws[12], p[25]); 2074| 11.1k| accum.mul(ws[13], p[24]); 2075| 11.1k| accum.mul(ws[14], p[23]); 2076| 11.1k| accum.mul(ws[15], p[22]); 2077| 11.1k| accum.mul(ws[16], p[21]); 2078| 11.1k| accum.mul(ws[17], p[20]); 2079| 11.1k| accum.mul(ws[18], p[19]); 2080| 11.1k| accum.mul(ws[19], p[18]); 2081| 11.1k| accum.mul(ws[20], p[17]); 2082| 11.1k| accum.mul(ws[21], p[16]); 2083| 11.1k| accum.mul(ws[22], p[15]); 2084| 11.1k| accum.mul(ws[23], p[14]); 2085| 11.1k| accum.mul(ws[24], p[13]); 2086| 11.1k| accum.mul(ws[25], p[12]); 2087| 11.1k| accum.mul(ws[26], p[11]); 2088| 11.1k| accum.mul(ws[27], p[10]); 2089| 11.1k| accum.mul(ws[28], p[9]); 2090| 11.1k| accum.mul(ws[29], p[8]); 2091| 11.1k| accum.mul(ws[30], p[7]); 2092| 11.1k| accum.mul(ws[31], p[6]); 2093| 11.1k| accum.add(z[37]); 2094| 11.1k| ws[5] = accum.extract(); 2095| 11.1k| accum.mul(ws[7], p[31]); 2096| 11.1k| accum.mul(ws[8], p[30]); 2097| 11.1k| accum.mul(ws[9], p[29]); 2098| 11.1k| accum.mul(ws[10], p[28]); 2099| 11.1k| accum.mul(ws[11], p[27]); 2100| 11.1k| accum.mul(ws[12], p[26]); 2101| 11.1k| accum.mul(ws[13], p[25]); 2102| 11.1k| accum.mul(ws[14], p[24]); 2103| 11.1k| accum.mul(ws[15], p[23]); 2104| 11.1k| accum.mul(ws[16], p[22]); 2105| 11.1k| accum.mul(ws[17], p[21]); 2106| 11.1k| accum.mul(ws[18], p[20]); 2107| 11.1k| accum.mul(ws[19], p[19]); 2108| 11.1k| accum.mul(ws[20], p[18]); 2109| 11.1k| accum.mul(ws[21], p[17]); 2110| 11.1k| accum.mul(ws[22], p[16]); 2111| 11.1k| accum.mul(ws[23], p[15]); 2112| 11.1k| accum.mul(ws[24], p[14]); 2113| 11.1k| accum.mul(ws[25], p[13]); 2114| 11.1k| accum.mul(ws[26], p[12]); 2115| 11.1k| accum.mul(ws[27], p[11]); 2116| 11.1k| accum.mul(ws[28], p[10]); 2117| 11.1k| accum.mul(ws[29], p[9]); 2118| 11.1k| accum.mul(ws[30], p[8]); 2119| 11.1k| accum.mul(ws[31], p[7]); 2120| 11.1k| accum.add(z[38]); 2121| 11.1k| ws[6] = accum.extract(); 2122| 11.1k| accum.mul(ws[8], p[31]); 2123| 11.1k| accum.mul(ws[9], p[30]); 2124| 11.1k| accum.mul(ws[10], p[29]); 2125| 11.1k| accum.mul(ws[11], p[28]); 2126| 11.1k| accum.mul(ws[12], p[27]); 2127| 11.1k| accum.mul(ws[13], p[26]); 2128| 11.1k| accum.mul(ws[14], p[25]); 2129| 11.1k| accum.mul(ws[15], p[24]); 2130| 11.1k| accum.mul(ws[16], p[23]); 2131| 11.1k| accum.mul(ws[17], p[22]); 2132| 11.1k| accum.mul(ws[18], p[21]); 2133| 11.1k| accum.mul(ws[19], p[20]); 2134| 11.1k| accum.mul(ws[20], p[19]); 2135| 11.1k| accum.mul(ws[21], p[18]); 2136| 11.1k| accum.mul(ws[22], p[17]); 2137| 11.1k| accum.mul(ws[23], p[16]); 2138| 11.1k| accum.mul(ws[24], p[15]); 2139| 11.1k| accum.mul(ws[25], p[14]); 2140| 11.1k| accum.mul(ws[26], p[13]); 2141| 11.1k| accum.mul(ws[27], p[12]); 2142| 11.1k| accum.mul(ws[28], p[11]); 2143| 11.1k| accum.mul(ws[29], p[10]); 2144| 11.1k| accum.mul(ws[30], p[9]); 2145| 11.1k| accum.mul(ws[31], p[8]); 2146| 11.1k| accum.add(z[39]); 2147| 11.1k| ws[7] = accum.extract(); 2148| 11.1k| accum.mul(ws[9], p[31]); 2149| 11.1k| accum.mul(ws[10], p[30]); 2150| 11.1k| accum.mul(ws[11], p[29]); 2151| 11.1k| accum.mul(ws[12], p[28]); 2152| 11.1k| accum.mul(ws[13], p[27]); 2153| 11.1k| accum.mul(ws[14], p[26]); 2154| 11.1k| accum.mul(ws[15], p[25]); 2155| 11.1k| accum.mul(ws[16], p[24]); 2156| 11.1k| accum.mul(ws[17], p[23]); 2157| 11.1k| accum.mul(ws[18], p[22]); 2158| 11.1k| accum.mul(ws[19], p[21]); 2159| 11.1k| accum.mul(ws[20], p[20]); 2160| 11.1k| accum.mul(ws[21], p[19]); 2161| 11.1k| accum.mul(ws[22], p[18]); 2162| 11.1k| accum.mul(ws[23], p[17]); 2163| 11.1k| accum.mul(ws[24], p[16]); 2164| 11.1k| accum.mul(ws[25], p[15]); 2165| 11.1k| accum.mul(ws[26], p[14]); 2166| 11.1k| accum.mul(ws[27], p[13]); 2167| 11.1k| accum.mul(ws[28], p[12]); 2168| 11.1k| accum.mul(ws[29], p[11]); 2169| 11.1k| accum.mul(ws[30], p[10]); 2170| 11.1k| accum.mul(ws[31], p[9]); 2171| 11.1k| accum.add(z[40]); 2172| 11.1k| ws[8] = accum.extract(); 2173| 11.1k| accum.mul(ws[10], p[31]); 2174| 11.1k| accum.mul(ws[11], p[30]); 2175| 11.1k| accum.mul(ws[12], p[29]); 2176| 11.1k| accum.mul(ws[13], p[28]); 2177| 11.1k| accum.mul(ws[14], p[27]); 2178| 11.1k| accum.mul(ws[15], p[26]); 2179| 11.1k| accum.mul(ws[16], p[25]); 2180| 11.1k| accum.mul(ws[17], p[24]); 2181| 11.1k| accum.mul(ws[18], p[23]); 2182| 11.1k| accum.mul(ws[19], p[22]); 2183| 11.1k| accum.mul(ws[20], p[21]); 2184| 11.1k| accum.mul(ws[21], p[20]); 2185| 11.1k| accum.mul(ws[22], p[19]); 2186| 11.1k| accum.mul(ws[23], p[18]); 2187| 11.1k| accum.mul(ws[24], p[17]); 2188| 11.1k| accum.mul(ws[25], p[16]); 2189| 11.1k| accum.mul(ws[26], p[15]); 2190| 11.1k| accum.mul(ws[27], p[14]); 2191| 11.1k| accum.mul(ws[28], p[13]); 2192| 11.1k| accum.mul(ws[29], p[12]); 2193| 11.1k| accum.mul(ws[30], p[11]); 2194| 11.1k| accum.mul(ws[31], p[10]); 2195| 11.1k| accum.add(z[41]); 2196| 11.1k| ws[9] = accum.extract(); 2197| 11.1k| accum.mul(ws[11], p[31]); 2198| 11.1k| accum.mul(ws[12], p[30]); 2199| 11.1k| accum.mul(ws[13], p[29]); 2200| 11.1k| accum.mul(ws[14], p[28]); 2201| 11.1k| accum.mul(ws[15], p[27]); 2202| 11.1k| accum.mul(ws[16], p[26]); 2203| 11.1k| accum.mul(ws[17], p[25]); 2204| 11.1k| accum.mul(ws[18], p[24]); 2205| 11.1k| accum.mul(ws[19], p[23]); 2206| 11.1k| accum.mul(ws[20], p[22]); 2207| 11.1k| accum.mul(ws[21], p[21]); 2208| 11.1k| accum.mul(ws[22], p[20]); 2209| 11.1k| accum.mul(ws[23], p[19]); 2210| 11.1k| accum.mul(ws[24], p[18]); 2211| 11.1k| accum.mul(ws[25], p[17]); 2212| 11.1k| accum.mul(ws[26], p[16]); 2213| 11.1k| accum.mul(ws[27], p[15]); 2214| 11.1k| accum.mul(ws[28], p[14]); 2215| 11.1k| accum.mul(ws[29], p[13]); 2216| 11.1k| accum.mul(ws[30], p[12]); 2217| 11.1k| accum.mul(ws[31], p[11]); 2218| 11.1k| accum.add(z[42]); 2219| 11.1k| ws[10] = accum.extract(); 2220| 11.1k| accum.mul(ws[12], p[31]); 2221| 11.1k| accum.mul(ws[13], p[30]); 2222| 11.1k| accum.mul(ws[14], p[29]); 2223| 11.1k| accum.mul(ws[15], p[28]); 2224| 11.1k| accum.mul(ws[16], p[27]); 2225| 11.1k| accum.mul(ws[17], p[26]); 2226| 11.1k| accum.mul(ws[18], p[25]); 2227| 11.1k| accum.mul(ws[19], p[24]); 2228| 11.1k| accum.mul(ws[20], p[23]); 2229| 11.1k| accum.mul(ws[21], p[22]); 2230| 11.1k| accum.mul(ws[22], p[21]); 2231| 11.1k| accum.mul(ws[23], p[20]); 2232| 11.1k| accum.mul(ws[24], p[19]); 2233| 11.1k| accum.mul(ws[25], p[18]); 2234| 11.1k| accum.mul(ws[26], p[17]); 2235| 11.1k| accum.mul(ws[27], p[16]); 2236| 11.1k| accum.mul(ws[28], p[15]); 2237| 11.1k| accum.mul(ws[29], p[14]); 2238| 11.1k| accum.mul(ws[30], p[13]); 2239| 11.1k| accum.mul(ws[31], p[12]); 2240| 11.1k| accum.add(z[43]); 2241| 11.1k| ws[11] = accum.extract(); 2242| 11.1k| accum.mul(ws[13], p[31]); 2243| 11.1k| accum.mul(ws[14], p[30]); 2244| 11.1k| accum.mul(ws[15], p[29]); 2245| 11.1k| accum.mul(ws[16], p[28]); 2246| 11.1k| accum.mul(ws[17], p[27]); 2247| 11.1k| accum.mul(ws[18], p[26]); 2248| 11.1k| accum.mul(ws[19], p[25]); 2249| 11.1k| accum.mul(ws[20], p[24]); 2250| 11.1k| accum.mul(ws[21], p[23]); 2251| 11.1k| accum.mul(ws[22], p[22]); 2252| 11.1k| accum.mul(ws[23], p[21]); 2253| 11.1k| accum.mul(ws[24], p[20]); 2254| 11.1k| accum.mul(ws[25], p[19]); 2255| 11.1k| accum.mul(ws[26], p[18]); 2256| 11.1k| accum.mul(ws[27], p[17]); 2257| 11.1k| accum.mul(ws[28], p[16]); 2258| 11.1k| accum.mul(ws[29], p[15]); 2259| 11.1k| accum.mul(ws[30], p[14]); 2260| 11.1k| accum.mul(ws[31], p[13]); 2261| 11.1k| accum.add(z[44]); 2262| 11.1k| ws[12] = accum.extract(); 2263| 11.1k| accum.mul(ws[14], p[31]); 2264| 11.1k| accum.mul(ws[15], p[30]); 2265| 11.1k| accum.mul(ws[16], p[29]); 2266| 11.1k| accum.mul(ws[17], p[28]); 2267| 11.1k| accum.mul(ws[18], p[27]); 2268| 11.1k| accum.mul(ws[19], p[26]); 2269| 11.1k| accum.mul(ws[20], p[25]); 2270| 11.1k| accum.mul(ws[21], p[24]); 2271| 11.1k| accum.mul(ws[22], p[23]); 2272| 11.1k| accum.mul(ws[23], p[22]); 2273| 11.1k| accum.mul(ws[24], p[21]); 2274| 11.1k| accum.mul(ws[25], p[20]); 2275| 11.1k| accum.mul(ws[26], p[19]); 2276| 11.1k| accum.mul(ws[27], p[18]); 2277| 11.1k| accum.mul(ws[28], p[17]); 2278| 11.1k| accum.mul(ws[29], p[16]); 2279| 11.1k| accum.mul(ws[30], p[15]); 2280| 11.1k| accum.mul(ws[31], p[14]); 2281| 11.1k| accum.add(z[45]); 2282| 11.1k| ws[13] = accum.extract(); 2283| 11.1k| accum.mul(ws[15], p[31]); 2284| 11.1k| accum.mul(ws[16], p[30]); 2285| 11.1k| accum.mul(ws[17], p[29]); 2286| 11.1k| accum.mul(ws[18], p[28]); 2287| 11.1k| accum.mul(ws[19], p[27]); 2288| 11.1k| accum.mul(ws[20], p[26]); 2289| 11.1k| accum.mul(ws[21], p[25]); 2290| 11.1k| accum.mul(ws[22], p[24]); 2291| 11.1k| accum.mul(ws[23], p[23]); 2292| 11.1k| accum.mul(ws[24], p[22]); 2293| 11.1k| accum.mul(ws[25], p[21]); 2294| 11.1k| accum.mul(ws[26], p[20]); 2295| 11.1k| accum.mul(ws[27], p[19]); 2296| 11.1k| accum.mul(ws[28], p[18]); 2297| 11.1k| accum.mul(ws[29], p[17]); 2298| 11.1k| accum.mul(ws[30], p[16]); 2299| 11.1k| accum.mul(ws[31], p[15]); 2300| 11.1k| accum.add(z[46]); 2301| 11.1k| ws[14] = accum.extract(); 2302| 11.1k| accum.mul(ws[16], p[31]); 2303| 11.1k| accum.mul(ws[17], p[30]); 2304| 11.1k| accum.mul(ws[18], p[29]); 2305| 11.1k| accum.mul(ws[19], p[28]); 2306| 11.1k| accum.mul(ws[20], p[27]); 2307| 11.1k| accum.mul(ws[21], p[26]); 2308| 11.1k| accum.mul(ws[22], p[25]); 2309| 11.1k| accum.mul(ws[23], p[24]); 2310| 11.1k| accum.mul(ws[24], p[23]); 2311| 11.1k| accum.mul(ws[25], p[22]); 2312| 11.1k| accum.mul(ws[26], p[21]); 2313| 11.1k| accum.mul(ws[27], p[20]); 2314| 11.1k| accum.mul(ws[28], p[19]); 2315| 11.1k| accum.mul(ws[29], p[18]); 2316| 11.1k| accum.mul(ws[30], p[17]); 2317| 11.1k| accum.mul(ws[31], p[16]); 2318| 11.1k| accum.add(z[47]); 2319| 11.1k| ws[15] = accum.extract(); 2320| 11.1k| accum.mul(ws[17], p[31]); 2321| 11.1k| accum.mul(ws[18], p[30]); 2322| 11.1k| accum.mul(ws[19], p[29]); 2323| 11.1k| accum.mul(ws[20], p[28]); 2324| 11.1k| accum.mul(ws[21], p[27]); 2325| 11.1k| accum.mul(ws[22], p[26]); 2326| 11.1k| accum.mul(ws[23], p[25]); 2327| 11.1k| accum.mul(ws[24], p[24]); 2328| 11.1k| accum.mul(ws[25], p[23]); 2329| 11.1k| accum.mul(ws[26], p[22]); 2330| 11.1k| accum.mul(ws[27], p[21]); 2331| 11.1k| accum.mul(ws[28], p[20]); 2332| 11.1k| accum.mul(ws[29], p[19]); 2333| 11.1k| accum.mul(ws[30], p[18]); 2334| 11.1k| accum.mul(ws[31], p[17]); 2335| 11.1k| accum.add(z[48]); 2336| 11.1k| ws[16] = accum.extract(); 2337| 11.1k| accum.mul(ws[18], p[31]); 2338| 11.1k| accum.mul(ws[19], p[30]); 2339| 11.1k| accum.mul(ws[20], p[29]); 2340| 11.1k| accum.mul(ws[21], p[28]); 2341| 11.1k| accum.mul(ws[22], p[27]); 2342| 11.1k| accum.mul(ws[23], p[26]); 2343| 11.1k| accum.mul(ws[24], p[25]); 2344| 11.1k| accum.mul(ws[25], p[24]); 2345| 11.1k| accum.mul(ws[26], p[23]); 2346| 11.1k| accum.mul(ws[27], p[22]); 2347| 11.1k| accum.mul(ws[28], p[21]); 2348| 11.1k| accum.mul(ws[29], p[20]); 2349| 11.1k| accum.mul(ws[30], p[19]); 2350| 11.1k| accum.mul(ws[31], p[18]); 2351| 11.1k| accum.add(z[49]); 2352| 11.1k| ws[17] = accum.extract(); 2353| 11.1k| accum.mul(ws[19], p[31]); 2354| 11.1k| accum.mul(ws[20], p[30]); 2355| 11.1k| accum.mul(ws[21], p[29]); 2356| 11.1k| accum.mul(ws[22], p[28]); 2357| 11.1k| accum.mul(ws[23], p[27]); 2358| 11.1k| accum.mul(ws[24], p[26]); 2359| 11.1k| accum.mul(ws[25], p[25]); 2360| 11.1k| accum.mul(ws[26], p[24]); 2361| 11.1k| accum.mul(ws[27], p[23]); 2362| 11.1k| accum.mul(ws[28], p[22]); 2363| 11.1k| accum.mul(ws[29], p[21]); 2364| 11.1k| accum.mul(ws[30], p[20]); 2365| 11.1k| accum.mul(ws[31], p[19]); 2366| 11.1k| accum.add(z[50]); 2367| 11.1k| ws[18] = accum.extract(); 2368| 11.1k| accum.mul(ws[20], p[31]); 2369| 11.1k| accum.mul(ws[21], p[30]); 2370| 11.1k| accum.mul(ws[22], p[29]); 2371| 11.1k| accum.mul(ws[23], p[28]); 2372| 11.1k| accum.mul(ws[24], p[27]); 2373| 11.1k| accum.mul(ws[25], p[26]); 2374| 11.1k| accum.mul(ws[26], p[25]); 2375| 11.1k| accum.mul(ws[27], p[24]); 2376| 11.1k| accum.mul(ws[28], p[23]); 2377| 11.1k| accum.mul(ws[29], p[22]); 2378| 11.1k| accum.mul(ws[30], p[21]); 2379| 11.1k| accum.mul(ws[31], p[20]); 2380| 11.1k| accum.add(z[51]); 2381| 11.1k| ws[19] = accum.extract(); 2382| 11.1k| accum.mul(ws[21], p[31]); 2383| 11.1k| accum.mul(ws[22], p[30]); 2384| 11.1k| accum.mul(ws[23], p[29]); 2385| 11.1k| accum.mul(ws[24], p[28]); 2386| 11.1k| accum.mul(ws[25], p[27]); 2387| 11.1k| accum.mul(ws[26], p[26]); 2388| 11.1k| accum.mul(ws[27], p[25]); 2389| 11.1k| accum.mul(ws[28], p[24]); 2390| 11.1k| accum.mul(ws[29], p[23]); 2391| 11.1k| accum.mul(ws[30], p[22]); 2392| 11.1k| accum.mul(ws[31], p[21]); 2393| 11.1k| accum.add(z[52]); 2394| 11.1k| ws[20] = accum.extract(); 2395| 11.1k| accum.mul(ws[22], p[31]); 2396| 11.1k| accum.mul(ws[23], p[30]); 2397| 11.1k| accum.mul(ws[24], p[29]); 2398| 11.1k| accum.mul(ws[25], p[28]); 2399| 11.1k| accum.mul(ws[26], p[27]); 2400| 11.1k| accum.mul(ws[27], p[26]); 2401| 11.1k| accum.mul(ws[28], p[25]); 2402| 11.1k| accum.mul(ws[29], p[24]); 2403| 11.1k| accum.mul(ws[30], p[23]); 2404| 11.1k| accum.mul(ws[31], p[22]); 2405| 11.1k| accum.add(z[53]); 2406| 11.1k| ws[21] = accum.extract(); 2407| 11.1k| accum.mul(ws[23], p[31]); 2408| 11.1k| accum.mul(ws[24], p[30]); 2409| 11.1k| accum.mul(ws[25], p[29]); 2410| 11.1k| accum.mul(ws[26], p[28]); 2411| 11.1k| accum.mul(ws[27], p[27]); 2412| 11.1k| accum.mul(ws[28], p[26]); 2413| 11.1k| accum.mul(ws[29], p[25]); 2414| 11.1k| accum.mul(ws[30], p[24]); 2415| 11.1k| accum.mul(ws[31], p[23]); 2416| 11.1k| accum.add(z[54]); 2417| 11.1k| ws[22] = accum.extract(); 2418| 11.1k| accum.mul(ws[24], p[31]); 2419| 11.1k| accum.mul(ws[25], p[30]); 2420| 11.1k| accum.mul(ws[26], p[29]); 2421| 11.1k| accum.mul(ws[27], p[28]); 2422| 11.1k| accum.mul(ws[28], p[27]); 2423| 11.1k| accum.mul(ws[29], p[26]); 2424| 11.1k| accum.mul(ws[30], p[25]); 2425| 11.1k| accum.mul(ws[31], p[24]); 2426| 11.1k| accum.add(z[55]); 2427| 11.1k| ws[23] = accum.extract(); 2428| 11.1k| accum.mul(ws[25], p[31]); 2429| 11.1k| accum.mul(ws[26], p[30]); 2430| 11.1k| accum.mul(ws[27], p[29]); 2431| 11.1k| accum.mul(ws[28], p[28]); 2432| 11.1k| accum.mul(ws[29], p[27]); 2433| 11.1k| accum.mul(ws[30], p[26]); 2434| 11.1k| accum.mul(ws[31], p[25]); 2435| 11.1k| accum.add(z[56]); 2436| 11.1k| ws[24] = accum.extract(); 2437| 11.1k| accum.mul(ws[26], p[31]); 2438| 11.1k| accum.mul(ws[27], p[30]); 2439| 11.1k| accum.mul(ws[28], p[29]); 2440| 11.1k| accum.mul(ws[29], p[28]); 2441| 11.1k| accum.mul(ws[30], p[27]); 2442| 11.1k| accum.mul(ws[31], p[26]); 2443| 11.1k| accum.add(z[57]); 2444| 11.1k| ws[25] = accum.extract(); 2445| 11.1k| accum.mul(ws[27], p[31]); 2446| 11.1k| accum.mul(ws[28], p[30]); 2447| 11.1k| accum.mul(ws[29], p[29]); 2448| 11.1k| accum.mul(ws[30], p[28]); 2449| 11.1k| accum.mul(ws[31], p[27]); 2450| 11.1k| accum.add(z[58]); 2451| 11.1k| ws[26] = accum.extract(); 2452| 11.1k| accum.mul(ws[28], p[31]); 2453| 11.1k| accum.mul(ws[29], p[30]); 2454| 11.1k| accum.mul(ws[30], p[29]); 2455| 11.1k| accum.mul(ws[31], p[28]); 2456| 11.1k| accum.add(z[59]); 2457| 11.1k| ws[27] = accum.extract(); 2458| 11.1k| accum.mul(ws[29], p[31]); 2459| 11.1k| accum.mul(ws[30], p[30]); 2460| 11.1k| accum.mul(ws[31], p[29]); 2461| 11.1k| accum.add(z[60]); 2462| 11.1k| ws[28] = accum.extract(); 2463| 11.1k| accum.mul(ws[30], p[31]); 2464| 11.1k| accum.mul(ws[31], p[30]); 2465| 11.1k| accum.add(z[61]); 2466| 11.1k| ws[29] = accum.extract(); 2467| 11.1k| accum.mul(ws[31], p[31]); 2468| 11.1k| accum.add(z[62]); 2469| 11.1k| ws[30] = accum.extract(); 2470| 11.1k| accum.add(z[63]); 2471| 11.1k| ws[31] = accum.extract(); 2472| 11.1k| const word w1 = accum.extract(); 2473| 11.1k| bigint_monty_maybe_sub<32>(r, w1, ws, p); 2474| 11.1k|} _ZN5Botan21bigint_mulx_monty_mulEPmPKmS2_S2_mmS0_: 111| 1.50M|void bigint_mulx_monty_mul(word z[], const word x[], const word y[], const word p[], size_t N, word p_dash, word ws[]) { 112| | // t[-1] receives the word shifted out by each reduction row 113| 1.50M| word* t = ws + 1; 114| 1.50M| clear_mem(ws, N + 3); 115| | 116| 67.3M| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (116:22): [True: 65.8M, False: 1.50M] ------------------ 117| 65.8M| monty_row(t, t, x, N, y[i], 0); 118| 65.8M| const word m = t[0] * p_dash; 119| 65.8M| monty_row(t - 1, t, p, N, m, 0); 120| 65.8M| t[N + 1] = 0; 121| 65.8M| } 122| | 123| | // The result is below 2p, with t[N] holding its top bit 124| 1.50M| bigint_monty_maybe_sub(N, z, t[N], t, p); 125| 1.50M|} _ZN5Botan21bigint_mulx_monty_sqrEPmPKmS2_mmS0_: 127| 8.77M|void bigint_mulx_monty_sqr(word z[], const word x[], const word p[], size_t N, word p_dash, word ws[]) { 128| 8.77M| bigint_mulx_sqr(ws, x, N); 129| 8.77M| bigint_mulx_monty_redc(z, ws, p, N, p_dash); 130| 8.77M|} _ZN5Botan15bigint_mulx_sqrEPmPKmm: 132| 8.77M|void bigint_mulx_sqr(word z[], const word x[], size_t N) { 133| 8.77M| clear_mem(z, 2 * N + 1); 134| | 135| | /* 136| | * x is split into a leading block of N % 8 words followed by blocks of 8 137| | * words. Rows from the leading block cover every product x[i]*x[j] with 138| | * j > i; rows from the other blocks cover only products with x[j] in a 139| | * later block, so their lengths are multiples of 8. 140| | */ 141| 8.77M| const size_t lead = N % 8; 142| | 143| 37.2M| for(size_t i = 0; i != lead; ++i) { ------------------ | Branch (143:22): [True: 28.4M, False: 8.77M] ------------------ 144| 28.4M| monty_row(z + 2 * i + 1, z + 2 * i + 1, x + i + 1, N - i - 1, x[i], 0); 145| 28.4M| } 146| | 147| 46.3M| for(size_t b = lead; b + 8 < N; b += 8) { ------------------ | Branch (147:25): [True: 37.6M, False: 8.77M] ------------------ 148| 336M| for(size_t i = b; i != b + 8; ++i) { ------------------ | Branch (148:25): [True: 299M, False: 37.6M] ------------------ 149| 299M| monty_row(z + i + b + 8, z + i + b + 8, x + b + 8, N - b - 8, x[i], 0); 150| 299M| } 151| 37.6M| } 152| | 153| | // Double the products while adding the squares not yet included, which together cover z[0..2N) 154| 8.77M| word carry = 0; 155| 8.77M| word top = 0; 156| 8.77M| auto double_and_add = [&](size_t k, word s) { 157| 8.77M| const word w = z[k]; 158| 8.77M| z[k] = word_add((w << 1) | top, s, &carry); 159| 8.77M| top = w >> (WordInfo::bits - 1); 160| 8.77M| }; 161| | 162| 37.2M| for(size_t i = 0; i != lead; ++i) { ------------------ | Branch (162:22): [True: 28.4M, False: 8.77M] ------------------ 163| 28.4M| word hi = 0; 164| 28.4M| const word lo = word_madd2(x[i], x[i], &hi); 165| 28.4M| double_and_add(2 * i, lo); 166| 28.4M| double_and_add(2 * i + 1, hi); 167| 28.4M| } 168| | 169| 55.0M| for(size_t b = lead; b != N; b += 8) { ------------------ | Branch (169:25): [True: 46.2M, False: 8.77M] ------------------ 170| 46.2M| std::array sq{}; 171| 46.2M| bigint_mulx_sqr8(sq.data(), x + b); 172| 781M| for(size_t k = 0; k != 16; ++k) { ------------------ | Branch (172:25): [True: 735M, False: 46.2M] ------------------ 173| 735M| double_and_add(2 * b + k, sq[k]); 174| 735M| } 175| 46.2M| } 176| | 177| | // The square fits in 2N words 178| 8.77M| BOTAN_DEBUG_ASSERT(carry == 0 && top == 0); ------------------ | | 137| 8.77M| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 8.77M| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 8.77M] | | ------------------ ------------------ 179| 8.77M|} _ZN5Botan22bigint_mulx_monty_redcEPmS0_PKmmm: 181| 8.77M|void bigint_mulx_monty_redc(word r[], word z[], const word p[], size_t N, word p_dash) { 182| 8.77M| z[2 * N] = 0; 183| | 184| 8.77M| word c = 0; 185| 406M| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (185:22): [True: 397M, False: 8.77M] ------------------ 186| 397M| const word m = z[i] * p_dash; 187| 397M| c = monty_row(z + i, z + i, p, N, m, c); 188| 397M| } 189| | 190| | // The sum is below 2p * B^N, so the final carry is zero and the top bit is z[2N] 191| 8.77M| BOTAN_DEBUG_ASSERT(c == 0); ------------------ | | 137| 8.77M| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 8.77M| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 8.77M] | | ------------------ ------------------ 192| 8.77M| bigint_monty_maybe_sub(N, r, z[2 * N], z + N, p); 193| 8.77M|} mp_monty_mulx.cpp:_ZN5Botan12_GLOBAL__N_19monty_rowEPmPKmS3_mmm: 84| 839M|BOTAN_FORCE_INLINE word monty_row(word* out, const word* t, const word* x, size_t N, word b, word c) { 85| 839M| word carry = 0; 86| | // Advancing the pointers, rather than indexing, keeps the compiler from generating a slower loop 87| 4.52G| for(size_t i = N / 8; i != 0; --i) { ------------------ | Branch (87:26): [True: 3.68G, False: 839M] ------------------ 88| 3.68G| carry = muladd8(out, t, x, b, carry); 89| 3.68G| out += 8; 90| 3.68G| t += 8; 91| 3.68G| x += 8; 92| 3.68G| } 93| 839M| if(N % 8 >= 4) { ------------------ | Branch (93:7): [True: 325M, False: 514M] ------------------ 94| 325M| carry = muladd4(out, t, x, b, carry); 95| 325M| out += 4; 96| 325M| t += 4; 97| 325M| x += 4; 98| 325M| } 99| 1.47G| for(size_t i = N % 4; i != 0; --i) { ------------------ | Branch (99:26): [True: 637M, False: 839M] ------------------ 100| 637M| *out++ = word_madd3(*x++, b, *t++, &carry); 101| 637M| } 102| | 103| 839M| word c2 = 0; 104| 839M| out[0] = word_add(t[0], carry, &c2); 105| 839M| out[1] = word_add(t[1], c, &c2); 106| 839M| return c2; 107| 839M|} mp_monty_mulx.cpp:_ZN5Botan12_GLOBAL__N_17muladd8EPmPKmS3_mm: 60| 3.67G|BOTAN_FORCE_INLINE word muladd8(word* out, const word* t, const word* x, word b, word carry) { 61| 3.67G| word tmp = 0; 62| 3.67G| word lo = 0; 63| 3.67G| word zero = 0; 64| 3.67G| BOTAN_MULADD_ASM(BOTAN_MULADD_STEPS8); ------------------ | | 38| 3.67G| asm volatile("xorl %k[zero], %k[zero]\n\t" \ | | 39| 3.67G| STEPS \ | | 40| 3.67G| "adox %[zero], %[carry]\n\t" \ | | 41| 3.67G| "adcx %[zero], %[carry]\n\t" \ | | 42| 3.67G| : [carry] "+&r"(carry), [tmp] "=&r"(tmp), [lo] "=&r"(lo), [zero] "=&r"(zero) \ | | 43| 3.67G| : [out] "r"(out), [t] "r"(t), [x] "r"(x), "d"(b) \ | | 44| 3.67G| : "cc", "memory") ------------------ 65| 3.67G| return carry; 66| 3.67G|} mp_monty_mulx.cpp:_ZN5Botan12_GLOBAL__N_17muladd4EPmPKmS3_mm: 69| 325M|BOTAN_FORCE_INLINE word muladd4(word* out, const word* t, const word* x, word b, word carry) { 70| 325M| word tmp = 0; 71| 325M| word lo = 0; 72| 325M| word zero = 0; 73| 325M| BOTAN_MULADD_ASM(BOTAN_MULADD_STEPS4); ------------------ | | 38| 325M| asm volatile("xorl %k[zero], %k[zero]\n\t" \ | | 39| 325M| STEPS \ | | 40| 325M| "adox %[zero], %[carry]\n\t" \ | | 41| 325M| "adcx %[zero], %[carry]\n\t" \ | | 42| 325M| : [carry] "+&r"(carry), [tmp] "=&r"(tmp), [lo] "=&r"(lo), [zero] "=&r"(zero) \ | | 43| 325M| : [out] "r"(out), [t] "r"(t), [x] "r"(x), "d"(b) \ | | 44| 325M| : "cc", "memory") ------------------ 74| 325M| return carry; 75| 325M|} mp_monty_mulx.cpp:_ZZN5Botan15bigint_mulx_sqrEPmPKmmENK3$_0clEmm: 156| 790M| auto double_and_add = [&](size_t k, word s) { 157| 790M| const word w = z[k]; 158| 790M| z[k] = word_add((w << 1) | top, s, &carry); 159| 790M| top = w >> (WordInfo::bits - 1); 160| 790M| }; _ZN5Botan16bigint_mulx_sqr4EPmPKm: 27| 122k|void bigint_mulx_sqr4(word z[8], const word x[4]) { 28| | // clang-format off 29| 122k| asm( 30| 122k| "xorl %%r9d, %%r9d\n\t" 31| 122k| "xorl %%r10d, %%r10d\n\t" 32| 122k| "xorl %%r8d, %%r8d\n\t" 33| | 34| 122k| "movq 0(%[x]), %%rdx\n\t" // x[0] * x[1..3] 35| 122k| "xorl %%eax, %%eax\n\t" 36| 122k| "mulx 8(%[x]), %%rax, %%rcx\n\t" 37| 122k| "adcx %%rax, %%r9\n\t" 38| 122k| "movq %%r9, 8(%[z])\n\t" 39| 122k| "mulx 16(%[x]), %%rax, %%r9\n\t" 40| 122k| "adox %%rcx, %%rax\n\t" 41| 122k| "adcx %%rax, %%r10\n\t" 42| 122k| "mulx 24(%[x]), %%rax, %%rcx\n\t" 43| 122k| "adox %%r9, %%rax\n\t" 44| 122k| "adcx %%rax, %%r8\n\t" 45| 122k| "movl $0, %%eax\n\t" 46| 122k| "adox %%rax, %%rcx\n\t" 47| 122k| "adcx %%rax, %%rcx\n\t" 48| 122k| "movq %%rcx, %%r9\n\t" 49| 122k| "movq %%r10, 16(%[z])\n\t" 50| | 51| 122k| "movq 8(%[x]), %%rdx\n\t" // x[1] * x[2..3] 52| 122k| "xorl %%eax, %%eax\n\t" 53| 122k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 54| 122k| "adcx %%rax, %%r8\n\t" 55| 122k| "movq %%r8, 24(%[z])\n\t" 56| 122k| "mulx 24(%[x]), %%rax, %%r10\n\t" 57| 122k| "adox %%rcx, %%rax\n\t" 58| 122k| "adcx %%rax, %%r9\n\t" 59| 122k| "movl $0, %%eax\n\t" 60| 122k| "adox %%rax, %%r10\n\t" 61| 122k| "adcx %%rax, %%r10\n\t" 62| 122k| "movq %%r9, 32(%[z])\n\t" 63| | 64| 122k| "movq 16(%[x]), %%rdx\n\t" // x[2] * x[3..3] 65| 122k| "xorl %%eax, %%eax\n\t" 66| 122k| "mulx 24(%[x]), %%rax, %%rcx\n\t" 67| 122k| "adcx %%rax, %%r10\n\t" 68| 122k| "movq %%r10, 40(%[z])\n\t" 69| 122k| "movl $0, %%eax\n\t" 70| 122k| "adox %%rax, %%rcx\n\t" 71| 122k| "adcx %%rax, %%rcx\n\t" 72| 122k| "movq %%rcx, %%r8\n\t" 73| 122k| "movq %%r8, 48(%[z])\n\t" 74| | 75| 122k| "movq $0, 56(%[z])\n\t" 76| 122k| "xorl %%eax, %%eax\n\t" // double the cross products and add the squares 77| 122k| "movq 0(%[x]), %%rdx\n\t" 78| 122k| "mulx %%rdx, %%rax, %%rcx\n\t" 79| 122k| "movq %%rax, 0(%[z])\n\t" 80| 122k| "movq 8(%[z]), %%r8\n\t" 81| 122k| "adcx %%r8, %%r8\n\t" 82| 122k| "adox %%rcx, %%r8\n\t" 83| 122k| "movq %%r8, 8(%[z])\n\t" 84| 122k| "movq 8(%[x]), %%rdx\n\t" 85| 122k| "mulx %%rdx, %%rax, %%rcx\n\t" 86| 122k| "movq 16(%[z]), %%r8\n\t" 87| 122k| "adcx %%r8, %%r8\n\t" 88| 122k| "adox %%rax, %%r8\n\t" 89| 122k| "movq %%r8, 16(%[z])\n\t" 90| 122k| "movq 24(%[z]), %%r8\n\t" 91| 122k| "adcx %%r8, %%r8\n\t" 92| 122k| "adox %%rcx, %%r8\n\t" 93| 122k| "movq %%r8, 24(%[z])\n\t" 94| 122k| "movq 16(%[x]), %%rdx\n\t" 95| 122k| "mulx %%rdx, %%rax, %%rcx\n\t" 96| 122k| "movq 32(%[z]), %%r8\n\t" 97| 122k| "adcx %%r8, %%r8\n\t" 98| 122k| "adox %%rax, %%r8\n\t" 99| 122k| "movq %%r8, 32(%[z])\n\t" 100| 122k| "movq 40(%[z]), %%r8\n\t" 101| 122k| "adcx %%r8, %%r8\n\t" 102| 122k| "adox %%rcx, %%r8\n\t" 103| 122k| "movq %%r8, 40(%[z])\n\t" 104| 122k| "movq 24(%[x]), %%rdx\n\t" 105| 122k| "mulx %%rdx, %%rax, %%rcx\n\t" 106| 122k| "movq 48(%[z]), %%r8\n\t" 107| 122k| "adcx %%r8, %%r8\n\t" 108| 122k| "adox %%rax, %%r8\n\t" 109| 122k| "movq %%r8, 48(%[z])\n\t" 110| 122k| "movq 56(%[z]), %%r8\n\t" 111| 122k| "adcx %%r8, %%r8\n\t" 112| 122k| "adox %%rcx, %%r8\n\t" 113| 122k| "movq %%r8, 56(%[z])\n\t" 114| 122k| : 115| 122k| : [z] "r"(z), [x] "r"(x) 116| 122k| : "rax", "rcx", "rdx", "r8", "r9", "r10", "cc", "memory"); 117| | // clang-format on 118| 122k|} _ZN5Botan16bigint_mulx_mul4EPmPKmS2_: 120| 204k|void bigint_mulx_mul4(word z[8], const word x[4], const word y[4]) { 121| | // clang-format off 122| 204k| asm( 123| 204k| "xorl %%r8d, %%r8d\n\t" 124| 204k| "xorl %%r9d, %%r9d\n\t" 125| 204k| "xorl %%r10d, %%r10d\n\t" 126| 204k| "xorl %%r11d, %%r11d\n\t" 127| | 128| 204k| "movq 0(%[y]), %%rdx\n\t" // row 0: x * y[0] 129| 204k| "xorl %%eax, %%eax\n\t" 130| 204k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 131| 204k| "adcx %%rax, %%r8\n\t" 132| 204k| "movq %%r8, 0(%[z])\n\t" 133| 204k| "mulx 8(%[x]), %%rax, %%r8\n\t" 134| 204k| "adox %%rcx, %%rax\n\t" 135| 204k| "adcx %%rax, %%r9\n\t" 136| 204k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 137| 204k| "adox %%r8, %%rax\n\t" 138| 204k| "adcx %%rax, %%r10\n\t" 139| 204k| "mulx 24(%[x]), %%rax, %%r8\n\t" 140| 204k| "adox %%rcx, %%rax\n\t" 141| 204k| "adcx %%rax, %%r11\n\t" 142| 204k| "movl $0, %%eax\n\t" 143| 204k| "adox %%rax, %%r8\n\t" 144| 204k| "adcx %%rax, %%r8\n\t" 145| | 146| 204k| "movq 8(%[y]), %%rdx\n\t" // row 1: x * y[1] 147| 204k| "xorl %%eax, %%eax\n\t" 148| 204k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 149| 204k| "adcx %%rax, %%r9\n\t" 150| 204k| "movq %%r9, 8(%[z])\n\t" 151| 204k| "mulx 8(%[x]), %%rax, %%r9\n\t" 152| 204k| "adox %%rcx, %%rax\n\t" 153| 204k| "adcx %%rax, %%r10\n\t" 154| 204k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 155| 204k| "adox %%r9, %%rax\n\t" 156| 204k| "adcx %%rax, %%r11\n\t" 157| 204k| "mulx 24(%[x]), %%rax, %%r9\n\t" 158| 204k| "adox %%rcx, %%rax\n\t" 159| 204k| "adcx %%rax, %%r8\n\t" 160| 204k| "movl $0, %%eax\n\t" 161| 204k| "adox %%rax, %%r9\n\t" 162| 204k| "adcx %%rax, %%r9\n\t" 163| | 164| 204k| "movq 16(%[y]), %%rdx\n\t" // row 2: x * y[2] 165| 204k| "xorl %%eax, %%eax\n\t" 166| 204k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 167| 204k| "adcx %%rax, %%r10\n\t" 168| 204k| "movq %%r10, 16(%[z])\n\t" 169| 204k| "mulx 8(%[x]), %%rax, %%r10\n\t" 170| 204k| "adox %%rcx, %%rax\n\t" 171| 204k| "adcx %%rax, %%r11\n\t" 172| 204k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 173| 204k| "adox %%r10, %%rax\n\t" 174| 204k| "adcx %%rax, %%r8\n\t" 175| 204k| "mulx 24(%[x]), %%rax, %%r10\n\t" 176| 204k| "adox %%rcx, %%rax\n\t" 177| 204k| "adcx %%rax, %%r9\n\t" 178| 204k| "movl $0, %%eax\n\t" 179| 204k| "adox %%rax, %%r10\n\t" 180| 204k| "adcx %%rax, %%r10\n\t" 181| | 182| 204k| "movq 24(%[y]), %%rdx\n\t" // row 3: x * y[3] 183| 204k| "xorl %%eax, %%eax\n\t" 184| 204k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 185| 204k| "adcx %%rax, %%r11\n\t" 186| 204k| "movq %%r11, 24(%[z])\n\t" 187| 204k| "mulx 8(%[x]), %%rax, %%r11\n\t" 188| 204k| "adox %%rcx, %%rax\n\t" 189| 204k| "adcx %%rax, %%r8\n\t" 190| 204k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 191| 204k| "adox %%r11, %%rax\n\t" 192| 204k| "adcx %%rax, %%r9\n\t" 193| 204k| "mulx 24(%[x]), %%rax, %%r11\n\t" 194| 204k| "adox %%rcx, %%rax\n\t" 195| 204k| "adcx %%rax, %%r10\n\t" 196| 204k| "movl $0, %%eax\n\t" 197| 204k| "adox %%rax, %%r11\n\t" 198| 204k| "adcx %%rax, %%r11\n\t" 199| | 200| 204k| "movq %%r8, 32(%[z])\n\t" 201| 204k| "movq %%r9, 40(%[z])\n\t" 202| 204k| "movq %%r10, 48(%[z])\n\t" 203| 204k| "movq %%r11, 56(%[z])\n\t" 204| 204k| : 205| 204k| : [z] "r"(z), [x] "r"(x), [y] "r"(y) 206| 204k| : "rax", "rcx", "rdx", "r8", "r9", "r10", "r11", "cc", "memory"); 207| | // clang-format on 208| 204k|} _ZN5Botan16bigint_mulx_sqr6EPmPKm: 210| 176k|void bigint_mulx_sqr6(word z[12], const word x[6]) { 211| | // clang-format off 212| 176k| asm( 213| 176k| "xorl %%r9d, %%r9d\n\t" 214| 176k| "xorl %%r10d, %%r10d\n\t" 215| 176k| "xorl %%r11d, %%r11d\n\t" 216| 176k| "xorl %%r12d, %%r12d\n\t" 217| 176k| "xorl %%r8d, %%r8d\n\t" 218| | 219| 176k| "movq 0(%[x]), %%rdx\n\t" // x[0] * x[1..5] 220| 176k| "xorl %%eax, %%eax\n\t" 221| 176k| "mulx 8(%[x]), %%rax, %%rcx\n\t" 222| 176k| "adcx %%rax, %%r9\n\t" 223| 176k| "movq %%r9, 8(%[z])\n\t" 224| 176k| "mulx 16(%[x]), %%rax, %%r9\n\t" 225| 176k| "adox %%rcx, %%rax\n\t" 226| 176k| "adcx %%rax, %%r10\n\t" 227| 176k| "mulx 24(%[x]), %%rax, %%rcx\n\t" 228| 176k| "adox %%r9, %%rax\n\t" 229| 176k| "adcx %%rax, %%r11\n\t" 230| 176k| "mulx 32(%[x]), %%rax, %%r9\n\t" 231| 176k| "adox %%rcx, %%rax\n\t" 232| 176k| "adcx %%rax, %%r12\n\t" 233| 176k| "mulx 40(%[x]), %%rax, %%rcx\n\t" 234| 176k| "adox %%r9, %%rax\n\t" 235| 176k| "adcx %%rax, %%r8\n\t" 236| 176k| "movl $0, %%eax\n\t" 237| 176k| "adox %%rax, %%rcx\n\t" 238| 176k| "adcx %%rax, %%rcx\n\t" 239| 176k| "movq %%rcx, %%r9\n\t" 240| 176k| "movq %%r10, 16(%[z])\n\t" 241| | 242| 176k| "movq 8(%[x]), %%rdx\n\t" // x[1] * x[2..5] 243| 176k| "xorl %%eax, %%eax\n\t" 244| 176k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 245| 176k| "adcx %%rax, %%r11\n\t" 246| 176k| "movq %%r11, 24(%[z])\n\t" 247| 176k| "mulx 24(%[x]), %%rax, %%r10\n\t" 248| 176k| "adox %%rcx, %%rax\n\t" 249| 176k| "adcx %%rax, %%r12\n\t" 250| 176k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 251| 176k| "adox %%r10, %%rax\n\t" 252| 176k| "adcx %%rax, %%r8\n\t" 253| 176k| "mulx 40(%[x]), %%rax, %%r10\n\t" 254| 176k| "adox %%rcx, %%rax\n\t" 255| 176k| "adcx %%rax, %%r9\n\t" 256| 176k| "movl $0, %%eax\n\t" 257| 176k| "adox %%rax, %%r10\n\t" 258| 176k| "adcx %%rax, %%r10\n\t" 259| 176k| "movq %%r12, 32(%[z])\n\t" 260| | 261| 176k| "movq 16(%[x]), %%rdx\n\t" // x[2] * x[3..5] 262| 176k| "xorl %%eax, %%eax\n\t" 263| 176k| "mulx 24(%[x]), %%rax, %%rcx\n\t" 264| 176k| "adcx %%rax, %%r8\n\t" 265| 176k| "movq %%r8, 40(%[z])\n\t" 266| 176k| "mulx 32(%[x]), %%rax, %%r11\n\t" 267| 176k| "adox %%rcx, %%rax\n\t" 268| 176k| "adcx %%rax, %%r9\n\t" 269| 176k| "mulx 40(%[x]), %%rax, %%rcx\n\t" 270| 176k| "adox %%r11, %%rax\n\t" 271| 176k| "adcx %%rax, %%r10\n\t" 272| 176k| "movl $0, %%eax\n\t" 273| 176k| "adox %%rax, %%rcx\n\t" 274| 176k| "adcx %%rax, %%rcx\n\t" 275| 176k| "movq %%rcx, %%r11\n\t" 276| 176k| "movq %%r9, 48(%[z])\n\t" 277| | 278| 176k| "movq 24(%[x]), %%rdx\n\t" // x[3] * x[4..5] 279| 176k| "xorl %%eax, %%eax\n\t" 280| 176k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 281| 176k| "adcx %%rax, %%r10\n\t" 282| 176k| "movq %%r10, 56(%[z])\n\t" 283| 176k| "mulx 40(%[x]), %%rax, %%r12\n\t" 284| 176k| "adox %%rcx, %%rax\n\t" 285| 176k| "adcx %%rax, %%r11\n\t" 286| 176k| "movl $0, %%eax\n\t" 287| 176k| "adox %%rax, %%r12\n\t" 288| 176k| "adcx %%rax, %%r12\n\t" 289| 176k| "movq %%r11, 64(%[z])\n\t" 290| | 291| 176k| "movq 32(%[x]), %%rdx\n\t" // x[4] * x[5..5] 292| 176k| "xorl %%eax, %%eax\n\t" 293| 176k| "mulx 40(%[x]), %%rax, %%rcx\n\t" 294| 176k| "adcx %%rax, %%r12\n\t" 295| 176k| "movq %%r12, 72(%[z])\n\t" 296| 176k| "movl $0, %%eax\n\t" 297| 176k| "adox %%rax, %%rcx\n\t" 298| 176k| "adcx %%rax, %%rcx\n\t" 299| 176k| "movq %%rcx, %%r8\n\t" 300| 176k| "movq %%r8, 80(%[z])\n\t" 301| | 302| 176k| "movq $0, 88(%[z])\n\t" 303| 176k| "xorl %%eax, %%eax\n\t" // double the cross products and add the squares 304| 176k| "movq 0(%[x]), %%rdx\n\t" 305| 176k| "mulx %%rdx, %%rax, %%rcx\n\t" 306| 176k| "movq %%rax, 0(%[z])\n\t" 307| 176k| "movq 8(%[z]), %%r8\n\t" 308| 176k| "adcx %%r8, %%r8\n\t" 309| 176k| "adox %%rcx, %%r8\n\t" 310| 176k| "movq %%r8, 8(%[z])\n\t" 311| 176k| "movq 8(%[x]), %%rdx\n\t" 312| 176k| "mulx %%rdx, %%rax, %%rcx\n\t" 313| 176k| "movq 16(%[z]), %%r8\n\t" 314| 176k| "adcx %%r8, %%r8\n\t" 315| 176k| "adox %%rax, %%r8\n\t" 316| 176k| "movq %%r8, 16(%[z])\n\t" 317| 176k| "movq 24(%[z]), %%r8\n\t" 318| 176k| "adcx %%r8, %%r8\n\t" 319| 176k| "adox %%rcx, %%r8\n\t" 320| 176k| "movq %%r8, 24(%[z])\n\t" 321| 176k| "movq 16(%[x]), %%rdx\n\t" 322| 176k| "mulx %%rdx, %%rax, %%rcx\n\t" 323| 176k| "movq 32(%[z]), %%r8\n\t" 324| 176k| "adcx %%r8, %%r8\n\t" 325| 176k| "adox %%rax, %%r8\n\t" 326| 176k| "movq %%r8, 32(%[z])\n\t" 327| 176k| "movq 40(%[z]), %%r8\n\t" 328| 176k| "adcx %%r8, %%r8\n\t" 329| 176k| "adox %%rcx, %%r8\n\t" 330| 176k| "movq %%r8, 40(%[z])\n\t" 331| 176k| "movq 24(%[x]), %%rdx\n\t" 332| 176k| "mulx %%rdx, %%rax, %%rcx\n\t" 333| 176k| "movq 48(%[z]), %%r8\n\t" 334| 176k| "adcx %%r8, %%r8\n\t" 335| 176k| "adox %%rax, %%r8\n\t" 336| 176k| "movq %%r8, 48(%[z])\n\t" 337| 176k| "movq 56(%[z]), %%r8\n\t" 338| 176k| "adcx %%r8, %%r8\n\t" 339| 176k| "adox %%rcx, %%r8\n\t" 340| 176k| "movq %%r8, 56(%[z])\n\t" 341| 176k| "movq 32(%[x]), %%rdx\n\t" 342| 176k| "mulx %%rdx, %%rax, %%rcx\n\t" 343| 176k| "movq 64(%[z]), %%r8\n\t" 344| 176k| "adcx %%r8, %%r8\n\t" 345| 176k| "adox %%rax, %%r8\n\t" 346| 176k| "movq %%r8, 64(%[z])\n\t" 347| 176k| "movq 72(%[z]), %%r8\n\t" 348| 176k| "adcx %%r8, %%r8\n\t" 349| 176k| "adox %%rcx, %%r8\n\t" 350| 176k| "movq %%r8, 72(%[z])\n\t" 351| 176k| "movq 40(%[x]), %%rdx\n\t" 352| 176k| "mulx %%rdx, %%rax, %%rcx\n\t" 353| 176k| "movq 80(%[z]), %%r8\n\t" 354| 176k| "adcx %%r8, %%r8\n\t" 355| 176k| "adox %%rax, %%r8\n\t" 356| 176k| "movq %%r8, 80(%[z])\n\t" 357| 176k| "movq 88(%[z]), %%r8\n\t" 358| 176k| "adcx %%r8, %%r8\n\t" 359| 176k| "adox %%rcx, %%r8\n\t" 360| 176k| "movq %%r8, 88(%[z])\n\t" 361| 176k| : 362| 176k| : [z] "r"(z), [x] "r"(x) 363| 176k| : "rax", "rcx", "rdx", "r8", "r9", "r10", "r11", "r12", "cc", "memory"); 364| | // clang-format on 365| 176k|} _ZN5Botan16bigint_mulx_mul6EPmPKmS2_: 367| 225k|void bigint_mulx_mul6(word z[12], const word x[6], const word y[6]) { 368| | // clang-format off 369| 225k| asm( 370| 225k| "xorl %%r8d, %%r8d\n\t" 371| 225k| "xorl %%r9d, %%r9d\n\t" 372| 225k| "xorl %%r10d, %%r10d\n\t" 373| 225k| "xorl %%r11d, %%r11d\n\t" 374| 225k| "xorl %%r12d, %%r12d\n\t" 375| 225k| "xorl %%r13d, %%r13d\n\t" 376| | 377| 225k| "movq 0(%[y]), %%rdx\n\t" // row 0: x * y[0] 378| 225k| "xorl %%eax, %%eax\n\t" 379| 225k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 380| 225k| "adcx %%rax, %%r8\n\t" 381| 225k| "movq %%r8, 0(%[z])\n\t" 382| 225k| "mulx 8(%[x]), %%rax, %%r8\n\t" 383| 225k| "adox %%rcx, %%rax\n\t" 384| 225k| "adcx %%rax, %%r9\n\t" 385| 225k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 386| 225k| "adox %%r8, %%rax\n\t" 387| 225k| "adcx %%rax, %%r10\n\t" 388| 225k| "mulx 24(%[x]), %%rax, %%r8\n\t" 389| 225k| "adox %%rcx, %%rax\n\t" 390| 225k| "adcx %%rax, %%r11\n\t" 391| 225k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 392| 225k| "adox %%r8, %%rax\n\t" 393| 225k| "adcx %%rax, %%r12\n\t" 394| 225k| "mulx 40(%[x]), %%rax, %%r8\n\t" 395| 225k| "adox %%rcx, %%rax\n\t" 396| 225k| "adcx %%rax, %%r13\n\t" 397| 225k| "movl $0, %%eax\n\t" 398| 225k| "adox %%rax, %%r8\n\t" 399| 225k| "adcx %%rax, %%r8\n\t" 400| | 401| 225k| "movq 8(%[y]), %%rdx\n\t" // row 1: x * y[1] 402| 225k| "xorl %%eax, %%eax\n\t" 403| 225k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 404| 225k| "adcx %%rax, %%r9\n\t" 405| 225k| "movq %%r9, 8(%[z])\n\t" 406| 225k| "mulx 8(%[x]), %%rax, %%r9\n\t" 407| 225k| "adox %%rcx, %%rax\n\t" 408| 225k| "adcx %%rax, %%r10\n\t" 409| 225k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 410| 225k| "adox %%r9, %%rax\n\t" 411| 225k| "adcx %%rax, %%r11\n\t" 412| 225k| "mulx 24(%[x]), %%rax, %%r9\n\t" 413| 225k| "adox %%rcx, %%rax\n\t" 414| 225k| "adcx %%rax, %%r12\n\t" 415| 225k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 416| 225k| "adox %%r9, %%rax\n\t" 417| 225k| "adcx %%rax, %%r13\n\t" 418| 225k| "mulx 40(%[x]), %%rax, %%r9\n\t" 419| 225k| "adox %%rcx, %%rax\n\t" 420| 225k| "adcx %%rax, %%r8\n\t" 421| 225k| "movl $0, %%eax\n\t" 422| 225k| "adox %%rax, %%r9\n\t" 423| 225k| "adcx %%rax, %%r9\n\t" 424| | 425| 225k| "movq 16(%[y]), %%rdx\n\t" // row 2: x * y[2] 426| 225k| "xorl %%eax, %%eax\n\t" 427| 225k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 428| 225k| "adcx %%rax, %%r10\n\t" 429| 225k| "movq %%r10, 16(%[z])\n\t" 430| 225k| "mulx 8(%[x]), %%rax, %%r10\n\t" 431| 225k| "adox %%rcx, %%rax\n\t" 432| 225k| "adcx %%rax, %%r11\n\t" 433| 225k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 434| 225k| "adox %%r10, %%rax\n\t" 435| 225k| "adcx %%rax, %%r12\n\t" 436| 225k| "mulx 24(%[x]), %%rax, %%r10\n\t" 437| 225k| "adox %%rcx, %%rax\n\t" 438| 225k| "adcx %%rax, %%r13\n\t" 439| 225k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 440| 225k| "adox %%r10, %%rax\n\t" 441| 225k| "adcx %%rax, %%r8\n\t" 442| 225k| "mulx 40(%[x]), %%rax, %%r10\n\t" 443| 225k| "adox %%rcx, %%rax\n\t" 444| 225k| "adcx %%rax, %%r9\n\t" 445| 225k| "movl $0, %%eax\n\t" 446| 225k| "adox %%rax, %%r10\n\t" 447| 225k| "adcx %%rax, %%r10\n\t" 448| | 449| 225k| "movq 24(%[y]), %%rdx\n\t" // row 3: x * y[3] 450| 225k| "xorl %%eax, %%eax\n\t" 451| 225k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 452| 225k| "adcx %%rax, %%r11\n\t" 453| 225k| "movq %%r11, 24(%[z])\n\t" 454| 225k| "mulx 8(%[x]), %%rax, %%r11\n\t" 455| 225k| "adox %%rcx, %%rax\n\t" 456| 225k| "adcx %%rax, %%r12\n\t" 457| 225k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 458| 225k| "adox %%r11, %%rax\n\t" 459| 225k| "adcx %%rax, %%r13\n\t" 460| 225k| "mulx 24(%[x]), %%rax, %%r11\n\t" 461| 225k| "adox %%rcx, %%rax\n\t" 462| 225k| "adcx %%rax, %%r8\n\t" 463| 225k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 464| 225k| "adox %%r11, %%rax\n\t" 465| 225k| "adcx %%rax, %%r9\n\t" 466| 225k| "mulx 40(%[x]), %%rax, %%r11\n\t" 467| 225k| "adox %%rcx, %%rax\n\t" 468| 225k| "adcx %%rax, %%r10\n\t" 469| 225k| "movl $0, %%eax\n\t" 470| 225k| "adox %%rax, %%r11\n\t" 471| 225k| "adcx %%rax, %%r11\n\t" 472| | 473| 225k| "movq 32(%[y]), %%rdx\n\t" // row 4: x * y[4] 474| 225k| "xorl %%eax, %%eax\n\t" 475| 225k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 476| 225k| "adcx %%rax, %%r12\n\t" 477| 225k| "movq %%r12, 32(%[z])\n\t" 478| 225k| "mulx 8(%[x]), %%rax, %%r12\n\t" 479| 225k| "adox %%rcx, %%rax\n\t" 480| 225k| "adcx %%rax, %%r13\n\t" 481| 225k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 482| 225k| "adox %%r12, %%rax\n\t" 483| 225k| "adcx %%rax, %%r8\n\t" 484| 225k| "mulx 24(%[x]), %%rax, %%r12\n\t" 485| 225k| "adox %%rcx, %%rax\n\t" 486| 225k| "adcx %%rax, %%r9\n\t" 487| 225k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 488| 225k| "adox %%r12, %%rax\n\t" 489| 225k| "adcx %%rax, %%r10\n\t" 490| 225k| "mulx 40(%[x]), %%rax, %%r12\n\t" 491| 225k| "adox %%rcx, %%rax\n\t" 492| 225k| "adcx %%rax, %%r11\n\t" 493| 225k| "movl $0, %%eax\n\t" 494| 225k| "adox %%rax, %%r12\n\t" 495| 225k| "adcx %%rax, %%r12\n\t" 496| | 497| 225k| "movq 40(%[y]), %%rdx\n\t" // row 5: x * y[5] 498| 225k| "xorl %%eax, %%eax\n\t" 499| 225k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 500| 225k| "adcx %%rax, %%r13\n\t" 501| 225k| "movq %%r13, 40(%[z])\n\t" 502| 225k| "mulx 8(%[x]), %%rax, %%r13\n\t" 503| 225k| "adox %%rcx, %%rax\n\t" 504| 225k| "adcx %%rax, %%r8\n\t" 505| 225k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 506| 225k| "adox %%r13, %%rax\n\t" 507| 225k| "adcx %%rax, %%r9\n\t" 508| 225k| "mulx 24(%[x]), %%rax, %%r13\n\t" 509| 225k| "adox %%rcx, %%rax\n\t" 510| 225k| "adcx %%rax, %%r10\n\t" 511| 225k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 512| 225k| "adox %%r13, %%rax\n\t" 513| 225k| "adcx %%rax, %%r11\n\t" 514| 225k| "mulx 40(%[x]), %%rax, %%r13\n\t" 515| 225k| "adox %%rcx, %%rax\n\t" 516| 225k| "adcx %%rax, %%r12\n\t" 517| 225k| "movl $0, %%eax\n\t" 518| 225k| "adox %%rax, %%r13\n\t" 519| 225k| "adcx %%rax, %%r13\n\t" 520| | 521| 225k| "movq %%r8, 48(%[z])\n\t" 522| 225k| "movq %%r9, 56(%[z])\n\t" 523| 225k| "movq %%r10, 64(%[z])\n\t" 524| 225k| "movq %%r11, 72(%[z])\n\t" 525| 225k| "movq %%r12, 80(%[z])\n\t" 526| 225k| "movq %%r13, 88(%[z])\n\t" 527| 225k| : 528| 225k| : [z] "r"(z), [x] "r"(x), [y] "r"(y) 529| 225k| : "rax", "rcx", "rdx", "r8", "r9", "r10", "r11", "r12", "r13", "cc", "memory"); 530| | // clang-format on 531| 225k|} _ZN5Botan16bigint_mulx_sqr8EPmPKm: 533| 46.3M|void bigint_mulx_sqr8(word z[16], const word x[8]) { 534| | // clang-format off 535| 46.3M| asm( 536| 46.3M| "xorl %%r9d, %%r9d\n\t" 537| 46.3M| "xorl %%r10d, %%r10d\n\t" 538| 46.3M| "xorl %%r11d, %%r11d\n\t" 539| 46.3M| "xorl %%r12d, %%r12d\n\t" 540| 46.3M| "xorl %%r13d, %%r13d\n\t" 541| 46.3M| "xorl %%r14d, %%r14d\n\t" 542| 46.3M| "xorl %%r8d, %%r8d\n\t" 543| | 544| 46.3M| "movq 0(%[x]), %%rdx\n\t" // x[0] * x[1..7] 545| 46.3M| "xorl %%eax, %%eax\n\t" 546| 46.3M| "mulx 8(%[x]), %%rax, %%rcx\n\t" 547| 46.3M| "adcx %%rax, %%r9\n\t" 548| 46.3M| "movq %%r9, 8(%[z])\n\t" 549| 46.3M| "mulx 16(%[x]), %%rax, %%r9\n\t" 550| 46.3M| "adox %%rcx, %%rax\n\t" 551| 46.3M| "adcx %%rax, %%r10\n\t" 552| 46.3M| "mulx 24(%[x]), %%rax, %%rcx\n\t" 553| 46.3M| "adox %%r9, %%rax\n\t" 554| 46.3M| "adcx %%rax, %%r11\n\t" 555| 46.3M| "mulx 32(%[x]), %%rax, %%r9\n\t" 556| 46.3M| "adox %%rcx, %%rax\n\t" 557| 46.3M| "adcx %%rax, %%r12\n\t" 558| 46.3M| "mulx 40(%[x]), %%rax, %%rcx\n\t" 559| 46.3M| "adox %%r9, %%rax\n\t" 560| 46.3M| "adcx %%rax, %%r13\n\t" 561| 46.3M| "mulx 48(%[x]), %%rax, %%r9\n\t" 562| 46.3M| "adox %%rcx, %%rax\n\t" 563| 46.3M| "adcx %%rax, %%r14\n\t" 564| 46.3M| "mulx 56(%[x]), %%rax, %%rcx\n\t" 565| 46.3M| "adox %%r9, %%rax\n\t" 566| 46.3M| "adcx %%rax, %%r8\n\t" 567| 46.3M| "movl $0, %%eax\n\t" 568| 46.3M| "adox %%rax, %%rcx\n\t" 569| 46.3M| "adcx %%rax, %%rcx\n\t" 570| 46.3M| "movq %%rcx, %%r9\n\t" 571| 46.3M| "movq %%r10, 16(%[z])\n\t" 572| | 573| 46.3M| "movq 8(%[x]), %%rdx\n\t" // x[1] * x[2..7] 574| 46.3M| "xorl %%eax, %%eax\n\t" 575| 46.3M| "mulx 16(%[x]), %%rax, %%rcx\n\t" 576| 46.3M| "adcx %%rax, %%r11\n\t" 577| 46.3M| "movq %%r11, 24(%[z])\n\t" 578| 46.3M| "mulx 24(%[x]), %%rax, %%r10\n\t" 579| 46.3M| "adox %%rcx, %%rax\n\t" 580| 46.3M| "adcx %%rax, %%r12\n\t" 581| 46.3M| "mulx 32(%[x]), %%rax, %%rcx\n\t" 582| 46.3M| "adox %%r10, %%rax\n\t" 583| 46.3M| "adcx %%rax, %%r13\n\t" 584| 46.3M| "mulx 40(%[x]), %%rax, %%r10\n\t" 585| 46.3M| "adox %%rcx, %%rax\n\t" 586| 46.3M| "adcx %%rax, %%r14\n\t" 587| 46.3M| "mulx 48(%[x]), %%rax, %%rcx\n\t" 588| 46.3M| "adox %%r10, %%rax\n\t" 589| 46.3M| "adcx %%rax, %%r8\n\t" 590| 46.3M| "mulx 56(%[x]), %%rax, %%r10\n\t" 591| 46.3M| "adox %%rcx, %%rax\n\t" 592| 46.3M| "adcx %%rax, %%r9\n\t" 593| 46.3M| "movl $0, %%eax\n\t" 594| 46.3M| "adox %%rax, %%r10\n\t" 595| 46.3M| "adcx %%rax, %%r10\n\t" 596| 46.3M| "movq %%r12, 32(%[z])\n\t" 597| | 598| 46.3M| "movq 16(%[x]), %%rdx\n\t" // x[2] * x[3..7] 599| 46.3M| "xorl %%eax, %%eax\n\t" 600| 46.3M| "mulx 24(%[x]), %%rax, %%rcx\n\t" 601| 46.3M| "adcx %%rax, %%r13\n\t" 602| 46.3M| "movq %%r13, 40(%[z])\n\t" 603| 46.3M| "mulx 32(%[x]), %%rax, %%r11\n\t" 604| 46.3M| "adox %%rcx, %%rax\n\t" 605| 46.3M| "adcx %%rax, %%r14\n\t" 606| 46.3M| "mulx 40(%[x]), %%rax, %%rcx\n\t" 607| 46.3M| "adox %%r11, %%rax\n\t" 608| 46.3M| "adcx %%rax, %%r8\n\t" 609| 46.3M| "mulx 48(%[x]), %%rax, %%r11\n\t" 610| 46.3M| "adox %%rcx, %%rax\n\t" 611| 46.3M| "adcx %%rax, %%r9\n\t" 612| 46.3M| "mulx 56(%[x]), %%rax, %%rcx\n\t" 613| 46.3M| "adox %%r11, %%rax\n\t" 614| 46.3M| "adcx %%rax, %%r10\n\t" 615| 46.3M| "movl $0, %%eax\n\t" 616| 46.3M| "adox %%rax, %%rcx\n\t" 617| 46.3M| "adcx %%rax, %%rcx\n\t" 618| 46.3M| "movq %%rcx, %%r11\n\t" 619| 46.3M| "movq %%r14, 48(%[z])\n\t" 620| | 621| 46.3M| "movq 24(%[x]), %%rdx\n\t" // x[3] * x[4..7] 622| 46.3M| "xorl %%eax, %%eax\n\t" 623| 46.3M| "mulx 32(%[x]), %%rax, %%rcx\n\t" 624| 46.3M| "adcx %%rax, %%r8\n\t" 625| 46.3M| "movq %%r8, 56(%[z])\n\t" 626| 46.3M| "mulx 40(%[x]), %%rax, %%r12\n\t" 627| 46.3M| "adox %%rcx, %%rax\n\t" 628| 46.3M| "adcx %%rax, %%r9\n\t" 629| 46.3M| "mulx 48(%[x]), %%rax, %%rcx\n\t" 630| 46.3M| "adox %%r12, %%rax\n\t" 631| 46.3M| "adcx %%rax, %%r10\n\t" 632| 46.3M| "mulx 56(%[x]), %%rax, %%r12\n\t" 633| 46.3M| "adox %%rcx, %%rax\n\t" 634| 46.3M| "adcx %%rax, %%r11\n\t" 635| 46.3M| "movl $0, %%eax\n\t" 636| 46.3M| "adox %%rax, %%r12\n\t" 637| 46.3M| "adcx %%rax, %%r12\n\t" 638| 46.3M| "movq %%r9, 64(%[z])\n\t" 639| | 640| 46.3M| "movq 32(%[x]), %%rdx\n\t" // x[4] * x[5..7] 641| 46.3M| "xorl %%eax, %%eax\n\t" 642| 46.3M| "mulx 40(%[x]), %%rax, %%rcx\n\t" 643| 46.3M| "adcx %%rax, %%r10\n\t" 644| 46.3M| "movq %%r10, 72(%[z])\n\t" 645| 46.3M| "mulx 48(%[x]), %%rax, %%r13\n\t" 646| 46.3M| "adox %%rcx, %%rax\n\t" 647| 46.3M| "adcx %%rax, %%r11\n\t" 648| 46.3M| "mulx 56(%[x]), %%rax, %%rcx\n\t" 649| 46.3M| "adox %%r13, %%rax\n\t" 650| 46.3M| "adcx %%rax, %%r12\n\t" 651| 46.3M| "movl $0, %%eax\n\t" 652| 46.3M| "adox %%rax, %%rcx\n\t" 653| 46.3M| "adcx %%rax, %%rcx\n\t" 654| 46.3M| "movq %%rcx, %%r13\n\t" 655| 46.3M| "movq %%r11, 80(%[z])\n\t" 656| | 657| 46.3M| "movq 40(%[x]), %%rdx\n\t" // x[5] * x[6..7] 658| 46.3M| "xorl %%eax, %%eax\n\t" 659| 46.3M| "mulx 48(%[x]), %%rax, %%rcx\n\t" 660| 46.3M| "adcx %%rax, %%r12\n\t" 661| 46.3M| "movq %%r12, 88(%[z])\n\t" 662| 46.3M| "mulx 56(%[x]), %%rax, %%r14\n\t" 663| 46.3M| "adox %%rcx, %%rax\n\t" 664| 46.3M| "adcx %%rax, %%r13\n\t" 665| 46.3M| "movl $0, %%eax\n\t" 666| 46.3M| "adox %%rax, %%r14\n\t" 667| 46.3M| "adcx %%rax, %%r14\n\t" 668| 46.3M| "movq %%r13, 96(%[z])\n\t" 669| | 670| 46.3M| "movq 48(%[x]), %%rdx\n\t" // x[6] * x[7..7] 671| 46.3M| "xorl %%eax, %%eax\n\t" 672| 46.3M| "mulx 56(%[x]), %%rax, %%rcx\n\t" 673| 46.3M| "adcx %%rax, %%r14\n\t" 674| 46.3M| "movq %%r14, 104(%[z])\n\t" 675| 46.3M| "movl $0, %%eax\n\t" 676| 46.3M| "adox %%rax, %%rcx\n\t" 677| 46.3M| "adcx %%rax, %%rcx\n\t" 678| 46.3M| "movq %%rcx, %%r8\n\t" 679| 46.3M| "movq %%r8, 112(%[z])\n\t" 680| | 681| 46.3M| "movq $0, 120(%[z])\n\t" 682| 46.3M| "xorl %%eax, %%eax\n\t" // double the cross products and add the squares 683| 46.3M| "movq 0(%[x]), %%rdx\n\t" 684| 46.3M| "mulx %%rdx, %%rax, %%rcx\n\t" 685| 46.3M| "movq %%rax, 0(%[z])\n\t" 686| 46.3M| "movq 8(%[z]), %%r8\n\t" 687| 46.3M| "adcx %%r8, %%r8\n\t" 688| 46.3M| "adox %%rcx, %%r8\n\t" 689| 46.3M| "movq %%r8, 8(%[z])\n\t" 690| 46.3M| "movq 8(%[x]), %%rdx\n\t" 691| 46.3M| "mulx %%rdx, %%rax, %%rcx\n\t" 692| 46.3M| "movq 16(%[z]), %%r8\n\t" 693| 46.3M| "adcx %%r8, %%r8\n\t" 694| 46.3M| "adox %%rax, %%r8\n\t" 695| 46.3M| "movq %%r8, 16(%[z])\n\t" 696| 46.3M| "movq 24(%[z]), %%r8\n\t" 697| 46.3M| "adcx %%r8, %%r8\n\t" 698| 46.3M| "adox %%rcx, %%r8\n\t" 699| 46.3M| "movq %%r8, 24(%[z])\n\t" 700| 46.3M| "movq 16(%[x]), %%rdx\n\t" 701| 46.3M| "mulx %%rdx, %%rax, %%rcx\n\t" 702| 46.3M| "movq 32(%[z]), %%r8\n\t" 703| 46.3M| "adcx %%r8, %%r8\n\t" 704| 46.3M| "adox %%rax, %%r8\n\t" 705| 46.3M| "movq %%r8, 32(%[z])\n\t" 706| 46.3M| "movq 40(%[z]), %%r8\n\t" 707| 46.3M| "adcx %%r8, %%r8\n\t" 708| 46.3M| "adox %%rcx, %%r8\n\t" 709| 46.3M| "movq %%r8, 40(%[z])\n\t" 710| 46.3M| "movq 24(%[x]), %%rdx\n\t" 711| 46.3M| "mulx %%rdx, %%rax, %%rcx\n\t" 712| 46.3M| "movq 48(%[z]), %%r8\n\t" 713| 46.3M| "adcx %%r8, %%r8\n\t" 714| 46.3M| "adox %%rax, %%r8\n\t" 715| 46.3M| "movq %%r8, 48(%[z])\n\t" 716| 46.3M| "movq 56(%[z]), %%r8\n\t" 717| 46.3M| "adcx %%r8, %%r8\n\t" 718| 46.3M| "adox %%rcx, %%r8\n\t" 719| 46.3M| "movq %%r8, 56(%[z])\n\t" 720| 46.3M| "movq 32(%[x]), %%rdx\n\t" 721| 46.3M| "mulx %%rdx, %%rax, %%rcx\n\t" 722| 46.3M| "movq 64(%[z]), %%r8\n\t" 723| 46.3M| "adcx %%r8, %%r8\n\t" 724| 46.3M| "adox %%rax, %%r8\n\t" 725| 46.3M| "movq %%r8, 64(%[z])\n\t" 726| 46.3M| "movq 72(%[z]), %%r8\n\t" 727| 46.3M| "adcx %%r8, %%r8\n\t" 728| 46.3M| "adox %%rcx, %%r8\n\t" 729| 46.3M| "movq %%r8, 72(%[z])\n\t" 730| 46.3M| "movq 40(%[x]), %%rdx\n\t" 731| 46.3M| "mulx %%rdx, %%rax, %%rcx\n\t" 732| 46.3M| "movq 80(%[z]), %%r8\n\t" 733| 46.3M| "adcx %%r8, %%r8\n\t" 734| 46.3M| "adox %%rax, %%r8\n\t" 735| 46.3M| "movq %%r8, 80(%[z])\n\t" 736| 46.3M| "movq 88(%[z]), %%r8\n\t" 737| 46.3M| "adcx %%r8, %%r8\n\t" 738| 46.3M| "adox %%rcx, %%r8\n\t" 739| 46.3M| "movq %%r8, 88(%[z])\n\t" 740| 46.3M| "movq 48(%[x]), %%rdx\n\t" 741| 46.3M| "mulx %%rdx, %%rax, %%rcx\n\t" 742| 46.3M| "movq 96(%[z]), %%r8\n\t" 743| 46.3M| "adcx %%r8, %%r8\n\t" 744| 46.3M| "adox %%rax, %%r8\n\t" 745| 46.3M| "movq %%r8, 96(%[z])\n\t" 746| 46.3M| "movq 104(%[z]), %%r8\n\t" 747| 46.3M| "adcx %%r8, %%r8\n\t" 748| 46.3M| "adox %%rcx, %%r8\n\t" 749| 46.3M| "movq %%r8, 104(%[z])\n\t" 750| 46.3M| "movq 56(%[x]), %%rdx\n\t" 751| 46.3M| "mulx %%rdx, %%rax, %%rcx\n\t" 752| 46.3M| "movq 112(%[z]), %%r8\n\t" 753| 46.3M| "adcx %%r8, %%r8\n\t" 754| 46.3M| "adox %%rax, %%r8\n\t" 755| 46.3M| "movq %%r8, 112(%[z])\n\t" 756| 46.3M| "movq 120(%[z]), %%r8\n\t" 757| 46.3M| "adcx %%r8, %%r8\n\t" 758| 46.3M| "adox %%rcx, %%r8\n\t" 759| 46.3M| "movq %%r8, 120(%[z])\n\t" 760| 46.3M| : 761| 46.3M| : [z] "r"(z), [x] "r"(x) 762| 46.3M| : "rax", "rcx", "rdx", "r8", "r9", "r10", "r11", "r12", "r13", "r14", "cc", "memory"); 763| | // clang-format on 764| 46.3M|} _ZN5Botan16bigint_mulx_mul8EPmPKmS2_: 766| 123k|void bigint_mulx_mul8(word z[16], const word x[8], const word y[8]) { 767| | // clang-format off 768| 123k| asm( 769| 123k| "xorl %%r8d, %%r8d\n\t" 770| 123k| "xorl %%r9d, %%r9d\n\t" 771| 123k| "xorl %%r10d, %%r10d\n\t" 772| 123k| "xorl %%r11d, %%r11d\n\t" 773| 123k| "xorl %%r12d, %%r12d\n\t" 774| 123k| "xorl %%r13d, %%r13d\n\t" 775| 123k| "xorl %%r14d, %%r14d\n\t" 776| 123k| "xorl %%r15d, %%r15d\n\t" 777| | 778| 123k| "movq 0(%[y]), %%rdx\n\t" // row 0: x * y[0] 779| 123k| "xorl %%eax, %%eax\n\t" 780| 123k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 781| 123k| "adcx %%rax, %%r8\n\t" 782| 123k| "movq %%r8, 0(%[z])\n\t" 783| 123k| "mulx 8(%[x]), %%rax, %%r8\n\t" 784| 123k| "adox %%rcx, %%rax\n\t" 785| 123k| "adcx %%rax, %%r9\n\t" 786| 123k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 787| 123k| "adox %%r8, %%rax\n\t" 788| 123k| "adcx %%rax, %%r10\n\t" 789| 123k| "mulx 24(%[x]), %%rax, %%r8\n\t" 790| 123k| "adox %%rcx, %%rax\n\t" 791| 123k| "adcx %%rax, %%r11\n\t" 792| 123k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 793| 123k| "adox %%r8, %%rax\n\t" 794| 123k| "adcx %%rax, %%r12\n\t" 795| 123k| "mulx 40(%[x]), %%rax, %%r8\n\t" 796| 123k| "adox %%rcx, %%rax\n\t" 797| 123k| "adcx %%rax, %%r13\n\t" 798| 123k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 799| 123k| "adox %%r8, %%rax\n\t" 800| 123k| "adcx %%rax, %%r14\n\t" 801| 123k| "mulx 56(%[x]), %%rax, %%r8\n\t" 802| 123k| "adox %%rcx, %%rax\n\t" 803| 123k| "adcx %%rax, %%r15\n\t" 804| 123k| "movl $0, %%eax\n\t" 805| 123k| "adox %%rax, %%r8\n\t" 806| 123k| "adcx %%rax, %%r8\n\t" 807| | 808| 123k| "movq 8(%[y]), %%rdx\n\t" // row 1: x * y[1] 809| 123k| "xorl %%eax, %%eax\n\t" 810| 123k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 811| 123k| "adcx %%rax, %%r9\n\t" 812| 123k| "movq %%r9, 8(%[z])\n\t" 813| 123k| "mulx 8(%[x]), %%rax, %%r9\n\t" 814| 123k| "adox %%rcx, %%rax\n\t" 815| 123k| "adcx %%rax, %%r10\n\t" 816| 123k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 817| 123k| "adox %%r9, %%rax\n\t" 818| 123k| "adcx %%rax, %%r11\n\t" 819| 123k| "mulx 24(%[x]), %%rax, %%r9\n\t" 820| 123k| "adox %%rcx, %%rax\n\t" 821| 123k| "adcx %%rax, %%r12\n\t" 822| 123k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 823| 123k| "adox %%r9, %%rax\n\t" 824| 123k| "adcx %%rax, %%r13\n\t" 825| 123k| "mulx 40(%[x]), %%rax, %%r9\n\t" 826| 123k| "adox %%rcx, %%rax\n\t" 827| 123k| "adcx %%rax, %%r14\n\t" 828| 123k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 829| 123k| "adox %%r9, %%rax\n\t" 830| 123k| "adcx %%rax, %%r15\n\t" 831| 123k| "mulx 56(%[x]), %%rax, %%r9\n\t" 832| 123k| "adox %%rcx, %%rax\n\t" 833| 123k| "adcx %%rax, %%r8\n\t" 834| 123k| "movl $0, %%eax\n\t" 835| 123k| "adox %%rax, %%r9\n\t" 836| 123k| "adcx %%rax, %%r9\n\t" 837| | 838| 123k| "movq 16(%[y]), %%rdx\n\t" // row 2: x * y[2] 839| 123k| "xorl %%eax, %%eax\n\t" 840| 123k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 841| 123k| "adcx %%rax, %%r10\n\t" 842| 123k| "movq %%r10, 16(%[z])\n\t" 843| 123k| "mulx 8(%[x]), %%rax, %%r10\n\t" 844| 123k| "adox %%rcx, %%rax\n\t" 845| 123k| "adcx %%rax, %%r11\n\t" 846| 123k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 847| 123k| "adox %%r10, %%rax\n\t" 848| 123k| "adcx %%rax, %%r12\n\t" 849| 123k| "mulx 24(%[x]), %%rax, %%r10\n\t" 850| 123k| "adox %%rcx, %%rax\n\t" 851| 123k| "adcx %%rax, %%r13\n\t" 852| 123k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 853| 123k| "adox %%r10, %%rax\n\t" 854| 123k| "adcx %%rax, %%r14\n\t" 855| 123k| "mulx 40(%[x]), %%rax, %%r10\n\t" 856| 123k| "adox %%rcx, %%rax\n\t" 857| 123k| "adcx %%rax, %%r15\n\t" 858| 123k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 859| 123k| "adox %%r10, %%rax\n\t" 860| 123k| "adcx %%rax, %%r8\n\t" 861| 123k| "mulx 56(%[x]), %%rax, %%r10\n\t" 862| 123k| "adox %%rcx, %%rax\n\t" 863| 123k| "adcx %%rax, %%r9\n\t" 864| 123k| "movl $0, %%eax\n\t" 865| 123k| "adox %%rax, %%r10\n\t" 866| 123k| "adcx %%rax, %%r10\n\t" 867| | 868| 123k| "movq 24(%[y]), %%rdx\n\t" // row 3: x * y[3] 869| 123k| "xorl %%eax, %%eax\n\t" 870| 123k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 871| 123k| "adcx %%rax, %%r11\n\t" 872| 123k| "movq %%r11, 24(%[z])\n\t" 873| 123k| "mulx 8(%[x]), %%rax, %%r11\n\t" 874| 123k| "adox %%rcx, %%rax\n\t" 875| 123k| "adcx %%rax, %%r12\n\t" 876| 123k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 877| 123k| "adox %%r11, %%rax\n\t" 878| 123k| "adcx %%rax, %%r13\n\t" 879| 123k| "mulx 24(%[x]), %%rax, %%r11\n\t" 880| 123k| "adox %%rcx, %%rax\n\t" 881| 123k| "adcx %%rax, %%r14\n\t" 882| 123k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 883| 123k| "adox %%r11, %%rax\n\t" 884| 123k| "adcx %%rax, %%r15\n\t" 885| 123k| "mulx 40(%[x]), %%rax, %%r11\n\t" 886| 123k| "adox %%rcx, %%rax\n\t" 887| 123k| "adcx %%rax, %%r8\n\t" 888| 123k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 889| 123k| "adox %%r11, %%rax\n\t" 890| 123k| "adcx %%rax, %%r9\n\t" 891| 123k| "mulx 56(%[x]), %%rax, %%r11\n\t" 892| 123k| "adox %%rcx, %%rax\n\t" 893| 123k| "adcx %%rax, %%r10\n\t" 894| 123k| "movl $0, %%eax\n\t" 895| 123k| "adox %%rax, %%r11\n\t" 896| 123k| "adcx %%rax, %%r11\n\t" 897| | 898| 123k| "movq 32(%[y]), %%rdx\n\t" // row 4: x * y[4] 899| 123k| "xorl %%eax, %%eax\n\t" 900| 123k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 901| 123k| "adcx %%rax, %%r12\n\t" 902| 123k| "movq %%r12, 32(%[z])\n\t" 903| 123k| "mulx 8(%[x]), %%rax, %%r12\n\t" 904| 123k| "adox %%rcx, %%rax\n\t" 905| 123k| "adcx %%rax, %%r13\n\t" 906| 123k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 907| 123k| "adox %%r12, %%rax\n\t" 908| 123k| "adcx %%rax, %%r14\n\t" 909| 123k| "mulx 24(%[x]), %%rax, %%r12\n\t" 910| 123k| "adox %%rcx, %%rax\n\t" 911| 123k| "adcx %%rax, %%r15\n\t" 912| 123k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 913| 123k| "adox %%r12, %%rax\n\t" 914| 123k| "adcx %%rax, %%r8\n\t" 915| 123k| "mulx 40(%[x]), %%rax, %%r12\n\t" 916| 123k| "adox %%rcx, %%rax\n\t" 917| 123k| "adcx %%rax, %%r9\n\t" 918| 123k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 919| 123k| "adox %%r12, %%rax\n\t" 920| 123k| "adcx %%rax, %%r10\n\t" 921| 123k| "mulx 56(%[x]), %%rax, %%r12\n\t" 922| 123k| "adox %%rcx, %%rax\n\t" 923| 123k| "adcx %%rax, %%r11\n\t" 924| 123k| "movl $0, %%eax\n\t" 925| 123k| "adox %%rax, %%r12\n\t" 926| 123k| "adcx %%rax, %%r12\n\t" 927| | 928| 123k| "movq 40(%[y]), %%rdx\n\t" // row 5: x * y[5] 929| 123k| "xorl %%eax, %%eax\n\t" 930| 123k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 931| 123k| "adcx %%rax, %%r13\n\t" 932| 123k| "movq %%r13, 40(%[z])\n\t" 933| 123k| "mulx 8(%[x]), %%rax, %%r13\n\t" 934| 123k| "adox %%rcx, %%rax\n\t" 935| 123k| "adcx %%rax, %%r14\n\t" 936| 123k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 937| 123k| "adox %%r13, %%rax\n\t" 938| 123k| "adcx %%rax, %%r15\n\t" 939| 123k| "mulx 24(%[x]), %%rax, %%r13\n\t" 940| 123k| "adox %%rcx, %%rax\n\t" 941| 123k| "adcx %%rax, %%r8\n\t" 942| 123k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 943| 123k| "adox %%r13, %%rax\n\t" 944| 123k| "adcx %%rax, %%r9\n\t" 945| 123k| "mulx 40(%[x]), %%rax, %%r13\n\t" 946| 123k| "adox %%rcx, %%rax\n\t" 947| 123k| "adcx %%rax, %%r10\n\t" 948| 123k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 949| 123k| "adox %%r13, %%rax\n\t" 950| 123k| "adcx %%rax, %%r11\n\t" 951| 123k| "mulx 56(%[x]), %%rax, %%r13\n\t" 952| 123k| "adox %%rcx, %%rax\n\t" 953| 123k| "adcx %%rax, %%r12\n\t" 954| 123k| "movl $0, %%eax\n\t" 955| 123k| "adox %%rax, %%r13\n\t" 956| 123k| "adcx %%rax, %%r13\n\t" 957| | 958| 123k| "movq 48(%[y]), %%rdx\n\t" // row 6: x * y[6] 959| 123k| "xorl %%eax, %%eax\n\t" 960| 123k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 961| 123k| "adcx %%rax, %%r14\n\t" 962| 123k| "movq %%r14, 48(%[z])\n\t" 963| 123k| "mulx 8(%[x]), %%rax, %%r14\n\t" 964| 123k| "adox %%rcx, %%rax\n\t" 965| 123k| "adcx %%rax, %%r15\n\t" 966| 123k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 967| 123k| "adox %%r14, %%rax\n\t" 968| 123k| "adcx %%rax, %%r8\n\t" 969| 123k| "mulx 24(%[x]), %%rax, %%r14\n\t" 970| 123k| "adox %%rcx, %%rax\n\t" 971| 123k| "adcx %%rax, %%r9\n\t" 972| 123k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 973| 123k| "adox %%r14, %%rax\n\t" 974| 123k| "adcx %%rax, %%r10\n\t" 975| 123k| "mulx 40(%[x]), %%rax, %%r14\n\t" 976| 123k| "adox %%rcx, %%rax\n\t" 977| 123k| "adcx %%rax, %%r11\n\t" 978| 123k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 979| 123k| "adox %%r14, %%rax\n\t" 980| 123k| "adcx %%rax, %%r12\n\t" 981| 123k| "mulx 56(%[x]), %%rax, %%r14\n\t" 982| 123k| "adox %%rcx, %%rax\n\t" 983| 123k| "adcx %%rax, %%r13\n\t" 984| 123k| "movl $0, %%eax\n\t" 985| 123k| "adox %%rax, %%r14\n\t" 986| 123k| "adcx %%rax, %%r14\n\t" 987| | 988| 123k| "movq 56(%[y]), %%rdx\n\t" // row 7: x * y[7] 989| 123k| "xorl %%eax, %%eax\n\t" 990| 123k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 991| 123k| "adcx %%rax, %%r15\n\t" 992| 123k| "movq %%r15, 56(%[z])\n\t" 993| 123k| "mulx 8(%[x]), %%rax, %%r15\n\t" 994| 123k| "adox %%rcx, %%rax\n\t" 995| 123k| "adcx %%rax, %%r8\n\t" 996| 123k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 997| 123k| "adox %%r15, %%rax\n\t" 998| 123k| "adcx %%rax, %%r9\n\t" 999| 123k| "mulx 24(%[x]), %%rax, %%r15\n\t" 1000| 123k| "adox %%rcx, %%rax\n\t" 1001| 123k| "adcx %%rax, %%r10\n\t" 1002| 123k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 1003| 123k| "adox %%r15, %%rax\n\t" 1004| 123k| "adcx %%rax, %%r11\n\t" 1005| 123k| "mulx 40(%[x]), %%rax, %%r15\n\t" 1006| 123k| "adox %%rcx, %%rax\n\t" 1007| 123k| "adcx %%rax, %%r12\n\t" 1008| 123k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 1009| 123k| "adox %%r15, %%rax\n\t" 1010| 123k| "adcx %%rax, %%r13\n\t" 1011| 123k| "mulx 56(%[x]), %%rax, %%r15\n\t" 1012| 123k| "adox %%rcx, %%rax\n\t" 1013| 123k| "adcx %%rax, %%r14\n\t" 1014| 123k| "movl $0, %%eax\n\t" 1015| 123k| "adox %%rax, %%r15\n\t" 1016| 123k| "adcx %%rax, %%r15\n\t" 1017| | 1018| 123k| "movq %%r8, 64(%[z])\n\t" 1019| 123k| "movq %%r9, 72(%[z])\n\t" 1020| 123k| "movq %%r10, 80(%[z])\n\t" 1021| 123k| "movq %%r11, 88(%[z])\n\t" 1022| 123k| "movq %%r12, 96(%[z])\n\t" 1023| 123k| "movq %%r13, 104(%[z])\n\t" 1024| 123k| "movq %%r14, 112(%[z])\n\t" 1025| 123k| "movq %%r15, 120(%[z])\n\t" 1026| 123k| : 1027| 123k| : [z] "r"(z), [x] "r"(x), [y] "r"(y) 1028| 123k| : "rax", "rcx", "rdx", "r8", "r9", "r10", "r11", "r12", "r13", "r14", "r15", "cc", "memory"); 1029| | // clang-format on 1030| 123k|} _ZN5Botan16bigint_mulx_sqr9EPmPKm: 1032| 72.7k|void bigint_mulx_sqr9(word z[18], const word x[9]) { 1033| | // clang-format off 1034| 72.7k| asm( 1035| 72.7k| "xorl %%r9d, %%r9d\n\t" 1036| 72.7k| "xorl %%r10d, %%r10d\n\t" 1037| 72.7k| "xorl %%r11d, %%r11d\n\t" 1038| 72.7k| "xorl %%r12d, %%r12d\n\t" 1039| 72.7k| "xorl %%r13d, %%r13d\n\t" 1040| 72.7k| "xorl %%r14d, %%r14d\n\t" 1041| 72.7k| "xorl %%r15d, %%r15d\n\t" 1042| 72.7k| "xorl %%r8d, %%r8d\n\t" 1043| | 1044| 72.7k| "movq 0(%[x]), %%rdx\n\t" // x[0] * x[1..8] 1045| 72.7k| "xorl %%eax, %%eax\n\t" 1046| 72.7k| "mulx 8(%[x]), %%rax, %%rcx\n\t" 1047| 72.7k| "adcx %%rax, %%r9\n\t" 1048| 72.7k| "movq %%r9, 8(%[z])\n\t" 1049| 72.7k| "mulx 16(%[x]), %%rax, %%r9\n\t" 1050| 72.7k| "adox %%rcx, %%rax\n\t" 1051| 72.7k| "adcx %%rax, %%r10\n\t" 1052| 72.7k| "mulx 24(%[x]), %%rax, %%rcx\n\t" 1053| 72.7k| "adox %%r9, %%rax\n\t" 1054| 72.7k| "adcx %%rax, %%r11\n\t" 1055| 72.7k| "mulx 32(%[x]), %%rax, %%r9\n\t" 1056| 72.7k| "adox %%rcx, %%rax\n\t" 1057| 72.7k| "adcx %%rax, %%r12\n\t" 1058| 72.7k| "mulx 40(%[x]), %%rax, %%rcx\n\t" 1059| 72.7k| "adox %%r9, %%rax\n\t" 1060| 72.7k| "adcx %%rax, %%r13\n\t" 1061| 72.7k| "mulx 48(%[x]), %%rax, %%r9\n\t" 1062| 72.7k| "adox %%rcx, %%rax\n\t" 1063| 72.7k| "adcx %%rax, %%r14\n\t" 1064| 72.7k| "mulx 56(%[x]), %%rax, %%rcx\n\t" 1065| 72.7k| "adox %%r9, %%rax\n\t" 1066| 72.7k| "adcx %%rax, %%r15\n\t" 1067| 72.7k| "mulx 64(%[x]), %%rax, %%r9\n\t" 1068| 72.7k| "adox %%rcx, %%rax\n\t" 1069| 72.7k| "adcx %%rax, %%r8\n\t" 1070| 72.7k| "movl $0, %%eax\n\t" 1071| 72.7k| "adox %%rax, %%r9\n\t" 1072| 72.7k| "adcx %%rax, %%r9\n\t" 1073| 72.7k| "movq %%r10, 16(%[z])\n\t" 1074| | 1075| 72.7k| "movq 8(%[x]), %%rdx\n\t" // x[1] * x[2..8] 1076| 72.7k| "xorl %%eax, %%eax\n\t" 1077| 72.7k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 1078| 72.7k| "adcx %%rax, %%r11\n\t" 1079| 72.7k| "movq %%r11, 24(%[z])\n\t" 1080| 72.7k| "mulx 24(%[x]), %%rax, %%r10\n\t" 1081| 72.7k| "adox %%rcx, %%rax\n\t" 1082| 72.7k| "adcx %%rax, %%r12\n\t" 1083| 72.7k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 1084| 72.7k| "adox %%r10, %%rax\n\t" 1085| 72.7k| "adcx %%rax, %%r13\n\t" 1086| 72.7k| "mulx 40(%[x]), %%rax, %%r10\n\t" 1087| 72.7k| "adox %%rcx, %%rax\n\t" 1088| 72.7k| "adcx %%rax, %%r14\n\t" 1089| 72.7k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 1090| 72.7k| "adox %%r10, %%rax\n\t" 1091| 72.7k| "adcx %%rax, %%r15\n\t" 1092| 72.7k| "mulx 56(%[x]), %%rax, %%r10\n\t" 1093| 72.7k| "adox %%rcx, %%rax\n\t" 1094| 72.7k| "adcx %%rax, %%r8\n\t" 1095| 72.7k| "mulx 64(%[x]), %%rax, %%rcx\n\t" 1096| 72.7k| "adox %%r10, %%rax\n\t" 1097| 72.7k| "adcx %%rax, %%r9\n\t" 1098| 72.7k| "movl $0, %%eax\n\t" 1099| 72.7k| "adox %%rax, %%rcx\n\t" 1100| 72.7k| "adcx %%rax, %%rcx\n\t" 1101| 72.7k| "movq %%rcx, %%r10\n\t" 1102| 72.7k| "movq %%r12, 32(%[z])\n\t" 1103| | 1104| 72.7k| "movq 16(%[x]), %%rdx\n\t" // x[2] * x[3..8] 1105| 72.7k| "xorl %%eax, %%eax\n\t" 1106| 72.7k| "mulx 24(%[x]), %%rax, %%rcx\n\t" 1107| 72.7k| "adcx %%rax, %%r13\n\t" 1108| 72.7k| "movq %%r13, 40(%[z])\n\t" 1109| 72.7k| "mulx 32(%[x]), %%rax, %%r11\n\t" 1110| 72.7k| "adox %%rcx, %%rax\n\t" 1111| 72.7k| "adcx %%rax, %%r14\n\t" 1112| 72.7k| "mulx 40(%[x]), %%rax, %%rcx\n\t" 1113| 72.7k| "adox %%r11, %%rax\n\t" 1114| 72.7k| "adcx %%rax, %%r15\n\t" 1115| 72.7k| "mulx 48(%[x]), %%rax, %%r11\n\t" 1116| 72.7k| "adox %%rcx, %%rax\n\t" 1117| 72.7k| "adcx %%rax, %%r8\n\t" 1118| 72.7k| "mulx 56(%[x]), %%rax, %%rcx\n\t" 1119| 72.7k| "adox %%r11, %%rax\n\t" 1120| 72.7k| "adcx %%rax, %%r9\n\t" 1121| 72.7k| "mulx 64(%[x]), %%rax, %%r11\n\t" 1122| 72.7k| "adox %%rcx, %%rax\n\t" 1123| 72.7k| "adcx %%rax, %%r10\n\t" 1124| 72.7k| "movl $0, %%eax\n\t" 1125| 72.7k| "adox %%rax, %%r11\n\t" 1126| 72.7k| "adcx %%rax, %%r11\n\t" 1127| 72.7k| "movq %%r14, 48(%[z])\n\t" 1128| | 1129| 72.7k| "movq 24(%[x]), %%rdx\n\t" // x[3] * x[4..8] 1130| 72.7k| "xorl %%eax, %%eax\n\t" 1131| 72.7k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 1132| 72.7k| "adcx %%rax, %%r15\n\t" 1133| 72.7k| "movq %%r15, 56(%[z])\n\t" 1134| 72.7k| "mulx 40(%[x]), %%rax, %%r12\n\t" 1135| 72.7k| "adox %%rcx, %%rax\n\t" 1136| 72.7k| "adcx %%rax, %%r8\n\t" 1137| 72.7k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 1138| 72.7k| "adox %%r12, %%rax\n\t" 1139| 72.7k| "adcx %%rax, %%r9\n\t" 1140| 72.7k| "mulx 56(%[x]), %%rax, %%r12\n\t" 1141| 72.7k| "adox %%rcx, %%rax\n\t" 1142| 72.7k| "adcx %%rax, %%r10\n\t" 1143| 72.7k| "mulx 64(%[x]), %%rax, %%rcx\n\t" 1144| 72.7k| "adox %%r12, %%rax\n\t" 1145| 72.7k| "adcx %%rax, %%r11\n\t" 1146| 72.7k| "movl $0, %%eax\n\t" 1147| 72.7k| "adox %%rax, %%rcx\n\t" 1148| 72.7k| "adcx %%rax, %%rcx\n\t" 1149| 72.7k| "movq %%rcx, %%r12\n\t" 1150| 72.7k| "movq %%r8, 64(%[z])\n\t" 1151| | 1152| 72.7k| "movq 32(%[x]), %%rdx\n\t" // x[4] * x[5..8] 1153| 72.7k| "xorl %%eax, %%eax\n\t" 1154| 72.7k| "mulx 40(%[x]), %%rax, %%rcx\n\t" 1155| 72.7k| "adcx %%rax, %%r9\n\t" 1156| 72.7k| "movq %%r9, 72(%[z])\n\t" 1157| 72.7k| "mulx 48(%[x]), %%rax, %%r13\n\t" 1158| 72.7k| "adox %%rcx, %%rax\n\t" 1159| 72.7k| "adcx %%rax, %%r10\n\t" 1160| 72.7k| "mulx 56(%[x]), %%rax, %%rcx\n\t" 1161| 72.7k| "adox %%r13, %%rax\n\t" 1162| 72.7k| "adcx %%rax, %%r11\n\t" 1163| 72.7k| "mulx 64(%[x]), %%rax, %%r13\n\t" 1164| 72.7k| "adox %%rcx, %%rax\n\t" 1165| 72.7k| "adcx %%rax, %%r12\n\t" 1166| 72.7k| "movl $0, %%eax\n\t" 1167| 72.7k| "adox %%rax, %%r13\n\t" 1168| 72.7k| "adcx %%rax, %%r13\n\t" 1169| 72.7k| "movq %%r10, 80(%[z])\n\t" 1170| | 1171| 72.7k| "movq 40(%[x]), %%rdx\n\t" // x[5] * x[6..8] 1172| 72.7k| "xorl %%eax, %%eax\n\t" 1173| 72.7k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 1174| 72.7k| "adcx %%rax, %%r11\n\t" 1175| 72.7k| "movq %%r11, 88(%[z])\n\t" 1176| 72.7k| "mulx 56(%[x]), %%rax, %%r14\n\t" 1177| 72.7k| "adox %%rcx, %%rax\n\t" 1178| 72.7k| "adcx %%rax, %%r12\n\t" 1179| 72.7k| "mulx 64(%[x]), %%rax, %%rcx\n\t" 1180| 72.7k| "adox %%r14, %%rax\n\t" 1181| 72.7k| "adcx %%rax, %%r13\n\t" 1182| 72.7k| "movl $0, %%eax\n\t" 1183| 72.7k| "adox %%rax, %%rcx\n\t" 1184| 72.7k| "adcx %%rax, %%rcx\n\t" 1185| 72.7k| "movq %%rcx, %%r14\n\t" 1186| 72.7k| "movq %%r12, 96(%[z])\n\t" 1187| | 1188| 72.7k| "movq 48(%[x]), %%rdx\n\t" // x[6] * x[7..8] 1189| 72.7k| "xorl %%eax, %%eax\n\t" 1190| 72.7k| "mulx 56(%[x]), %%rax, %%rcx\n\t" 1191| 72.7k| "adcx %%rax, %%r13\n\t" 1192| 72.7k| "movq %%r13, 104(%[z])\n\t" 1193| 72.7k| "mulx 64(%[x]), %%rax, %%r15\n\t" 1194| 72.7k| "adox %%rcx, %%rax\n\t" 1195| 72.7k| "adcx %%rax, %%r14\n\t" 1196| 72.7k| "movl $0, %%eax\n\t" 1197| 72.7k| "adox %%rax, %%r15\n\t" 1198| 72.7k| "adcx %%rax, %%r15\n\t" 1199| 72.7k| "movq %%r14, 112(%[z])\n\t" 1200| | 1201| 72.7k| "movq 56(%[x]), %%rdx\n\t" // x[7] * x[8..8] 1202| 72.7k| "xorl %%eax, %%eax\n\t" 1203| 72.7k| "mulx 64(%[x]), %%rax, %%rcx\n\t" 1204| 72.7k| "adcx %%rax, %%r15\n\t" 1205| 72.7k| "movq %%r15, 120(%[z])\n\t" 1206| 72.7k| "movl $0, %%eax\n\t" 1207| 72.7k| "adox %%rax, %%rcx\n\t" 1208| 72.7k| "adcx %%rax, %%rcx\n\t" 1209| 72.7k| "movq %%rcx, %%r8\n\t" 1210| 72.7k| "movq %%r8, 128(%[z])\n\t" 1211| | 1212| 72.7k| "movq $0, 136(%[z])\n\t" 1213| 72.7k| "xorl %%eax, %%eax\n\t" // double the cross products and add the squares 1214| 72.7k| "movq 0(%[x]), %%rdx\n\t" 1215| 72.7k| "mulx %%rdx, %%rax, %%rcx\n\t" 1216| 72.7k| "movq %%rax, 0(%[z])\n\t" 1217| 72.7k| "movq 8(%[z]), %%r8\n\t" 1218| 72.7k| "adcx %%r8, %%r8\n\t" 1219| 72.7k| "adox %%rcx, %%r8\n\t" 1220| 72.7k| "movq %%r8, 8(%[z])\n\t" 1221| 72.7k| "movq 8(%[x]), %%rdx\n\t" 1222| 72.7k| "mulx %%rdx, %%rax, %%rcx\n\t" 1223| 72.7k| "movq 16(%[z]), %%r8\n\t" 1224| 72.7k| "adcx %%r8, %%r8\n\t" 1225| 72.7k| "adox %%rax, %%r8\n\t" 1226| 72.7k| "movq %%r8, 16(%[z])\n\t" 1227| 72.7k| "movq 24(%[z]), %%r8\n\t" 1228| 72.7k| "adcx %%r8, %%r8\n\t" 1229| 72.7k| "adox %%rcx, %%r8\n\t" 1230| 72.7k| "movq %%r8, 24(%[z])\n\t" 1231| 72.7k| "movq 16(%[x]), %%rdx\n\t" 1232| 72.7k| "mulx %%rdx, %%rax, %%rcx\n\t" 1233| 72.7k| "movq 32(%[z]), %%r8\n\t" 1234| 72.7k| "adcx %%r8, %%r8\n\t" 1235| 72.7k| "adox %%rax, %%r8\n\t" 1236| 72.7k| "movq %%r8, 32(%[z])\n\t" 1237| 72.7k| "movq 40(%[z]), %%r8\n\t" 1238| 72.7k| "adcx %%r8, %%r8\n\t" 1239| 72.7k| "adox %%rcx, %%r8\n\t" 1240| 72.7k| "movq %%r8, 40(%[z])\n\t" 1241| 72.7k| "movq 24(%[x]), %%rdx\n\t" 1242| 72.7k| "mulx %%rdx, %%rax, %%rcx\n\t" 1243| 72.7k| "movq 48(%[z]), %%r8\n\t" 1244| 72.7k| "adcx %%r8, %%r8\n\t" 1245| 72.7k| "adox %%rax, %%r8\n\t" 1246| 72.7k| "movq %%r8, 48(%[z])\n\t" 1247| 72.7k| "movq 56(%[z]), %%r8\n\t" 1248| 72.7k| "adcx %%r8, %%r8\n\t" 1249| 72.7k| "adox %%rcx, %%r8\n\t" 1250| 72.7k| "movq %%r8, 56(%[z])\n\t" 1251| 72.7k| "movq 32(%[x]), %%rdx\n\t" 1252| 72.7k| "mulx %%rdx, %%rax, %%rcx\n\t" 1253| 72.7k| "movq 64(%[z]), %%r8\n\t" 1254| 72.7k| "adcx %%r8, %%r8\n\t" 1255| 72.7k| "adox %%rax, %%r8\n\t" 1256| 72.7k| "movq %%r8, 64(%[z])\n\t" 1257| 72.7k| "movq 72(%[z]), %%r8\n\t" 1258| 72.7k| "adcx %%r8, %%r8\n\t" 1259| 72.7k| "adox %%rcx, %%r8\n\t" 1260| 72.7k| "movq %%r8, 72(%[z])\n\t" 1261| 72.7k| "movq 40(%[x]), %%rdx\n\t" 1262| 72.7k| "mulx %%rdx, %%rax, %%rcx\n\t" 1263| 72.7k| "movq 80(%[z]), %%r8\n\t" 1264| 72.7k| "adcx %%r8, %%r8\n\t" 1265| 72.7k| "adox %%rax, %%r8\n\t" 1266| 72.7k| "movq %%r8, 80(%[z])\n\t" 1267| 72.7k| "movq 88(%[z]), %%r8\n\t" 1268| 72.7k| "adcx %%r8, %%r8\n\t" 1269| 72.7k| "adox %%rcx, %%r8\n\t" 1270| 72.7k| "movq %%r8, 88(%[z])\n\t" 1271| 72.7k| "movq 48(%[x]), %%rdx\n\t" 1272| 72.7k| "mulx %%rdx, %%rax, %%rcx\n\t" 1273| 72.7k| "movq 96(%[z]), %%r8\n\t" 1274| 72.7k| "adcx %%r8, %%r8\n\t" 1275| 72.7k| "adox %%rax, %%r8\n\t" 1276| 72.7k| "movq %%r8, 96(%[z])\n\t" 1277| 72.7k| "movq 104(%[z]), %%r8\n\t" 1278| 72.7k| "adcx %%r8, %%r8\n\t" 1279| 72.7k| "adox %%rcx, %%r8\n\t" 1280| 72.7k| "movq %%r8, 104(%[z])\n\t" 1281| 72.7k| "movq 56(%[x]), %%rdx\n\t" 1282| 72.7k| "mulx %%rdx, %%rax, %%rcx\n\t" 1283| 72.7k| "movq 112(%[z]), %%r8\n\t" 1284| 72.7k| "adcx %%r8, %%r8\n\t" 1285| 72.7k| "adox %%rax, %%r8\n\t" 1286| 72.7k| "movq %%r8, 112(%[z])\n\t" 1287| 72.7k| "movq 120(%[z]), %%r8\n\t" 1288| 72.7k| "adcx %%r8, %%r8\n\t" 1289| 72.7k| "adox %%rcx, %%r8\n\t" 1290| 72.7k| "movq %%r8, 120(%[z])\n\t" 1291| 72.7k| "movq 64(%[x]), %%rdx\n\t" 1292| 72.7k| "mulx %%rdx, %%rax, %%rcx\n\t" 1293| 72.7k| "movq 128(%[z]), %%r8\n\t" 1294| 72.7k| "adcx %%r8, %%r8\n\t" 1295| 72.7k| "adox %%rax, %%r8\n\t" 1296| 72.7k| "movq %%r8, 128(%[z])\n\t" 1297| 72.7k| "movq 136(%[z]), %%r8\n\t" 1298| 72.7k| "adcx %%r8, %%r8\n\t" 1299| 72.7k| "adox %%rcx, %%r8\n\t" 1300| 72.7k| "movq %%r8, 136(%[z])\n\t" 1301| 72.7k| : 1302| 72.7k| : [z] "r"(z), [x] "r"(x) 1303| 72.7k| : "rax", "rcx", "rdx", "r8", "r9", "r10", "r11", "r12", "r13", "r14", "r15", "cc", "memory"); 1304| | // clang-format on 1305| 72.7k|} _ZN5Botan16bigint_mulx_mul9EPmPKmS2_: 1307| 99.0k|void bigint_mulx_mul9(word z[18], const word x[9], const word y[9]) { 1308| 99.0k| copy_mem(z + 9, y, 9); 1309| | // clang-format off 1310| 99.0k| asm( 1311| 99.0k| "xorl %%r8d, %%r8d\n\t" 1312| 99.0k| "xorl %%r9d, %%r9d\n\t" 1313| 99.0k| "xorl %%r10d, %%r10d\n\t" 1314| 99.0k| "xorl %%r11d, %%r11d\n\t" 1315| 99.0k| "xorl %%r12d, %%r12d\n\t" 1316| 99.0k| "xorl %%r13d, %%r13d\n\t" 1317| 99.0k| "xorl %%r14d, %%r14d\n\t" 1318| 99.0k| "xorl %%r15d, %%r15d\n\t" 1319| 99.0k| "xorl %%ebx, %%ebx\n\t" 1320| | 1321| 99.0k| "movq 72(%[z]), %%rdx\n\t" // row 0: x * y[0] 1322| 99.0k| "xorl %%eax, %%eax\n\t" 1323| 99.0k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 1324| 99.0k| "adcx %%rax, %%r8\n\t" 1325| 99.0k| "movq %%r8, 0(%[z])\n\t" 1326| 99.0k| "mulx 8(%[x]), %%rax, %%r8\n\t" 1327| 99.0k| "adox %%rcx, %%rax\n\t" 1328| 99.0k| "adcx %%rax, %%r9\n\t" 1329| 99.0k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 1330| 99.0k| "adox %%r8, %%rax\n\t" 1331| 99.0k| "adcx %%rax, %%r10\n\t" 1332| 99.0k| "mulx 24(%[x]), %%rax, %%r8\n\t" 1333| 99.0k| "adox %%rcx, %%rax\n\t" 1334| 99.0k| "adcx %%rax, %%r11\n\t" 1335| 99.0k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 1336| 99.0k| "adox %%r8, %%rax\n\t" 1337| 99.0k| "adcx %%rax, %%r12\n\t" 1338| 99.0k| "mulx 40(%[x]), %%rax, %%r8\n\t" 1339| 99.0k| "adox %%rcx, %%rax\n\t" 1340| 99.0k| "adcx %%rax, %%r13\n\t" 1341| 99.0k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 1342| 99.0k| "adox %%r8, %%rax\n\t" 1343| 99.0k| "adcx %%rax, %%r14\n\t" 1344| 99.0k| "mulx 56(%[x]), %%rax, %%r8\n\t" 1345| 99.0k| "adox %%rcx, %%rax\n\t" 1346| 99.0k| "adcx %%rax, %%r15\n\t" 1347| 99.0k| "mulx 64(%[x]), %%rax, %%rcx\n\t" 1348| 99.0k| "adox %%r8, %%rax\n\t" 1349| 99.0k| "adcx %%rax, %%rbx\n\t" 1350| 99.0k| "movl $0, %%eax\n\t" 1351| 99.0k| "adox %%rax, %%rcx\n\t" 1352| 99.0k| "adcx %%rax, %%rcx\n\t" 1353| 99.0k| "movq %%rcx, %%r8\n\t" 1354| | 1355| 99.0k| "movq 80(%[z]), %%rdx\n\t" // row 1: x * y[1] 1356| 99.0k| "xorl %%eax, %%eax\n\t" 1357| 99.0k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 1358| 99.0k| "adcx %%rax, %%r9\n\t" 1359| 99.0k| "movq %%r9, 8(%[z])\n\t" 1360| 99.0k| "mulx 8(%[x]), %%rax, %%r9\n\t" 1361| 99.0k| "adox %%rcx, %%rax\n\t" 1362| 99.0k| "adcx %%rax, %%r10\n\t" 1363| 99.0k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 1364| 99.0k| "adox %%r9, %%rax\n\t" 1365| 99.0k| "adcx %%rax, %%r11\n\t" 1366| 99.0k| "mulx 24(%[x]), %%rax, %%r9\n\t" 1367| 99.0k| "adox %%rcx, %%rax\n\t" 1368| 99.0k| "adcx %%rax, %%r12\n\t" 1369| 99.0k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 1370| 99.0k| "adox %%r9, %%rax\n\t" 1371| 99.0k| "adcx %%rax, %%r13\n\t" 1372| 99.0k| "mulx 40(%[x]), %%rax, %%r9\n\t" 1373| 99.0k| "adox %%rcx, %%rax\n\t" 1374| 99.0k| "adcx %%rax, %%r14\n\t" 1375| 99.0k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 1376| 99.0k| "adox %%r9, %%rax\n\t" 1377| 99.0k| "adcx %%rax, %%r15\n\t" 1378| 99.0k| "mulx 56(%[x]), %%rax, %%r9\n\t" 1379| 99.0k| "adox %%rcx, %%rax\n\t" 1380| 99.0k| "adcx %%rax, %%rbx\n\t" 1381| 99.0k| "mulx 64(%[x]), %%rax, %%rcx\n\t" 1382| 99.0k| "adox %%r9, %%rax\n\t" 1383| 99.0k| "adcx %%rax, %%r8\n\t" 1384| 99.0k| "movl $0, %%eax\n\t" 1385| 99.0k| "adox %%rax, %%rcx\n\t" 1386| 99.0k| "adcx %%rax, %%rcx\n\t" 1387| 99.0k| "movq %%rcx, %%r9\n\t" 1388| | 1389| 99.0k| "movq 88(%[z]), %%rdx\n\t" // row 2: x * y[2] 1390| 99.0k| "xorl %%eax, %%eax\n\t" 1391| 99.0k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 1392| 99.0k| "adcx %%rax, %%r10\n\t" 1393| 99.0k| "movq %%r10, 16(%[z])\n\t" 1394| 99.0k| "mulx 8(%[x]), %%rax, %%r10\n\t" 1395| 99.0k| "adox %%rcx, %%rax\n\t" 1396| 99.0k| "adcx %%rax, %%r11\n\t" 1397| 99.0k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 1398| 99.0k| "adox %%r10, %%rax\n\t" 1399| 99.0k| "adcx %%rax, %%r12\n\t" 1400| 99.0k| "mulx 24(%[x]), %%rax, %%r10\n\t" 1401| 99.0k| "adox %%rcx, %%rax\n\t" 1402| 99.0k| "adcx %%rax, %%r13\n\t" 1403| 99.0k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 1404| 99.0k| "adox %%r10, %%rax\n\t" 1405| 99.0k| "adcx %%rax, %%r14\n\t" 1406| 99.0k| "mulx 40(%[x]), %%rax, %%r10\n\t" 1407| 99.0k| "adox %%rcx, %%rax\n\t" 1408| 99.0k| "adcx %%rax, %%r15\n\t" 1409| 99.0k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 1410| 99.0k| "adox %%r10, %%rax\n\t" 1411| 99.0k| "adcx %%rax, %%rbx\n\t" 1412| 99.0k| "mulx 56(%[x]), %%rax, %%r10\n\t" 1413| 99.0k| "adox %%rcx, %%rax\n\t" 1414| 99.0k| "adcx %%rax, %%r8\n\t" 1415| 99.0k| "mulx 64(%[x]), %%rax, %%rcx\n\t" 1416| 99.0k| "adox %%r10, %%rax\n\t" 1417| 99.0k| "adcx %%rax, %%r9\n\t" 1418| 99.0k| "movl $0, %%eax\n\t" 1419| 99.0k| "adox %%rax, %%rcx\n\t" 1420| 99.0k| "adcx %%rax, %%rcx\n\t" 1421| 99.0k| "movq %%rcx, %%r10\n\t" 1422| | 1423| 99.0k| "movq 96(%[z]), %%rdx\n\t" // row 3: x * y[3] 1424| 99.0k| "xorl %%eax, %%eax\n\t" 1425| 99.0k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 1426| 99.0k| "adcx %%rax, %%r11\n\t" 1427| 99.0k| "movq %%r11, 24(%[z])\n\t" 1428| 99.0k| "mulx 8(%[x]), %%rax, %%r11\n\t" 1429| 99.0k| "adox %%rcx, %%rax\n\t" 1430| 99.0k| "adcx %%rax, %%r12\n\t" 1431| 99.0k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 1432| 99.0k| "adox %%r11, %%rax\n\t" 1433| 99.0k| "adcx %%rax, %%r13\n\t" 1434| 99.0k| "mulx 24(%[x]), %%rax, %%r11\n\t" 1435| 99.0k| "adox %%rcx, %%rax\n\t" 1436| 99.0k| "adcx %%rax, %%r14\n\t" 1437| 99.0k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 1438| 99.0k| "adox %%r11, %%rax\n\t" 1439| 99.0k| "adcx %%rax, %%r15\n\t" 1440| 99.0k| "mulx 40(%[x]), %%rax, %%r11\n\t" 1441| 99.0k| "adox %%rcx, %%rax\n\t" 1442| 99.0k| "adcx %%rax, %%rbx\n\t" 1443| 99.0k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 1444| 99.0k| "adox %%r11, %%rax\n\t" 1445| 99.0k| "adcx %%rax, %%r8\n\t" 1446| 99.0k| "mulx 56(%[x]), %%rax, %%r11\n\t" 1447| 99.0k| "adox %%rcx, %%rax\n\t" 1448| 99.0k| "adcx %%rax, %%r9\n\t" 1449| 99.0k| "mulx 64(%[x]), %%rax, %%rcx\n\t" 1450| 99.0k| "adox %%r11, %%rax\n\t" 1451| 99.0k| "adcx %%rax, %%r10\n\t" 1452| 99.0k| "movl $0, %%eax\n\t" 1453| 99.0k| "adox %%rax, %%rcx\n\t" 1454| 99.0k| "adcx %%rax, %%rcx\n\t" 1455| 99.0k| "movq %%rcx, %%r11\n\t" 1456| | 1457| 99.0k| "movq 104(%[z]), %%rdx\n\t" // row 4: x * y[4] 1458| 99.0k| "xorl %%eax, %%eax\n\t" 1459| 99.0k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 1460| 99.0k| "adcx %%rax, %%r12\n\t" 1461| 99.0k| "movq %%r12, 32(%[z])\n\t" 1462| 99.0k| "mulx 8(%[x]), %%rax, %%r12\n\t" 1463| 99.0k| "adox %%rcx, %%rax\n\t" 1464| 99.0k| "adcx %%rax, %%r13\n\t" 1465| 99.0k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 1466| 99.0k| "adox %%r12, %%rax\n\t" 1467| 99.0k| "adcx %%rax, %%r14\n\t" 1468| 99.0k| "mulx 24(%[x]), %%rax, %%r12\n\t" 1469| 99.0k| "adox %%rcx, %%rax\n\t" 1470| 99.0k| "adcx %%rax, %%r15\n\t" 1471| 99.0k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 1472| 99.0k| "adox %%r12, %%rax\n\t" 1473| 99.0k| "adcx %%rax, %%rbx\n\t" 1474| 99.0k| "mulx 40(%[x]), %%rax, %%r12\n\t" 1475| 99.0k| "adox %%rcx, %%rax\n\t" 1476| 99.0k| "adcx %%rax, %%r8\n\t" 1477| 99.0k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 1478| 99.0k| "adox %%r12, %%rax\n\t" 1479| 99.0k| "adcx %%rax, %%r9\n\t" 1480| 99.0k| "mulx 56(%[x]), %%rax, %%r12\n\t" 1481| 99.0k| "adox %%rcx, %%rax\n\t" 1482| 99.0k| "adcx %%rax, %%r10\n\t" 1483| 99.0k| "mulx 64(%[x]), %%rax, %%rcx\n\t" 1484| 99.0k| "adox %%r12, %%rax\n\t" 1485| 99.0k| "adcx %%rax, %%r11\n\t" 1486| 99.0k| "movl $0, %%eax\n\t" 1487| 99.0k| "adox %%rax, %%rcx\n\t" 1488| 99.0k| "adcx %%rax, %%rcx\n\t" 1489| 99.0k| "movq %%rcx, %%r12\n\t" 1490| | 1491| 99.0k| "movq 112(%[z]), %%rdx\n\t" // row 5: x * y[5] 1492| 99.0k| "xorl %%eax, %%eax\n\t" 1493| 99.0k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 1494| 99.0k| "adcx %%rax, %%r13\n\t" 1495| 99.0k| "movq %%r13, 40(%[z])\n\t" 1496| 99.0k| "mulx 8(%[x]), %%rax, %%r13\n\t" 1497| 99.0k| "adox %%rcx, %%rax\n\t" 1498| 99.0k| "adcx %%rax, %%r14\n\t" 1499| 99.0k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 1500| 99.0k| "adox %%r13, %%rax\n\t" 1501| 99.0k| "adcx %%rax, %%r15\n\t" 1502| 99.0k| "mulx 24(%[x]), %%rax, %%r13\n\t" 1503| 99.0k| "adox %%rcx, %%rax\n\t" 1504| 99.0k| "adcx %%rax, %%rbx\n\t" 1505| 99.0k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 1506| 99.0k| "adox %%r13, %%rax\n\t" 1507| 99.0k| "adcx %%rax, %%r8\n\t" 1508| 99.0k| "mulx 40(%[x]), %%rax, %%r13\n\t" 1509| 99.0k| "adox %%rcx, %%rax\n\t" 1510| 99.0k| "adcx %%rax, %%r9\n\t" 1511| 99.0k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 1512| 99.0k| "adox %%r13, %%rax\n\t" 1513| 99.0k| "adcx %%rax, %%r10\n\t" 1514| 99.0k| "mulx 56(%[x]), %%rax, %%r13\n\t" 1515| 99.0k| "adox %%rcx, %%rax\n\t" 1516| 99.0k| "adcx %%rax, %%r11\n\t" 1517| 99.0k| "mulx 64(%[x]), %%rax, %%rcx\n\t" 1518| 99.0k| "adox %%r13, %%rax\n\t" 1519| 99.0k| "adcx %%rax, %%r12\n\t" 1520| 99.0k| "movl $0, %%eax\n\t" 1521| 99.0k| "adox %%rax, %%rcx\n\t" 1522| 99.0k| "adcx %%rax, %%rcx\n\t" 1523| 99.0k| "movq %%rcx, %%r13\n\t" 1524| | 1525| 99.0k| "movq 120(%[z]), %%rdx\n\t" // row 6: x * y[6] 1526| 99.0k| "xorl %%eax, %%eax\n\t" 1527| 99.0k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 1528| 99.0k| "adcx %%rax, %%r14\n\t" 1529| 99.0k| "movq %%r14, 48(%[z])\n\t" 1530| 99.0k| "mulx 8(%[x]), %%rax, %%r14\n\t" 1531| 99.0k| "adox %%rcx, %%rax\n\t" 1532| 99.0k| "adcx %%rax, %%r15\n\t" 1533| 99.0k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 1534| 99.0k| "adox %%r14, %%rax\n\t" 1535| 99.0k| "adcx %%rax, %%rbx\n\t" 1536| 99.0k| "mulx 24(%[x]), %%rax, %%r14\n\t" 1537| 99.0k| "adox %%rcx, %%rax\n\t" 1538| 99.0k| "adcx %%rax, %%r8\n\t" 1539| 99.0k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 1540| 99.0k| "adox %%r14, %%rax\n\t" 1541| 99.0k| "adcx %%rax, %%r9\n\t" 1542| 99.0k| "mulx 40(%[x]), %%rax, %%r14\n\t" 1543| 99.0k| "adox %%rcx, %%rax\n\t" 1544| 99.0k| "adcx %%rax, %%r10\n\t" 1545| 99.0k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 1546| 99.0k| "adox %%r14, %%rax\n\t" 1547| 99.0k| "adcx %%rax, %%r11\n\t" 1548| 99.0k| "mulx 56(%[x]), %%rax, %%r14\n\t" 1549| 99.0k| "adox %%rcx, %%rax\n\t" 1550| 99.0k| "adcx %%rax, %%r12\n\t" 1551| 99.0k| "mulx 64(%[x]), %%rax, %%rcx\n\t" 1552| 99.0k| "adox %%r14, %%rax\n\t" 1553| 99.0k| "adcx %%rax, %%r13\n\t" 1554| 99.0k| "movl $0, %%eax\n\t" 1555| 99.0k| "adox %%rax, %%rcx\n\t" 1556| 99.0k| "adcx %%rax, %%rcx\n\t" 1557| 99.0k| "movq %%rcx, %%r14\n\t" 1558| | 1559| 99.0k| "movq 128(%[z]), %%rdx\n\t" // row 7: x * y[7] 1560| 99.0k| "xorl %%eax, %%eax\n\t" 1561| 99.0k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 1562| 99.0k| "adcx %%rax, %%r15\n\t" 1563| 99.0k| "movq %%r15, 56(%[z])\n\t" 1564| 99.0k| "mulx 8(%[x]), %%rax, %%r15\n\t" 1565| 99.0k| "adox %%rcx, %%rax\n\t" 1566| 99.0k| "adcx %%rax, %%rbx\n\t" 1567| 99.0k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 1568| 99.0k| "adox %%r15, %%rax\n\t" 1569| 99.0k| "adcx %%rax, %%r8\n\t" 1570| 99.0k| "mulx 24(%[x]), %%rax, %%r15\n\t" 1571| 99.0k| "adox %%rcx, %%rax\n\t" 1572| 99.0k| "adcx %%rax, %%r9\n\t" 1573| 99.0k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 1574| 99.0k| "adox %%r15, %%rax\n\t" 1575| 99.0k| "adcx %%rax, %%r10\n\t" 1576| 99.0k| "mulx 40(%[x]), %%rax, %%r15\n\t" 1577| 99.0k| "adox %%rcx, %%rax\n\t" 1578| 99.0k| "adcx %%rax, %%r11\n\t" 1579| 99.0k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 1580| 99.0k| "adox %%r15, %%rax\n\t" 1581| 99.0k| "adcx %%rax, %%r12\n\t" 1582| 99.0k| "mulx 56(%[x]), %%rax, %%r15\n\t" 1583| 99.0k| "adox %%rcx, %%rax\n\t" 1584| 99.0k| "adcx %%rax, %%r13\n\t" 1585| 99.0k| "mulx 64(%[x]), %%rax, %%rcx\n\t" 1586| 99.0k| "adox %%r15, %%rax\n\t" 1587| 99.0k| "adcx %%rax, %%r14\n\t" 1588| 99.0k| "movl $0, %%eax\n\t" 1589| 99.0k| "adox %%rax, %%rcx\n\t" 1590| 99.0k| "adcx %%rax, %%rcx\n\t" 1591| 99.0k| "movq %%rcx, %%r15\n\t" 1592| | 1593| 99.0k| "movq 136(%[z]), %%rdx\n\t" // row 8: x * y[8] 1594| 99.0k| "xorl %%eax, %%eax\n\t" 1595| 99.0k| "mulx 0(%[x]), %%rax, %%rcx\n\t" 1596| 99.0k| "adcx %%rax, %%rbx\n\t" 1597| 99.0k| "movq %%rbx, 64(%[z])\n\t" 1598| 99.0k| "mulx 8(%[x]), %%rax, %%rbx\n\t" 1599| 99.0k| "adox %%rcx, %%rax\n\t" 1600| 99.0k| "adcx %%rax, %%r8\n\t" 1601| 99.0k| "mulx 16(%[x]), %%rax, %%rcx\n\t" 1602| 99.0k| "adox %%rbx, %%rax\n\t" 1603| 99.0k| "adcx %%rax, %%r9\n\t" 1604| 99.0k| "mulx 24(%[x]), %%rax, %%rbx\n\t" 1605| 99.0k| "adox %%rcx, %%rax\n\t" 1606| 99.0k| "adcx %%rax, %%r10\n\t" 1607| 99.0k| "mulx 32(%[x]), %%rax, %%rcx\n\t" 1608| 99.0k| "adox %%rbx, %%rax\n\t" 1609| 99.0k| "adcx %%rax, %%r11\n\t" 1610| 99.0k| "mulx 40(%[x]), %%rax, %%rbx\n\t" 1611| 99.0k| "adox %%rcx, %%rax\n\t" 1612| 99.0k| "adcx %%rax, %%r12\n\t" 1613| 99.0k| "mulx 48(%[x]), %%rax, %%rcx\n\t" 1614| 99.0k| "adox %%rbx, %%rax\n\t" 1615| 99.0k| "adcx %%rax, %%r13\n\t" 1616| 99.0k| "mulx 56(%[x]), %%rax, %%rbx\n\t" 1617| 99.0k| "adox %%rcx, %%rax\n\t" 1618| 99.0k| "adcx %%rax, %%r14\n\t" 1619| 99.0k| "mulx 64(%[x]), %%rax, %%rcx\n\t" 1620| 99.0k| "adox %%rbx, %%rax\n\t" 1621| 99.0k| "adcx %%rax, %%r15\n\t" 1622| 99.0k| "movl $0, %%eax\n\t" 1623| 99.0k| "adox %%rax, %%rcx\n\t" 1624| 99.0k| "adcx %%rax, %%rcx\n\t" 1625| 99.0k| "movq %%rcx, %%rbx\n\t" 1626| | 1627| 99.0k| "movq %%r8, 72(%[z])\n\t" 1628| 99.0k| "movq %%r9, 80(%[z])\n\t" 1629| 99.0k| "movq %%r10, 88(%[z])\n\t" 1630| 99.0k| "movq %%r11, 96(%[z])\n\t" 1631| 99.0k| "movq %%r12, 104(%[z])\n\t" 1632| 99.0k| "movq %%r13, 112(%[z])\n\t" 1633| 99.0k| "movq %%r14, 120(%[z])\n\t" 1634| 99.0k| "movq %%r15, 128(%[z])\n\t" 1635| 99.0k| "movq %%rbx, 136(%[z])\n\t" 1636| 99.0k| : 1637| 99.0k| : [z] "r"(z), [x] "r"(x) 1638| 99.0k| : "rax", "rcx", "rdx", "r8", "r9", "r10", "r11", "r12", "r13", "r14", "r15", "rbx", "cc", "memory"); 1639| | // clang-format on 1640| 99.0k|} _ZN5Botan17Barrett_ReductionC2ERKNS_6BigIntES1_m: 17| 2.54k| m_modulus(m), m_mu(std::move(mu)), m_mod_words(mw), m_modulus_bits(m.bits()) { 18| | // Give some extra space for Karatsuba 19| 2.54k| m_modulus.grow_to(m_mod_words + 8); 20| 2.54k| m_mu.grow_to(m_mod_words + 8); 21| 2.54k|} _ZN5Botan17Barrett_Reduction18for_secret_modulusERKNS_6BigIntE: 23| 2.54k|Barrett_Reduction Barrett_Reduction::for_secret_modulus(const BigInt& mod) { 24| 2.54k| BOTAN_ARG_CHECK(mod.signum() > 0, "Modulus must be positive"); ------------------ | | 35| 2.54k| do { \ | | 36| 2.54k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 2.54k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 2.54k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 2.54k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 2.54k] | | ------------------ ------------------ 25| | 26| 2.54k| const size_t mod_words = mod.sig_words(); 27| | 28| | // Compute mu = floor(2^{2k} / m) 29| 2.54k| const size_t mu_bits = 2 * WordInfo::bits * mod_words; 30| 2.54k| return Barrett_Reduction(mod, ct_divide_pow2k(mu_bits, mod), mod_words); 31| 2.54k|} _ZN5Botan17Barrett_Reduction18for_public_modulusERKNS_6BigIntE: 33| 2.05k|Barrett_Reduction Barrett_Reduction::for_public_modulus(const BigInt& mod) { 34| 2.05k| return Barrett_Reduction::for_secret_modulus(mod); 35| 2.05k|} _ZNK5Botan17Barrett_Reduction8multiplyERKNS_6BigIntES3_: 153| 2.79k|BigInt Barrett_Reduction::multiply(const BigInt& x, const BigInt& y) const { 154| 2.79k| BOTAN_ARG_CHECK(acceptable_barrett_input(x, m_modulus).as_bool(), "Invalid x param for Barrett multiply"); ------------------ | | 35| 2.79k| do { \ | | 36| 2.79k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 2.79k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 2.79k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 2.79k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 2.79k] | | ------------------ ------------------ 155| 2.79k| BOTAN_ARG_CHECK(acceptable_barrett_input(y, m_modulus).as_bool(), "Invalid y param for Barrett multiply"); ------------------ | | 35| 2.79k| do { \ | | 36| 2.79k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 2.79k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 2.79k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 2.79k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 2.79k] | | ------------------ ------------------ 156| | 157| 2.79k| secure_vector ws(2 * (m_mod_words + 2)); 158| 2.79k| secure_vector xy(2 * m_mod_words); 159| | 160| 2.79k| bigint_mul(xy.data(), 161| 2.79k| xy.size(), 162| 2.79k| x._data(), 163| 2.79k| x.size(), 164| 2.79k| std::min(x.size(), m_mod_words), 165| 2.79k| y._data(), 166| 2.79k| y.size(), 167| 2.79k| std::min(y.size(), m_mod_words), 168| 2.79k| ws.data(), 169| 2.79k| ws.size()); 170| | 171| 2.79k| return barrett_reduce(m_mod_words, m_modulus, m_mu, xy, ws); 172| 2.79k|} _ZNK5Botan17Barrett_Reduction6squareERKNS_6BigIntE: 174| 2.79k|BigInt Barrett_Reduction::square(const BigInt& x) const { 175| 2.79k| BOTAN_ARG_CHECK(acceptable_barrett_input(x, m_modulus).as_bool(), "Invalid x param for Barrett square"); ------------------ | | 35| 2.79k| do { \ | | 36| 2.79k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 2.79k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 2.79k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 2.79k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 2.79k] | | ------------------ ------------------ 176| | 177| 2.79k| secure_vector ws(2 * (m_mod_words + 2)); 178| 2.79k| secure_vector x2(2 * m_mod_words); 179| | 180| 2.79k| bigint_sqr(x2.data(), x2.size(), x._data(), x.size(), std::min(x.size(), m_mod_words), ws.data(), ws.size()); 181| | 182| 2.79k| return barrett_reduce(m_mod_words, m_modulus, m_mu, x2, ws); 183| 2.79k|} _ZNK5Botan17Barrett_Reduction6reduceERKNS_6BigIntE: 185| 2.23k|BigInt Barrett_Reduction::reduce(const BigInt& x) const { 186| 2.23k| BOTAN_ARG_CHECK(x.signum() >= 0, "Argument must be non-negative"); ------------------ | | 35| 2.23k| do { \ | | 36| 2.23k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 2.23k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 2.23k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 2.23k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 2.23k] | | ------------------ ------------------ 187| | 188| 2.23k| const size_t x_sw = x.sig_words(); 189| 2.23k| BOTAN_ARG_CHECK(x_sw <= 2 * m_mod_words, "Argument is too large for Barrett reduction"); ------------------ | | 35| 2.23k| do { \ | | 36| 2.23k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 2.23k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 2.23k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 2.23k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 2.23k] | | ------------------ ------------------ 190| | 191| 2.23k| x.grow_to(2 * m_mod_words); 192| | 193| 2.23k| secure_vector ws; 194| 2.23k| return barrett_reduce(m_mod_words, m_modulus, m_mu, x._as_span(), ws); 195| 2.23k|} barrett.cpp:_ZN5Botan12_GLOBAL__N_124acceptable_barrett_inputERKNS_6BigIntES3_: 145| 8.38k|CT::Choice acceptable_barrett_input(const BigInt& x, const BigInt& modulus) { 146| 8.38k| const auto x_is_positive = CT::Choice::from_int(static_cast(x.signum() >= 0)); 147| 8.38k| const auto x_lt_mod = bigint_ct_is_lt(x._data(), x.size(), modulus._data(), modulus.sig_words()).as_choice(); 148| 8.38k| return x_is_positive && x_lt_mod; 149| 8.38k|} barrett.cpp:_ZN5Botan12_GLOBAL__N_114barrett_reduceEmRKNS_6BigIntES3_NSt3__14spanIKmLm18446744073709551615EEERNS4_6vectorImNS_16secure_allocatorImEEEE: 48| 7.82k| size_t mod_words, const BigInt& modulus, const BigInt& mu, std::span x_words, secure_vector& ws) { 49| 7.82k| BOTAN_ASSERT_NOMSG(modulus.sig_words() == mod_words); ------------------ | | 84| 7.82k| do { \ | | 85| 7.82k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 7.82k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 7.82k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 7.82k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 7.82k] | | ------------------ ------------------ 50| | 51| | // Caller must expand input to be at least this size 52| 7.82k| BOTAN_ASSERT_NOMSG(x_words.size() >= 2 * mod_words); ------------------ | | 84| 7.82k| do { \ | | 85| 7.82k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 7.82k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 7.82k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 7.82k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 7.82k] | | ------------------ ------------------ 53| | 54| | // Normally mod_words + 1 but can be + 2 if the modulus is a power of 2 55| 7.82k| const size_t mu_words = mu.sig_words(); 56| 7.82k| BOTAN_ASSERT_NOMSG(mu_words <= mod_words + 2); ------------------ | | 84| 7.82k| do { \ | | 85| 7.82k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 7.82k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 7.82k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 7.82k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 7.82k] | | ------------------ ------------------ 57| | 58| 7.82k| if(ws.size() < 2 * (mod_words + 2)) { ------------------ | Branch (58:7): [True: 2.23k, False: 5.58k] ------------------ 59| 2.23k| ws.resize(2 * (mod_words + 2)); 60| 2.23k| } 61| | 62| 7.82k| CT::poison(x_words); 63| | 64| | /* 65| | * Following the notation of Handbook of Applied Cryptography 66| | * Algorithm 14.42 "Barrett modular reduction", page 604 67| | * 68| | * 69| | * Using `mu` for µ in the code 70| | */ 71| | 72| | // Compute q1 = floor(x / 2^(k - 1)) which is equivalent to ignoring the low (k-1) words 73| | 74| | // 2 * mod_words + 1 is sufficient, extra is to enable Karatsuba 75| 7.82k| secure_vector r(2 * mu_words + 2); 76| | 77| 7.82k| copy_mem(r.data(), x_words.data() + (mod_words - 1), mod_words + 1); 78| | 79| | // Now compute q2 = q1 * µ 80| | 81| | // We allocate more size than required since this allows Karatsuba more often; 82| | // just `mu_words + (mod_words + 1)` is sufficient 83| 7.82k| const size_t q2_size = 2 * mu_words + 2; 84| | 85| 7.82k| secure_vector q2(q2_size); 86| | 87| 7.82k| bigint_mul( 88| 7.82k| q2.data(), q2.size(), r.data(), r.size(), mod_words + 1, mu._data(), mu.size(), mu_words, ws.data(), ws.size()); 89| | 90| | // Compute r2 = (floor(q2 / b^(k+1)) * m) mod 2^(k+1) 91| | // The division/floor is again effected by just ignoring the low k + 1 words 92| 7.82k| bigint_mul(r.data(), 93| 7.82k| r.size(), 94| 7.82k| &q2[mod_words + 1], // ignoring the low mod_words + 1 words of the first product 95| 7.82k| q2.size() - (mod_words + 1), 96| 7.82k| mod_words + 1, 97| 7.82k| modulus._data(), 98| 7.82k| modulus.size(), 99| 7.82k| mod_words, 100| 7.82k| ws.data(), 101| 7.82k| ws.size()); 102| | 103| | // Clear the high words of the product, equivalent to computing mod 2^(k+1) 104| | // TODO add masked mul to avoid computing high bits at all 105| 7.82k| clear_mem(std::span{r}.subspan(mod_words + 1)); 106| | 107| | // Compute r = r1 - r2 108| | 109| | // The return value of bigint_sub_abs isn't quite right for what we need here so first compare 110| 7.82k| const int32_t relative_size = bigint_cmp(r.data(), mod_words + 1, x_words.data(), mod_words + 1); 111| | 112| 7.82k| bigint_sub_abs(r.data(), r.data(), x_words.data(), mod_words + 1, ws.data()); 113| | 114| | /* 115| | If r is negative then we have to set r to r + 2^(k+1) 116| | 117| | However for r negative computing this sum is equivalent to computing 2^(k+1) - abs(r) 118| | */ 119| 7.82k| clear_mem(ws.data(), mod_words + 2); 120| 7.82k| ws[mod_words + 1] = 1; 121| 7.82k| bigint_sub2(ws.data(), mod_words + 2, r.data(), mod_words + 2); 122| | 123| | // If relative_size > 0 then assign r to 2^(k+1) - r 124| 7.82k| CT::Mask::is_equal(static_cast(relative_size), 1).select_n(r.data(), ws.data(), r.data(), mod_words + 2); 125| | 126| | /* 127| | * Per HAC Note 14.44 (ii) "step 4 is repeated at most twice since 0 <= r < 3m" 128| | */ 129| 7.82k| const size_t bound = 2; 130| | 131| 7.82k| BOTAN_ASSERT_NOMSG(r.size() >= mod_words + 1); ------------------ | | 84| 7.82k| do { \ | | 85| 7.82k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 7.82k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 7.82k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 7.82k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 7.82k] | | ------------------ ------------------ 132| 23.4k| for(size_t i = 0; i != bound; ++i) { ------------------ | Branch (132:22): [True: 15.6k, False: 7.82k] ------------------ 133| 15.6k| const word borrow = bigint_sub3(ws.data(), r.data(), mod_words + 1, modulus._data(), mod_words); 134| 15.6k| CT::Mask::is_zero(borrow).select_n(r.data(), ws.data(), r.data(), mod_words + 1); 135| 15.6k| } 136| | 137| 7.82k| CT::unpoison(q2); 138| 7.82k| CT::unpoison(r); 139| 7.82k| CT::unpoison(ws); 140| 7.82k| CT::unpoison(x_words); 141| | 142| 7.82k| return BigInt::_from_words(r); 143| 7.82k|} _ZN5Botan24inverse_mod_public_primeERKNS_6BigIntES2_: 295| 276|BigInt inverse_mod_public_prime(const BigInt& x, const BigInt& p) { 296| 276| BOTAN_ARG_CHECK(p.signum() > 0, "Modulus must be positive"); ------------------ | | 35| 276| do { \ | | 36| 276| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 276| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 276] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 276| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 276] | | ------------------ ------------------ 297| 276| BOTAN_ARG_CHECK(x.signum() > 0, "Input must be positive"); ------------------ | | 35| 276| do { \ | | 36| 276| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 276| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 276] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 276| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 276] | | ------------------ ------------------ 298| 276| BOTAN_ARG_CHECK(x < p, "Input must be less than modulus"); ------------------ | | 35| 276| do { \ | | 36| 276| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 276| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 276] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 276| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 276] | | ------------------ ------------------ 299| 276| BOTAN_ARG_CHECK(p.is_odd() && p > 1, "Primes are odd integers greater than 1"); ------------------ | | 35| 276| do { \ | | 36| 276| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 552| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 276, False: 0] | | | Branch (37:12): [True: 276, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 276| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 276] | | ------------------ ------------------ 300| | 301| | // TODO possibly use FLT, or the algorithm presented for this case in 302| | // Handbook of Elliptic and Hyperelliptic Curve Cryptography 303| | 304| 276| return inverse_mod_odd_modulus(x, p); 305| 276|} mod_inv.cpp:_ZN5Botan12_GLOBAL__N_123inverse_mod_odd_modulusERKNS_6BigIntES3_: 21| 276|BigInt inverse_mod_odd_modulus(const BigInt& n, const BigInt& mod) { 22| | // Caller should assure these preconditions: 23| 276| BOTAN_ASSERT_NOMSG(n.signum() >= 0); ------------------ | | 84| 276| do { \ | | 85| 276| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 276| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 276] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 276| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 276] | | ------------------ ------------------ 24| 276| BOTAN_ASSERT_NOMSG(mod.signum() > 0); ------------------ | | 84| 276| do { \ | | 85| 276| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 276| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 276] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 276| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 276] | | ------------------ ------------------ 25| 276| BOTAN_ASSERT_NOMSG(n < mod); ------------------ | | 84| 276| do { \ | | 85| 276| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 276| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 276] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 276| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 276] | | ------------------ ------------------ 26| 276| BOTAN_ASSERT_NOMSG(mod >= 3 && mod.is_odd()); ------------------ | | 84| 276| do { \ | | 85| 276| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 552| if(!(expr)) { \ | | ------------------ | | | Branch (86:12): [True: 276, False: 0] | | | Branch (86:12): [True: 276, False: 0] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 276| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 276] | | ------------------ ------------------ 27| | 28| | /* 29| | This uses a modular inversion algorithm designed by Niels Möller 30| | and implemented in Nettle. The same algorithm was later also 31| | adapted to GMP in mpn_sec_invert. 32| | 33| | It can be easily implemented in a way that does not depend on 34| | secret branches or memory lookups, providing resistance against 35| | some forms of side channel attack. 36| | 37| | There is also a description of the algorithm in Appendix 5 of "Fast 38| | Software Polynomial Multiplication on ARM Processors using the NEON Engine" 39| | by Danilo Câmara, Conrado P. L. Gouvêa, Julio López, and Ricardo 40| | Dahab in LNCS 8182 41| | https://inria.hal.science/hal-01506572/document 42| | 43| | Thanks to Niels for creating the algorithm, explaining some things 44| | about it, and the reference to the paper. 45| | */ 46| | 47| 276| const size_t mod_words = mod.sig_words(); 48| 276| BOTAN_ASSERT(mod_words > 0, "Not empty"); ------------------ | | 71| 276| do { \ | | 72| 276| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 276| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 276] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 276| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 276] | | ------------------ ------------------ 49| | 50| 276| secure_vector tmp_mem(5 * mod_words); 51| | 52| 276| word* v_w = &tmp_mem[0]; // NOLINT(readability-container-data-pointer) 53| 276| word* u_w = &tmp_mem[1 * mod_words]; 54| 276| word* b_w = &tmp_mem[2 * mod_words]; 55| 276| word* a_w = &tmp_mem[3 * mod_words]; 56| 276| word* mp1o2 = &tmp_mem[4 * mod_words]; 57| | 58| 276| copy_mem(a_w, n._data(), std::min(n.size(), mod_words)); 59| 276| copy_mem(b_w, mod._data(), std::min(mod.size(), mod_words)); 60| 276| u_w[0] = 1; 61| | // v_w = 0 62| | 63| | // compute (mod + 1) / 2 which [because mod is odd] is equal to 64| | // (mod / 2) + 1 65| 276| copy_mem(mp1o2, mod._data(), std::min(mod.size(), mod_words)); 66| 276| bigint_shr1(mp1o2, mod_words, 1); 67| 276| const word carry = bigint_add2(mp1o2, mod_words, u_w, 1); 68| 276| BOTAN_ASSERT_NOMSG(carry == 0); ------------------ | | 84| 276| do { \ | | 85| 276| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 276| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 276] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 276| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 276] | | ------------------ ------------------ 69| | 70| 276| CT::poison(tmp_mem.data(), tmp_mem.size()); 71| | 72| | // Only n.bits() + mod.bits() iterations are required, but avoid leaking the size of n 73| 276| const size_t execs = 2 * mod.bits(); 74| | 75| 1.55M| for(size_t i = 0; i != execs; ++i) { ------------------ | Branch (75:22): [True: 1.55M, False: 276] ------------------ 76| 1.55M| const word odd_a = a_w[0] & 1; 77| | 78| | //if(odd_a) a -= b 79| 1.55M| const word underflow = bigint_cnd_sub(odd_a, a_w, b_w, mod_words); 80| | 81| | //if(underflow) { b -= a; a = abs(a); swap(u, v); } 82| 1.55M| bigint_cnd_add(underflow, b_w, a_w, mod_words); 83| 1.55M| bigint_cnd_abs(underflow, a_w, mod_words); 84| 1.55M| bigint_cnd_swap(underflow, u_w, v_w, mod_words); 85| | 86| | // a >>= 1 87| 1.55M| bigint_shr1(a_w, mod_words, 1); 88| | 89| | //if(odd_a) u -= v; 90| 1.55M| const word borrow = bigint_cnd_sub(odd_a, u_w, v_w, mod_words); 91| | 92| | // if(borrow) u += p 93| 1.55M| bigint_cnd_add(borrow, u_w, mod._data(), mod_words); 94| | 95| 1.55M| const word odd_u = u_w[0] & 1; 96| | 97| | // u >>= 1 98| 1.55M| bigint_shr1(u_w, mod_words, 1); 99| | 100| | //if(odd_u) u += mp1o2; 101| 1.55M| bigint_cnd_add(odd_u, u_w, mp1o2, mod_words); 102| 1.55M| } 103| | 104| 276| const auto a_is_0 = CT::all_zeros(a_w, mod_words); 105| | 106| 276| auto b_is_1 = CT::Mask::is_equal(b_w[0], 1); 107| 12.2k| for(size_t i = 1; i != mod_words; ++i) { ------------------ | Branch (107:22): [True: 11.9k, False: 276] ------------------ 108| 11.9k| b_is_1 &= CT::Mask::is_zero(b_w[i]); 109| 11.9k| } 110| | 111| 276| BOTAN_ASSERT(a_is_0.as_bool(), "A is zero"); ------------------ | | 71| 276| do { \ | | 72| 276| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 276| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 276] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 276| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 276] | | ------------------ ------------------ 112| | 113| | // if b != 1 then gcd(n,mod) > 1 and inverse does not exist 114| | // in which case zero out the result to indicate this 115| 276| (~b_is_1).if_set_zero_out(v_w, mod_words); 116| | 117| | /* 118| | * We've placed the result in the lowest words of the temp buffer. 119| | * So just clear out the other values and then give that buffer to a 120| | * BigInt. 121| | */ 122| 276| clear_mem(&tmp_mem[mod_words], 4 * mod_words); 123| | 124| 276| CT::unpoison(tmp_mem.data(), tmp_mem.size()); 125| | 126| 276| BigInt r; 127| 276| r.swap_reg(tmp_mem); 128| 276| return r; 129| 276|} _ZN5Botan17Montgomery_Params4DataC2ERKNS_6BigIntERKNS_17Barrett_ReductionE: 40| 2.22k|Montgomery_Params::Data::Data(const BigInt& p, const Barrett_Reduction& mod_p) { 41| 2.22k| if(p.is_even() || p < 3) { ------------------ | Branch (41:7): [True: 0, False: 2.22k] | Branch (41:22): [True: 0, False: 2.22k] ------------------ 42| 0| throw Invalid_Argument("Montgomery_Params invalid modulus"); 43| 0| } 44| | 45| 2.22k| m_p = p; 46| 2.22k| m_p_words = m_p.sig_words(); 47| 2.22k| m_p_dash = monty_inverse(m_p.word_at(0)); 48| | 49| 2.22k| const BigInt r = BigInt::power_of_2(m_p_words * WordInfo::bits); 50| | 51| 2.22k| m_r1 = mod_p.reduce(r); 52| 2.22k| m_r2 = mod_p.square(m_r1); 53| 2.22k| m_r3 = mod_p.multiply(m_r1, m_r2); 54| | 55| | // Barrett should be at least zero prefixing up to modulus size 56| 2.22k| BOTAN_ASSERT_NOMSG(m_r1.size() >= m_p_words); ------------------ | | 84| 2.22k| do { \ | | 85| 2.22k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 2.22k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 2.22k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 2.22k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 2.22k] | | ------------------ ------------------ 57| 2.22k| BOTAN_ASSERT_NOMSG(m_r2.size() >= m_p_words); ------------------ | | 84| 2.22k| do { \ | | 85| 2.22k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 2.22k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 2.22k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 2.22k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 2.22k] | | ------------------ ------------------ 58| 2.22k| BOTAN_ASSERT_NOMSG(m_r3.size() >= m_p_words); ------------------ | | 84| 2.22k| do { \ | | 85| 2.22k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 2.22k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 2.22k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 2.22k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 2.22k] | | ------------------ ------------------ 59| 2.22k|} _ZN5Botan17Montgomery_ParamsC2ERKNS_6BigIntERKNS_17Barrett_ReductionE: 62| 2.22k| m_data(std::make_shared(p, mod_p)) {} _ZN5Botan17Montgomery_ParamsC2ERKNS_6BigIntE: 65| 482| Montgomery_Params(p, Barrett_Reduction::for_secret_modulus(p)) {} _ZNK5Botan17Montgomery_ParamseqERKS0_: 67| 2.66M|bool Montgomery_Params::operator==(const Montgomery_Params& other) const { 68| 2.66M| if(this->m_data == other.m_data) { ------------------ | Branch (68:7): [True: 2.66M, False: 18.4E] ------------------ 69| 2.66M| return true; 70| 2.66M| } 71| | 72| 18.4E| return (this->m_data->p() == other.m_data->p()); 73| 2.66M|} _ZNK5Botan17Montgomery_Params4redcERKNS_6BigIntERNSt3__16vectorImNS_16secure_allocatorImEEEE: 75| 250|BigInt Montgomery_Params::redc(const BigInt& x, secure_vector& ws) const { 76| 250| const size_t p_size = this->p_words(); 77| | 78| 250| if(ws.size() < p_size) { ------------------ | Branch (78:7): [True: 0, False: 250] ------------------ 79| 0| ws.resize(p_size); 80| 0| } 81| | 82| 250| BigInt z = x; 83| 250| z.grow_to(2 * p_size); 84| | 85| 250| bigint_monty_redc_inplace(z.mutable_data(), this->p()._data(), p_size, this->p_dash(), ws.data(), ws.size()); 86| | 87| 250| return z; 88| 250|} _ZNK5Botan17Montgomery_Params3mulERKNS_6BigIntES3_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 90| 7.75k|BigInt Montgomery_Params::mul(const BigInt& x, const BigInt& y, secure_vector& ws) const { 91| 7.75k| const size_t p_size = this->p_words(); 92| 7.75k| BigInt z = BigInt::with_capacity(2 * p_size); 93| 7.75k| this->mul(z, x, y, ws); 94| 7.75k| return z; 95| 7.75k|} _ZNK5Botan17Montgomery_Params3mulERNS_6BigIntERKS1_S4_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 97| 30.3k|void Montgomery_Params::mul(BigInt& z, const BigInt& x, const BigInt& y, secure_vector& ws) const { 98| 30.3k| BOTAN_ARG_CHECK(&z != &x && &z != &y, "Montgomery_Params::mul output must not alias inputs"); ------------------ | | 35| 30.3k| do { \ | | 36| 30.3k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 60.6k| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 30.3k, False: 0] | | | Branch (37:12): [True: 30.3k, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 30.3k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 30.3k] | | ------------------ ------------------ 99| | 100| 30.3k| const size_t p_size = this->p_words(); 101| | 102| 30.3k| if(ws.size() < 2 * p_size) { ------------------ | Branch (102:7): [True: 14, False: 30.2k] ------------------ 103| 14| ws.resize(2 * p_size); 104| 14| } 105| | 106| 30.3k| BOTAN_DEBUG_ASSERT(x.sig_words() <= p_size); ------------------ | | 137| 30.3k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 30.3k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 30.3k] | | ------------------ ------------------ 107| 30.3k| BOTAN_DEBUG_ASSERT(y.sig_words() <= p_size); ------------------ | | 137| 30.3k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 30.3k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 30.3k] | | ------------------ ------------------ 108| | 109| 30.3k| if(z.size() < 2 * p_size) { ------------------ | Branch (109:7): [True: 2.49k, False: 27.8k] ------------------ 110| 2.49k| z.grow_to(2 * p_size); 111| 2.49k| } 112| | 113| 30.3k| bigint_mul(z.mutable_data(), 114| 30.3k| z.size(), 115| 30.3k| x._data(), 116| 30.3k| x.size(), 117| 30.3k| std::min(p_size, x.size()), 118| 30.3k| y._data(), 119| 30.3k| y.size(), 120| 30.3k| std::min(p_size, y.size()), 121| 30.3k| ws.data(), 122| 30.3k| ws.size()); 123| | 124| 30.3k| bigint_monty_redc_inplace(z.mutable_data(), this->p()._data(), p_size, this->p_dash(), ws.data(), ws.size()); 125| 30.3k|} _ZNK5Botan17Montgomery_Params3mulERNS_6BigIntERKS1_NSt3__14spanIKmLm18446744073709551615EEERNS5_6vectorImNS_16secure_allocatorImEEEE: 127| 5.69k|void Montgomery_Params::mul(BigInt& z, const BigInt& x, std::span y, secure_vector& ws) const { 128| 5.69k| BOTAN_ARG_CHECK(&z != &x, "Montgomery_Params::mul output must not alias x"); ------------------ | | 35| 5.69k| do { \ | | 36| 5.69k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 5.69k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 5.69k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 5.69k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 5.69k] | | ------------------ ------------------ 129| 5.69k| BOTAN_ARG_CHECK(!ranges_overlap(z._data(), z.size(), y.data(), y.size()), ------------------ | | 35| 5.69k| do { \ | | 36| 5.69k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 5.69k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 5.69k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 5.69k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 5.69k] | | ------------------ ------------------ 130| 5.69k| "Montgomery_Params::mul output must not overlap y"); 131| | 132| 5.69k| const size_t p_size = this->p_words(); 133| | 134| 5.69k| if(ws.size() < 2 * p_size) { ------------------ | Branch (134:7): [True: 0, False: 5.69k] ------------------ 135| 0| ws.resize(2 * p_size); 136| 0| } 137| 5.69k| if(z.size() < 2 * p_size) { ------------------ | Branch (137:7): [True: 0, False: 5.69k] ------------------ 138| 0| z.grow_to(2 * p_size); 139| 0| } 140| | 141| 5.69k| BOTAN_DEBUG_ASSERT(x.sig_words() <= p_size); ------------------ | | 137| 5.69k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 5.69k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 5.69k] | | ------------------ ------------------ 142| | 143| 5.69k| bigint_mul(z.mutable_data(), 144| 5.69k| z.size(), 145| 5.69k| x._data(), 146| 5.69k| x.size(), 147| 5.69k| std::min(p_size, x.size()), 148| 5.69k| y.data(), 149| 5.69k| y.size(), 150| 5.69k| std::min(p_size, y.size()), 151| 5.69k| ws.data(), 152| 5.69k| ws.size()); 153| | 154| 5.69k| bigint_monty_redc_inplace(z.mutable_data(), this->p()._data(), p_size, this->p_dash(), ws.data(), ws.size()); 155| 5.69k|} _ZNK5Botan17Montgomery_Params6mul_byERNS_6BigIntERKS1_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 157| 1.47k|void Montgomery_Params::mul_by(BigInt& x, const BigInt& y, secure_vector& ws) const { 158| 1.47k| const size_t p_size = this->p_words(); 159| | 160| 1.47k| if(ws.size() < 4 * p_size) { ------------------ | Branch (160:7): [True: 738, False: 738] ------------------ 161| 738| ws.resize(4 * p_size); 162| 738| } 163| | 164| 1.47k| word* z_data = ws.data(); 165| 1.47k| word* ws_data = &ws[2 * p_size]; 166| | 167| 1.47k| BOTAN_DEBUG_ASSERT(x.sig_words() <= p_size); ------------------ | | 137| 1.47k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 1.47k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 1.47k] | | ------------------ ------------------ 168| | 169| 1.47k| bigint_mul(z_data, 170| 1.47k| 2 * p_size, 171| 1.47k| x._data(), 172| 1.47k| x.size(), 173| 1.47k| std::min(p_size, x.size()), 174| 1.47k| y._data(), 175| 1.47k| y.size(), 176| 1.47k| std::min(p_size, y.size()), 177| 1.47k| ws_data, 178| 1.47k| 2 * p_size); 179| | 180| 1.47k| bigint_monty_redc_inplace(z_data, this->p()._data(), p_size, this->p_dash(), ws_data, 2 * p_size); 181| | 182| 1.47k| if(x.size() < 2 * p_size) { ------------------ | Branch (182:7): [True: 818, False: 658] ------------------ 183| 818| x.grow_to(2 * p_size); 184| 818| } 185| 1.47k| copy_mem(x.mutable_data(), z_data, 2 * p_size); 186| 1.47k|} _ZNK5Botan17Montgomery_Params3sqrERKNS_6BigIntERNSt3__16vectorImNS_16secure_allocatorImEEEE: 188| 375|BigInt Montgomery_Params::sqr(const BigInt& x, secure_vector& ws) const { 189| 375| BOTAN_DEBUG_ASSERT(x.sig_words() <= this->p_words()); ------------------ | | 137| 375| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 375| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 375] | | ------------------ ------------------ 190| 375| return this->sqr(std::span{x._data(), x.size()}, ws); 191| 375|} _ZNK5Botan17Montgomery_Params3sqrENSt3__14spanIKmLm18446744073709551615EEERNS1_6vectorImNS_16secure_allocatorImEEEE: 193| 375|BigInt Montgomery_Params::sqr(std::span x, secure_vector& ws) const { 194| 375| const size_t p_size = this->p_words(); 195| 375| BigInt z = BigInt::with_capacity(2 * p_size); 196| 375| this->sqr(z, x, ws); 197| 375| return z; 198| 375|} _ZNK5Botan17Montgomery_Params3sqrERNS_6BigIntERKS1_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 200| 11.0k|void Montgomery_Params::sqr(BigInt& z, const BigInt& x, secure_vector& ws) const { 201| 11.0k| BOTAN_ARG_CHECK(&z != &x, "Montgomery_Params::sqr output must not alias input"); ------------------ | | 35| 11.0k| do { \ | | 36| 11.0k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 11.0k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 11.0k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 11.0k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 11.0k] | | ------------------ ------------------ 202| 11.0k| this->sqr(z, std::span{x._data(), x.size()}, ws); 203| 11.0k|} _ZNK5Botan17Montgomery_Params3sqrERNS_6BigIntENSt3__14spanIKmLm18446744073709551615EEERNS3_6vectorImNS_16secure_allocatorImEEEE: 205| 12.8k|void Montgomery_Params::sqr(BigInt& z, std::span x, secure_vector& ws) const { 206| 12.8k| BOTAN_ARG_CHECK(!ranges_overlap(z._data(), z.size(), x.data(), x.size()), ------------------ | | 35| 12.8k| do { \ | | 36| 12.8k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 12.8k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 12.8k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 12.8k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 12.8k] | | ------------------ ------------------ 207| 12.8k| "Montgomery_Params::sqr output must not overlap input"); 208| | 209| 12.8k| const size_t p_size = this->p_words(); 210| | 211| 12.8k| if(ws.size() < 2 * p_size) { ------------------ | Branch (211:7): [True: 125, False: 12.7k] ------------------ 212| 125| ws.resize(2 * p_size); 213| 125| } 214| | 215| 12.8k| if(z.size() < 2 * p_size) { ------------------ | Branch (215:7): [True: 490, False: 12.3k] ------------------ 216| 490| z.grow_to(2 * p_size); 217| 490| } 218| | 219| 12.8k| bigint_sqr(z.mutable_data(), z.size(), x.data(), x.size(), std::min(p_size, x.size()), ws.data(), ws.size()); 220| | 221| 12.8k| bigint_monty_redc_inplace(z.mutable_data(), this->p()._data(), p_size, this->p_dash(), ws.data(), ws.size()); 222| 12.8k|} _ZN5Botan14Montgomery_IntC2ERKNS_17Montgomery_ParamsENSt3__16vectorImNS_16secure_allocatorImEEEE: 227| 127k| m_params(params), m_v(std::move(words)) { 228| 127k| BOTAN_ASSERT_NOMSG(m_v.size() == m_params.p_words()); ------------------ | | 84| 127k| do { \ | | 85| 127k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 127k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 127k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 127k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 127k] | | ------------------ ------------------ 229| 127k|} _ZN5Botan14Montgomery_Int3oneERKNS_17Montgomery_ParamsE: 231| 4.44k|Montgomery_Int Montgomery_Int::one(const Montgomery_Params& params) { 232| 4.44k| return Montgomery_Int(params, params.R1(), false); 233| 4.44k|} _ZN5Botan14Montgomery_IntC2ERKNS_17Montgomery_ParamsERKNS_6BigIntEb: 242| 8.57k| m_params(params), m_v(m_params.p_words()) { 243| 8.57k| BOTAN_ARG_CHECK(v.signum() >= 0 && v < m_params.p(), "Input out of range"); ------------------ | | 35| 8.57k| do { \ | | 36| 8.57k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 17.1k| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 8.57k, False: 0] | | | Branch (37:12): [True: 8.57k, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 8.57k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 8.57k] | | ------------------ ------------------ 244| | 245| 8.57k| const size_t p_size = m_params.p_words(); 246| | 247| 8.57k| auto v_span = v._as_span(); 248| | 249| 8.57k| if(v_span.size() > p_size) { ------------------ | Branch (249:7): [True: 7.36k, False: 1.20k] ------------------ 250| | // Safe to truncate the span since we already checked v < p 251| 7.36k| v_span = v_span.first(p_size); 252| 7.36k| } 253| | 254| 8.57k| BOTAN_ASSERT_NOMSG(m_v.size() >= v_span.size()); ------------------ | | 84| 8.57k| do { \ | | 85| 8.57k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 8.57k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 8.57k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 8.57k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 8.57k] | | ------------------ ------------------ 255| | 256| 8.57k| copy_mem(std::span{m_v}.first(v_span.size()), v_span); 257| | 258| 8.57k| if(redc_needed) { ------------------ | Branch (258:7): [True: 4.12k, False: 4.44k] ------------------ 259| 4.12k| secure_vector ws; 260| 4.12k| this->mul_by(m_params.R2()._as_span().first(p_size), ws); 261| 4.12k| } 262| 8.57k|} _ZN5Botan14Montgomery_IntC2ERKNS_17Montgomery_ParamsENSt3__14spanIKmLm18446744073709551615EEE: 265| 860| m_params(params), m_v(words.begin(), words.end()) { 266| 860| BOTAN_ARG_CHECK(m_v.size() == m_params.p_words(), "Invalid input span"); ------------------ | | 35| 860| do { \ | | 36| 860| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 860| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 860] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 860| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 860] | | ------------------ ------------------ 267| 860|} _ZNK5Botan14Montgomery_Int5valueEv: 273| 32.2k|BigInt Montgomery_Int::value() const { 274| 32.2k| secure_vector ws(m_params.p_words()); 275| | 276| 32.2k| secure_vector z = m_v; 277| 32.2k| z.resize(2 * m_params.p_words()); // zero extend 278| | 279| 32.2k| bigint_monty_redc_inplace( 280| 32.2k| z.data(), m_params.p()._data(), m_params.p_words(), m_params.p_dash(), ws.data(), ws.size()); 281| | 282| 32.2k| return BigInt::_from_words(z); 283| 32.2k|} _ZNK5Botan14Montgomery_Int3mulERKS0_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 320| 127k|Montgomery_Int Montgomery_Int::mul(const Montgomery_Int& other, secure_vector& ws) const { 321| 127k| BOTAN_STATE_CHECK(other.m_params == m_params); ------------------ | | 51| 127k| do { \ | | 52| 127k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 127k| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 127k] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 127k| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 127k] | | ------------------ ------------------ 322| | 323| 127k| const size_t p_size = m_params.p_words(); 324| 127k| BOTAN_ASSERT_NOMSG(m_v.size() == p_size && other.m_v.size() == p_size); ------------------ | | 84| 127k| do { \ | | 85| 127k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 254k| if(!(expr)) { \ | | ------------------ | | | Branch (86:12): [True: 127k, False: 0] | | | Branch (86:12): [True: 127k, False: 0] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 127k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 127k] | | ------------------ ------------------ 325| | 326| 127k| if(ws.size() < 4 * p_size) { ------------------ | Branch (326:7): [True: 0, False: 127k] ------------------ 327| 0| ws.resize(4 * p_size); 328| 0| } 329| | 330| 127k| secure_vector z(p_size); 331| | 332| 127k| bigint_monty_mul( 333| 127k| z.data(), m_v.data(), other.m_v.data(), m_params.p()._data(), p_size, m_params.p_dash(), ws.data(), ws.size()); 334| | 335| 127k| return Montgomery_Int(m_params, std::move(z)); 336| 127k|} _ZN5Botan14Montgomery_Int6mul_byERKS0_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 338| 1.31M|Montgomery_Int& Montgomery_Int::mul_by(const Montgomery_Int& other, secure_vector& ws) { 339| 1.31M| BOTAN_STATE_CHECK(other.m_params == m_params); ------------------ | | 51| 1.31M| do { \ | | 52| 1.31M| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 1.31M| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 1.31M] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 1.31M| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 1.31M] | | ------------------ ------------------ 340| 1.31M| return this->mul_by(std::span{other.m_v}, ws); 341| 1.31M|} _ZN5Botan14Montgomery_Int6mul_byENSt3__14spanIKmLm18446744073709551615EEERNS1_6vectorImNS_16secure_allocatorImEEEE: 343| 1.37M|Montgomery_Int& Montgomery_Int::mul_by(std::span other, secure_vector& ws) { 344| 1.37M| const size_t p_size = m_params.p_words(); 345| 1.37M| BOTAN_ASSERT_NOMSG(m_v.size() == p_size && other.size() == p_size); ------------------ | | 84| 1.37M| do { \ | | 85| 1.37M| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 2.74M| if(!(expr)) { \ | | ------------------ | | | Branch (86:12): [True: 1.37M, False: 1] | | | Branch (86:12): [True: 1.37M, False: 18.4E] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 1.37M| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 1.37M] | | ------------------ ------------------ 346| | 347| 1.37M| if(ws.size() < 4 * p_size) { ------------------ | Branch (347:7): [True: 4.44k, False: 1.36M] ------------------ 348| 4.44k| ws.resize(4 * p_size); 349| 4.44k| } 350| | 351| 1.37M| bigint_monty_mul( 352| 1.37M| m_v.data(), m_v.data(), other.data(), m_params.p()._data(), p_size, m_params.p_dash(), ws.data(), ws.size()); 353| | 354| 1.37M| return (*this); 355| 1.37M|} _ZN5Botan14Montgomery_Int19square_this_n_timesERNSt3__16vectorImNS_16secure_allocatorImEEEEm: 357| 3.19M|Montgomery_Int& Montgomery_Int::square_this_n_times(secure_vector& ws, size_t n) { 358| 3.19M| const size_t p_size = m_params.p_words(); 359| 3.19M| BOTAN_ASSERT_NOMSG(m_v.size() == p_size); ------------------ | | 84| 3.19M| do { \ | | 85| 3.19M| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 3.19M| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 3.19M] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 3.19M| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 3.19M] | | ------------------ ------------------ 360| | 361| 3.19M| if(ws.size() < 4 * p_size) { ------------------ | Branch (361:7): [True: 35.6k, False: 3.15M] ------------------ 362| 35.6k| ws.resize(4 * p_size); 363| 35.6k| } 364| | 365| 11.9M| for(size_t i = 0; i != n; ++i) { ------------------ | Branch (365:22): [True: 8.77M, False: 3.19M] ------------------ 366| 8.77M| bigint_monty_sqr(m_v.data(), m_v.data(), m_params.p()._data(), p_size, m_params.p_dash(), ws.data(), ws.size()); 367| 8.77M| } 368| | 369| 3.19M| return (*this); 370| 3.19M|} _ZN5Botan14Montgomery_Int9add_mod_pENSt3__14spanIKmLm18446744073709551615EEE: 372| 5.33M|void Montgomery_Int::add_mod_p(std::span other) { 373| 5.33M| const size_t p_size = m_params.p_words(); 374| 5.33M| BOTAN_ASSERT_NOMSG(m_v.size() == p_size && other.size() == p_size); ------------------ | | 84| 5.33M| do { \ | | 85| 5.33M| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 10.6M| if(!(expr)) { \ | | ------------------ | | | Branch (86:12): [True: 5.33M, False: 0] | | | Branch (86:12): [True: 5.33M, False: 0] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 5.33M| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 5.33M] | | ------------------ ------------------ 375| | 376| 5.33M| const auto do_add = [&](std::span t) { 377| 5.33M| const word carry = bigint_add3(t.data(), m_v.data(), p_size, other.data(), p_size); 378| 5.33M| bigint_monty_maybe_sub(p_size, m_v.data(), carry, t.data(), m_params.p()._data()); 379| 5.33M| }; 380| | 381| 5.33M| if(p_size <= MontgomeryUseStackLimit) { ------------------ | Branch (381:7): [True: 1.85M, False: 3.47M] ------------------ 382| 1.85M| std::array t{}; 383| 1.85M| do_add(std::span{t}.first(p_size)); 384| 3.47M| } else { 385| 3.47M| secure_vector t(p_size); 386| 3.47M| do_add(t); 387| 3.47M| } 388| 5.33M|} _ZN5Botan14Montgomery_IntpLERKS0_: 390| 638k|Montgomery_Int& Montgomery_Int::operator+=(const Montgomery_Int& other) { 391| 638k| BOTAN_STATE_CHECK(other.m_params == m_params); ------------------ | | 51| 638k| do { \ | | 52| 638k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 638k| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 638k] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 638k| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 638k] | | ------------------ ------------------ 392| 638k| this->add_mod_p(other.m_v); 393| 638k| return (*this); 394| 638k|} _ZN5Botan14Montgomery_IntmIERKS0_: 396| 583k|Montgomery_Int& Montgomery_Int::operator-=(const Montgomery_Int& other) { 397| 583k| BOTAN_STATE_CHECK(other.m_params == m_params); ------------------ | | 51| 583k| do { \ | | 52| 583k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 583k| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 583k] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 583k| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 583k] | | ------------------ ------------------ 398| | 399| 583k| const size_t p_size = m_params.p_words(); 400| 583k| BOTAN_ASSERT_NOMSG(m_v.size() == p_size && other.m_v.size() == p_size); ------------------ | | 84| 583k| do { \ | | 85| 583k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 1.16M| if(!(expr)) { \ | | ------------------ | | | Branch (86:12): [True: 583k, False: 0] | | | Branch (86:12): [True: 583k, False: 0] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 583k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 583k] | | ------------------ ------------------ 401| | 402| 583k| const word borrow = bigint_sub2(m_v.data(), p_size, other.m_v.data(), p_size); 403| 583k| bigint_cnd_add(borrow, m_v.data(), m_params.p()._data(), p_size); 404| | 405| 583k| return (*this); 406| 583k|} _ZN5Botan14Montgomery_Int11mul_by_wordEm: 408| 1.04M|Montgomery_Int& Montgomery_Int::mul_by_word(word d) { 409| 1.04M| BOTAN_ARG_CHECK(d > 0, "Multiplier must be positive"); ------------------ | | 35| 1.04M| do { \ | | 36| 1.04M| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 1.04M| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 1.04M] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 1.04M| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 1.04M] | | ------------------ ------------------ 410| | 411| 1.04M| const size_t p_size = m_params.p_words(); 412| 1.04M| BOTAN_ASSERT_NOMSG(m_v.size() == p_size); ------------------ | | 84| 1.04M| do { \ | | 85| 1.04M| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 1.04M| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 1.04M] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 1.04M| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 1.04M] | | ------------------ ------------------ 413| | 414| | // Double and add, from the second highest bit of d downwards 415| 1.04M| const auto do_mul = [&](std::span x) { 416| 1.04M| copy_mem(x.data(), m_v.data(), p_size); 417| | 418| 1.04M| for(size_t i = high_bit(d) - 1; i > 0; --i) { 419| 1.04M| this->add_mod_p(m_v); 420| 1.04M| if(((d >> (i - 1)) & 1) == 1) { 421| 1.04M| this->add_mod_p(x); 422| 1.04M| } 423| 1.04M| } 424| 1.04M| }; 425| | 426| 1.04M| if(p_size <= MontgomeryUseStackLimit) { ------------------ | Branch (426:7): [True: 323k, False: 722k] ------------------ 427| 323k| std::array x{}; 428| 323k| do_mul(std::span{x}.first(p_size)); 429| 722k| } else { 430| 722k| secure_vector x(p_size); 431| 722k| do_mul(x); 432| 722k| } 433| | 434| 1.04M| return (*this); 435| 1.04M|} _ZN5Botan14Montgomery_Int4div2Ev: 437| 1.22M|Montgomery_Int& Montgomery_Int::div2() { 438| 1.22M| const size_t p_size = m_params.p_words(); 439| 1.22M| BOTAN_ASSERT_NOMSG(m_v.size() == p_size); ------------------ | | 84| 1.22M| do { \ | | 85| 1.22M| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 1.22M| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 1.22M] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 1.22M| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 1.22M] | | ------------------ ------------------ 440| 1.22M| constexpr size_t WB = WordInfo::bits; 441| | 442| | // If odd, add p (also odd) to make the value even; the sum is below 2p 443| 1.22M| const word carry = bigint_cnd_add(m_v[0] & 1, m_v.data(), m_params.p()._data(), p_size); 444| | 445| 53.5M| for(size_t i = 0; i != p_size - 1; ++i) { ------------------ | Branch (445:22): [True: 52.3M, False: 1.22M] ------------------ 446| 52.3M| m_v[i] = (m_v[i] >> 1) | (m_v[i + 1] << (WB - 1)); 447| 52.3M| } 448| 1.22M| m_v[p_size - 1] = (m_v[p_size - 1] >> 1) | (carry << (WB - 1)); 449| | 450| 1.22M| return (*this); 451| 1.22M|} _ZNK5Botan14Montgomery_Int7is_zeroEv: 459| 316|bool Montgomery_Int::is_zero() const { 460| 316| return CT::all_zeros(m_v.data(), m_v.size()).as_bool(); 461| 316|} _ZNK5Botan14Montgomery_Int6squareERNSt3__16vectorImNS_16secure_allocatorImEEEE: 463| 127k|Montgomery_Int Montgomery_Int::square(secure_vector& ws) const { 464| 127k| auto z = (*this); 465| 127k| z.square_this_n_times(ws, 1); 466| 127k| return z; 467| 127k|} monty.cpp:_ZN5Botan12_GLOBAL__N_114ranges_overlapEPKmmS2_m: 30| 18.5k|bool ranges_overlap(const word* a, size_t na, const word* b, size_t nb) { 31| 18.5k| if(na == 0 || nb == 0) { ------------------ | Branch (31:7): [True: 4, False: 18.5k] | Branch (31:18): [True: 0, False: 18.5k] ------------------ 32| 4| return false; 33| 4| } 34| 18.5k| const std::less lt; // NOLINT(modernize-use-transparent-functors) 35| 18.5k| return lt(a, b + nb) && lt(b, a + na); ------------------ | Branch (35:11): [True: 12.6k, False: 5.83k] | Branch (35:28): [True: 0, False: 12.6k] ------------------ 36| 18.5k|} monty.cpp:_ZZN5Botan14Montgomery_Int9add_mod_pENSt3__14spanIKmLm18446744073709551615EEEENK3$_0clENS2_ImLm18446744073709551615EEE: 376| 5.33M| const auto do_add = [&](std::span t) { 377| 5.33M| const word carry = bigint_add3(t.data(), m_v.data(), p_size, other.data(), p_size); 378| 5.33M| bigint_monty_maybe_sub(p_size, m_v.data(), carry, t.data(), m_params.p()._data()); 379| 5.33M| }; monty.cpp:_ZZN5Botan14Montgomery_Int11mul_by_wordEmENK3$_0clENSt3__14spanImLm18446744073709551615EEE: 415| 1.04M| const auto do_mul = [&](std::span x) { 416| 1.04M| copy_mem(x.data(), m_v.data(), p_size); 417| | 418| 3.92M| for(size_t i = high_bit(d) - 1; i > 0; --i) { ------------------ | Branch (418:39): [True: 2.88M, False: 1.04M] ------------------ 419| 2.88M| this->add_mod_p(m_v); 420| 2.88M| if(((d >> (i - 1)) & 1) == 1) { ------------------ | Branch (420:13): [True: 1.81M, False: 1.06M] ------------------ 421| 1.81M| this->add_mod_p(x); 422| 1.81M| } 423| 2.88M| } 424| 1.04M| }; _ZN5Botan16monty_precomputeERKNS_14Montgomery_IntEmb: 145| 4.12k| bool const_time) { 146| 4.12k| if(window_bits == 0) { ------------------ | Branch (146:7): [True: 0, False: 4.12k] ------------------ 147| 0| window_bits = 4; 148| 0| } 149| | 150| 4.12k| if(window_bits < 1 || window_bits > 12) { // really even 8 is too large ... ------------------ | Branch (150:7): [True: 0, False: 4.12k] | Branch (150:26): [True: 0, False: 4.12k] ------------------ 151| 0| throw Invalid_Argument("Invalid window bits for Montgomery exponentiation"); 152| 0| } 153| | 154| 4.12k|#if defined(BOTAN_HAS_MONTY_EXP_AVX512) 155| 4.12k| if(CPUID::has(CPUID::Feature::AVX512)) { ------------------ | Branch (155:7): [True: 0, False: 4.12k] ------------------ 156| 0| if(auto state = make_monty_exp_avx512(g, window_bits, const_time)) { ------------------ | Branch (156:15): [True: 0, False: 0] ------------------ 157| 0| return state; 158| 0| } 159| 0| } 160| 4.12k|#endif 161| | 162| 4.12k| return std::make_shared(g, window_bits, const_time); 163| 4.12k|} _ZN5Botan16monty_precomputeERKNS_17Montgomery_ParamsERKNS_6BigIntEmb: 168| 4.12k| bool const_time) { 169| 4.12k| BOTAN_ARG_CHECK(g.signum() >= 0 && g < params.p(), "Montgomery exponentiation base integer out of range"); ------------------ | | 35| 4.12k| do { \ | | 36| 4.12k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 8.25k| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 4.12k, False: 0] | | | Branch (37:12): [True: 4.12k, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 4.12k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 4.12k] | | ------------------ ------------------ 170| 4.12k| const Montgomery_Int monty_g(params, g); 171| 4.12k| return monty_precompute(monty_g, window_bits, const_time); 172| 4.12k|} _ZN5Botan13monty_executeERKNS_31Montgomery_Exponentiation_StateERKNS_6BigIntEm: 176| 860| size_t max_k_bits) { 177| 860| return precomputed_state.exponentiation(k, max_k_bits); 178| 860|} _ZN5Botan21monty_execute_vartimeERKNS_31Montgomery_Exponentiation_StateERKNS_6BigIntE: 180| 33.7k|Montgomery_Int monty_execute_vartime(const Montgomery_Exponentiation_State& precomputed_state, const BigInt& k) { 181| 33.7k| return precomputed_state.exponentiation_vartime(k); 182| 33.7k|} monty_exp.cpp:_ZN5Botan12_GLOBAL__N_133Montgomery_Exponentiation_GenericC2ERKNS_14Montgomery_IntEmb: 43| 4.12k| m_params(g._params()), m_window_bits(window_bits) { 44| 4.12k| const size_t window_size = (static_cast(1) << m_window_bits); 45| | 46| 4.12k| m_g.reserve(window_size); 47| | 48| 4.12k| m_g.push_back(Montgomery_Int::one(m_params)); 49| | 50| 4.12k| m_g.push_back(g); 51| | 52| 4.12k| secure_vector ws(2 * m_params.p_words()); 53| | 54| 258k| for(size_t i = 2; i != window_size; ++i) { ------------------ | Branch (54:22): [True: 254k, False: 4.12k] ------------------ 55| 254k| if(i % 2 == 0) { ------------------ | Branch (55:10): [True: 127k, False: 127k] ------------------ 56| 127k| m_g.push_back(m_g[i / 2].square(ws)); 57| 127k| } else { 58| 127k| m_g.push_back(m_g[1].mul(m_g[i - 1], ws)); 59| 127k| } 60| 254k| } 61| | 62| 4.12k| if(const_time) { ------------------ | Branch (62:7): [True: 1.36k, False: 2.76k] ------------------ 63| 1.36k| CT::poison_range(m_g); 64| 1.36k| } 65| 4.12k|} monty_exp.cpp:_ZNK5Botan12_GLOBAL__N_133Montgomery_Exponentiation_Generic14exponentiationERKNS_6BigIntEm: 90| 860|Montgomery_Int Montgomery_Exponentiation_Generic::exponentiation(const BigInt& scalar, size_t max_k_bits) const { 91| 860| BOTAN_ARG_CHECK(scalar.signum() >= 0, "Invalid scalar for Montgomery exponentiation"); ------------------ | | 35| 860| do { \ | | 36| 860| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 860| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 860] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 860| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 860] | | ------------------ ------------------ 92| 860| BOTAN_DEBUG_ASSERT(scalar.bits() <= max_k_bits); ------------------ | | 137| 860| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 860| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 860] | | ------------------ ------------------ 93| | // TODO add a const-time implementation of above assert and use it in release builds 94| | 95| 860| const size_t exp_nibbles = (max_k_bits + m_window_bits - 1) / m_window_bits; 96| | 97| 860| if(exp_nibbles == 0) { ------------------ | Branch (97:7): [True: 0, False: 860] ------------------ 98| 0| return Montgomery_Int::one(m_params); 99| 0| } 100| | 101| 860| secure_vector e_bits(m_params.p_words()); 102| 860| secure_vector ws(2 * m_params.p_words()); 103| | 104| 860| const_time_lookup(e_bits, m_g, scalar.get_substring(m_window_bits * (exp_nibbles - 1), m_window_bits)); 105| 860| Montgomery_Int x(m_params, std::span{e_bits}); 106| | 107| 58.1k| for(size_t i = exp_nibbles - 1; i > 0; --i) { ------------------ | Branch (107:36): [True: 57.2k, False: 860] ------------------ 108| 57.2k| x.square_this_n_times(ws, m_window_bits); 109| 57.2k| const_time_lookup(e_bits, m_g, scalar.get_substring(m_window_bits * (i - 1), m_window_bits)); 110| 57.2k| x.mul_by(e_bits, ws); 111| 57.2k| } 112| | 113| 860| CT::unpoison(x); 114| 860| return x; 115| 860|} monty_exp.cpp:_ZN5Botan12_GLOBAL__N_117const_time_lookupERNSt3__16vectorImNS_16secure_allocatorImEEEERKNS2_INS_14Montgomery_IntENS1_9allocatorIS7_EEEEm: 67| 58.1k|void const_time_lookup(secure_vector& output, const std::vector& g, size_t nibble) { 68| 58.1k| BOTAN_ASSERT_NOMSG(g.size() % 2 == 0); // actually a power of 2 ------------------ | | 84| 58.1k| do { \ | | 85| 58.1k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 58.1k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 58.1k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 58.1k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 58.1k] | | ------------------ ------------------ 69| | 70| 58.1k| const size_t words = output.size(); 71| | 72| 58.1k| clear_mem(output.data(), output.size()); 73| | 74| 523k| for(size_t i = 0; i != g.size(); i += 2) { ------------------ | Branch (74:22): [True: 464k, False: 58.1k] ------------------ 75| 464k| const secure_vector& vec_0 = g[i].repr(); 76| 464k| const secure_vector& vec_1 = g[i + 1].repr(); 77| | 78| 464k| BOTAN_ASSERT_NOMSG(vec_0.size() >= words && vec_1.size() >= words); ------------------ | | 84| 464k| do { \ | | 85| 464k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 929k| if(!(expr)) { \ | | ------------------ | | | Branch (86:12): [True: 464k, False: 0] | | | Branch (86:12): [True: 464k, False: 0] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 464k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 464k] | | ------------------ ------------------ 79| | 80| 464k| const auto mask_0 = CT::Mask::is_equal(nibble, i); 81| 464k| const auto mask_1 = CT::Mask::is_equal(nibble, i + 1); 82| | 83| 21.6M| for(size_t w = 0; w != words; ++w) { ------------------ | Branch (83:25): [True: 21.1M, False: 464k] ------------------ 84| 21.1M| output[w] |= mask_0.if_set_return(vec_0[w]); 85| 21.1M| output[w] |= mask_1.if_set_return(vec_1[w]); 86| 21.1M| } 87| 464k| } 88| 58.1k|} monty_exp.cpp:_ZNK5Botan12_GLOBAL__N_133Montgomery_Exponentiation_Generic22exponentiation_vartimeERKNS_6BigIntE: 117| 33.7k|Montgomery_Int Montgomery_Exponentiation_Generic::exponentiation_vartime(const BigInt& scalar) const { 118| 33.7k| const size_t exp_nibbles = (scalar.bits() + m_window_bits - 1) / m_window_bits; 119| | 120| 33.7k| secure_vector ws(2 * m_params.p_words()); 121| | 122| 33.7k| if(exp_nibbles == 0) { ------------------ | Branch (122:7): [True: 0, False: 33.7k] ------------------ 123| 0| return Montgomery_Int::one(m_params); 124| 0| } 125| | 126| 33.7k| Montgomery_Int x = m_g[scalar.get_substring(m_window_bits * (exp_nibbles - 1), m_window_bits)]; 127| | 128| 1.00M| for(size_t i = exp_nibbles - 1; i > 0; --i) { ------------------ | Branch (128:36): [True: 974k, False: 33.7k] ------------------ 129| 974k| x.square_this_n_times(ws, m_window_bits); 130| | 131| 974k| const uint32_t nibble = scalar.get_substring(m_window_bits * (i - 1), m_window_bits); 132| 974k| if(nibble > 0) { ------------------ | Branch (132:10): [True: 443k, False: 530k] ------------------ 133| 443k| x.mul_by(m_g[nibble], ws); 134| 443k| } 135| 974k| } 136| | 137| 33.7k| CT::unpoison(x); 138| 33.7k| return x; 139| 33.7k|} _ZN5Botan6jacobiENS_6BigIntES0_: 119| 1.35k|int32_t jacobi(BigInt a, BigInt n) { 120| 1.35k| BOTAN_ARG_CHECK(n.is_odd() && n >= 3, "Argument n must be an odd integer >= 3"); ------------------ | | 35| 1.35k| do { \ | | 36| 1.35k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 2.70k| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 1.35k, False: 0] | | | Branch (37:12): [True: 1.35k, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 1.35k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 1.35k] | | ------------------ ------------------ 121| | 122| 1.35k| if(a < 0 || a >= n) { ------------------ | Branch (122:7): [True: 606, False: 747] | Branch (122:16): [True: 0, False: 747] ------------------ 123| 606| a %= n; 124| 606| } 125| | 126| 1.35k| if(a == 0) { ------------------ | Branch (126:7): [True: 0, False: 1.35k] ------------------ 127| 0| return 0; 128| 0| } 129| 1.35k| if(a == 1) { ------------------ | Branch (129:7): [True: 0, False: 1.35k] ------------------ 130| 0| return 1; 131| 0| } 132| | 133| 1.35k| int32_t s = 1; 134| | 135| 3.95k| for(;;) { 136| 3.95k| const size_t e = low_zero_bits(a); 137| 3.95k| a >>= e; 138| 3.95k| const word n_mod_8 = n.word_at(0) % 8; 139| 3.95k| const word n_mod_4 = n_mod_8 % 4; 140| | 141| 3.95k| if(e % 2 == 1 && (n_mod_8 == 3 || n_mod_8 == 5)) { ------------------ | Branch (141:10): [True: 1.23k, False: 2.72k] | Branch (141:25): [True: 268, False: 962] | Branch (141:41): [True: 226, False: 736] ------------------ 142| 494| s = -s; 143| 494| } 144| | 145| 3.95k| if(n_mod_4 == 3 && a % 4 == 3) { ------------------ | Branch (145:10): [True: 1.55k, False: 2.40k] | Branch (145:26): [True: 428, False: 1.12k] ------------------ 146| 428| s = -s; 147| 428| } 148| | 149| | /* 150| | * The HAC presentation of the algorithm uses recursion, which is not 151| | * desirable or necessary. 152| | * 153| | * Instead we loop accumulating the product of the various jacobi() 154| | * subcomputations into s, until we reach algorithm termination, which 155| | * occurs in one of two ways. 156| | * 157| | * If a == 1 then the recursion has completed; we can return the value of s. 158| | * 159| | * Otherwise, after swapping and reducing, check for a == 0 [this value is 160| | * called `n1` in HAC's presentation]. This would imply that jacobi(n1,a1) 161| | * would have the value 0, due to Line 1 in HAC 2.149, in which case the 162| | * entire product is zero, and we can immediately return that result. 163| | */ 164| | 165| 3.95k| if(a == 1) { ------------------ | Branch (165:10): [True: 1.35k, False: 2.60k] ------------------ 166| 1.35k| return s; 167| 1.35k| } 168| | 169| 2.60k| std::swap(a, n); 170| | 171| 2.60k| BOTAN_ASSERT_NOMSG(n.is_odd()); ------------------ | | 84| 2.60k| do { \ | | 85| 2.60k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 2.60k| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 2.60k] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 2.60k| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 2.60k] | | ------------------ ------------------ 172| | 173| 2.60k| a %= n; 174| | 175| 2.60k| if(a == 0) { ------------------ | Branch (175:10): [True: 0, False: 2.60k] ------------------ 176| 0| return 0; 177| 0| } 178| 2.60k| } 179| 1.35k|} _ZN5Botan13low_zero_bitsERKNS_6BigIntE: 194| 4.43k|size_t low_zero_bits(const BigInt& n) { 195| 4.43k| size_t low_zero = 0; 196| | 197| 4.43k| auto seen_nonempty_word = CT::Mask::cleared(); 198| | 199| 102k| for(size_t i = 0; i != n.size(); ++i) { ------------------ | Branch (199:22): [True: 98.3k, False: 4.43k] ------------------ 200| 98.3k| const word x = n.word_at(i); 201| | 202| | // ctz(0) will return sizeof(word) 203| 98.3k| const size_t tz_x = ctz(x); 204| | 205| | // if x > 0 we want to count tz_x in total but not any 206| | // further words, so set the mask after the addition 207| 98.3k| low_zero += seen_nonempty_word.if_not_set_return(tz_x); 208| | 209| 98.3k| seen_nonempty_word |= CT::Mask::expand(x); 210| 98.3k| } 211| | 212| | // if we saw no words with x > 0 then n == 0 and the value we have 213| | // computed is meaningless. Instead return BigInt::zero() in that case. 214| 4.43k| return static_cast(seen_nonempty_word.if_set_return(low_zero)); 215| 4.43k|} _ZN5Botan17is_perfect_squareERKNS_6BigIntE: 347| 77|BigInt is_perfect_square(const BigInt& C) { 348| 77| if(C < 1) { ------------------ | Branch (348:7): [True: 0, False: 77] ------------------ 349| 0| throw Invalid_Argument("is_perfect_square requires C >= 1"); 350| 0| } 351| 77| if(C == 1) { ------------------ | Branch (351:7): [True: 0, False: 77] ------------------ 352| 0| return BigInt::one(); 353| 0| } 354| | 355| 77| const size_t n = C.bits(); 356| 77| const size_t m = (n + 1) / 2; 357| 77| const BigInt B = C + BigInt::power_of_2(m); 358| | 359| 77| BigInt X = BigInt::power_of_2(m) - 1; 360| 77| BigInt X2 = (X * X); 361| | 362| 687| for(;;) { 363| 687| X = (X2 + C) / (2 * X); 364| 687| X2 = (X * X); 365| | 366| 687| if(X2 < B) { ------------------ | Branch (366:10): [True: 77, False: 610] ------------------ 367| 77| break; 368| 77| } 369| 687| } 370| | 371| 77| if(X2 == C) { ------------------ | Branch (371:7): [True: 0, False: 77] ------------------ 372| 0| return X; 373| 77| } else { 374| 77| return BigInt::zero(); 375| 77| } 376| 77|} _ZN5Botan16is_prime_vartimeERKNS_6BigIntERNS_21RandomNumberGeneratorEmb: 437| 530|bool is_prime_vartime(const BigInt& n, RandomNumberGenerator& rng, size_t prob, bool is_random) { 438| 530| return is_prime_impl(n, rng, prob, is_random, true); 439| 530|} numthry.cpp:_ZN5Botan12_GLOBAL__N_113is_prime_implERKNS_6BigIntERNS_21RandomNumberGeneratorEmbb: 380| 530|bool is_prime_impl(const BigInt& n, RandomNumberGenerator& rng, size_t prob, bool is_random, bool vartime) { 381| 530| if(n == 2) { ------------------ | Branch (381:7): [True: 0, False: 530] ------------------ 382| 0| return true; 383| 0| } 384| 530| if(n <= 1 || n.is_even()) { ------------------ | Branch (384:7): [True: 0, False: 530] | Branch (384:17): [True: 0, False: 530] ------------------ 385| 0| return false; 386| 0| } 387| | 388| 530| const size_t n_bits = n.bits(); 389| | 390| | // Fast path testing for small numbers (<= 65521) 391| 530| if(n_bits <= 16) { ------------------ | Branch (391:7): [True: 0, False: 530] ------------------ 392| 0| const uint16_t num = static_cast(n.word_at(0)); 393| | 394| 0| return std::binary_search(PRIMES, PRIMES + PRIME_TABLE_SIZE, num); 395| 0| } 396| | 397| | // Trial division, which is much cheaper than the Miller-Rabin setup below 398| 530| const auto residues = mod_small_primes(n, std::min(n_bits, PRIME_TABLE_SIZE)); 399| | 400| 530| auto no_small_factor = CT::Mask::set(); 401| 1.52M| for(const word r : residues) { ------------------ | Branch (401:21): [True: 1.52M, False: 530] ------------------ 402| | // We've already checked above that n is not itself in the primes table, so any 403| | // remainder of zero implies a factor rather than equality 404| 1.52M| no_small_factor &= CT::Mask::expand(r); 405| 1.52M| } 406| | 407| 530| if(!no_small_factor.as_bool()) { ------------------ | Branch (407:7): [True: 50, False: 480] ------------------ 408| 50| return false; 409| 50| } 410| | 411| 480| const Montgomery_Params monty_n(n); 412| | 413| 480| if(rng.is_seeded()) { ------------------ | Branch (413:7): [True: 480, False: 0] ------------------ 414| 480| const size_t t = miller_rabin_test_iterations(n_bits, prob, is_random); 415| | 416| 480| if(is_random) { ------------------ | Branch (416:10): [True: 0, False: 480] ------------------ 417| 0| return vartime ? is_miller_rabin_probable_prime_vartime(n, monty_n, rng, t) ------------------ | Branch (417:17): [True: 0, False: 0] ------------------ 418| 0| : is_miller_rabin_probable_prime(n, monty_n, rng, t); 419| 480| } else { 420| 480| return vartime ? is_miller_rabin_lucas_probable_prime_vartime(n, monty_n, rng, t) ------------------ | Branch (420:17): [True: 480, False: 0] ------------------ 421| 480| : is_miller_rabin_lucas_probable_prime(n, monty_n, rng, t); 422| 480| } 423| 480| } else { 424| 0| return vartime ? is_bailie_psw_probable_prime_vartime(n, monty_n) : is_bailie_psw_probable_prime(n, monty_n); ------------------ | Branch (424:14): [True: 0, False: 0] ------------------ 425| 0| } 426| 480|} _ZN5Botan44is_miller_rabin_lucas_probable_prime_vartimeERKNS_6BigIntERKNS_17Montgomery_ParamsERNS_21RandomNumberGeneratorEm: 430| 480| size_t test_iterations) { 431| 480| return miller_rabin_lucas_test(n, monty_n, rng, test_iterations, true); 432| 480|} _ZN5Botan28miller_rabin_test_iterationsEmmb: 434| 480|size_t miller_rabin_test_iterations(size_t n_bits, size_t prob, bool random) { 435| | // Cap prob at 512 bits as _way_ more than enough; a random fault causing 436| | // false accept is much more likely to occur than an actual 2^-512 event is. 437| | 438| 480| prob = std::min(512, prob); 439| | 440| 480| const size_t base = (prob + 2) / 2; // worst case 4^-t error rate 441| | 442| | /* 443| | * If the candidate prime was maliciously constructed, we can't rely 444| | * on arguments based on p being random. 445| | */ 446| 480| if(!random) { ------------------ | Branch (446:7): [True: 480, False: 0] ------------------ 447| 480| return base; 448| 480| } 449| | 450| | /* 451| | * For randomly chosen numbers we can use the estimates from 452| | * http://www.math.dartmouth.edu/~carlp/PDF/paper88.pdf 453| | * 454| | * These values are derived from the inequality for p(k,t) given on 455| | * the second page. 456| | */ 457| 0| if(prob <= 128) { ------------------ | Branch (457:7): [True: 0, False: 0] ------------------ 458| 0| if(n_bits >= 1536) { ------------------ | Branch (458:10): [True: 0, False: 0] ------------------ 459| 0| return 4; // < 2^-133 460| 0| } 461| 0| if(n_bits >= 1024) { ------------------ | Branch (461:10): [True: 0, False: 0] ------------------ 462| 0| return 6; // < 2^-133 463| 0| } 464| 0| if(n_bits >= 512) { ------------------ | Branch (464:10): [True: 0, False: 0] ------------------ 465| 0| return 12; // < 2^-129 466| 0| } 467| 0| if(n_bits >= 256) { ------------------ | Branch (467:10): [True: 0, False: 0] ------------------ 468| 0| return 29; // < 2^-128 469| 0| } 470| 0| } 471| | 472| | /* 473| | If the user desires a smaller error probability than we have 474| | precomputed error estimates for, just fall back to using the worst 475| | case error rate. 476| | */ 477| 0| return base; 478| 0|} primality.cpp:_ZN5Botan12_GLOBAL__N_110lucas_testERKNS_6BigIntERKNS_17Montgomery_ParamsEb: 31| 316|bool lucas_test(const BigInt& C, const Montgomery_Params& monty_C, bool vartime) { 32| 316| BOTAN_ARG_CHECK(C.signum() >= 0, "Argument must be non-negative"); ------------------ | | 35| 316| do { \ | | 36| 316| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 316| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 316] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 316| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 316] | | ------------------ ------------------ 33| | 34| 316| if(C == 2 || C == 3 || C == 5 || C == 7 || C == 11 || C == 13) { ------------------ | Branch (34:7): [True: 0, False: 316] | Branch (34:17): [True: 0, False: 316] | Branch (34:27): [True: 0, False: 316] | Branch (34:37): [True: 0, False: 316] | Branch (34:47): [True: 0, False: 316] | Branch (34:58): [True: 0, False: 316] ------------------ 35| 0| return true; 36| 0| } 37| | 38| 316| if(C <= 1 || C.is_even()) { ------------------ | Branch (38:7): [True: 0, False: 316] | Branch (38:17): [True: 0, False: 316] ------------------ 39| 0| return false; 40| 0| } 41| | 42| | // Check 5, -7, 9, -11, 13, -15, 17, ... 43| 316| word D = 5; 44| 316| bool D_negative = false; 45| | 46| 1.35k| for(;;) { 47| 1.35k| auto D_bn = BigInt::from_word(D); 48| 1.35k| D_bn.cond_flip_sign(D_negative); 49| | 50| 1.35k| const int32_t j = jacobi(D_bn, C); 51| 1.35k| if(j == 0) { ------------------ | Branch (51:10): [True: 0, False: 1.35k] ------------------ 52| 0| return false; 53| 0| } 54| | 55| 1.35k| if(j == -1) { ------------------ | Branch (55:10): [True: 316, False: 1.03k] ------------------ 56| 316| break; 57| 316| } 58| | 59| 1.03k| D += 2; 60| 1.03k| D_negative = !D_negative; 61| | 62| 1.03k| if(D == 17 && is_perfect_square(C).signum() != 0) { ------------------ | Branch (62:10): [True: 77, False: 960] | Branch (62:10): [True: 0, False: 1.03k] | Branch (62:21): [True: 0, False: 77] ------------------ 63| 0| return false; 64| 0| } 65| 1.03k| } 66| | 67| 316| const BigInt K = C + 1; 68| 316| const size_t K_bits = K.bits() - 1; 69| | 70| 316| secure_vector ws; 71| | 72| 316| Montgomery_Int U = Montgomery_Int::one(monty_C); 73| 316| Montgomery_Int V = U; 74| 316| Montgomery_Int Ut = U; 75| 316| Montgomery_Int Vt = U; 76| 316| Montgomery_Int U2 = U; 77| 316| Montgomery_Int V2 = U; 78| 316| Montgomery_Int T = U; 79| | 80| 869k| for(size_t i = 0; i != K_bits; ++i) { ------------------ | Branch (80:22): [True: 868k, False: 316] ------------------ 81| 868k| const bool k_bit = K.get_bit(K_bits - 1 - i); 82| | 83| | // U_temp = U V 84| 868k| Ut = U; 85| 868k| Ut.mul_by(V, ws); 86| | 87| | // V_temp = (V^2 + D U^2) / 2 88| 868k| T = U; 89| 868k| T.square_this_n_times(ws, 1); 90| 868k| T.mul_by_word(D); 91| 868k| Vt = V; 92| 868k| Vt.square_this_n_times(ws, 1); 93| 868k| if(D_negative) { ------------------ | Branch (93:10): [True: 480k, False: 388k] ------------------ 94| 480k| Vt -= T; 95| 480k| } else { 96| 388k| Vt += T; 97| 388k| } 98| 868k| Vt.div2(); 99| | 100| 868k| if(!vartime || k_bit) { ------------------ | Branch (100:10): [True: 0, False: 868k] | Branch (100:22): [True: 176k, False: 691k] ------------------ 101| | // U_i = (U_temp + V_temp) / 2 102| 176k| U2 = Ut; 103| 176k| U2 += Vt; 104| 176k| U2.div2(); 105| | 106| | // V_i = (V_temp + D U_temp) / 2 107| 176k| T = Ut; 108| 176k| T.mul_by_word(D); 109| 176k| V2 = Vt; 110| 176k| if(D_negative) { ------------------ | Branch (110:13): [True: 103k, False: 73.7k] ------------------ 111| 103k| V2 -= T; 112| 103k| } else { 113| 73.7k| V2 += T; 114| 73.7k| } 115| 176k| V2.div2(); 116| 176k| } 117| | 118| 868k| if(vartime) { ------------------ | Branch (118:10): [True: 868k, False: 0] ------------------ 119| 868k| if(k_bit) { ------------------ | Branch (119:13): [True: 176k, False: 691k] ------------------ 120| 176k| U = U2; 121| 176k| V = V2; 122| 691k| } else { 123| 691k| U = Ut; 124| 691k| V = Vt; 125| 691k| } 126| 868k| } else { 127| 0| U = Ut; 128| 0| V = Vt; 129| 0| U.ct_cond_assign(k_bit, U2); 130| 0| V.ct_cond_assign(k_bit, V2); 131| 0| } 132| 868k| } 133| | 134| 316| return U.is_zero(); 135| 316|} primality.cpp:_ZN5Botan12_GLOBAL__N_117Miller_Rabin_TestC2ERKNS_6BigIntERKNS_17Montgomery_ParamsEb: 158| 480| m_monty_n(monty_n), m_vartime(vartime) { 159| 480| BOTAN_ARG_CHECK(n >= 3 && n.is_odd(), "Invalid integer for Miller-Rabin test"); ------------------ | | 35| 480| do { \ | | 36| 480| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 960| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 480, False: 0] | | | Branch (37:12): [True: 480, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 480| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 480] | | ------------------ ------------------ 160| | 161| 480| const size_t N = m_monty_n.p_words(); 162| | 163| 480| const BigInt n_minus_1 = n - 1; 164| | /* 165| | * This unpoison is not ideal but realistically there is no way to 166| | * hide the number of loop iterations (below). The main user of 167| | * secret primes is RSA and we always generate RSA primes such that 168| | * p == 3 (mod 4), which means s is always 1. 169| | */ 170| 480| m_s = CT::driveby_unpoison(low_zero_bits(n_minus_1)); 171| 480| m_d = n_minus_1 >> m_s; 172| 480| m_d_bits = m_d.bits(); 173| | 174| | // 1 and -1 in Montgomery form 175| 480| m_one.assign(m_monty_n.R1()._as_span().first(N).begin(), m_monty_n.R1()._as_span().first(N).end()); 176| 480| m_minus_one.resize(N); 177| 480| bigint_sub3(m_minus_one.data(), n._data(), N, m_one.data(), N); 178| 480| } primality.cpp:_ZNK5Botan12_GLOBAL__N_117Miller_Rabin_Test6passesERKNS_6BigIntE: 183| 2.37k| bool passes(const BigInt& a) const { 184| 2.37k| Montgomery_Int y = [&]() { 185| 2.37k| if(m_vartime) { 186| 2.37k| const auto powm_a = monty_precompute(m_monty_n, a, vartime_window_bits(m_d_bits), false); 187| 2.37k| return monty_execute_vartime(*powm_a, m_d); 188| 2.37k| } else { 189| 2.37k| const auto powm_a = monty_precompute(m_monty_n, a, 4, true); 190| 2.37k| return monty_execute(*powm_a, m_d, m_d_bits); 191| 2.37k| } 192| 2.37k| }(); 193| | 194| 2.37k| if(is_one(y) || is_minus_one(y)) { ------------------ | Branch (194:13): [True: 299, False: 2.07k] | Branch (194:26): [True: 301, False: 1.77k] ------------------ 195| 600| return true; 196| 600| } 197| | 198| 1.77k| secure_vector ws(2 * m_monty_n.p_words()); 199| | 200| 295k| for(size_t i = 1; i != m_s; ++i) { ------------------ | Branch (200:28): [True: 295k, False: 164] ------------------ 201| 295k| y.square_this_n_times(ws, 1); 202| | 203| 295k| if(is_one(y)) { // found a non-trivial square root ------------------ | Branch (203:16): [True: 0, False: 295k] ------------------ 204| 0| return false; 205| 0| } 206| | 207| | /* 208| | -1 is the trivial square root of unity, so ``a`` is not a 209| | witness for this number - give up 210| | */ 211| 295k| if(is_minus_one(y)) { ------------------ | Branch (211:16): [True: 1.61k, False: 294k] ------------------ 212| 1.61k| return true; 213| 1.61k| } 214| 295k| } 215| | 216| 164| return false; 217| 1.77k| } primality.cpp:_ZZNK5Botan12_GLOBAL__N_117Miller_Rabin_Test6passesERKNS_6BigIntEENKUlvE_clEv: 184| 2.37k| Montgomery_Int y = [&]() { 185| 2.37k| if(m_vartime) { ------------------ | Branch (185:16): [True: 2.37k, False: 0] ------------------ 186| 2.37k| const auto powm_a = monty_precompute(m_monty_n, a, vartime_window_bits(m_d_bits), false); 187| 2.37k| return monty_execute_vartime(*powm_a, m_d); 188| 2.37k| } else { 189| 0| const auto powm_a = monty_precompute(m_monty_n, a, 4, true); 190| 0| return monty_execute(*powm_a, m_d, m_d_bits); 191| 0| } 192| 2.37k| }(); primality.cpp:_ZN5Botan12_GLOBAL__N_119vartime_window_bitsEm: 140| 2.37k|size_t vartime_window_bits(size_t exp_bits) { 141| 2.37k| if(exp_bits <= 256) { ------------------ | Branch (141:7): [True: 21, False: 2.35k] ------------------ 142| 21| return 4; 143| 2.35k| } else if(exp_bits <= 1024) { ------------------ | Branch (143:14): [True: 39, False: 2.31k] ------------------ 144| 39| return 5; 145| 2.31k| } else if(exp_bits <= 2048) { ------------------ | Branch (145:14): [True: 910, False: 1.40k] ------------------ 146| 910| return 6; 147| 1.40k| } else { 148| 1.40k| return 7; 149| 1.40k| } 150| 2.37k|} primality.cpp:_ZNK5Botan12_GLOBAL__N_117Miller_Rabin_Test6is_oneERKNS_14Montgomery_IntE: 220| 298k| bool is_one(const Montgomery_Int& y) const { 221| 298k| return CT::is_equal(y.repr().data(), m_one.data(), m_one.size()).as_bool(); 222| 298k| } primality.cpp:_ZNK5Botan12_GLOBAL__N_117Miller_Rabin_Test12is_minus_oneERKNS_14Montgomery_IntE: 224| 297k| bool is_minus_one(const Montgomery_Int& y) const { 225| 297k| return CT::is_equal(y.repr().data(), m_minus_one.data(), m_minus_one.size()).as_bool(); 226| 297k| } primality.cpp:_ZN5Botan12_GLOBAL__N_123miller_rabin_lucas_testERKNS_6BigIntERKNS_17Montgomery_ParamsERNS_21RandomNumberGeneratorEmb: 281| 480| const BigInt& n, const Montgomery_Params& monty_n, RandomNumberGenerator& rng, size_t t, bool vartime) { 282| 480| if(n < 3 || n.is_even()) { ------------------ | Branch (282:7): [True: 0, False: 480] | Branch (282:16): [True: 0, False: 480] ------------------ 283| 0| return false; 284| 0| } 285| 480| if(t == 0) { ------------------ | Branch (285:7): [True: 0, False: 480] ------------------ 286| 0| t = 1; 287| 0| } 288| | 289| 480| const Miller_Rabin_Test mr(n, monty_n, vartime); 290| | 291| 480| const auto random_base = [&]() { return BigInt::random_integer(rng, BigInt::from_word(2), n); }; 292| | 293| | // A single test first, since that alone rejects almost all composites 294| 480| if(!mr.passes(random_base())) { ------------------ | Branch (294:7): [True: 164, False: 316] ------------------ 295| 164| return false; 296| 164| } 297| 316| t -= 1; 298| | 299| 316|#if defined(BOTAN_HAS_THREAD_UTILS) && !defined(BOTAN_HAS_VALGRIND) 300| 316| auto& pool = Thread_Pool::global_instance(); 301| 316| const size_t tests_per_job = miller_rabin_tests_per_job(n.bits()); 302| | 303| | // The Lucas test costs about as much as three Miller-Rabin tests 304| 316| if(pool.worker_count() > 0 && t > 0 && t + 3 >= tests_per_job) { ------------------ | Branch (304:7): [True: 316, False: 0] | Branch (304:34): [True: 316, False: 0] | Branch (304:43): [True: 316, False: 0] ------------------ 305| | // The jobs cannot share the RNG, so draw all of the bases here 306| 316| std::vector bases; 307| 316| bases.reserve(t); 308| 2.21k| for(size_t i = 0; i != t; ++i) { ------------------ | Branch (308:25): [True: 1.89k, False: 316] ------------------ 309| 1.89k| bases.push_back(random_base()); 310| 1.89k| } 311| | 312| | // Split the tests into jobs of (nearly) equal size 313| 316| const size_t job_tests = ceil_division(t, ceil_division(t, tests_per_job)); 314| 316| const size_t jobs = ceil_division(t, job_tests); 315| | 316| 316| const auto passes_tests = [&](size_t from, size_t to) { 317| 316| for(size_t i = from; i != to; ++i) { 318| 316| if(!mr.passes(bases[i])) { 319| 316| return false; 320| 316| } 321| 316| } 322| 316| return true; 323| 316| }; 324| | 325| 316| std::vector> futures; 326| 316| futures.reserve(jobs); 327| | 328| 316| futures.push_back(pool.run([&]() { return lucas_test(n, monty_n, vartime); })); 329| | 330| | // The first job runs in this thread, the rest in the pool 331| 316| for(size_t j = 1; j < jobs; ++j) { ------------------ | Branch (331:25): [True: 0, False: 316] ------------------ 332| 0| const size_t from = j * job_tests; 333| 0| const size_t to = std::min(t, from + job_tests); 334| 0| futures.push_back(pool.run([&, from, to]() { return passes_tests(from, to); })); 335| 0| } 336| | 337| 316| bool passes = passes_tests(0, std::min(t, job_tests)); 338| | 339| | // Collect every result, so that an exception from any job propagates 340| 316| for(auto& future : futures) { ------------------ | Branch (340:24): [True: 316, False: 316] ------------------ 341| 316| passes = future.get() && passes; ------------------ | Branch (341:19): [True: 316, False: 0] | Branch (341:35): [True: 316, False: 0] ------------------ 342| 316| } 343| | 344| 316| return passes; 345| 316| } 346| 0|#endif 347| | 348| 0| for(size_t i = 0; i != t; ++i) { ------------------ | Branch (348:22): [True: 0, False: 0] ------------------ 349| 0| if(!mr.passes(random_base())) { ------------------ | Branch (349:10): [True: 0, False: 0] ------------------ 350| 0| return false; 351| 0| } 352| 0| } 353| | 354| 0| return lucas_test(n, monty_n, vartime); 355| 0|} primality.cpp:_ZZN5Botan12_GLOBAL__N_123miller_rabin_lucas_testERKNS_6BigIntERKNS_17Montgomery_ParamsERNS_21RandomNumberGeneratorEmbENK3$_2clEv: 291| 2.37k| const auto random_base = [&]() { return BigInt::random_integer(rng, BigInt::from_word(2), n); }; primality.cpp:_ZN5Botan12_GLOBAL__N_126miller_rabin_tests_per_jobEm: 268| 316|size_t miller_rabin_tests_per_job(size_t n_bits) { 269| 316| constexpr size_t ref_bits = 1024; 270| 316| constexpr size_t ref_tests = 8; 271| 316| if(n_bits > ref_bits) { ------------------ | Branch (271:7): [True: 316, False: 0] ------------------ 272| 316| return ref_tests; 273| 316| } else { 274| 0| return std::max(ref_tests, (ref_tests * ref_bits * ref_bits) / (n_bits * n_bits)); 275| 0| } 276| 316|} primality.cpp:_ZZN5Botan12_GLOBAL__N_123miller_rabin_lucas_testERKNS_6BigIntERKNS_17Montgomery_ParamsERNS_21RandomNumberGeneratorEmbENK3$_0clEv: 328| 316| futures.push_back(pool.run([&]() { return lucas_test(n, monty_n, vartime); })); primality.cpp:_ZZN5Botan12_GLOBAL__N_123miller_rabin_lucas_testERKNS_6BigIntERKNS_17Montgomery_ParamsERNS_21RandomNumberGeneratorEmbENK3$_3clEmm: 316| 316| const auto passes_tests = [&](size_t from, size_t to) { 317| 2.21k| for(size_t i = from; i != to; ++i) { ------------------ | Branch (317:31): [True: 1.89k, False: 316] ------------------ 318| 1.89k| if(!mr.passes(bases[i])) { ------------------ | Branch (318:16): [True: 0, False: 1.89k] ------------------ 319| 0| return false; 320| 0| } 321| 1.89k| } 322| 316| return true; 323| 316| }; _ZN5Botan16mod_small_primesERKNS_6BigIntEm: 458| 530|std::vector mod_small_primes(const BigInt& n, size_t num_primes) { 459| 530| BOTAN_ARG_CHECK(num_primes > 0 && num_primes <= PRIME_TABLE_SIZE, "Invalid num_primes"); ------------------ | | 35| 530| do { \ | | 36| 530| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 1.06k| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 530, False: 0] | | | Branch (37:12): [True: 530, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 530| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 530] | | ------------------ ------------------ 460| 530| BOTAN_ARG_CHECK(n.signum() >= 0, "The argument n must be non-negative"); ------------------ | | 35| 530| do { \ | | 36| 530| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 530| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 530] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 530| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 530] | | ------------------ ------------------ 461| | 462| 530| std::vector residues(num_primes); 463| | 464| 530| const size_t n_words = n.sig_words(); 465| | 466| 530| size_t i = 0; 467| 350k| for(const auto& group : SMALL_PRIME_GROUPS) { ------------------ | Branch (467:26): [True: 350k, False: 0] ------------------ 468| 350k| if(i >= num_primes) { ------------------ | Branch (468:10): [True: 530, False: 350k] ------------------ 469| 530| break; 470| 530| } 471| | 472| 350k| const auto div_product = divide_precomp::setup_vartime(group.first); 473| 350k| const size_t group_end = std::min(i + group.second, num_primes); 474| | 475| | // First compute n modulo the group product 476| 350k| word n_mod_product = 0; 477| 16.8M| for(size_t w = n_words; w > 0; --w) { ------------------ | Branch (477:31): [True: 16.5M, False: 350k] ------------------ 478| 16.5M| n_mod_product = div_product.mod_2to1(n_mod_product, n._data()[w - 1]); 479| 16.5M| } 480| | 481| | // Then extract the individual remainders using word arithmetic 482| 1.87M| while(i != group_end) { ------------------ | Branch (482:13): [True: 1.52M, False: 350k] ------------------ 483| 1.52M| const auto div_p = divide_precomp::setup_vartime(PRIMES[i]); 484| 1.52M| residues[i] = div_p.mod_2to1(0, n_mod_product); 485| 1.52M| ++i; 486| 1.52M| } 487| 350k| } 488| | 489| 530| return residues; 490| 530|} _ZN5Botan6PCurve15PrimeOrderCurve6Scalar8_zeroizeEv: 16| 2.38k|void PrimeOrderCurve::Scalar::_zeroize() { 17| 2.38k| secure_zeroize_buffer(m_value.data(), m_value.size() * sizeof(word)); 18| 2.38k|} _ZN5Botan6PCurve15PrimeOrderCurve11from_paramsERKNS_6BigIntES4_S4_S4_S4_S4_: 22| 5| const BigInt& p, const BigInt& a, const BigInt& b, const BigInt& base_x, const BigInt& base_y, const BigInt& order) { 23| 5|#if defined(BOTAN_HAS_PCURVES_GENERIC) 24| 5| return PCurveInstance::from_params(p, a, b, base_x, base_y, order); 25| 0|#endif 26| | 27| 0| BOTAN_UNUSED(p, a, b, base_x, base_y, order); ------------------ | | 151| 0|#define BOTAN_UNUSED Botan::ignore_params ------------------ 28| 0| return {}; 29| 5|} _ZN5Botan6PCurve15PrimeOrderCurve15for_named_curveENSt3__117basic_string_viewIcNS2_11char_traitsIcEEEE: 32| 13|std::shared_ptr PrimeOrderCurve::for_named_curve(std::string_view name) { 33| 13|#if defined(BOTAN_HAS_PCURVES_SECP256R1) 34| 13| if(name == "secp256r1") { ------------------ | Branch (34:7): [True: 1, False: 12] ------------------ 35| 1| return PCurveInstance::secp256r1(); 36| 1| } 37| 12|#endif 38| | 39| 12|#if defined(BOTAN_HAS_PCURVES_SECP384R1) 40| 12| if(name == "secp384r1") { ------------------ | Branch (40:7): [True: 1, False: 11] ------------------ 41| 1| return PCurveInstance::secp384r1(); 42| 1| } 43| 11|#endif 44| | 45| 11|#if defined(BOTAN_HAS_PCURVES_SECP521R1) 46| 11| if(name == "secp521r1") { ------------------ | Branch (46:7): [True: 1, False: 10] ------------------ 47| 1| return PCurveInstance::secp521r1(); 48| 1| } 49| 10|#endif 50| | 51| 10|#if defined(BOTAN_HAS_PCURVES_BRAINPOOL256R1) 52| 10| if(name == "brainpool256r1") { ------------------ | Branch (52:7): [True: 1, False: 9] ------------------ 53| 1| return PCurveInstance::brainpool256r1(); 54| 1| } 55| 9|#endif 56| | 57| 9|#if defined(BOTAN_HAS_PCURVES_BRAINPOOL384R1) 58| 9| if(name == "brainpool384r1") { ------------------ | Branch (58:7): [True: 1, False: 8] ------------------ 59| 1| return PCurveInstance::brainpool384r1(); 60| 1| } 61| 8|#endif 62| | 63| 8|#if defined(BOTAN_HAS_PCURVES_BRAINPOOL512R1) 64| 8| if(name == "brainpool512r1") { ------------------ | Branch (64:7): [True: 1, False: 7] ------------------ 65| 1| return PCurveInstance::brainpool512r1(); 66| 1| } 67| 7|#endif 68| | 69| 7|#if defined(BOTAN_HAS_PCURVES_FRP256V1) 70| 7| if(name == "frp256v1") { ------------------ | Branch (70:7): [True: 0, False: 7] ------------------ 71| 0| return PCurveInstance::frp256v1(); 72| 0| } 73| 7|#endif 74| | 75| 7|#if defined(BOTAN_HAS_PCURVES_SECP192R1) 76| 7| if(name == "secp192r1") { ------------------ | Branch (76:7): [True: 0, False: 7] ------------------ 77| 0| return PCurveInstance::secp192r1(); 78| 0| } 79| 7|#endif 80| | 81| 7|#if defined(BOTAN_HAS_PCURVES_SECP224R1) 82| 7| if(name == "secp224r1") { ------------------ | Branch (82:7): [True: 1, False: 6] ------------------ 83| 1| return PCurveInstance::secp224r1(); 84| 1| } 85| 6|#endif 86| | 87| 6|#if defined(BOTAN_HAS_PCURVES_SECP256K1) 88| 6| if(name == "secp256k1") { ------------------ | Branch (88:7): [True: 1, False: 5] ------------------ 89| 1| return PCurveInstance::secp256k1(); 90| 1| } 91| 5|#endif 92| | 93| 5|#if defined(BOTAN_HAS_PCURVES_SM2P256V1) 94| 5| if(name == "sm2p256v1") { ------------------ | Branch (94:7): [True: 0, False: 5] ------------------ 95| 0| return PCurveInstance::sm2p256v1(); 96| 0| } 97| 5|#endif 98| | 99| 5|#if defined(BOTAN_HAS_PCURVES_NUMSP512D1) 100| 5| if(name == "numsp512d1") { ------------------ | Branch (100:7): [True: 0, False: 5] ------------------ 101| 0| return PCurveInstance::numsp512d1(); 102| 0| } 103| 5|#endif 104| | 105| 5| BOTAN_UNUSED(name); ------------------ | | 151| 5|#define BOTAN_UNUSED Botan::ignore_params ------------------ 106| 5| return {}; 107| 5|} _ZN5Botan6PCurve14PCurveInstance14brainpool256r1Ev: 37| 1|std::shared_ptr PCurveInstance::brainpool256r1() { 38| 1| return PrimeOrderCurveImpl::instance(); 39| 1|} _ZN5Botan6PCurve14PCurveInstance14brainpool384r1Ev: 37| 1|std::shared_ptr PCurveInstance::brainpool384r1() { 38| 1| return PrimeOrderCurveImpl::instance(); 39| 1|} _ZN5Botan6PCurve14PCurveInstance14brainpool512r1Ev: 37| 1|std::shared_ptr PCurveInstance::brainpool512r1() { 38| 1| return PrimeOrderCurveImpl::instance(); 39| 1|} _ZN5Botan6PCurve22GenericPrimeOrderCurveC2ERKNS_6BigIntES4_S4_S4_S4_S4_: 1601| 1| m_params(std::make_unique(p, a, b, base_x, base_y, order)) {} _ZN5Botan6PCurve22GenericPrimeOrderCurve20_precompute_base_mulEv: 1603| 1|void GenericPrimeOrderCurve::_precompute_base_mul() { 1604| 1| BOTAN_STATE_CHECK(m_basemul == nullptr); ------------------ | | 51| 1| do { \ | | 52| 1| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 1| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 1] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 1| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 1] | | ------------------ ------------------ 1605| 1| m_basemul = std::make_unique(from_stash(generator())); 1606| 1|} _ZNK5Botan6PCurve22GenericPrimeOrderCurve10order_bitsEv: 1608| 1|size_t GenericPrimeOrderCurve::order_bits() const { 1609| 1| return _params().order_bits(); 1610| 1|} _ZNK5Botan6PCurve22GenericPrimeOrderCurve9generatorEv: 1712| 1|PrimeOrderCurve::AffinePoint GenericPrimeOrderCurve::generator() const { 1713| 1| return PrimeOrderCurve::AffinePoint::_create(shared_from_this(), _params().base_x(), _params().base_y()); 1714| 1|} _ZNK5Botan6PCurve22GenericPrimeOrderCurve10from_stashERKNS0_15PrimeOrderCurve11AffinePointE: 1850| 1|GenericAffinePoint GenericPrimeOrderCurve::from_stash(const PrimeOrderCurve::AffinePoint& pt) const { 1851| 1| BOTAN_ARG_CHECK(pt._curve().get() == this, "Curve mismatch"); ------------------ | | 35| 1| do { \ | | 36| 1| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 1| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 1] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 1| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 1] | | ------------------ ------------------ 1852| 1| const auto x = GenericField(this, pt._x()); 1853| 1| const auto y = GenericField(this, pt._y()); 1854| 1| return GenericAffinePoint(x, y); 1855| 1|} _ZN5Botan6PCurve14PCurveInstance11from_paramsERKNS_6BigIntES4_S4_S4_S4_S4_: 1889| 5| const BigInt& p, const BigInt& a, const BigInt& b, const BigInt& base_x, const BigInt& base_y, const BigInt& order) { 1890| | // We don't check that p and order are prime here on the assumption this has 1891| | // been checked already by EC_Group 1892| | 1893| 5| BOTAN_ARG_CHECK(a >= 0 && a < p, "a is invalid"); ------------------ | | 35| 5| do { \ | | 36| 5| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 10| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 5, False: 0] | | | Branch (37:12): [True: 5, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 5| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 5] | | ------------------ ------------------ 1894| 5| BOTAN_ARG_CHECK(b > 0 && b < p, "b is invalid"); ------------------ | | 35| 5| do { \ | | 36| 5| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 10| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 5, False: 0] | | | Branch (37:12): [True: 5, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 5| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 5] | | ------------------ ------------------ 1895| 5| BOTAN_ARG_CHECK(base_x >= 0 && base_x < p, "base_x is invalid"); ------------------ | | 35| 5| do { \ | | 36| 5| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 10| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 5, False: 0] | | | Branch (37:12): [True: 5, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 5| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 5] | | ------------------ ------------------ 1896| 5| BOTAN_ARG_CHECK(base_y >= 0 && base_y < p, "base_y is invalid"); ------------------ | | 35| 5| do { \ | | 36| 5| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 10| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 5, False: 0] | | | Branch (37:12): [True: 5, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 5| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 5] | | ------------------ ------------------ 1897| | 1898| 5| const size_t p_bits = p.bits(); 1899| | 1900| | // Same size restrictions as EC_Group however here we do not require 1901| | // exactly the primes for the 521 or 239 bit exceptions; this code 1902| | // should work fine with any such prime and we are relying on the higher 1903| | // levels to prevent creating such a group in the first place 1904| | // 1905| | // TODO(Botan4) increase the 128 here to 192 when the corresponding EC_Group constructor is changed 1906| | // 1907| 5| if(p_bits != 521 && p_bits != 239 && (p_bits < 128 || p_bits > 512 || p_bits % 32 != 0)) { ------------------ | Branch (1907:7): [True: 5, False: 0] | Branch (1907:24): [True: 5, False: 0] | Branch (1907:42): [True: 0, False: 5] | Branch (1907:58): [True: 0, False: 5] | Branch (1907:74): [True: 0, False: 5] ------------------ 1908| 0| return {}; 1909| 0| } 1910| | 1911| | // We don't want to deal with Shanks-Tonelli in the generic case 1912| 5| if(p % 4 != 3) { ------------------ | Branch (1912:7): [True: 1, False: 4] ------------------ 1913| 1| return {}; 1914| 1| } 1915| | 1916| | // The bit length of the field and order being the same simplifies things 1917| 4| if(p_bits != order.bits()) { ------------------ | Branch (1917:7): [True: 3, False: 1] ------------------ 1918| 3| return {}; 1919| 3| } 1920| | 1921| | // Check that the (x,y) generator point is on the curve 1922| 1| const auto mod_p = Barrett_Reduction::for_public_modulus(p); 1923| 1| const BigInt y2 = mod_p.square(base_y); 1924| 1| const BigInt x3_ax_b = mod_p.reduce(mod_p.cube(base_x) + mod_p.multiply(a, base_x) + b); 1925| 1| if(y2 != x3_ax_b) { ------------------ | Branch (1925:7): [True: 0, False: 1] ------------------ 1926| 0| return {}; 1927| 0| } 1928| | 1929| 1| auto gpoc = std::make_shared(p, a, b, base_x, base_y, order); 1930| | /* 1931| | The implementation of this needs to call shared_from_this which is not usable 1932| | until after the constructor has completed, so we have to do a two-stage 1933| | construction process. This is certainly not so clean but it is contained to 1934| | this single file so seems tolerable. 1935| | 1936| | Alternately we could lazily compute the base mul table but this brings in 1937| | locking issues which seem a worse alternative overall. 1938| | */ 1939| 1| gpoc->_precompute_base_mul(); 1940| 1| return gpoc; 1941| 1|} _ZNK5Botan6PCurve18GenericCurveParams10order_bitsEv: 147| 1| size_t order_bits() const { return m_order_bits; } pcurves_generic.cpp:_ZN5Botan6PCurve12_GLOBAL__N_112GenericField3oneEPKNS0_22GenericPrimeOrderCurveE: 639| 2| static GenericField one(const GenericPrimeOrderCurve* curve) { 640| 2| return GenericField(curve, curve->_params().field_monty_r1()); 641| 2| } _ZNK5Botan6PCurve18GenericCurveParams14field_monty_r1Ev: 163| 2| const StorageUnit& field_monty_r1() const { return m_field_monty_r1; } pcurves_generic.cpp:_ZN5Botan6PCurve12_GLOBAL__N_112GenericField4redcEPKNS0_22GenericPrimeOrderCurveENSt3__15arrayImLm18EEE: 916| 21.8k| static StorageUnit redc(const GenericPrimeOrderCurve* curve, std::array z) { 917| 21.8k| const auto& mod = curve->_params().field(); 918| 21.8k| const size_t words = curve->_params().words(); 919| 21.8k| StorageUnit r{}; 920| 21.8k| StorageUnit ws{}; 921| 21.8k| bigint_monty_redc( 922| 21.8k| r.data(), z.data(), mod.data(), words, curve->_params().field_p_dash(), ws.data(), ws.size()); 923| 21.8k| return r; 924| 21.8k| } _ZNK5Botan6PCurve18GenericCurveParams5fieldEv: 159| 38.4k| const StorageUnit& field() const { return m_field; } _ZNK5Botan6PCurve18GenericCurveParams5wordsEv: 145| 31.6k| size_t words() const { return m_words; } _ZNK5Botan6PCurve18GenericCurveParams12field_p_dashEv: 173| 21.8k| word field_p_dash() const { return m_field_p_dash; } _ZNK5Botan6PCurve18GenericCurveParams3mulERNSt3__15arrayImLm18EEERKNS3_ImLm9EEES8_: 203| 15.7k| void mul(std::array& z, const std::array& x, const std::array& y) const { 204| 15.7k| clear_mem(z); 205| | 206| 15.7k| if(m_words == 4) { ------------------ | Branch (206:13): [True: 0, False: 15.7k] ------------------ 207| 0| bigint_comba_mul4(z.data(), x.data(), y.data()); 208| 15.7k| } else if(m_words == 6) { ------------------ | Branch (208:20): [True: 0, False: 15.7k] ------------------ 209| 0| bigint_comba_mul6(z.data(), x.data(), y.data()); 210| 15.7k| } else if(m_words == 8) { ------------------ | Branch (210:20): [True: 0, False: 15.7k] ------------------ 211| 0| bigint_comba_mul8(z.data(), x.data(), y.data()); 212| 15.7k| } else if(m_words == 9) { ------------------ | Branch (212:20): [True: 0, False: 15.7k] ------------------ 213| 0| bigint_comba_mul9(z.data(), x.data(), y.data()); 214| 15.7k| } else { 215| 15.7k| bigint_mul(z.data(), z.size(), x.data(), m_words, m_words, y.data(), m_words, m_words, nullptr, 0); 216| 15.7k| } 217| 15.7k| } pcurves_generic.cpp:_ZNK5Botan6PCurve12_GLOBAL__N_112GenericField7is_zeroEv: 809| 3.40k| CT::Choice is_zero() const { return CT::all_zeros(m_val.data(), m_curve->_params().words()).as_choice(); } pcurves_generic.cpp:_ZN5Botan6PCurve12_GLOBAL__N_112GenericField18conditional_assignERS2_S3_S3_NS_2CT6ChoiceERKS2_S7_S7_: 884| 1.11k| const GenericField& nz) { 885| 1.11k| const W mask = cond.into_bitmask(); 886| | 887| 11.1k| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (887:28): [True: 9.99k, False: 1.11k] ------------------ 888| 9.99k| x.m_val[i] = choose(mask, nx.m_val[i], x.m_val[i]); 889| 9.99k| y.m_val[i] = choose(mask, ny.m_val[i], y.m_val[i]); 890| 9.99k| z.m_val[i] = choose(mask, nz.m_val[i], z.m_val[i]); 891| 9.99k| } 892| 1.11k| } pcurves_generic.cpp:_ZN5Botan6PCurve12_GLOBAL__N_1miERKNS1_12GenericFieldES4_: 740| 5.21k| friend GenericField operator-(const GenericField& a, const GenericField& b) { return a + b.negate(); } _ZNK5Botan6PCurve18GenericCurveParams9a_is_zeroEv: 199| 629| bool a_is_zero() const { return m_a_is_zero; } pcurves_generic.cpp:_ZNK5Botan6PCurve12_GLOBAL__N_112GenericField4mul3Ev: 720| 629| GenericField mul3() const { return mul2() + (*this); } pcurves_generic.cpp:_ZNK5Botan6PCurve12_GLOBAL__N_112GenericField4mul4Ev: 723| 629| GenericField mul4() const { return mul2().mul2(); } pcurves_generic.cpp:_ZNK5Botan6PCurve12_GLOBAL__N_112GenericField4mul2Ev: 710| 5.03k| GenericField mul2() const { 711| 5.03k| StorageUnit t = value(); 712| 5.03k| const W carry = shift_left<1>(t); 713| | 714| 5.03k| StorageUnit r; 715| 5.03k| bigint_monty_maybe_sub(r.data(), carry, t.data(), m_curve->_params().field().data()); 716| 5.03k| return GenericField(m_curve, r); 717| 5.03k| } pcurves_generic.cpp:_ZNK5Botan6PCurve12_GLOBAL__N_112GenericField5valueEv: 907| 42.5k| const StorageUnit& value() const { return m_val; } pcurves_generic.cpp:_ZNK5Botan6PCurve12_GLOBAL__N_112GenericField4mul8Ev: 726| 629| GenericField mul8() const { return mul2().mul2().mul2(); } _ZNK5Botan6PCurve22GenericProjectivePoint5curveEv: 1286| 1.25k| const GenericPrimeOrderCurve* curve() const { return m_x.curve(); } pcurves_generic.cpp:_ZNK5Botan6PCurve12_GLOBAL__N_112GenericField5curveEv: 823| 1.26k| const GenericPrimeOrderCurve* curve() const { return m_curve; } _ZNK5Botan6PCurve18GenericAffinePoint5curveEv: 1077| 1| const GenericPrimeOrderCurve* curve() const { return m_x.curve(); } pcurves_generic.cpp:_ZN5Botan6PCurve12_GLOBAL__N_112GenericFieldmLERKS2_: 750| 47| GenericField& operator*=(const GenericField& other) { 751| 47| const auto* curve = check_curve(*this, other); 752| | 753| 47| std::array z; // NOLINT(*-member-init) 754| 47| curve->_params().mul(z, value(), other.value()); 755| 47| m_val = redc(curve, z); 756| 47| return (*this); 757| 47| } pcurves_generic.cpp:_ZN5Botan6PCurve12_GLOBAL__N_112GenericField11check_curveERKS2_S4_: 911| 22.1k| static const GenericPrimeOrderCurve* check_curve(const GenericField& a, const GenericField& b) { 912| 22.1k| BOTAN_STATE_CHECK(a.m_curve == b.m_curve); ------------------ | | 51| 22.1k| do { \ | | 52| 22.1k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 22.1k| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 22.1k] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 22.1k| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 22.1k] | | ------------------ ------------------ 913| 22.1k| return a.m_curve; 914| 22.1k| } _ZNK5Botan6PCurve22GenericProjectivePoint11is_identityEv: 1148| 2.29k| CT::Choice is_identity() const { return z().is_zero(); } pcurves_generic.cpp:_ZNK5Botan6PCurve12_GLOBAL__N_112GenericField6invertEv: 781| 1| GenericField invert() const { return pow_vartime(m_curve->_params().field_minus_2()); } pcurves_generic.cpp:_ZNK5Botan6PCurve12_GLOBAL__N_112GenericField11pow_vartimeERKNSt3__15arrayImLm9EEE: 765| 1| GenericField pow_vartime(const StorageUnit& exp) const { 766| 1| const auto one = GenericField::one(curve()); 767| 1| auto bits = curve()->_params().field_bits(); 768| 1| auto words = curve()->_params().words(); 769| 1| return impl_pow_vartime(*this, one, bits, std::span{exp}.last(words)); 770| 1| } _ZNK5Botan6PCurve18GenericCurveParams10field_bitsEv: 151| 1| size_t field_bits() const { return m_field_bits; } pcurves_generic.cpp:_ZN5Botan6PCurve12_GLOBAL__N_116impl_pow_vartimeINS1_12GenericFieldEEET_RKS4_S6_mNSt3__14spanIKmLm18446744073709551615EEE: 56| 1|T impl_pow_vartime(const T& elem, const T& one, size_t bits, std::span exp) { 57| 1| constexpr size_t WindowBits = 4; 58| 1| constexpr size_t WindowElements = (1 << WindowBits) - 1; 59| | 60| 1| const size_t Windows = (bits + WindowBits - 1) / WindowBits; 61| | 62| 1| std::vector tbl; 63| 1| tbl.reserve(WindowElements); 64| | 65| 1| tbl.push_back(elem); 66| | 67| 15| for(size_t i = 1; i != WindowElements; ++i) { ------------------ | Branch (67:22): [True: 14, False: 1] ------------------ 68| 14| if(i % 2 == 1) { ------------------ | Branch (68:10): [True: 7, False: 7] ------------------ 69| 7| tbl.push_back(tbl[i / 2].square()); 70| 7| } else { 71| 7| tbl.push_back(tbl[i - 1] * tbl[0]); 72| 7| } 73| 14| } 74| | 75| 1| auto r = one; 76| | 77| 1| const size_t w0 = read_window_bits(exp, (Windows - 1) * WindowBits); 78| | 79| 1| if(w0 > 0) { ------------------ | Branch (79:7): [True: 1, False: 0] ------------------ 80| 1| r = tbl[w0 - 1]; 81| 1| } 82| | 83| 48| for(size_t i = 1; i != Windows; ++i) { ------------------ | Branch (83:22): [True: 47, False: 1] ------------------ 84| 235| for(size_t j = 0; j != WindowBits; ++j) { ------------------ | Branch (84:25): [True: 188, False: 47] ------------------ 85| 188| r = r.square(); 86| 188| } 87| 47| const size_t w = read_window_bits(exp, (Windows - i - 1) * WindowBits); 88| | 89| 47| if(w > 0) { ------------------ | Branch (89:10): [True: 47, False: 0] ------------------ 90| 47| r *= tbl[w - 1]; 91| 47| } 92| 47| } 93| | 94| 1| return r; 95| 1|} _ZNK5Botan6PCurve18GenericCurveParams13field_minus_2Ev: 161| 1| const StorageUnit& field_minus_2() const { return m_field_minus_2; } _ZNK5Botan6PCurve22GenericProjectivePoint3dblEv: 1240| 629| Self dbl() const { 1241| 629| if(curve()->_params().a_is_minus_3()) { ------------------ | Branch (1241:13): [True: 0, False: 629] ------------------ 1242| 0| return dbl_a_minus_3(*this); 1243| 629| } else if(curve()->_params().a_is_zero()) { ------------------ | Branch (1243:20): [True: 629, False: 0] ------------------ 1244| 629| return dbl_a_zero(*this); 1245| 629| } else { 1246| 0| const auto A = GenericField::curve_a(curve()); 1247| 0| return dbl_generic(*this, A); 1248| 0| } 1249| 629| } _ZNK5Botan6PCurve18GenericCurveParams12a_is_minus_3Ev: 197| 629| bool a_is_minus_3() const { return m_a_is_minus_3; } _ZN5Botan6PCurveplERKNS0_22GenericProjectivePointES3_: 1132| 555| friend Self operator+(const Self& a, const Self& b) { return Self::add(a, b); } _ZN5Botan6PCurve22GenericProjectivePoint3addERKS1_S3_: 1196| 555| static Self add(const Self& a, const Self& b) { return point_add(a, b); } pcurves_generic.cpp:_ZNK5Botan6PCurve22GenericProjectivePoint1zEv: 1284| 9.73k| const GenericField& z() const { return m_z; } pcurves_generic.cpp:_ZNK5Botan6PCurve12_GLOBAL__N_112GenericField6squareEv: 759| 6.11k| GenericField square() const { 760| 6.11k| std::array z; // NOLINT(*-member-init) 761| 6.11k| m_curve->_params().sqr(z, value()); 762| 6.11k| return GenericField(m_curve, redc(m_curve, z)); 763| 6.11k| } _ZNK5Botan6PCurve18GenericCurveParams3sqrERNSt3__15arrayImLm18EEERKNS3_ImLm9EEE: 219| 6.11k| void sqr(std::array& z, const std::array& x) const { 220| 6.11k| clear_mem(z); 221| | 222| 6.11k| if(m_words == 4) { ------------------ | Branch (222:13): [True: 0, False: 6.11k] ------------------ 223| 0| bigint_comba_sqr4(z.data(), x.data()); 224| 6.11k| } else if(m_words == 6) { ------------------ | Branch (224:20): [True: 0, False: 6.11k] ------------------ 225| 0| bigint_comba_sqr6(z.data(), x.data()); 226| 6.11k| } else if(m_words == 8) { ------------------ | Branch (226:20): [True: 0, False: 6.11k] ------------------ 227| 0| bigint_comba_sqr8(z.data(), x.data()); 228| 6.11k| } else if(m_words == 9) { ------------------ | Branch (228:20): [True: 0, False: 6.11k] ------------------ 229| 0| bigint_comba_sqr9(z.data(), x.data()); 230| 6.11k| } else { 231| 6.11k| bigint_sqr(z.data(), z.size(), x.data(), m_words, m_words, nullptr, 0); 232| 6.11k| } 233| 6.11k| } pcurves_generic.cpp:_ZN5Botan6PCurve12_GLOBAL__N_1mlERKNS1_12GenericFieldES4_: 742| 15.6k| friend GenericField operator*(const GenericField& a, const GenericField& b) { 743| 15.6k| const auto* curve = check_curve(a, b); 744| | 745| 15.6k| std::array z; // NOLINT(*-member-init) 746| 15.6k| curve->_params().mul(z, a.value(), b.value()); 747| 15.6k| return GenericField(curve, redc(curve, z)); 748| 15.6k| } pcurves_generic.cpp:_ZNK5Botan6PCurve22GenericProjectivePoint1xEv: 1274| 4.66k| const GenericField& x() const { return m_x; } pcurves_generic.cpp:_ZNK5Botan6PCurve12_GLOBAL__N_112GenericField6negateEv: 772| 5.21k| GenericField negate() const { 773| 5.21k| auto x_is_zero = CT::all_zeros(this->data(), N); 774| | 775| 5.21k| StorageUnit r; 776| 5.21k| bigint_sub3(r.data(), m_curve->_params().field().data(), N, this->data(), N); 777| 5.21k| x_is_zero.if_set_zero_out(r.data(), N); 778| 5.21k| return GenericField(m_curve, r); 779| 5.21k| } pcurves_generic.cpp:_ZNK5Botan6PCurve12_GLOBAL__N_112GenericField4dataEv: 909| 23.2k| const W* data() const { return m_val.data(); } pcurves_generic.cpp:_ZN5Botan6PCurve12_GLOBAL__N_1plERKNS1_12GenericFieldES4_: 728| 6.40k| friend GenericField operator+(const GenericField& a, const GenericField& b) { 729| 6.40k| const auto* curve = check_curve(a, b); 730| 6.40k| const size_t words = curve->_params().words(); 731| | 732| 6.40k| StorageUnit t{}; 733| 6.40k| const W carry = bigint_add3(t.data(), a.data(), words, b.data(), words); 734| | 735| 6.40k| StorageUnit r{}; 736| 6.40k| bigint_monty_maybe_sub(words, r.data(), carry, t.data(), curve->_params().field().data()); 737| 6.40k| return GenericField(curve, r); 738| 6.40k| } _ZNK5Botan6PCurve18GenericCurveParams6base_xEv: 193| 1| const StorageUnit& base_x() const { return m_base_x; } _ZNK5Botan6PCurve18GenericCurveParams6base_yEv: 195| 1| const StorageUnit& base_y() const { return m_base_y; } pcurves_generic.cpp:_ZNK5Botan6PCurve18GenericAffinePoint1yEv: 1068| 2| const GenericField& y() const { return m_y; } pcurves_generic.cpp:_ZNK5Botan6PCurve18GenericAffinePoint1xEv: 1063| 2| const GenericField& x() const { return m_x; } _ZNK5Botan6PCurve18GenericAffinePoint11is_identityEv: 969| 1| CT::Choice is_identity() const { return x().is_zero() && y().is_zero(); } _ZN5Botan6PCurve22GenericProjectivePoint11from_affineERKNS0_18GenericAffinePointE: 1097| 1| static Self from_affine(const GenericAffinePoint& pt) { 1098| 1| const auto x = pt.x(); 1099| 1| auto y = pt.y(); 1100| 1| auto z = GenericField::one(x.curve()); 1101| | 1102| | // If pt is identity (0,0) swap y/z to convert (0,0,1) into (0,1,0) 1103| 1| GenericField::conditional_swap(pt.is_identity(), y, z); 1104| 1| return GenericProjectivePoint(x, y, z); 1105| 1| } pcurves_generic.cpp:_ZN5Botan6PCurve12_GLOBAL__N_112GenericField16conditional_swapENS_2CT6ChoiceERS2_S5_: 839| 1| static void conditional_swap(CT::Choice cond, GenericField& x, GenericField& y) { 840| 1| const W mask = cond.into_bitmask(); 841| | 842| 10| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (842:28): [True: 9, False: 1] ------------------ 843| 9| const auto nx = choose(mask, y.m_val[i], x.m_val[i]); 844| 9| const auto ny = choose(mask, x.m_val[i], y.m_val[i]); 845| 9| x.m_val[i] = nx; 846| 9| y.m_val[i] = ny; 847| 9| } 848| 1| } pcurves_generic.cpp:_ZN5Botan6PCurve12_GLOBAL__N_112GenericFieldC2EPKNS0_22GenericPrimeOrderCurveENSt3__15arrayImLm9EEE: 904| 38.4k| GenericField(const GenericPrimeOrderCurve* curve, StorageUnit val) : m_curve(curve), m_val(val) {} pcurves_generic.cpp:_ZN5Botan6PCurve18GenericAffinePointC2ERKNS0_12_GLOBAL__N_112GenericFieldES5_: 958| 1.18k| GenericAffinePoint(const GenericField& x, const GenericField& y) : m_x(x), m_y(y) {} pcurves_generic.cpp:_ZNK5Botan6PCurve22GenericProjectivePoint1yEv: 1279| 4.66k| const GenericField& y() const { return m_y; } pcurves_generic.cpp:_ZN5Botan6PCurve22GenericProjectivePointC2ERKNS0_12_GLOBAL__N_112GenericFieldES5_S5_: 1130| 1.18k| m_x(x), m_y(y), m_z(z) {} _ZN5Botan6PCurve18GenericCurveParamsC2ERKNS_6BigIntES4_S4_S4_S4_S4_: 110| 1| m_words(p.sig_words()), 111| 1| m_order_bits(order.bits()), 112| 1| m_order_bytes(order.bytes()), 113| 1| m_field_bits(p.bits()), 114| 1| m_field_bytes(p.bytes()), 115| 1| m_monty_order(order), 116| 1| m_monty_field(p), 117| 1| m_field(bn_to_fixed(p)), 118| 1| m_field_minus_2(bn_to_fixed_rev(p - 2)), 119| 1| m_field_monty_r1(bn_to_fixed(m_monty_field.R1())), 120| 1| m_field_monty_r2(bn_to_fixed(m_monty_field.R2())), 121| 1| m_field_monty_r3(bn_to_fixed(m_monty_field.R3())), 122| 1| m_field_p_plus_1_over_4(bn_to_fixed_rev((p + 1) / 4)), 123| 1| m_field_inv_2(bn_to_fixed((p / 2) + 1)), 124| 1| m_field_p_dash(m_monty_field.p_dash()), 125| | 126| 1| m_order(bn_to_fixed(order)), 127| 1| m_order_minus_2(bn_to_fixed_rev(order - 2)), 128| 1| m_order_monty_r1(bn_to_fixed(m_monty_order.R1())), 129| 1| m_order_monty_r2(bn_to_fixed(m_monty_order.R2())), 130| 1| m_order_monty_r3(bn_to_fixed(m_monty_order.R3())), 131| 1| m_order_inv_2(bn_to_fixed((order / 2) + 1)), 132| 1| m_order_p_dash(m_monty_order.p_dash()), 133| | 134| 1| m_a_is_minus_3(a + 3 == p), 135| 1| m_a_is_zero(a.is_zero()), 136| 1| m_order_is_lt_field(order < p) { 137| 1| secure_vector ws; 138| 1| m_monty_curve_a = bn_to_fixed(m_monty_field.mul(a, m_monty_field.R2(), ws)); 139| 1| m_monty_curve_b = bn_to_fixed(m_monty_field.mul(b, m_monty_field.R2(), ws)); 140| | 141| 1| m_base_x = bn_to_fixed(m_monty_field.mul(base_x, m_monty_field.R2(), ws)); 142| 1| m_base_y = bn_to_fixed(m_monty_field.mul(base_y, m_monty_field.R2(), ws)); 143| 1| } _ZN5Botan6PCurve18GenericCurveParams11bn_to_fixedERKNS_6BigIntE: 236| 17| static std::array bn_to_fixed(const BigInt& n) { 237| 17| const size_t n_words = n.sig_words(); 238| 17| BOTAN_ASSERT_NOMSG(n_words <= PrimeOrderCurve::StorageWords); ------------------ | | 84| 17| do { \ | | 85| 17| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 17| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 17] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 17| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 17] | | ------------------ ------------------ 239| | 240| 17| std::array r{}; 241| 17| copy_mem(std::span{r}.first(n_words), n._as_span().first(n_words)); 242| 17| return r; 243| 17| } _ZN5Botan6PCurve18GenericCurveParams15bn_to_fixed_revERKNS_6BigIntE: 245| 3| static std::array bn_to_fixed_rev(const BigInt& n) { 246| 3| auto v = bn_to_fixed(n); 247| 3| std::reverse(v.begin(), v.end()); 248| 3| return v; 249| 3| } _ZN5Botan6PCurve19GenericBaseMulTableC2ERKNS0_18GenericAffinePointE: 1509| 1| m_table(basemul_booth_setup(pt, blinded_scalar_bits(*pt.curve()) + 1)) {} pcurves_generic.cpp:_ZNK5Botan6PCurve12_GLOBAL__N_112GenericField14invert_vartimeEv: 783| 1| GenericField invert_vartime() const { 784| | // TODO take advantage of variable time here using eg BEEA 785| | // see IntMod::invert_vartime in pcurves_impl.h 786| 1| return invert(); 787| 1| } _ZN5Botan6PCurve19GenericBaseMulTable19blinded_scalar_bitsERKNS0_22GenericPrimeOrderCurveE: 1519| 1| static size_t blinded_scalar_bits(const GenericPrimeOrderCurve& curve) { 1520| 1| const size_t order_bits = curve.order_bits(); 1521| 1| return order_bits + scalar_blinding_bits(order_bits); 1522| 1| } _ZN5Botan6PCurve14PCurveInstance9secp224r1Ev: 223| 1|std::shared_ptr PCurveInstance::secp224r1() { 224| 1| return PrimeOrderCurveImpl::instance(); 225| 1|} pcurves_secp224r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE3oneEv: 69| 1| constexpr static std::array one() { return std::array{1}; } pcurves_secp224r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE4redcERKNSt3__15arrayImLm8EEE: 25| 26.0k| constexpr static std::array redc(const std::array& z) { 26| 26.0k| const int64_t X00 = get_uint32(z.data(), 0); 27| 26.0k| const int64_t X01 = get_uint32(z.data(), 1); 28| 26.0k| const int64_t X02 = get_uint32(z.data(), 2); 29| 26.0k| const int64_t X03 = get_uint32(z.data(), 3); 30| 26.0k| const int64_t X04 = get_uint32(z.data(), 4); 31| 26.0k| const int64_t X05 = get_uint32(z.data(), 5); 32| 26.0k| const int64_t X06 = get_uint32(z.data(), 6); 33| 26.0k| const int64_t X07 = get_uint32(z.data(), 7); 34| 26.0k| const int64_t X08 = get_uint32(z.data(), 8); 35| 26.0k| const int64_t X09 = get_uint32(z.data(), 9); 36| 26.0k| const int64_t X10 = get_uint32(z.data(), 10); 37| 26.0k| const int64_t X11 = get_uint32(z.data(), 11); 38| 26.0k| const int64_t X12 = get_uint32(z.data(), 12); 39| 26.0k| const int64_t X13 = get_uint32(z.data(), 13); 40| | 41| 26.0k| const int64_t S0 = 0x00000001 + X00 - X07 - X11; 42| 26.0k| const int64_t S1 = 0x00000000 + X01 - X08 - X12; 43| 26.0k| const int64_t S2 = 0x00000000 + X02 - X09 - X13; 44| 26.0k| const int64_t S3 = 0xFFFFFFFF + X03 + X07 + X11 - X10; 45| 26.0k| const int64_t S4 = 0xFFFFFFFF + X04 + X08 + X12 - X11; 46| 26.0k| const int64_t S5 = 0xFFFFFFFF + X05 + X09 + X13 - X12; 47| 26.0k| const int64_t S6 = 0xFFFFFFFF + X06 + X10 - X13; 48| | 49| 26.0k| std::array r = {}; 50| | 51| 26.0k| SolinasAccum sum(r); 52| | 53| 26.0k| sum.accum(S0); 54| 26.0k| sum.accum(S1); 55| 26.0k| sum.accum(S2); 56| 26.0k| sum.accum(S3); 57| 26.0k| sum.accum(S4); 58| 26.0k| sum.accum(S5); 59| 26.0k| sum.accum(S6); 60| 26.0k| const auto S = sum.final_carry(0); 61| | 62| 26.0k| BOTAN_DEBUG_ASSERT(S <= 2); ------------------ | | 137| 26.0k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 26.0k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 26.0k] | | ------------------ ------------------ 63| | 64| 26.0k| solinas_correct_redc(r, P, p224_mul_mod_224(S)); 65| | 66| 26.0k| return r; 67| 26.0k| } pcurves_secp224r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE16p224_mul_mod_224Em: 81| 26.0k| constexpr static std::array p224_mul_mod_224(W i) { 82| 26.0k| static_assert(WordInfo::bits == 32 || WordInfo::bits == 64); 83| | 84| | // For small i, multiples of P-224 have a simple structure so it's faster to 85| | // compute the value directly vs a (constant time) table lookup 86| | 87| 26.0k| auto r = P; 88| | 89| | if constexpr(WordInfo::bits == 32) { 90| | r[3] -= i; 91| | r[0] += i; 92| 26.0k| } else { 93| 26.0k| const W i32 = i << 32; 94| 26.0k| r[1] -= i32; 95| 26.0k| r[0] += i; 96| 26.0k| } 97| 26.0k| return r; 98| 26.0k| } pcurves_secp224r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE8from_repERKNSt3__15arrayImLm4EEE: 75| 9| constexpr static std::array from_rep(const std::array& z) { return z; } pcurves_secp224r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp224r112Secp224r1RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE6to_repERKNSt3__15arrayImLm4EEE: 71| 148| constexpr static std::array to_rep(const std::array& x) { return x; } _ZN5Botan6PCurve14PCurveInstance9secp256k1Ev: 233| 1|std::shared_ptr PCurveInstance::secp256k1() { 234| 1| return PrimeOrderCurveImpl::instance(); 235| 1|} pcurves_secp256k1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE3oneEv: 28| 1| constexpr static std::array one() { return std::array{1}; } pcurves_secp256k1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE4redcERKNSt3__15arrayImLm8EEE: 30| 28.5k| constexpr static std::array redc(const std::array& z) { 31| 28.5k| return redc_crandall(std::span{z}); 32| 28.5k| } pcurves_secp256k1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE8from_repERKNSt3__15arrayImLm4EEE: 38| 1| constexpr static std::array from_rep(const std::array& z) { return z; } pcurves_secp256k1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp256k112Secp256k1RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE6to_repERKNSt3__15arrayImLm4EEE: 34| 1| constexpr static std::array to_rep(const std::array& x) { return x; } _ZN5Botan6PCurve14PCurveInstance9secp256r1Ev: 407| 1|std::shared_ptr PCurveInstance::secp256r1() { 408| 1| return PrimeOrderCurveImpl::instance(); 409| 1|} pcurves_secp256r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS1_9secp256r16ParamsES2_E11FieldParamsEE3oneEv: 138| 5.15k| constexpr static std::array one() { return R1; } pcurves_secp256r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS1_9secp256r16ParamsES2_E11FieldParamsEE4redcERKNSt3__15arrayImLm8EEE: 140| 113k| constexpr static BOTAN_FORCE_INLINE std::array redc(const std::array& z) { 141| | // Scalar locals rather than a copy of z: GCC copies arrays using 16 byte 142| | // loads, which stall on the 8 byte stores that just produced z 143| 113k| W t1 = z[1]; 144| 113k| W t2 = z[2]; 145| 113k| W t3 = z[3]; 146| 113k| W t4 = z[4]; 147| 113k| W t5 = z[5]; 148| 113k| W t6 = z[6]; 149| 113k| W t7 = z[7]; 150| | 151| | // The carry out from the previous step 152| 113k| W pending = 0; 153| | 154| 113k| redc_step(z[0], t1, t2, t3, t4, pending); 155| 113k| redc_step(t1, t2, t3, t4, t5, pending); 156| 113k| redc_step(t2, t3, t4, t5, t6, pending); 157| 113k| redc_step(t3, t4, t5, t6, t7, pending); 158| | 159| 113k| return final_sub(pending, {t4, t5, t6, t7}); 160| 113k| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS1_9secp256r16ParamsES2_E11FieldParamsEE9redc_stepEmRmS9_S9_S9_S9_: 185| 454k| constexpr static BOTAN_FORCE_INLINE void redc_step(W m, W& t0, W& t1, W& t2, W& t3, W& pending) { 186| 454k| auto [q0, q1, q2, q3] = p256_m_p1_64(m); 187| | 188| | // q3 is at most 2^64 - 2^32, leaving room to add the carry from the 189| | // previous step without worrying about creating a new carry 190| 454k| q3 += pending; 191| | 192| 454k| W carry = 0; 193| 454k| t0 = word_add(t0, q0, &carry); 194| 454k| t1 = word_add(t1, q1, &carry); 195| 454k| t2 = word_add(t2, q2, &carry); 196| 454k| t3 = word_add(t3, q3, &carry); 197| 454k| pending = carry; 198| 454k| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS1_9secp256r16ParamsES2_E11FieldParamsEE12p256_m_p1_64Em: 204| 454k| constexpr static BOTAN_FORCE_INLINE std::array p256_m_p1_64(W m) { 205| 454k| const W m_lo = m << 32; 206| 454k| const W m_hi = m >> 32; 207| | 208| | /* 209| | * m*(p+1)/2^64 = m*2^32 + m*2^128 + m*2^192 - m*2^160, laid out as 210| | * 211| | * m*2^32 -> word 0 gets m << 32, word 1 gets m >> 32 212| | * m*2^128 -> word 2 gets m 213| | * m*2^192 -> word 3 gets m 214| | * -m*2^160 -> word 2 loses m << 32, word 3 loses m >> 32 plus the borrow 215| | * 216| | * The total is non-negative and below 2^256, so the final borrow is zero 217| | */ 218| 454k| W borrow = 0; 219| 454k| const W q2 = word_sub(m, m_lo, &borrow); 220| 454k| const W q3 = word_sub(m, m_hi, &borrow); 221| | 222| 454k| return {m_lo, m_hi, q2, q3}; 223| 454k| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS1_9secp256r16ParamsES2_E11FieldParamsEE9final_subEmRKNSt3__15arrayImLm4EEE: 228| 113k| constexpr static BOTAN_FORCE_INLINE std::array final_sub(W top, const std::array& t) { 229| 113k| W borrow = 0; 230| 113k| const W r0 = word_sub(t[0], P[0], &borrow); 231| 113k| const W r1 = word_sub(t[1], P[1], &borrow); 232| 113k| const W r2 = word_sub(t[2], P[2], &borrow); 233| 113k| const W r3 = word_sub(t[3], P[3], &borrow); 234| | 235| | // t is only < p if the subtraction underflowed and top (the 257th bit) is zero 236| 113k| const W t_lt_p = CT::value_barrier(static_cast(0) - (borrow & (top ^ 1))); 237| | 238| 113k| return { 239| 113k| choose(t_lt_p, t[0], r0), 240| 113k| choose(t_lt_p, t[1], r1), 241| 113k| choose(t_lt_p, t[2], r2), 242| 113k| choose(t_lt_p, t[3], r3), 243| 113k| }; 244| 113k| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp256r15Curve10fe_invert2ERKNS_6IntModINS1_22Secp256r1MontgomeryRepINS_13EllipticCurveINS2_6ParamsES5_E11FieldParamsEEEEE: 270| 101| static constexpr FieldElement fe_invert2(const FieldElement& x) { 271| | // Generated using https://github.com/mmcloughlin/addchain 272| | 273| 101| auto z = x.square(); 274| 101| z *= x; 275| 101| z = z.square(); 276| 101| z *= x; 277| 101| auto t0 = z; 278| 101| t0.square_n(3); 279| 101| t0 *= z; 280| 101| auto t1 = t0; 281| 101| t1.square_n(6); 282| 101| t0 *= t1; 283| 101| t0.square_n(3); 284| 101| z *= t0; 285| 101| t0 = z.square(); 286| 101| t0 *= x; 287| 101| t1 = t0; 288| 101| t1.square_n(16); 289| 101| t0 *= t1; 290| 101| t0.square_n(15); 291| 101| z *= t0; 292| 101| t0.square_n(17); 293| 101| t0 *= x; 294| 101| t0.square_n(143); 295| 101| t0 *= z; 296| 101| t0.square_n(47); 297| 101| z *= t0; 298| 101| z.square_n(2); 299| | 300| 101| return z; 301| 101| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS1_9secp256r16ParamsES2_E11FieldParamsEE8from_repERKNSt3__15arrayImLm4EEE: 175| 203| constexpr static std::array from_rep(const std::array& z) { 176| 203| std::array ze = {}; 177| 203| copy_mem(std::span{ze}.template first(), z); 178| 203| return redc(ze); 179| 203| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS1_9secp256r16ParamsES2_E11FieldParamsEE6to_repERKNSt3__15arrayImLm4EEE: 162| 1| constexpr static std::array to_rep(const std::array& x) { 163| 1| std::array z; // NOLINT(*-member-init) 164| 1| comba_mul(z.data(), x.data(), R2.data()); 165| 1| return redc(z); 166| 1| } pcurves_secp256r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_122Secp256r1MontgomeryRepINS_13EllipticCurveINS1_9secp256r16ParamsES2_E11FieldParamsEE11wide_to_repERKNSt3__15arrayImLm8EEE: 168| 505| constexpr static std::array wide_to_rep(const std::array& x) { 169| 505| auto redc_x = redc(x); 170| 505| std::array z; // NOLINT(*-member-init) 171| 505| comba_mul(z.data(), redc_x.data(), R3.data()); 172| 505| return redc(z); 173| 505| } _ZN5Botan6PCurve14PCurveInstance9secp384r1Ev: 343| 1|std::shared_ptr PCurveInstance::secp384r1() { 344| 1| return PrimeOrderCurveImpl::instance(); 345| 1|} pcurves_secp384r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS1_9secp384r16ParamsES2_E11FieldParamsEE3oneEv: 88| 9.00k| constexpr static std::array one() { return std::array{1}; } pcurves_secp384r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS1_9secp384r16ParamsES2_E11FieldParamsEE4redcERKNSt3__15arrayImLm12EEE: 23| 190k| constexpr static std::array redc(const std::array& z) { 24| 190k| const int64_t X00 = get_uint32(z.data(), 0); 25| 190k| const int64_t X01 = get_uint32(z.data(), 1); 26| 190k| const int64_t X02 = get_uint32(z.data(), 2); 27| 190k| const int64_t X03 = get_uint32(z.data(), 3); 28| 190k| const int64_t X04 = get_uint32(z.data(), 4); 29| 190k| const int64_t X05 = get_uint32(z.data(), 5); 30| 190k| const int64_t X06 = get_uint32(z.data(), 6); 31| 190k| const int64_t X07 = get_uint32(z.data(), 7); 32| 190k| const int64_t X08 = get_uint32(z.data(), 8); 33| 190k| const int64_t X09 = get_uint32(z.data(), 9); 34| 190k| const int64_t X10 = get_uint32(z.data(), 10); 35| 190k| const int64_t X11 = get_uint32(z.data(), 11); 36| 190k| const int64_t X12 = get_uint32(z.data(), 12); 37| 190k| const int64_t X13 = get_uint32(z.data(), 13); 38| 190k| const int64_t X14 = get_uint32(z.data(), 14); 39| 190k| const int64_t X15 = get_uint32(z.data(), 15); 40| 190k| const int64_t X16 = get_uint32(z.data(), 16); 41| 190k| const int64_t X17 = get_uint32(z.data(), 17); 42| 190k| const int64_t X18 = get_uint32(z.data(), 18); 43| 190k| const int64_t X19 = get_uint32(z.data(), 19); 44| 190k| const int64_t X20 = get_uint32(z.data(), 20); 45| 190k| const int64_t X21 = get_uint32(z.data(), 21); 46| 190k| const int64_t X22 = get_uint32(z.data(), 22); 47| 190k| const int64_t X23 = get_uint32(z.data(), 23); 48| | 49| | // One copy of P-384 is added to prevent underflow 50| 190k| const int64_t S0 = 0xFFFFFFFF + X00 + X12 + X20 + X21 - X23; 51| 190k| const int64_t S1 = 0x00000000 + X01 + X13 + X22 + X23 - X12 - X20; 52| 190k| const int64_t S2 = 0x00000000 + X02 + X14 + X23 - X13 - X21; 53| 190k| const int64_t S3 = 0xFFFFFFFF + X03 + X12 + X15 + X20 + X21 - X14 - X22 - X23; 54| 190k| const int64_t S4 = 0xFFFFFFFE + X04 + X12 + X13 + X16 + X20 + X21 * 2 + X22 - X15 - X23 * 2; 55| 190k| const int64_t S5 = 0xFFFFFFFF + X05 + X13 + X14 + X17 + X21 + X22 * 2 + X23 - X16; 56| 190k| const int64_t S6 = 0xFFFFFFFF + X06 + X14 + X15 + X18 + X22 + X23 * 2 - X17; 57| 190k| const int64_t S7 = 0xFFFFFFFF + X07 + X15 + X16 + X19 + X23 - X18; 58| 190k| const int64_t S8 = 0xFFFFFFFF + X08 + X16 + X17 + X20 - X19; 59| 190k| const int64_t S9 = 0xFFFFFFFF + X09 + X17 + X18 + X21 - X20; 60| 190k| const int64_t SA = 0xFFFFFFFF + X10 + X18 + X19 + X22 - X21; 61| 190k| const int64_t SB = 0xFFFFFFFF + X11 + X19 + X20 + X23 - X22; 62| | 63| 190k| std::array r = {}; 64| | 65| 190k| SolinasAccum sum(r); 66| | 67| 190k| sum.accum(S0); 68| 190k| sum.accum(S1); 69| 190k| sum.accum(S2); 70| 190k| sum.accum(S3); 71| 190k| sum.accum(S4); 72| 190k| sum.accum(S5); 73| 190k| sum.accum(S6); 74| 190k| sum.accum(S7); 75| 190k| sum.accum(S8); 76| 190k| sum.accum(S9); 77| 190k| sum.accum(SA); 78| 190k| sum.accum(SB); 79| 190k| const auto S = sum.final_carry(0); 80| | 81| 190k| BOTAN_DEBUG_ASSERT(S <= 4); ------------------ | | 137| 190k| do { /* NOLINT(*-avoid-do-while) */ \ | | 138| 190k| } while(0) | | ------------------ | | | Branch (138:15): [Folded, False: 190k] | | ------------------ ------------------ 82| | 83| 190k| solinas_correct_redc(r, P, p384_mul_mod_384(S)); 84| | 85| 190k| return r; 86| 190k| } pcurves_secp384r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS1_9secp384r16ParamsES2_E11FieldParamsEE16p384_mul_mod_384Em: 100| 190k| constexpr static std::array p384_mul_mod_384(W i) { 101| 190k| static_assert(WordInfo::bits == 32 || WordInfo::bits == 64); 102| | 103| | // For small i, multiples of P-384 have a simple structure so it's faster to 104| | // compute the value directly vs a (constant time) table lookup 105| | 106| 190k| auto r = P; 107| | if constexpr(WordInfo::bits == 32) { 108| | r[4] -= i; 109| | r[3] -= i; 110| | r[1] += i; 111| | r[0] -= i; 112| 190k| } else { 113| 190k| const uint64_t i32 = static_cast(i) << 32; 114| 190k| r[2] -= i; 115| 190k| r[1] -= i32; 116| 190k| r[0] += i32; 117| 190k| r[0] -= i; 118| 190k| } 119| 190k| return r; 120| 190k| } pcurves_secp384r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp384r15Curve10fe_invert2ERKNS_6IntModINS1_12Secp384r1RepINS_13EllipticCurveINS2_6ParamsES5_E11FieldParamsEEEEE: 142| 120| static constexpr FieldElement fe_invert2(const FieldElement& x) { 143| | // From https://briansmith.org/ecc-inversion-addition-chains-01 144| | 145| 120| FieldElement r = x.square(); 146| 120| r *= x; 147| 120| const auto x2 = r; 148| 120| r = r.square(); 149| 120| r *= x; 150| 120| const auto x3 = r; 151| 120| r.square_n(3); 152| 120| r *= x3; 153| 120| auto rl = r; 154| 120| r.square_n(6); 155| 120| r *= rl; 156| 120| r.square_n(3); 157| 120| r *= x3; 158| 120| const auto x15 = r; 159| 120| r.square_n(15); 160| 120| r *= x15; 161| 120| const auto x30 = r; 162| 120| r.square_n(30); 163| 120| r *= x30; 164| 120| rl = r; 165| 120| r.square_n(60); 166| 120| r *= rl; 167| 120| rl = r; 168| 120| r.square_n(120); 169| 120| r *= rl; 170| 120| r.square_n(15); 171| 120| r *= x15; 172| 120| r.square_n(31); 173| 120| r *= x30; 174| 120| r.square_n(2); 175| 120| r *= x2; 176| 120| r.square_n(94); 177| 120| r *= x30; 178| 120| r.square_n(2); 179| | 180| 120| return r; 181| 120| } pcurves_secp384r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS1_9secp384r16ParamsES2_E11FieldParamsEE8from_repERKNSt3__15arrayImLm6EEE: 94| 241| constexpr static std::array from_rep(const std::array& z) { return z; } pcurves_secp384r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS1_9secp384r16ParamsES2_E11FieldParamsEE6to_repERKNSt3__15arrayImLm6EEE: 90| 1| constexpr static std::array to_rep(const std::array& x) { return x; } pcurves_secp384r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_112Secp384r1RepINS_13EllipticCurveINS1_9secp384r16ParamsES2_E11FieldParamsEE11wide_to_repERKNSt3__15arrayImLm12EEE: 92| 600| constexpr static std::array wide_to_rep(const std::array& x) { return redc(x); } _ZN5Botan6PCurve14PCurveInstance9secp521r1Ev: 291| 1|std::shared_ptr PCurveInstance::secp521r1() { 292| 1| return PrimeOrderCurveImpl::instance(); 293| 1|} pcurves_secp521r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE3oneEv: 24| 6.93k| constexpr static std::array one() { return std::array{1}; } pcurves_secp521r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE4redcERKNSt3__15arrayImLm18EEE: 26| 171k| constexpr static std::array redc(const std::array& z) { 27| | // Regardless of word size (32 or 64) the top word is 9 bits long 28| 171k| constexpr W TOP_BITS = static_cast(0x1FF); 29| | // The 23 or 55 bits that should be cleared in the top word 30| 171k| constexpr W CLEARED_TOP_BITS = WordInfo::max ^ TOP_BITS; 31| | 32| | /* 33| | * Extract the high part of z (z >> 521) 34| | */ 35| 171k| std::array t; // NOLINT(*-member-init) 36| | 37| 1.71M| for(size_t i = 0; i != N; ++i) { ------------------ | Branch (37:28): [True: 1.54M, False: 171k] ------------------ 38| 1.54M| t[i] = z[(N - 1) + i] >> 9; 39| 1.54M| } 40| | 41| 1.54M| for(size_t i = 0; i != N - 1; ++i) { ------------------ | Branch (41:28): [True: 1.37M, False: 171k] ------------------ 42| 1.37M| t[i] |= z[(N - 1) + i + 1] << (WordInfo::bits - 9); 43| 1.37M| } 44| | 45| | // Now t += z & (2**521-1) 46| 171k| W carry = 0; 47| 1.54M| for(size_t i = 0; i != N - 1; ++i) { ------------------ | Branch (47:28): [True: 1.37M, False: 171k] ------------------ 48| 1.37M| t[i] = word_add(t[i], z[i], &carry); 49| 1.37M| } 50| | 51| | // Now add the (partial) top words; this can't carry out 52| | // since both inputs are at most 2**9-1 53| 171k| t[N - 1] += (z[N - 1] & TOP_BITS) + carry; 54| | 55| | /* 56| | Since the modulus P is exactly 2**521 - 1 the only way the computed 57| | result can be larger than P is if the top word is larger than TOP_BITS 58| | 59| | Since TOP_BITS has the low 9 bits set, we can check if t[N - 1] > TOP_BITS 60| | by checking if t[N - 1] >> 9 has any bits set. Doing it this way is 61| | faster than a standard comparison since CT::Mask::is_gt requires 62| | several bit operations. 63| | */ 64| | 65| 171k| const W is_over_p521 = ~CT::Mask::is_zero(t[N - 1] >> 9).value(); 66| | 67| | /* 68| | * Also must detect/handle x == P 69| | */ 70| 171k| const W is_eq_p521 = [&]() { 71| 171k| W sum = WordInfo::max; 72| 171k| for(size_t i = 0; i != N - 1; ++i) { 73| 171k| sum &= t[i]; 74| 171k| } 75| 171k| sum &= (CLEARED_TOP_BITS | t[N - 1]); 76| | 77| 171k| return CT::Mask::is_zero(sum ^ WordInfo::max).value(); 78| 171k| }(); 79| | 80| 171k| const W need_sub = is_over_p521 | is_eq_p521; 81| | 82| 171k| W borrow = 0; 83| 1.54M| for(size_t i = 0; i != N - 1; ++i) { ------------------ | Branch (83:28): [True: 1.37M, False: 171k] ------------------ 84| 1.37M| t[i] = word_sub(t[i], need_sub & WordInfo::max, &borrow); 85| 1.37M| } 86| 171k| t[N - 1] = word_sub(t[N - 1], need_sub & TOP_BITS, &borrow); 87| | 88| 171k| return t; 89| 171k| } pcurves_secp521r1.cpp:_ZZN5Botan6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE4redcERKNSt3__15arrayImLm18EEEENKUlvE_clEv: 70| 171k| const W is_eq_p521 = [&]() { 71| 171k| W sum = WordInfo::max; 72| 1.54M| for(size_t i = 0; i != N - 1; ++i) { ------------------ | Branch (72:31): [True: 1.37M, False: 171k] ------------------ 73| 1.37M| sum &= t[i]; 74| 1.37M| } 75| 171k| sum &= (CLEARED_TOP_BITS | t[N - 1]); 76| | 77| 171k| return CT::Mask::is_zero(sum ^ WordInfo::max).value(); 78| 171k| }(); pcurves_secp521r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp521r15Curve10fe_invert2ERKNS_6IntModINS2_7P521RepINS_13EllipticCurveINS2_6ParamsES5_E11FieldParamsEEEEE: 115| 70| static constexpr FieldElement fe_invert2(const FieldElement& x) { 116| | // Addition chain from https://eprint.iacr.org/2014/852.pdf page 6 117| | 118| 70| FieldElement r = x.square(); 119| 70| r *= x; 120| 70| r = r.square(); 121| 70| r *= x; 122| 70| FieldElement rl = r; 123| 70| r.square_n(3); 124| 70| r *= rl; 125| 70| r.square_n(1); 126| 70| r *= x; 127| 70| const auto a7 = r; 128| 70| r.square_n(1); 129| 70| r *= x; 130| 70| rl = r; 131| 70| r.square_n(8); 132| 70| r *= rl; 133| 70| rl = r; 134| 70| r.square_n(16); 135| 70| r *= rl; 136| 70| rl = r; 137| 70| r.square_n(32); 138| 70| r *= rl; 139| 70| rl = r; 140| 70| r.square_n(64); 141| 70| r *= rl; 142| 70| rl = r; 143| 70| r.square_n(128); 144| 70| r *= rl; 145| 70| rl = r; 146| 70| r.square_n(256); 147| 70| r *= rl; 148| 70| r.square_n(7); 149| 70| r *= a7; 150| 70| r.square_n(2); 151| | 152| 70| return r; 153| 70| } pcurves_secp521r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE8from_repERKNSt3__15arrayImLm9EEE: 95| 141| constexpr static std::array from_rep(const std::array& z) { return z; } pcurves_secp521r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE6to_repERKNSt3__15arrayImLm9EEE: 91| 188| constexpr static std::array to_rep(const std::array& x) { return x; } pcurves_secp521r1.cpp:_ZN5Botan6PCurve12_GLOBAL__N_19secp521r17P521RepINS_13EllipticCurveINS2_6ParamsES3_E11FieldParamsEE11wide_to_repERKNSt3__15arrayImLm18EEE: 93| 350| constexpr static std::array wide_to_rep(const std::array& x) { return redc(x); } _ZN5Botan9AEAD_Mode15create_or_throwENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEENS_10Cipher_DirES5_: 53| 762| std::string_view provider) { 54| 762| if(auto aead = AEAD_Mode::create(algo, dir, provider)) { ------------------ | Branch (54:12): [True: 762, False: 0] ------------------ 55| 762| return aead; 56| 762| } 57| | 58| 0| throw Lookup_Error("AEAD", algo, provider); 59| 762|} _ZN5Botan9AEAD_Mode6createENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEENS_10Cipher_DirES5_: 61| 762|std::unique_ptr AEAD_Mode::create(std::string_view algo, Cipher_Dir dir, std::string_view provider) { 62| 762| BOTAN_UNUSED(provider); ------------------ | | 151| 762|#define BOTAN_UNUSED Botan::ignore_params ------------------ 63| 762|#if defined(BOTAN_HAS_AEAD_CHACHA20_POLY1305) 64| 762| if(algo == "ChaCha20Poly1305") { ------------------ | Branch (64:7): [True: 82, False: 680] ------------------ 65| 82| if(dir == Cipher_Dir::Encryption) { ------------------ | Branch (65:10): [True: 42, False: 40] ------------------ 66| 42| return std::make_unique(); 67| 42| } else { 68| 40| return std::make_unique(); 69| 40| } 70| 82| } 71| 680|#endif 72| | 73| 680|#if defined(BOTAN_HAS_ASCON_AEAD128) 74| 680| if(algo == "Ascon-AEAD128") { ------------------ | Branch (74:7): [True: 0, False: 680] ------------------ 75| 0| if(dir == Cipher_Dir::Encryption) { ------------------ | Branch (75:10): [True: 0, False: 0] ------------------ 76| 0| return std::make_unique(); 77| 0| } else { 78| 0| return std::make_unique(); 79| 0| } 80| 0| } 81| 680|#endif 82| | 83| 680|#if defined(BOTAN_HAS_BLOCK_CIPHER) 84| 680| const AlgorithmSpec req(algo, AlgorithmSpec::Syntax::CipherMode); 85| | 86| 680| #if defined(BOTAN_HAS_AEAD_CCM) 87| 680| if(auto m = req.match("CCM({cipher},{tag_len:int=16},{L:int=3})")) { ------------------ | Branch (87:12): [True: 110, False: 570] ------------------ 88| 110| if(auto bc = BlockCipher::create(m->str("cipher"), provider)) { ------------------ | Branch (88:15): [True: 110, False: 0] ------------------ 89| 110| const size_t tag_len = m->integer("tag_len"); 90| 110| const size_t L_len = m->integer("L"); 91| 110| if(dir == Cipher_Dir::Encryption) { ------------------ | Branch (91:13): [True: 58, False: 52] ------------------ 92| 58| return std::make_unique(std::move(bc), tag_len, L_len); 93| 58| } else { 94| 52| return std::make_unique(std::move(bc), tag_len, L_len); 95| 52| } 96| 110| } 97| 110| } 98| 570| #endif 99| | 100| 570| #if defined(BOTAN_HAS_AEAD_GCM) 101| 570| if(auto m = req.match("GCM({cipher},{tag_len:int=16})")) { ------------------ | Branch (101:12): [True: 476, False: 94] ------------------ 102| 476| if(auto bc = BlockCipher::create(m->str("cipher"), provider)) { ------------------ | Branch (102:15): [True: 476, False: 0] ------------------ 103| 476| const size_t tag_len = m->integer("tag_len"); 104| 476| if(dir == Cipher_Dir::Encryption) { ------------------ | Branch (104:13): [True: 383, False: 93] ------------------ 105| 383| return std::make_unique(std::move(bc), tag_len); 106| 383| } else { 107| 93| return std::make_unique(std::move(bc), tag_len); 108| 93| } 109| 476| } 110| 476| } 111| 94| #endif 112| | 113| 94| #if defined(BOTAN_HAS_AEAD_GCM_SIV) 114| | // Unlike GCM the tag length is fixed, so reject eg "AES-128/GCM-SIV(12)" 115| 94| if(auto m = req.match("GCM-SIV({cipher})")) { ------------------ | Branch (115:12): [True: 0, False: 94] ------------------ 116| 0| if(auto bc = BlockCipher::create(m->str("cipher"), provider)) { ------------------ | Branch (116:15): [True: 0, False: 0] ------------------ 117| 0| if(dir == Cipher_Dir::Encryption) { ------------------ | Branch (117:13): [True: 0, False: 0] ------------------ 118| 0| return std::make_unique(std::move(bc)); 119| 0| } else { 120| 0| return std::make_unique(std::move(bc)); 121| 0| } 122| 0| } 123| 0| } 124| 94| #endif 125| | 126| 94| #if defined(BOTAN_HAS_AEAD_OCB) 127| 94| if(auto m = req.match("OCB({cipher},{tag_len:int=16})")) { ------------------ | Branch (127:12): [True: 94, False: 0] ------------------ 128| 94| if(auto bc = BlockCipher::create(m->str("cipher"), provider)) { ------------------ | Branch (128:15): [True: 94, False: 0] ------------------ 129| 94| const size_t tag_len = m->integer("tag_len"); 130| 94| if(dir == Cipher_Dir::Encryption) { ------------------ | Branch (130:13): [True: 48, False: 46] ------------------ 131| 48| return std::make_unique(std::move(bc), tag_len); 132| 48| } else { 133| 46| return std::make_unique(std::move(bc), tag_len); 134| 46| } 135| 94| } 136| 94| } 137| 0| #endif 138| | 139| 0| #if defined(BOTAN_HAS_AEAD_EAX) 140| 0| if(auto m = req.match("EAX({cipher},{tag_len:int?})")) { ------------------ | Branch (140:12): [True: 0, False: 0] ------------------ 141| 0| if(auto bc = BlockCipher::create(m->str("cipher"), provider)) { ------------------ | Branch (141:15): [True: 0, False: 0] ------------------ 142| 0| const size_t tag_len = m->has("tag_len") ? m->integer("tag_len") : bc->block_size(); ------------------ | Branch (142:33): [True: 0, False: 0] ------------------ 143| 0| if(dir == Cipher_Dir::Encryption) { ------------------ | Branch (143:13): [True: 0, False: 0] ------------------ 144| 0| return std::make_unique(std::move(bc), tag_len); 145| 0| } else { 146| 0| return std::make_unique(std::move(bc), tag_len); 147| 0| } 148| 0| } 149| 0| } 150| 0| #endif 151| | 152| 0| #if defined(BOTAN_HAS_AEAD_SIV) 153| 0| if(auto m = req.match("SIV({cipher})")) { ------------------ | Branch (153:12): [True: 0, False: 0] ------------------ 154| 0| if(auto bc = BlockCipher::create(m->str("cipher"), provider)) { ------------------ | Branch (154:15): [True: 0, False: 0] ------------------ 155| 0| if(dir == Cipher_Dir::Encryption) { ------------------ | Branch (155:13): [True: 0, False: 0] ------------------ 156| 0| return std::make_unique(std::move(bc)); 157| 0| } else { 158| 0| return std::make_unique(std::move(bc)); 159| 0| } 160| 0| } 161| 0| } 162| 0| #endif 163| | 164| 0| BOTAN_UNUSED(req); ------------------ | | 151| 0|#define BOTAN_UNUSED Botan::ignore_params ------------------ 165| 0|#endif 166| | 167| 0| return std::unique_ptr(); 168| 0|} _ZN5Botan8CCM_ModeC2ENSt3__110unique_ptrINS_11BlockCipherENS1_14default_deleteIS3_EEEEmm: 27| 110| m_tag_size(tag_size), m_L(L), m_cipher(std::move(cipher)) { 28| 110| if(m_cipher->block_size() != CCM_BS) { ------------------ | Branch (28:7): [True: 0, False: 110] ------------------ 29| 0| throw Invalid_Argument(m_cipher->name() + " cannot be used with CCM mode"); 30| 0| } 31| | 32| 110| if(L < 2 || L > 8) { ------------------ | Branch (32:7): [True: 0, False: 110] | Branch (32:16): [True: 0, False: 110] ------------------ 33| 0| throw Invalid_Argument(fmt("Invalid CCM L value {}", L)); 34| 0| } 35| | 36| 110| if(tag_size < 4 || tag_size > 16 || tag_size % 2 != 0) { ------------------ | Branch (36:7): [True: 0, False: 110] | Branch (36:23): [True: 0, False: 110] | Branch (36:40): [True: 0, False: 110] ------------------ 37| 0| throw Invalid_Argument(fmt("Invalid CCM tag length {}", tag_size)); 38| 0| } 39| 110|} _ZN5Botan8CCM_Mode5resetEv: 47| 267|void CCM_Mode::reset() { 48| 267| m_nonce.clear(); 49| 267| m_msg_buf.clear(); 50| 267|} _ZNK5Botan8CCM_Mode18valid_nonce_lengthEm: 56| 157|bool CCM_Mode::valid_nonce_length(size_t length) const { 57| 157| return (length == (15 - L())); 58| 157|} _ZNK5Botan8CCM_Mode8key_specEv: 77| 110|Key_Length_Specification CCM_Mode::key_spec() const { 78| 110| return m_cipher->key_spec(); 79| 110|} _ZN5Botan8CCM_Mode12key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 85| 110|void CCM_Mode::key_schedule(std::span key) { 86| 110| m_cipher->set_key(key); 87| | // Clear any per-message state; AD is preserved per AEAD contract 88| | // (CCM advertises associated_data_requires_key() == false). 89| 110| reset(); 90| 110|} _ZN5Botan8CCM_Mode21set_associated_data_nEmNSt3__14spanIKhLm18446744073709551615EEE: 92| 157|void CCM_Mode::set_associated_data_n(size_t idx, std::span ad) { 93| 157| BOTAN_ARG_CHECK(idx == 0, "CCM: cannot handle non-zero index in set_associated_data_n"); ------------------ | | 35| 157| do { \ | | 36| 157| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 157| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 157] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 157| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 157] | | ------------------ ------------------ 94| 157| BOTAN_STATE_CHECK(m_nonce.empty()); ------------------ | | 51| 157| do { \ | | 52| 157| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 157| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 157] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 157| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 157] | | ------------------ ------------------ 95| | 96| 157| m_ad_buf.clear(); 97| | 98| 157| if(!ad.empty()) { ------------------ | Branch (98:7): [True: 157, False: 0] ------------------ 99| | // FIXME: support larger AD using length encoding rules 100| 157| BOTAN_ARG_CHECK(ad.size() < (0xFFFF - 0xFF), "Supported CCM AD length"); ------------------ | | 35| 157| do { \ | | 36| 157| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 157| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 157] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 157| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 157] | | ------------------ ------------------ 101| | 102| 157| m_ad_buf.push_back(get_byte<0>(static_cast(ad.size()))); 103| 157| m_ad_buf.push_back(get_byte<1>(static_cast(ad.size()))); 104| 157| m_ad_buf.insert(m_ad_buf.end(), ad.begin(), ad.end()); 105| 314| while(m_ad_buf.size() % CCM_BS != 0) { ------------------ | Branch (105:13): [True: 157, False: 157] ------------------ 106| 157| m_ad_buf.push_back(0); // pad with zeros to full block size 107| 157| } 108| 157| } 109| 157|} _ZN5Botan8CCM_Mode9start_msgEPKhm: 111| 157|void CCM_Mode::start_msg(const uint8_t nonce[], size_t nonce_len) { 112| 157| BOTAN_STATE_CHECK(m_nonce.empty()); ------------------ | | 51| 157| do { \ | | 52| 157| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 157| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 157] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 157| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 157] | | ------------------ ------------------ 113| | 114| 157| if(!valid_nonce_length(nonce_len)) { ------------------ | Branch (114:7): [True: 0, False: 157] ------------------ 115| 0| throw Invalid_IV_Length(name(), nonce_len); 116| 0| } 117| | 118| 157| m_nonce.assign(nonce, nonce + nonce_len); 119| 157| m_msg_buf.clear(); 120| 157|} _ZN5Botan8CCM_Mode13encode_lengthEmPh: 137| 157|void CCM_Mode::encode_length(uint64_t len, uint8_t out[]) { 138| 157| const size_t len_bytes = L(); 139| | 140| 157| BOTAN_ASSERT_NOMSG(len_bytes >= 2 && len_bytes <= 8); ------------------ | | 84| 157| do { \ | | 85| 157| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 314| if(!(expr)) { \ | | ------------------ | | | Branch (86:12): [True: 157, False: 0] | | | Branch (86:12): [True: 157, False: 0] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 157| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 157] | | ------------------ ------------------ 141| | 142| 628| for(size_t i = 0; i != len_bytes; ++i) { ------------------ | Branch (142:22): [True: 471, False: 157] ------------------ 143| 471| out[len_bytes - 1 - i] = get_byte_var(sizeof(uint64_t) - 1 - i, len); 144| 471| } 145| | 146| 157| if(len_bytes < 8 && (len >> (len_bytes * 8)) > 0) { ------------------ | Branch (146:7): [True: 157, False: 0] | Branch (146:24): [True: 0, False: 157] ------------------ 147| 0| throw Encoding_Error("CCM message length too long to encode in L field"); 148| 0| } 149| 157|} _ZN5Botan8CCM_Mode3incERNSt3__16vectorIhNS_16secure_allocatorIhEEEE: 151| 2.37k|void CCM_Mode::inc(secure_vector& C) { 152| 2.37k| for(size_t i = 0; i != C.size(); ++i) { ------------------ | Branch (152:22): [True: 2.37k, False: 0] ------------------ 153| 2.37k| uint8_t& b = C[C.size() - i - 1]; 154| 2.37k| b += 1; 155| 2.37k| if(b > 0) { ------------------ | Branch (155:10): [True: 2.37k, False: 2] ------------------ 156| 2.37k| break; 157| 2.37k| } 158| 2.37k| } 159| 2.37k|} _ZN5Botan8CCM_Mode9format_b0Em: 161| 157|secure_vector CCM_Mode::format_b0(size_t sz) { 162| 157| if(m_nonce.size() != 15 - L()) { ------------------ | Branch (162:7): [True: 0, False: 157] ------------------ 163| 0| throw Invalid_State("CCM mode must set nonce"); 164| 0| } 165| 157| secure_vector B0(CCM_BS); 166| | 167| 157| const uint8_t b_flags = 168| 157| static_cast((!m_ad_buf.empty() ? 64 : 0) + (((tag_size() / 2) - 1) << 3) + (L() - 1)); ------------------ | Branch (168:29): [True: 157, False: 0] ------------------ 169| | 170| 157| B0[0] = b_flags; 171| 157| copy_mem(&B0[1], m_nonce.data(), m_nonce.size()); 172| 157| encode_length(sz, &B0[m_nonce.size() + 1]); 173| | 174| 157| return B0; 175| 157|} _ZN5Botan8CCM_Mode9format_c0Ev: 177| 157|secure_vector CCM_Mode::format_c0() { 178| 157| if(m_nonce.size() != 15 - L()) { ------------------ | Branch (178:7): [True: 0, False: 157] ------------------ 179| 0| throw Invalid_State("CCM mode must set nonce"); 180| 0| } 181| 157| secure_vector C(CCM_BS); 182| | 183| 157| const uint8_t a_flags = static_cast(L() - 1); 184| | 185| 157| C[0] = a_flags; 186| 157| copy_mem(&C[1], m_nonce.data(), m_nonce.size()); 187| | 188| 157| return C; 189| 157|} _ZNK5Botan14CCM_Encryption13output_lengthEm: 191| 109|size_t CCM_Encryption::output_length(size_t input_length) const { 192| 109| return add_or_throw(input_length, tag_size(), "CCM input too large"); 193| 109|} _ZN5Botan14CCM_Encryption10finish_msgERNSt3__16vectorIhNS_16secure_allocatorIhEEEEm: 195| 109|void CCM_Encryption::finish_msg(secure_vector& buffer, size_t offset) { 196| 109| BOTAN_ARG_CHECK(buffer.size() >= offset, "Offset is out of range"); ------------------ | | 35| 109| do { \ | | 36| 109| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 109| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 109] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 109| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 109] | | ------------------ ------------------ 197| | 198| 109| buffer.insert(buffer.begin() + offset, msg_buf().begin(), msg_buf().end()); 199| | 200| 109| const size_t sz = buffer.size() - offset; 201| 109| uint8_t* buf = buffer.data() + offset; 202| | 203| 109| const secure_vector& ad = ad_buf(); 204| 109| BOTAN_ARG_CHECK(ad.size() % CCM_BS == 0, "AD is block size multiple"); ------------------ | | 35| 109| do { \ | | 36| 109| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 109| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 109] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 109| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 109] | | ------------------ ------------------ 205| | 206| 109| const BlockCipher& E = cipher(); 207| | 208| 109| secure_vector T(CCM_BS); 209| 109| E.encrypt(format_b0(sz), T); 210| | 211| 218| for(size_t i = 0; i != ad.size(); i += CCM_BS) { ------------------ | Branch (211:22): [True: 109, False: 109] ------------------ 212| 109| xor_buf(T.data(), &ad[i], CCM_BS); 213| 109| E.encrypt(T); 214| 109| } 215| | 216| 109| secure_vector C = format_c0(); 217| 109| secure_vector S0(CCM_BS); 218| 109| E.encrypt(C, S0); 219| 109| inc(C); 220| | 221| 109| secure_vector X(CCM_BS); 222| | 223| 109| const uint8_t* buf_end = &buf[sz]; 224| | 225| 218| while(buf != buf_end) { ------------------ | Branch (225:10): [True: 109, False: 109] ------------------ 226| 109| const size_t to_proc = std::min(CCM_BS, buf_end - buf); 227| | 228| 109| xor_buf(T.data(), buf, to_proc); 229| 109| E.encrypt(T); 230| | 231| 109| E.encrypt(C, X); 232| 109| xor_buf(buf, X.data(), to_proc); 233| 109| inc(C); 234| | 235| 109| buf += to_proc; 236| 109| } 237| | 238| 109| T ^= S0; 239| | 240| 109| buffer += std::make_pair(T.data(), tag_size()); 241| | 242| 109| reset(); 243| 109|} _ZNK5Botan14CCM_Decryption13output_lengthEm: 245| 48|size_t CCM_Decryption::output_length(size_t input_length) const { 246| 48| BOTAN_ARG_CHECK(input_length >= tag_size(), "Message too short to be valid"); ------------------ | | 35| 48| do { \ | | 36| 48| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 48| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 48] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 48| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 48] | | ------------------ ------------------ 247| 48| return input_length - tag_size(); 248| 48|} _ZN5Botan14CCM_Decryption10finish_msgERNSt3__16vectorIhNS_16secure_allocatorIhEEEEm: 250| 48|void CCM_Decryption::finish_msg(secure_vector& buffer, size_t offset) { 251| 48| BOTAN_ARG_CHECK(buffer.size() >= offset, "Offset is out of range"); ------------------ | | 35| 48| do { \ | | 36| 48| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 48| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 48] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 48| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 48] | | ------------------ ------------------ 252| | 253| 48| buffer.insert(buffer.begin() + offset, msg_buf().begin(), msg_buf().end()); 254| | 255| 48| const size_t sz = buffer.size() - offset; 256| 48| uint8_t* buf = buffer.data() + offset; 257| | 258| 48| BOTAN_ARG_CHECK(sz >= tag_size(), "input did not include the tag"); ------------------ | | 35| 48| do { \ | | 36| 48| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 48| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 48] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 48| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 48] | | ------------------ ------------------ 259| | 260| 48| const secure_vector& ad = ad_buf(); 261| 48| BOTAN_ARG_CHECK(ad.size() % CCM_BS == 0, "AD is block size multiple"); ------------------ | | 35| 48| do { \ | | 36| 48| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 48| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 48] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 48| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 48] | | ------------------ ------------------ 262| | 263| 48| const BlockCipher& E = cipher(); 264| | 265| 48| secure_vector T(CCM_BS); 266| 48| E.encrypt(format_b0(sz - tag_size()), T); 267| | 268| 96| for(size_t i = 0; i != ad.size(); i += CCM_BS) { ------------------ | Branch (268:22): [True: 48, False: 48] ------------------ 269| 48| xor_buf(T.data(), &ad[i], CCM_BS); 270| 48| E.encrypt(T); 271| 48| } 272| | 273| 48| secure_vector C = format_c0(); 274| | 275| 48| secure_vector S0(CCM_BS); 276| 48| E.encrypt(C, S0); 277| 48| inc(C); 278| | 279| 48| secure_vector X(CCM_BS); 280| | 281| 48| const uint8_t* buf_end = &buf[sz - tag_size()]; 282| | 283| 2.15k| while(buf != buf_end) { ------------------ | Branch (283:10): [True: 2.10k, False: 48] ------------------ 284| 2.10k| const size_t to_proc = std::min(CCM_BS, buf_end - buf); 285| | 286| 2.10k| E.encrypt(C, X); 287| 2.10k| xor_buf(buf, X.data(), to_proc); 288| 2.10k| inc(C); 289| | 290| 2.10k| xor_buf(T.data(), buf, to_proc); 291| 2.10k| E.encrypt(T); 292| | 293| 2.10k| buf += to_proc; 294| 2.10k| } 295| | 296| 48| T ^= S0; 297| | 298| 48| if(!CT::is_equal(T.data(), buf_end, tag_size()).as_bool()) { ------------------ | Branch (298:7): [True: 48, False: 0] ------------------ 299| 48| clear_mem(std::span{buffer}.subspan(offset, sz - tag_size())); 300| | // Reset on the failure path too, matching GCM/SIV/ChaCha20Poly1305, so a 301| | // failed decryptor is reusable rather than stuck in a partial state. 302| 48| reset(); 303| 48| throw Invalid_Authentication_Tag("CCM tag check failed"); 304| 48| } 305| | 306| 0| buffer.resize(buffer.size() - tag_size()); 307| | 308| 0| reset(); 309| 0|} _ZN5Botan21ChaCha20Poly1305_ModeC2Ev: 20| 82| m_chacha(StreamCipher::create("ChaCha")), m_poly1305(MessageAuthenticationCode::create("Poly1305")) { 21| 82| if(!m_chacha || !m_poly1305) { ------------------ | Branch (21:7): [True: 0, False: 82] | Branch (21:20): [True: 0, False: 82] ------------------ 22| 0| throw Algorithm_Not_Found("ChaCha20Poly1305"); 23| 0| } 24| 82|} _ZNK5Botan21ChaCha20Poly1305_Mode18valid_nonce_lengthEm: 26| 117|bool ChaCha20Poly1305_Mode::valid_nonce_length(size_t n) const { 27| 117| return (n == 8 || n == 12 || n == 24); ------------------ | Branch (27:12): [True: 0, False: 117] | Branch (27:22): [True: 117, False: 0] | Branch (27:33): [True: 0, False: 0] ------------------ 28| 117|} _ZN5Botan21ChaCha20Poly1305_Mode5resetEv: 45| 82|void ChaCha20Poly1305_Mode::reset() { 46| 82| m_ctext_len = 0; 47| 82| m_nonce_len = 0; 48| 82|} _ZN5Botan21ChaCha20Poly1305_Mode12key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 54| 82|void ChaCha20Poly1305_Mode::key_schedule(std::span key) { 55| 82| m_chacha->set_key(key); 56| | // Clear any per-message state; AD is preserved per AEAD contract 57| | // (ChaCha20Poly1305 advertises associated_data_requires_key() == false). 58| 82| reset(); 59| 82|} _ZN5Botan21ChaCha20Poly1305_Mode21set_associated_data_nEmNSt3__14spanIKhLm18446744073709551615EEE: 61| 117|void ChaCha20Poly1305_Mode::set_associated_data_n(size_t idx, std::span ad) { 62| 117| BOTAN_ARG_CHECK(idx == 0, "ChaCha20Poly1305: cannot handle non-zero index in set_associated_data_n"); ------------------ | | 35| 117| do { \ | | 36| 117| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 117| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 117] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 117| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 117] | | ------------------ ------------------ 63| 117| if(m_ctext_len > 0 || m_nonce_len > 0) { ------------------ | Branch (63:7): [True: 0, False: 117] | Branch (63:26): [True: 0, False: 117] ------------------ 64| 0| throw Invalid_State("Cannot set AD for ChaCha20Poly1305 while processing a message"); 65| 0| } 66| 117| m_ad.assign(ad.begin(), ad.end()); 67| 117|} _ZN5Botan21ChaCha20Poly1305_Mode10update_lenEm: 69| 234|void ChaCha20Poly1305_Mode::update_len(uint64_t len) { 70| 234| uint8_t len8[8] = {0}; 71| 234| store_le(len, len8); 72| 234| m_poly1305->update(len8, 8); 73| 234|} _ZN5Botan21ChaCha20Poly1305_Mode9start_msgEPKhm: 75| 117|void ChaCha20Poly1305_Mode::start_msg(const uint8_t nonce[], size_t nonce_len) { 76| 117| BOTAN_STATE_CHECK(m_nonce_len == 0); ------------------ | | 51| 117| do { \ | | 52| 117| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 117| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 117] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 117| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 117] | | ------------------ ------------------ 77| | 78| 117| if(!valid_nonce_length(nonce_len)) { ------------------ | Branch (78:7): [True: 0, False: 117] ------------------ 79| 0| throw Invalid_IV_Length(name(), nonce_len); 80| 0| } 81| | 82| 117| m_ctext_len = 0; 83| 117| m_nonce_len = nonce_len; 84| | 85| 117| m_chacha->set_iv(nonce, nonce_len); 86| | 87| 117| uint8_t first_block[64]; 88| 117| m_chacha->write_keystream(first_block, sizeof(first_block)); 89| | 90| 117| m_poly1305->set_key(first_block, 32); 91| | // Remainder of first block is discarded 92| 117| secure_scrub_memory(first_block, sizeof(first_block)); 93| | 94| 117| m_poly1305->update(m_ad); 95| | 96| 117| if(cfrg_version()) { ------------------ | Branch (96:7): [True: 117, False: 0] ------------------ 97| 117| if(m_ad.size() % 16 != 0) { ------------------ | Branch (97:10): [True: 117, False: 0] ------------------ 98| 117| const uint8_t zeros[16] = {0}; 99| 117| m_poly1305->update(zeros, 16 - m_ad.size() % 16); 100| 117| } 101| 117| } else { 102| 0| update_len(m_ad.size()); 103| 0| } 104| 117|} _ZNK5Botan27ChaCha20Poly1305_Encryption13output_lengthEm: 106| 81|size_t ChaCha20Poly1305_Encryption::output_length(size_t input_length) const { 107| 81| return add_or_throw(input_length, tag_size(), "ChaCha20Poly1305 input too large"); 108| 81|} _ZN5Botan27ChaCha20Poly1305_Encryption11process_msgEPhm: 110| 81|size_t ChaCha20Poly1305_Encryption::process_msg(uint8_t buf[], size_t sz) { 111| 81| BOTAN_STATE_CHECK(m_nonce_len > 0); ------------------ | | 51| 81| do { \ | | 52| 81| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 81| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 81] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 81| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 81] | | ------------------ ------------------ 112| 81| m_chacha->cipher1(buf, sz); 113| 81| m_poly1305->update(buf, sz); // poly1305 of ciphertext 114| 81| m_ctext_len += sz; 115| | 116| | // RFC 8439 limits messages to 2^38-64 bytes 117| 81| constexpr uint64_t MAX_CHACHA20POLY1305_INPUT = (static_cast(1) << 38) - 64; 118| 81| if(cfrg_version() && m_ctext_len > MAX_CHACHA20POLY1305_INPUT) { ------------------ | Branch (118:7): [True: 81, False: 0] | Branch (118:25): [True: 0, False: 81] ------------------ 119| 0| throw Invalid_State("ChaCha20Poly1305 message length limit exceeded"); 120| 0| } 121| | 122| 81| return sz; 123| 81|} _ZN5Botan27ChaCha20Poly1305_Encryption10finish_msgERNSt3__16vectorIhNS_16secure_allocatorIhEEEEm: 125| 81|void ChaCha20Poly1305_Encryption::finish_msg(secure_vector& buffer, size_t offset) { 126| 81| BOTAN_STATE_CHECK(m_nonce_len > 0); ------------------ | | 51| 81| do { \ | | 52| 81| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 81| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 81] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 81| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 81] | | ------------------ ------------------ 127| 81| BOTAN_ARG_CHECK(buffer.size() >= offset, "Offset is out of range"); ------------------ | | 35| 81| do { \ | | 36| 81| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 81| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 81] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 81| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 81] | | ------------------ ------------------ 128| 81| update(buffer, offset); 129| 81| if(cfrg_version()) { ------------------ | Branch (129:7): [True: 81, False: 0] ------------------ 130| 81| if(m_ctext_len % 16 != 0) { ------------------ | Branch (130:10): [True: 39, False: 42] ------------------ 131| 39| const uint8_t zeros[16] = {0}; 132| 39| const size_t padding = static_cast(16 - m_ctext_len % 16); 133| 39| m_poly1305->update(zeros, padding); 134| 39| } 135| 81| update_len(m_ad.size()); 136| 81| } 137| 81| update_len(m_ctext_len); 138| | 139| 81| const auto new_size = checked_add(buffer.size(), tag_size()); 140| 81| if(!new_size.has_value()) { ------------------ | Branch (140:7): [True: 0, False: 81] ------------------ 141| 0| throw Invalid_State("ChaCha20Poly1305 message length limit exceeded"); 142| 0| } 143| 81| buffer.resize(new_size.value()); 144| 81| m_poly1305->final(&buffer[buffer.size() - tag_size()]); 145| 81| m_ctext_len = 0; 146| 81| m_nonce_len = 0; 147| 81|} _ZNK5Botan27ChaCha20Poly1305_Decryption13output_lengthEm: 149| 36|size_t ChaCha20Poly1305_Decryption::output_length(size_t input_length) const { 150| 36| BOTAN_ARG_CHECK(input_length >= tag_size(), "Message too short to be valid"); ------------------ | | 35| 36| do { \ | | 36| 36| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 36| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 36] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 36| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 36] | | ------------------ ------------------ 151| 36| return input_length - tag_size(); 152| 36|} _ZN5Botan27ChaCha20Poly1305_Decryption11process_msgEPhm: 154| 35|size_t ChaCha20Poly1305_Decryption::process_msg(uint8_t buf[], size_t sz) { 155| 35| BOTAN_STATE_CHECK(m_nonce_len > 0); ------------------ | | 51| 35| do { \ | | 52| 35| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 35| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 35] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 35| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 35] | | ------------------ ------------------ 156| 35| m_poly1305->update(buf, sz); // poly1305 of ciphertext 157| 35| m_chacha->cipher1(buf, sz); 158| 35| m_ctext_len += sz; 159| | 160| 35| constexpr uint64_t MAX_CHACHA20POLY1305_INPUT = (static_cast(1) << 38) - 64; 161| 35| if(cfrg_version() && m_ctext_len > MAX_CHACHA20POLY1305_INPUT) { ------------------ | Branch (161:7): [True: 35, False: 0] | Branch (161:25): [True: 0, False: 35] ------------------ 162| 0| throw Invalid_State("ChaCha20Poly1305 message length limit exceeded"); 163| 0| } 164| | 165| 35| return sz; 166| 35|} _ZN5Botan27ChaCha20Poly1305_Decryption10finish_msgERNSt3__16vectorIhNS_16secure_allocatorIhEEEEm: 168| 36|void ChaCha20Poly1305_Decryption::finish_msg(secure_vector& buffer, size_t offset) { 169| 36| BOTAN_STATE_CHECK(m_nonce_len > 0); ------------------ | | 51| 36| do { \ | | 52| 36| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 36| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 36] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 36| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 36] | | ------------------ ------------------ 170| 36| BOTAN_ARG_CHECK(buffer.size() >= offset, "Offset is out of range"); ------------------ | | 35| 36| do { \ | | 36| 36| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 36| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 36] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 36| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 36] | | ------------------ ------------------ 171| 36| const size_t sz = buffer.size() - offset; 172| 36| uint8_t* buf = buffer.data() + offset; 173| | 174| 36| BOTAN_ARG_CHECK(sz >= tag_size(), "input did not include the tag"); ------------------ | | 35| 36| do { \ | | 36| 36| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 36| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 36] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 36| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 36] | | ------------------ ------------------ 175| | 176| 36| const size_t remaining = sz - tag_size(); 177| | 178| 36| if(remaining > 0) { ------------------ | Branch (178:7): [True: 35, False: 1] ------------------ 179| | // Route through process_msg so the RFC 8439 length limit is enforced for 180| | // one-shot decryption too (finish() calls finish_msg() directly). 181| 35| process_msg(buf, remaining); 182| 35| } 183| | 184| 36| if(cfrg_version()) { ------------------ | Branch (184:7): [True: 36, False: 0] ------------------ 185| 36| if(m_ctext_len % 16 != 0) { ------------------ | Branch (185:10): [True: 27, False: 9] ------------------ 186| 27| const uint8_t zeros[16] = {0}; 187| 27| const size_t padding = static_cast(16 - m_ctext_len % 16); 188| 27| m_poly1305->update(zeros, padding); 189| 27| } 190| 36| update_len(m_ad.size()); 191| 36| } 192| | 193| 36| update_len(m_ctext_len); 194| | 195| 36| uint8_t mac[16]; 196| 36| m_poly1305->final(mac); 197| | 198| 36| const uint8_t* included_tag = &buf[remaining]; 199| | 200| 36| m_ctext_len = 0; 201| 36| m_nonce_len = 0; 202| | 203| 36| if(!CT::is_equal(mac, included_tag, tag_size()).as_bool()) { ------------------ | Branch (203:7): [True: 36, False: 0] ------------------ 204| 36| clear_mem(std::span{buffer}.subspan(offset, remaining)); 205| 36| throw Invalid_Authentication_Tag("ChaCha20Poly1305 tag check failed"); 206| 36| } 207| 0| buffer.resize(offset + remaining); 208| 0|} _ZN5Botan8GCM_ModeC2ENSt3__110unique_ptrINS_11BlockCipherENS1_14default_deleteIS3_EEEEm: 27| 476| m_tag_size(tag_size), m_cipher_name(cipher->name()) { 28| 476| if(cipher->block_size() != GCM_BS) { ------------------ | Branch (28:7): [True: 0, False: 476] ------------------ 29| 0| throw Invalid_Argument("Invalid block cipher for GCM"); 30| 0| } 31| | 32| | /* We allow any of the values 128, 120, 112, 104, or 96 bits as a tag size */ 33| | /* 64 bit tag is still supported but deprecated and will be removed in the future */ 34| 476| if(m_tag_size != 8 && (m_tag_size < 12 || m_tag_size > 16)) { ------------------ | Branch (34:7): [True: 476, False: 0] | Branch (34:27): [True: 0, False: 476] | Branch (34:46): [True: 0, False: 476] ------------------ 35| 0| throw Invalid_Argument(fmt("{} cannot use a tag of {} bytes", name(), m_tag_size)); 36| 0| } 37| | 38| 476| m_ctr = std::make_unique(std::move(cipher), 4); 39| 476| m_ghash = std::make_unique(); 40| 476|} _ZN5Botan8GCM_ModeD2Ev: 42| 476|GCM_Mode::~GCM_Mode() = default; _ZN5Botan8GCM_Mode5resetEv: 50| 476|void GCM_Mode::reset() { 51| 476| m_ghash->reset_state(); 52| 476| m_in_msg = false; 53| 476|} _ZNK5Botan8GCM_Mode18valid_nonce_lengthEm: 71| 561|bool GCM_Mode::valid_nonce_length(size_t len) const { 72| | // GCM does not support empty nonces 73| 561| return (len > 0); 74| 561|} _ZNK5Botan8GCM_Mode8key_specEv: 76| 476|Key_Length_Specification GCM_Mode::key_spec() const { 77| 476| return m_ctr->key_spec(); 78| 476|} _ZN5Botan8GCM_Mode12key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 84| 476|void GCM_Mode::key_schedule(std::span key) { 85| 476| reset(); 86| 476| m_ctr->set_key(key); 87| | 88| 476| std::array zeros{}; 89| 476| m_ctr->set_iv(zeros); 90| | 91| 476| uint8_t H[GCM_BS] = {0}; 92| 476| m_ctr->encipher(H); 93| 476| m_ghash->set_key(H); 94| 476|} _ZN5Botan8GCM_Mode21set_associated_data_nEmNSt3__14spanIKhLm18446744073709551615EEE: 96| 561|void GCM_Mode::set_associated_data_n(size_t idx, std::span ad) { 97| 561| BOTAN_ARG_CHECK(idx == 0, "GCM: cannot handle non-zero index in set_associated_data_n"); ------------------ | | 35| 561| do { \ | | 36| 561| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 561| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 561] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 561| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 561] | | ------------------ ------------------ 98| 561| m_ghash->set_associated_data(ad); 99| 561|} _ZN5Botan8GCM_Mode9start_msgEPKhm: 101| 561|void GCM_Mode::start_msg(const uint8_t nonce[], size_t nonce_len) { 102| 561| BOTAN_STATE_CHECK(!m_in_msg); ------------------ | | 51| 561| do { \ | | 52| 561| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 561| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 561] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 561| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 561] | | ------------------ ------------------ 103| | 104| 561| if(!valid_nonce_length(nonce_len)) { ------------------ | Branch (104:7): [True: 0, False: 561] ------------------ 105| 0| throw Invalid_IV_Length(name(), nonce_len); 106| 0| } 107| | 108| 561| std::array y0 = {}; 109| | 110| 561| if(nonce_len == 12) { ------------------ | Branch (110:7): [True: 561, False: 0] ------------------ 111| 561| copy_mem(y0.data(), nonce, nonce_len); 112| 561| y0[15] = 1; 113| 561| } else { 114| 0| m_ghash->nonce_hash(std::span(y0), {nonce, nonce_len}); 115| 0| } 116| | 117| 561| m_ctr->set_iv(y0.data(), y0.size()); 118| | 119| 561| clear_mem(y0.data(), y0.size()); 120| 561| m_ctr->encipher(y0); 121| | 122| 561| m_ghash->start(y0); 123| 561| secure_scrub_memory(y0); 124| 561| m_in_msg = true; 125| 561|} _ZNK5Botan14GCM_Encryption13output_lengthEm: 127| 482|size_t GCM_Encryption::output_length(size_t input_length) const { 128| 482| return add_or_throw(input_length, tag_size(), "GCM input too large"); 129| 482|} _ZN5Botan14GCM_Encryption10finish_msgERNSt3__16vectorIhNS_16secure_allocatorIhEEEEm: 139| 482|void GCM_Encryption::finish_msg(secure_vector& buffer, size_t offset) { 140| 482| BOTAN_STATE_CHECK(m_in_msg); ------------------ | | 51| 482| do { \ | | 52| 482| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 482| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 482] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 482| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 482] | | ------------------ ------------------ 141| 482| BOTAN_ARG_CHECK(offset <= buffer.size(), "Invalid offset"); ------------------ | | 35| 482| do { \ | | 36| 482| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 482| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 482] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 482| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 482] | | ------------------ ------------------ 142| 482| const size_t sz = buffer.size() - offset; 143| 482| uint8_t* buf = buffer.data() + offset; 144| | 145| 482| m_ctr->cipher(buf, buf, sz); 146| 482| m_ghash->update({buf, sz}); 147| | 148| 482| std::array mac = {0}; 149| 482| m_ghash->final(std::span(mac).first(tag_size())); 150| 482| buffer += std::make_pair(mac.data(), tag_size()); 151| 482| m_in_msg = false; 152| 482|} _ZNK5Botan14GCM_Decryption13output_lengthEm: 154| 79|size_t GCM_Decryption::output_length(size_t input_length) const { 155| 79| BOTAN_ARG_CHECK(input_length >= tag_size(), "Message too short to be valid"); ------------------ | | 35| 79| do { \ | | 36| 79| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 79| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 79] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 79| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 79] | | ------------------ ------------------ 156| 79| return input_length - tag_size(); 157| 79|} _ZN5Botan14GCM_Decryption10finish_msgERNSt3__16vectorIhNS_16secure_allocatorIhEEEEm: 167| 79|void GCM_Decryption::finish_msg(secure_vector& buffer, size_t offset) { 168| 79| BOTAN_STATE_CHECK(m_in_msg); ------------------ | | 51| 79| do { \ | | 52| 79| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 79| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 79] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 79| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 79] | | ------------------ ------------------ 169| 79| BOTAN_ARG_CHECK(offset <= buffer.size(), "Invalid offset"); ------------------ | | 35| 79| do { \ | | 36| 79| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 79| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 79] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 79| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 79] | | ------------------ ------------------ 170| 79| const size_t sz = buffer.size() - offset; 171| 79| uint8_t* buf = buffer.data() + offset; 172| | 173| 79| BOTAN_ARG_CHECK(sz >= tag_size(), "input did not include the tag"); ------------------ | | 35| 79| do { \ | | 36| 79| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 79| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 79] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 79| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 79] | | ------------------ ------------------ 174| | 175| 79| const size_t remaining = sz - tag_size(); 176| | 177| | // handle any final input before the tag 178| 79| if(remaining > 0) { ------------------ | Branch (178:7): [True: 78, False: 1] ------------------ 179| 78| m_ghash->update({buf, remaining}); 180| 78| m_ctr->cipher(buf, buf, remaining); 181| 78| } 182| | 183| 79| std::array mac = {0}; 184| 79| m_ghash->final(std::span(mac).first(tag_size())); 185| | 186| 79| const uint8_t* included_tag = &buffer[remaining + offset]; 187| | 188| 79| m_in_msg = false; 189| | 190| 79| if(!CT::is_equal(mac.data(), included_tag, tag_size()).as_bool()) { ------------------ | Branch (190:7): [True: 79, False: 0] ------------------ 191| 79| clear_mem(std::span{buffer}.subspan(offset, remaining)); 192| 79| throw Invalid_Authentication_Tag("GCM tag check failed"); 193| 79| } 194| | 195| 0| buffer.resize(offset + remaining); 196| 0|} _ZN5Botan8OCB_ModeC2ENSt3__110unique_ptrINS_11BlockCipherENS1_14default_deleteIS3_EEEEm: 166| 94| m_cipher(std::move(cipher)), 167| 94| m_checksum(m_cipher->parallel_bytes()), 168| 94| m_ad_hash(m_cipher->block_size()), 169| 94| m_tag_size(tag_size), 170| 94| m_block_size(m_cipher->block_size()), 171| 94| m_par_blocks(m_cipher->parallel_bytes() / m_block_size) { 172| 94| const size_t BS = block_size(); 173| | 174| | /* 175| | * draft-krovetz-ocb-wide-d1 specifies OCB for several other block 176| | * sizes but only 128, 192, 256 and 512 bit are currently supported 177| | * by this implementation. 178| | */ 179| 94| BOTAN_ARG_CHECK(BS == 16 || BS == 24 || BS == 32 || BS == 64, "Invalid block size for OCB"); ------------------ | | 35| 94| do { \ | | 36| 94| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 282| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 94, False: 0] | | | Branch (37:12): [True: 0, False: 0] | | | Branch (37:12): [True: 0, False: 0] | | | Branch (37:12): [True: 0, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 94| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 94] | | ------------------ ------------------ 180| | 181| 94| BOTAN_ARG_CHECK(m_tag_size % 4 == 0 && m_tag_size >= 8 && m_tag_size <= BS && m_tag_size <= 32, ------------------ | | 35| 94| do { \ | | 36| 94| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 564| if(!(expr)) { \ | | ------------------ | | | Branch (37:12): [True: 94, False: 0] | | | Branch (37:12): [True: 94, False: 0] | | | Branch (37:12): [True: 94, False: 0] | | | Branch (37:12): [True: 94, False: 0] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 94| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 94] | | ------------------ ------------------ 182| 94| "Invalid OCB tag length"); 183| 94|} _ZN5Botan8OCB_ModeD2Ev: 185| 94|OCB_Mode::~OCB_Mode() = default; _ZN5Botan8OCB_Mode5resetEv: 194| 231|void OCB_Mode::reset() { 195| 231| m_block_index = 0; 196| 231| zeroise(m_checksum); 197| 231| m_last_nonce.clear(); 198| 231| m_stretch.clear(); 199| 231| zeroise(m_nonce_buf); 200| 231| zeroise(m_offset); 201| 231| if(m_L) { ------------------ | Branch (201:7): [True: 231, False: 0] ------------------ 202| 231| m_L->reset(); // NOLINT(*-ambiguous-smartptr-reset-call) 203| 231| } 204| 231|} _ZNK5Botan8OCB_Mode18valid_nonce_lengthEm: 206| 137|bool OCB_Mode::valid_nonce_length(size_t length) const { 207| 137| if(length == 0) { ------------------ | Branch (207:7): [True: 0, False: 137] ------------------ 208| 0| return false; 209| 0| } 210| 137| if(block_size() == 16) { ------------------ | Branch (210:7): [True: 137, False: 0] ------------------ 211| 137| return length < 16; 212| 137| } else { 213| 0| return length < (block_size() - 1); 214| 0| } 215| 137|} _ZNK5Botan8OCB_Mode8key_specEv: 229| 94|Key_Length_Specification OCB_Mode::key_spec() const { 230| 94| return m_cipher->key_spec(); 231| 94|} _ZNK5Botan8OCB_Mode19has_keying_materialEv: 233| 547|bool OCB_Mode::has_keying_material() const { 234| 547| return m_cipher->has_keying_material(); 235| 547|} _ZN5Botan8OCB_Mode12key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 237| 94|void OCB_Mode::key_schedule(std::span key) { 238| 94| m_cipher->set_key(key); 239| 94| m_L = std::make_unique(*m_cipher); 240| | 241| | // Drop all key-dependent per-message state: m_last_nonce/m_stretch are 242| | // cached for the update_nonce() fast path and would otherwise allow a 243| | // start_msg() with a same-valued nonce under the new key to silently 244| | // reuse the stretch computed under the previous key. 245| 94| reset(); 246| | 247| | // m_ad_hash was precomputed against the previous L values and cipher 248| | // key. Re-keying invalidates it; AD must be re-set after set_key. 249| 94| zeroise(m_ad_hash); 250| 94|} _ZN5Botan8OCB_Mode21set_associated_data_nEmNSt3__14spanIKhLm18446744073709551615EEE: 252| 137|void OCB_Mode::set_associated_data_n(size_t idx, std::span ad) { 253| 137| BOTAN_ARG_CHECK(idx == 0, "OCB: cannot handle non-zero index in set_associated_data_n"); ------------------ | | 35| 137| do { \ | | 36| 137| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 137| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 137] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 137| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 137] | | ------------------ ------------------ 254| 137| assert_key_material_set(); 255| 137| BOTAN_STATE_CHECK(!m_L->initialized()); ------------------ | | 51| 137| do { \ | | 52| 137| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 137| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 137] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 137| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 137] | | ------------------ ------------------ 256| 137| m_ad_hash = ocb_hash(*m_L, *m_cipher, ad.data(), ad.size()); 257| 137|} _ZN5Botan8OCB_Mode12update_nonceEPKhm: 259| 137|const secure_vector& OCB_Mode::update_nonce(const uint8_t nonce[], size_t nonce_len) { 260| 137| const size_t BS = block_size(); 261| | 262| 137| BOTAN_ASSERT(BS == 16 || BS == 24 || BS == 32 || BS == 64, "OCB block size is supported"); ------------------ | | 71| 137| do { \ | | 72| 137| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 411| if(!(expr)) { \ | | ------------------ | | | Branch (73:12): [True: 137, False: 0] | | | Branch (73:12): [True: 0, False: 0] | | | Branch (73:12): [True: 0, False: 0] | | | Branch (73:12): [True: 0, False: 0] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 137| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 137] | | ------------------ ------------------ 263| | 264| | // NOLINTNEXTLINE(readability-avoid-nested-conditional-operator) 265| 137| const size_t MASKLEN = (BS == 16 ? 6 : ((BS == 24) ? 7 : 8)); ------------------ | Branch (265:28): [True: 137, False: 0] | Branch (265:44): [True: 0, False: 0] ------------------ 266| | 267| 137| const uint8_t BOTTOM_MASK = static_cast((static_cast(1) << MASKLEN) - 1); 268| | 269| 137| m_nonce_buf.resize(BS); 270| 137| clear_mem(m_nonce_buf.data(), m_nonce_buf.size()); 271| | 272| 137| copy_mem(&m_nonce_buf[BS - nonce_len], nonce, nonce_len); 273| 137| m_nonce_buf[0] = static_cast(((tag_size() * 8) % (BS * 8)) << (BS <= 16 ? 1 : 0)); ------------------ | Branch (273:76): [True: 137, False: 0] ------------------ 274| | 275| 137| m_nonce_buf[BS - nonce_len - 1] ^= 1; 276| | 277| 137| const uint8_t bottom = m_nonce_buf[BS - 1] & BOTTOM_MASK; 278| 137| m_nonce_buf[BS - 1] &= ~BOTTOM_MASK; 279| | 280| 137| const bool need_new_stretch = (m_last_nonce != m_nonce_buf); 281| | 282| 137| if(need_new_stretch) { ------------------ | Branch (282:7): [True: 137, False: 0] ------------------ 283| 137| m_last_nonce = m_nonce_buf; 284| | 285| 137| m_cipher->encrypt(m_nonce_buf); 286| | 287| | /* 288| | The loop bounds (BS vs BS/2) are derived from the relation 289| | between the block size and the MASKLEN. Using the terminology 290| | of draft-krovetz-ocb-wide, we have to derive enough bits in 291| | ShiftedKtop to read up to BLOCKLEN+bottom bits from Stretch. 292| | 293| | +----------+---------+-------+---------+ 294| | | BLOCKLEN | RESIDUE | SHIFT | MASKLEN | 295| | +----------+---------+-------+---------+ 296| | | 32 | 141 | 17 | 4 | 297| | | 64 | 27 | 25 | 5 | 298| | | 96 | 1601 | 33 | 6 | 299| | | 128 | 135 | 8 | 6 | 300| | | 192 | 135 | 40 | 7 | 301| | | 256 | 1061 | 1 | 8 | 302| | | 384 | 4109 | 80 | 8 | 303| | | 512 | 293 | 176 | 8 | 304| | | 1024 | 524355 | 352 | 9 | 305| | +----------+---------+-------+---------+ 306| | */ 307| 137| if(BS == 16) { ------------------ | Branch (307:10): [True: 137, False: 0] ------------------ 308| 1.23k| for(size_t i = 0; i != BS / 2; ++i) { ------------------ | Branch (308:28): [True: 1.09k, False: 137] ------------------ 309| 1.09k| m_nonce_buf.push_back(m_nonce_buf[i] ^ m_nonce_buf[i + 1]); 310| 1.09k| } 311| 137| } else if(BS == 24) { ------------------ | Branch (311:17): [True: 0, False: 0] ------------------ 312| 0| for(size_t i = 0; i != 16; ++i) { ------------------ | Branch (312:28): [True: 0, False: 0] ------------------ 313| 0| m_nonce_buf.push_back(m_nonce_buf[i] ^ m_nonce_buf[i + 5]); 314| 0| } 315| 0| } else if(BS == 32) { ------------------ | Branch (315:17): [True: 0, False: 0] ------------------ 316| 0| for(size_t i = 0; i != BS; ++i) { ------------------ | Branch (316:28): [True: 0, False: 0] ------------------ 317| 0| m_nonce_buf.push_back(m_nonce_buf[i] ^ (m_nonce_buf[i] << 1) ^ (m_nonce_buf[i + 1] >> 7)); 318| 0| } 319| 0| } else if(BS == 64) { ------------------ | Branch (319:17): [True: 0, False: 0] ------------------ 320| 0| for(size_t i = 0; i != BS / 2; ++i) { ------------------ | Branch (320:28): [True: 0, False: 0] ------------------ 321| 0| m_nonce_buf.push_back(m_nonce_buf[i] ^ m_nonce_buf[i + 22]); 322| 0| } 323| 0| } 324| | 325| 137| m_stretch = m_nonce_buf; 326| 137| } 327| | 328| | // now set the offset from stretch and bottom 329| 137| const size_t shift_bytes = bottom / 8; 330| 137| const size_t shift_bits = bottom % 8; 331| | 332| 137| BOTAN_ASSERT(m_stretch.size() >= BS + shift_bytes + 1, "Size ok"); ------------------ | | 71| 137| do { \ | | 72| 137| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 137| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 137] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 137| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 137] | | ------------------ ------------------ 333| | 334| 137| m_offset.resize(BS); 335| 2.32k| for(size_t i = 0; i != BS; ++i) { ------------------ | Branch (335:22): [True: 2.19k, False: 137] ------------------ 336| 2.19k| m_offset[i] = (m_stretch[i + shift_bytes] << shift_bits); 337| 2.19k| m_offset[i] |= (m_stretch[i + shift_bytes + 1] >> (8 - shift_bits)); 338| 2.19k| } 339| | 340| 137| return m_offset; 341| 137|} _ZN5Botan8OCB_Mode9start_msgEPKhm: 343| 137|void OCB_Mode::start_msg(const uint8_t nonce[], size_t nonce_len) { 344| 137| if(!valid_nonce_length(nonce_len)) { ------------------ | Branch (344:7): [True: 0, False: 137] ------------------ 345| 0| throw Invalid_IV_Length(name(), nonce_len); 346| 0| } 347| | 348| 137| assert_key_material_set(); 349| 137| BOTAN_STATE_CHECK(!m_L->initialized()); ------------------ | | 51| 137| do { \ | | 52| 137| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 137| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 137] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 137| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 137] | | ------------------ ------------------ 350| | 351| 137| m_L->init(update_nonce(nonce, nonce_len)); 352| 137| zeroise(m_checksum); 353| 137| m_block_index = 0; 354| 137|} _ZNK5Botan14OCB_Encryption13output_lengthEm: 356| 94|size_t OCB_Encryption::output_length(size_t input_length) const { 357| 94| return add_or_throw(input_length, tag_size(), "OCB input too large"); 358| 94|} _ZN5Botan14OCB_Encryption7encryptEPhm: 360| 94|void OCB_Encryption::encrypt(uint8_t buffer[], size_t blocks) { 361| 94| assert_key_material_set(); 362| 94| BOTAN_STATE_CHECK(m_L->initialized()); ------------------ | | 51| 94| do { \ | | 52| 94| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 94| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 94] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 94| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 94] | | ------------------ ------------------ 363| | 364| 94| const size_t BS = block_size(); 365| | 366| 142| while(blocks > 0) { ------------------ | Branch (366:10): [True: 48, False: 94] ------------------ 367| 48| const size_t proc_blocks = std::min(blocks, par_blocks()); 368| 48| const size_t proc_bytes = proc_blocks * BS; 369| | 370| 48| const uint8_t* offsets = m_L->compute_offsets(m_block_index, proc_blocks); 371| | 372| 48| xor_buf(m_checksum.data(), buffer, proc_bytes); 373| | 374| 48| xor_buf(buffer, offsets, proc_bytes); 375| 48| m_cipher->encrypt_n(buffer, buffer, proc_blocks); 376| 48| xor_buf(buffer, offsets, proc_bytes); 377| | 378| 48| buffer += proc_bytes; 379| 48| blocks -= proc_blocks; 380| 48| m_block_index += proc_blocks; 381| 48| } 382| 94|} _ZN5Botan14OCB_Encryption10finish_msgERNSt3__16vectorIhNS_16secure_allocatorIhEEEEm: 390| 94|void OCB_Encryption::finish_msg(secure_vector& buffer, size_t offset) { 391| 94| assert_key_material_set(); 392| 94| BOTAN_STATE_CHECK(m_L->initialized()); ------------------ | | 51| 94| do { \ | | 52| 94| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 94| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 94] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 94| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 94] | | ------------------ ------------------ 393| | 394| 94| const size_t BS = block_size(); 395| | 396| 94| BOTAN_ARG_CHECK(buffer.size() >= offset, "Offset is out of range"); ------------------ | | 35| 94| do { \ | | 36| 94| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 94| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 94] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 94| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 94] | | ------------------ ------------------ 397| 94| const size_t sz = buffer.size() - offset; 398| 94| uint8_t* buf = buffer.data() + offset; 399| | 400| 94| secure_vector mac(BS); 401| | 402| 94| if(sz > 0) { ------------------ | Branch (402:7): [True: 94, False: 0] ------------------ 403| 94| const size_t final_full_blocks = sz / BS; 404| 94| const size_t remainder_bytes = sz - (final_full_blocks * BS); 405| | 406| 94| encrypt(buf, final_full_blocks); 407| 94| mac = m_L->offset(); 408| | 409| 94| if(remainder_bytes > 0) { ------------------ | Branch (409:10): [True: 46, False: 48] ------------------ 410| 46| BOTAN_ASSERT(remainder_bytes < BS, "Only a partial block left"); ------------------ | | 71| 46| do { \ | | 72| 46| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 46| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 46] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 46| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 46] | | ------------------ ------------------ 411| 46| uint8_t* remainder = &buf[sz - remainder_bytes]; 412| | 413| 46| xor_buf(m_checksum.data(), remainder, remainder_bytes); 414| 46| m_checksum[remainder_bytes] ^= 0x80; 415| | 416| | // Offset_* 417| 46| mac ^= m_L->star(); 418| | 419| 46| secure_vector pad(BS); 420| 46| m_cipher->encrypt(mac, pad); 421| 46| xor_buf(remainder, pad.data(), remainder_bytes); 422| 46| } 423| 94| } else { 424| 0| mac = m_L->offset(); 425| 0| } 426| | 427| | // now compute the tag 428| | 429| | // fold checksum 430| 1.59k| for(size_t i = 0; i != m_checksum.size(); i += BS) { ------------------ | Branch (430:22): [True: 1.50k, False: 94] ------------------ 431| 1.50k| xor_buf(mac.data(), m_checksum.data() + i, BS); 432| 1.50k| } 433| | 434| 94| xor_buf(mac.data(), m_L->dollar().data(), BS); 435| 94| m_cipher->encrypt(mac); 436| 94| xor_buf(mac.data(), m_ad_hash.data(), BS); 437| | 438| 94| buffer += std::make_pair(mac.data(), tag_size()); 439| | 440| 94| reset(); 441| 94|} _ZNK5Botan14OCB_Decryption13output_lengthEm: 443| 43|size_t OCB_Decryption::output_length(size_t input_length) const { 444| 43| BOTAN_ARG_CHECK(input_length >= tag_size(), "Message too short to be valid"); ------------------ | | 35| 43| do { \ | | 36| 43| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 43| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 43] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 43| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 43] | | ------------------ ------------------ 445| 43| return input_length - tag_size(); 446| 43|} _ZN5Botan14OCB_Decryption7decryptEPhm: 448| 42|void OCB_Decryption::decrypt(uint8_t buffer[], size_t blocks) { 449| 42| assert_key_material_set(); 450| 42| BOTAN_STATE_CHECK(m_L->initialized()); ------------------ | | 51| 42| do { \ | | 52| 42| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 42| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 42] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 42| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 42] | | ------------------ ------------------ 451| | 452| 42| const size_t BS = block_size(); 453| | 454| 249| while(blocks > 0) { ------------------ | Branch (454:10): [True: 207, False: 42] ------------------ 455| 207| const size_t proc_blocks = std::min(blocks, par_blocks()); 456| 207| const size_t proc_bytes = proc_blocks * BS; 457| | 458| 207| const uint8_t* offsets = m_L->compute_offsets(m_block_index, proc_blocks); 459| | 460| 207| xor_buf(buffer, offsets, proc_bytes); 461| 207| m_cipher->decrypt_n(buffer, buffer, proc_blocks); 462| 207| xor_buf(buffer, offsets, proc_bytes); 463| | 464| 207| xor_buf(m_checksum.data(), buffer, proc_bytes); 465| | 466| 207| buffer += proc_bytes; 467| 207| blocks -= proc_blocks; 468| 207| m_block_index += proc_blocks; 469| 207| } 470| 42|} _ZN5Botan14OCB_Decryption10finish_msgERNSt3__16vectorIhNS_16secure_allocatorIhEEEEm: 478| 43|void OCB_Decryption::finish_msg(secure_vector& buffer, size_t offset) { 479| 43| assert_key_material_set(); 480| 43| BOTAN_STATE_CHECK(m_L->initialized()); ------------------ | | 51| 43| do { \ | | 52| 43| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 43| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 43] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 43| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 43] | | ------------------ ------------------ 481| | 482| 43| const size_t BS = block_size(); 483| | 484| 43| BOTAN_ARG_CHECK(buffer.size() >= offset, "Offset is out of range"); ------------------ | | 35| 43| do { \ | | 36| 43| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 43| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 43] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 43| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 43] | | ------------------ ------------------ 485| 43| const size_t sz = buffer.size() - offset; 486| 43| uint8_t* buf = buffer.data() + offset; 487| | 488| 43| BOTAN_ARG_CHECK(sz >= tag_size(), "input did not include the tag"); ------------------ | | 35| 43| do { \ | | 36| 43| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 43| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 43] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 43| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 43] | | ------------------ ------------------ 489| | 490| 43| const size_t remaining = sz - tag_size(); 491| | 492| 43| secure_vector mac(BS); 493| | 494| 43| if(remaining > 0) { ------------------ | Branch (494:7): [True: 42, False: 1] ------------------ 495| 42| const size_t final_full_blocks = remaining / BS; 496| 42| const size_t final_bytes = remaining - (final_full_blocks * BS); 497| | 498| 42| decrypt(buf, final_full_blocks); 499| 42| mac ^= m_L->offset(); 500| | 501| 42| if(final_bytes > 0) { ------------------ | Branch (501:10): [True: 40, False: 2] ------------------ 502| 40| BOTAN_ASSERT(final_bytes < BS, "Only a partial block left"); ------------------ | | 71| 40| do { \ | | 72| 40| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 40| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 40] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 40| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 40] | | ------------------ ------------------ 503| | 504| 40| uint8_t* remainder = &buf[remaining - final_bytes]; 505| | 506| 40| mac ^= m_L->star(); 507| 40| secure_vector pad(BS); 508| 40| m_cipher->encrypt(mac, pad); // P_* 509| 40| xor_buf(remainder, pad.data(), final_bytes); 510| | 511| 40| xor_buf(m_checksum.data(), remainder, final_bytes); 512| 40| m_checksum[final_bytes] ^= 0x80; 513| 40| } 514| 42| } else { 515| 1| mac = m_L->offset(); 516| 1| } 517| | 518| | // compute the mac 519| | 520| | // fold checksum 521| 731| for(size_t i = 0; i != m_checksum.size(); i += BS) { ------------------ | Branch (521:22): [True: 688, False: 43] ------------------ 522| 688| xor_buf(mac.data(), m_checksum.data() + i, BS); 523| 688| } 524| | 525| 43| mac ^= m_L->dollar(); 526| 43| m_cipher->encrypt(mac); 527| 43| mac ^= m_ad_hash; 528| | 529| 43| reset(); 530| | 531| | // compare mac 532| 43| const uint8_t* included_tag = &buf[remaining]; 533| | 534| 43| if(!CT::is_equal(mac.data(), included_tag, tag_size()).as_bool()) { ------------------ | Branch (534:7): [True: 43, False: 0] ------------------ 535| 43| clear_mem(std::span{buffer}.subspan(offset, remaining)); 536| 43| throw Invalid_Authentication_Tag("OCB tag check failed"); 537| 43| } 538| | 539| | // remove tag from end of message 540| 0| buffer.resize(remaining + offset); 541| 0|} _ZN5Botan10L_computer5resetEv: 51| 231| void reset() { m_offset.clear(); } _ZNK5Botan10L_computer11initializedEv: 53| 547| bool initialized() const { return !m_offset.empty(); } ocb.cpp:_ZN5Botan12_GLOBAL__N_18ocb_hashERKNS_10L_computerERKNS_11BlockCipherEPKhm: 132| 137|secure_vector ocb_hash(const L_computer& L, const BlockCipher& cipher, const uint8_t ad[], size_t ad_len) { 133| 137| const size_t BS = cipher.block_size(); 134| 137| secure_vector sum(BS); 135| 137| secure_vector offset(BS); 136| | 137| 137| secure_vector buf(BS); 138| | 139| 137| const size_t ad_blocks = (ad_len / BS); 140| 137| const size_t ad_remainder = (ad_len % BS); 141| | 142| 137| for(size_t i = 0; i != ad_blocks; ++i) { ------------------ | Branch (142:22): [True: 0, False: 137] ------------------ 143| | // this loop could run in parallel 144| 0| offset ^= L.get(var_ctz64(i + 1)); 145| 0| buf = offset; 146| 0| xor_buf(buf.data(), &ad[BS * i], BS); 147| 0| cipher.encrypt(buf); 148| 0| sum ^= buf; 149| 0| } 150| | 151| 137| if(ad_remainder > 0) { ------------------ | Branch (151:7): [True: 137, False: 0] ------------------ 152| 137| offset ^= L.star(); 153| 137| buf = offset; 154| 137| xor_buf(buf.data(), &ad[BS * ad_blocks], ad_remainder); 155| 137| buf[ad_remainder] ^= 0x80; 156| 137| cipher.encrypt(buf); 157| 137| sum ^= buf; 158| 137| } 159| | 160| 137| return sum; 161| 137|} _ZNK5Botan10L_computer3getEm: 61| 1.35k| const secure_vector& get(size_t i) const { 62| 1.36k| while(m_L.size() <= i) { ------------------ | Branch (62:16): [True: 4, False: 1.35k] ------------------ 63| 4| m_L.push_back(poly_double(m_L.back())); 64| 4| } 65| | 66| 1.35k| return m_L[i]; 67| 1.35k| } _ZN5Botan10L_computer11poly_doubleERKNSt3__16vectorIhNS_16secure_allocatorIhEEEE: 114| 850| static secure_vector poly_double(const secure_vector& in) { 115| 850| secure_vector out(in.size()); 116| 850| poly_double_n(out.data(), in.data(), out.size()); 117| 850| return out; 118| 850| } _ZN5Botan10L_computer4initERKNSt3__16vectorIhNS_16secure_allocatorIhEEEE: 49| 137| void init(const secure_vector& offset) { m_offset = offset; } _ZN5Botan10L_computer15compute_offsetsEmm: 69| 255| const uint8_t* compute_offsets(uint64_t block_index, size_t blocks) { 70| 255| BOTAN_ASSERT(blocks <= m_max_blocks, "OCB offsets"); ------------------ | | 71| 255| do { \ | | 72| 255| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 255| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 255] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 255| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 255] | | ------------------ ------------------ 71| | 72| 255| uint8_t* offsets = m_offset_buf.data(); 73| | 74| 255| if(block_index % 4 == 0) { ------------------ | Branch (74:13): [True: 255, False: 0] ------------------ 75| 255| const secure_vector& L0 = get(0); 76| 255| const secure_vector& L1 = get(1); 77| | 78| 988| while(blocks >= 4) { ------------------ | Branch (78:19): [True: 733, False: 255] ------------------ 79| | // ntz(4*i+1) == 0 80| | // ntz(4*i+2) == 1 81| | // ntz(4*i+3) == 0 82| 733| block_index += 4; 83| 733| const size_t ntz4 = var_ctz64(block_index); 84| | 85| 733| xor_buf(offsets, m_offset.data(), L0.data(), m_BS); 86| 733| offsets += m_BS; 87| | 88| 733| xor_buf(offsets, offsets - m_BS, L1.data(), m_BS); 89| 733| offsets += m_BS; 90| | 91| 733| xor_buf(m_offset.data(), L1.data(), m_BS); 92| 733| copy_mem(offsets, m_offset.data(), m_BS); 93| 733| offsets += m_BS; 94| | 95| 733| xor_buf(m_offset.data(), get(ntz4).data(), m_BS); 96| 733| copy_mem(offsets, m_offset.data(), m_BS); 97| 733| offsets += m_BS; 98| | 99| 733| blocks -= 4; 100| 733| } 101| 255| } 102| | 103| 369| for(size_t i = 0; i != blocks; ++i) { // could be done in parallel ------------------ | Branch (103:28): [True: 114, False: 255] ------------------ 104| 114| const size_t ntz = var_ctz64(block_index + i + 1); 105| 114| xor_buf(m_offset.data(), get(ntz).data(), m_BS); 106| 114| copy_mem(offsets, m_offset.data(), m_BS); 107| 114| offsets += m_BS; 108| 114| } 109| | 110| 255| return m_offset_buf.data(); 111| 255| } _ZNK5Botan10L_computer6offsetEv: 59| 137| const secure_vector& offset() const { return m_offset; } _ZNK5Botan10L_computer4starEv: 55| 317| const secure_vector& star() const { return m_L_star; } _ZNK5Botan10L_computer6dollarEv: 57| 231| const secure_vector& dollar() const { return m_L_dollar; } _ZN5Botan10L_computerC2ERKNS_11BlockCipherE: 25| 94| m_BS(cipher.block_size()), m_max_blocks(cipher.parallel_bytes() / m_BS) { 26| 94| m_L_star.resize(m_BS); 27| 94| cipher.encrypt(m_L_star); 28| 94| m_L_dollar = poly_double(star()); 29| | 30| | // Preallocate the m_L vector to the maximum expected size to avoid 31| | // re-allocations during runtime. This had caused a use-after-free in 32| | // earlier versions, due to references into this buffer becoming stale 33| | // in `compute_offset()`, after calling `get()` in the hot path. 34| | // 35| | // Note, that the list member won't be pre-allocated, so the expected 36| | // memory overhead is negligible. 37| | // 38| | // See also https://github.com/randombit/botan/issues/3812 39| 94| m_L.reserve(65); 40| 94| m_L.push_back(poly_double(dollar())); 41| | 42| 752| while(m_L.size() < 8) { ------------------ | Branch (42:16): [True: 658, False: 94] ------------------ 43| 658| m_L.push_back(poly_double(m_L.back())); 44| 658| } 45| | 46| 94| m_offset_buf.resize(m_BS * m_max_blocks); 47| 94| } _ZN5Botan8CBC_ModeC2ENSt3__110unique_ptrINS_11BlockCipherENS1_14default_deleteIS3_EEEENS2_INS_28BlockCipherModePaddingMethodENS4_IS7_EEEE: 21| 273| m_cipher(std::move(cipher)), m_padding(std::move(padding)), m_block_size(m_cipher->block_size()) { 22| 273| if(m_padding && !m_padding->valid_blocksize(m_block_size)) { ------------------ | Branch (22:7): [True: 273, False: 0] | Branch (22:20): [True: 0, False: 273] ------------------ 23| 0| throw Invalid_Argument(fmt("Padding {} cannot be used with {} in CBC mode", m_padding->name(), m_cipher->name())); 24| 0| } 25| 273|} _ZNK5Botan8CBC_Mode17ideal_granularityEv: 48| 105|size_t CBC_Mode::ideal_granularity() const { 49| 105| return cipher().parallel_bytes(); 50| 105|} _ZNK5Botan8CBC_Mode8key_specEv: 52| 273|Key_Length_Specification CBC_Mode::key_spec() const { 53| 273| return cipher().key_spec(); 54| 273|} _ZNK5Botan8CBC_Mode18valid_nonce_lengthEm: 60| 393|bool CBC_Mode::valid_nonce_length(size_t n) const { 61| 393| return (n == 0 || n == block_size()); ------------------ | Branch (61:12): [True: 0, False: 393] | Branch (61:22): [True: 393, False: 0] ------------------ 62| 393|} _ZN5Botan8CBC_Mode12key_scheduleENSt3__14spanIKhLm18446744073709551615EEE: 68| 273|void CBC_Mode::key_schedule(std::span key) { 69| 273| m_cipher->set_key(key); 70| 273| m_state.clear(); 71| 273|} _ZN5Botan8CBC_Mode9start_msgEPKhm: 73| 393|void CBC_Mode::start_msg(const uint8_t nonce[], size_t nonce_len) { 74| 393| if(!valid_nonce_length(nonce_len)) { ------------------ | Branch (74:7): [True: 0, False: 393] ------------------ 75| 0| throw Invalid_IV_Length(name(), nonce_len); 76| 0| } 77| | 78| | /* 79| | * A nonce of zero length means carry the last ciphertext value over 80| | * as the new IV, as unfortunately some protocols require this. If 81| | * this is the first message then we use an IV of all zeros. 82| | */ 83| 393| if(nonce_len > 0) { ------------------ | Branch (83:7): [True: 393, False: 0] ------------------ 84| 393| m_state.assign(nonce, nonce + nonce_len); 85| 393| } else if(m_state.empty()) { ------------------ | Branch (85:14): [True: 0, False: 0] ------------------ 86| 0| m_state.resize(m_cipher->block_size()); 87| 0| } 88| | // else leave the state alone 89| 393|} _ZN5Botan14CBC_Encryption11process_msgEPhm: 99| 315|size_t CBC_Encryption::process_msg(uint8_t buf[], size_t sz) { 100| 315| BOTAN_STATE_CHECK(state().empty() == false); ------------------ | | 51| 315| do { \ | | 52| 315| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 315| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 315] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 315| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 315] | | ------------------ ------------------ 101| 315| const size_t BS = block_size(); 102| | 103| 315| BOTAN_ARG_CHECK(sz % BS == 0, "CBC input is not full blocks"); ------------------ | | 35| 315| do { \ | | 36| 315| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 315| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 315] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 315| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 315] | | ------------------ ------------------ 104| 315| const size_t blocks = sz / BS; 105| | 106| 315| if(blocks > 0) { ------------------ | Branch (106:7): [True: 315, False: 0] ------------------ 107| 315| xor_buf(&buf[0], state_ptr(), BS); 108| 315| cipher().encrypt(&buf[0]); 109| | 110| 1.20k| for(size_t i = 1; i != blocks; ++i) { ------------------ | Branch (110:25): [True: 886, False: 315] ------------------ 111| 886| xor_buf(&buf[BS * i], &buf[BS * (i - 1)], BS); 112| 886| cipher().encrypt(&buf[BS * i]); 113| 886| } 114| | 115| 315| state().assign(&buf[BS * (blocks - 1)], &buf[BS * blocks]); 116| 315| } 117| | 118| 315| return sz; 119| 315|} _ZN5Botan14CBC_Decryption11process_msgEPhm: 202| 78|size_t CBC_Decryption::process_msg(uint8_t buf[], size_t sz) { 203| 78| BOTAN_STATE_CHECK(state().empty() == false); ------------------ | | 51| 78| do { \ | | 52| 78| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 78| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 78] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 78| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 78] | | ------------------ ------------------ 204| | 205| 78| const size_t BS = block_size(); 206| | 207| 78| BOTAN_ARG_CHECK(sz % BS == 0, "Input is not full blocks"); ------------------ | | 35| 78| do { \ | | 36| 78| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 78| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 78] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 78| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 78] | | ------------------ ------------------ 208| 78| size_t blocks = sz / BS; 209| | 210| 347| while(blocks > 0) { ------------------ | Branch (210:10): [True: 269, False: 78] ------------------ 211| 269| const size_t to_proc = std::min(BS * blocks, m_tempbuf.size()); 212| | 213| 269| cipher().decrypt_n(buf, m_tempbuf.data(), to_proc / BS); 214| | 215| 269| xor_buf(m_tempbuf.data(), state_ptr(), BS); 216| 269| xor_buf(&m_tempbuf[BS], buf, to_proc - BS); 217| 269| copy_mem(state_ptr(), buf + (to_proc - BS), BS); 218| | 219| 269| copy_mem(buf, m_tempbuf.data(), to_proc); 220| | 221| 269| buf += to_proc; 222| 269| blocks -= to_proc / BS; 223| 269| } 224| | 225| 78| return sz; 226| 78|} _ZNK5Botan12EME_PKCS1v153padENSt3__14spanIhLm18446744073709551615EEENS2_IKhLm18446744073709551615EEEmRNS_21RandomNumberGeneratorE: 24| 36| RandomNumberGenerator& rng) const { 25| 36| key_length /= 8; 26| | 27| 36| if(input.size() > maximum_input_size(key_length * 8)) { ------------------ | Branch (27:7): [True: 0, False: 36] ------------------ 28| 0| throw Invalid_Argument("PKCS1: Input is too large"); 29| 0| } 30| | 31| 36| BufferStuffer stuffer(output); 32| | 33| 36| const size_t padding_bytes = [&]() { 34| 36| auto d = checked_sub(key_length, input.size() + 2); 35| 36| BOTAN_ASSERT_NOMSG(d.has_value()); 36| 36| return *d; 37| 36| }(); 38| | 39| 36| stuffer.append(0x02); 40| 7.44k| for(size_t i = 0; i != padding_bytes; ++i) { ------------------ | Branch (40:22): [True: 7.40k, False: 36] ------------------ 41| 7.40k| stuffer.append(rng.next_nonzero_byte()); 42| 7.40k| } 43| 36| stuffer.append(0x00); 44| 36| stuffer.append(input); 45| | 46| 36| return output.size() - stuffer.remaining_capacity(); 47| 36|} _ZNK5Botan12EME_PKCS1v1518maximum_input_sizeEm: 97| 36|size_t EME_PKCS1v15::maximum_input_size(size_t keybits) const { 98| 36| if(keybits / 8 > 10) { ------------------ | Branch (98:7): [True: 36, False: 0] ------------------ 99| 36| return ((keybits / 8) - 10); 100| 36| } else { 101| 0| return 0; 102| 0| } 103| 36|} eme_pkcs.cpp:_ZZNK5Botan12EME_PKCS1v153padENSt3__14spanIhLm18446744073709551615EEENS2_IKhLm18446744073709551615EEEmRNS_21RandomNumberGeneratorEENK3$_0clEv: 33| 36| const size_t padding_bytes = [&]() { 34| 36| auto d = checked_sub(key_length, input.size() + 2); 35| 36| BOTAN_ASSERT_NOMSG(d.has_value()); ------------------ | | 84| 36| do { \ | | 85| 36| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 36| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 36] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 36| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 36] | | ------------------ ------------------ 36| 36| return *d; 37| 36| }(); _ZN5Botan23EncryptionPaddingScheme15create_or_throwERKNS_28PK_Encryption_Options_ReaderE: 27| 36| const PK_Encryption_Options_Reader& options) { 28| | // Encrypting without padding is dangerous, so it must be requested explicitly 29| 36| if(!options.using_padding()) { ------------------ | Branch (29:7): [True: 0, False: 36] ------------------ 30| 0| throw Lookup_Error("Public key encryption requires specifying a padding scheme"); 31| 0| } 32| | 33| 36| const std::string& padding = options.padding().value(); 34| | 35| | // Any option not examined by the selected scheme is rejected by the caller 36| | 37| 36|#if defined(BOTAN_HAS_EME_RAW) 38| 36| if(padding == "Raw") { ------------------ | Branch (38:7): [True: 0, False: 36] ------------------ 39| 0| return std::make_unique(); 40| 0| } 41| 36|#endif 42| | 43| 36|#if defined(BOTAN_HAS_EME_PKCS1) 44| 36| if(padding == "PKCS1v15") { ------------------ | Branch (44:7): [True: 36, False: 0] ------------------ 45| 36| return std::make_unique(); 46| 36| } 47| 0|#endif 48| | 49| 0|#if defined(BOTAN_HAS_EME_OAEP) 50| 0| if(padding == "OAEP") { ------------------ | Branch (50:7): [True: 0, False: 0] ------------------ 51| 0| return std::make_unique(options); 52| 0| } 53| 0|#endif 54| | 55| 0| throw Lookup_Error("Invalid or unavailable encryption padding scheme " + options.to_string()); 56| 0|} _ZN5Botan23EncryptionPaddingSchemeD2Ev: 58| 36|EncryptionPaddingScheme::~EncryptionPaddingScheme() = default; _ZN5Botan12pkcs_hash_idENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEE: 78| 540|std::vector pkcs_hash_id(std::string_view name) { 79| | // Special case for SSL/TLS RSA signatures 80| 540| if(name == "Parallel(MD5,SHA-1)") { ------------------ | Branch (80:7): [True: 0, False: 540] ------------------ 81| 0| return std::vector(); 82| 0| } 83| | 84| | // If you add a value to this function, also update test_hash_id.cpp 85| | 86| 540| if(name == "MD5") { ------------------ | Branch (86:7): [True: 0, False: 540] ------------------ 87| 0| return std::vector(MD5_PKCS_ID, MD5_PKCS_ID + sizeof(MD5_PKCS_ID)); 88| 0| } 89| | 90| 540| if(name == "RIPEMD-160") { ------------------ | Branch (90:7): [True: 0, False: 540] ------------------ 91| 0| return std::vector(RIPEMD_160_PKCS_ID, RIPEMD_160_PKCS_ID + sizeof(RIPEMD_160_PKCS_ID)); 92| 0| } 93| | 94| 540| if(name == "SHA-1") { ------------------ | Branch (94:7): [True: 0, False: 540] ------------------ 95| 0| return std::vector(SHA_1_PKCS_ID, SHA_1_PKCS_ID + sizeof(SHA_1_PKCS_ID)); 96| 0| } 97| | 98| 540| if(name == "SHA-224") { ------------------ | Branch (98:7): [True: 0, False: 540] ------------------ 99| 0| return std::vector(SHA_224_PKCS_ID, SHA_224_PKCS_ID + sizeof(SHA_224_PKCS_ID)); 100| 0| } 101| | 102| 540| if(name == "SHA-256") { ------------------ | Branch (102:7): [True: 7, False: 533] ------------------ 103| 7| return std::vector(SHA_256_PKCS_ID, SHA_256_PKCS_ID + sizeof(SHA_256_PKCS_ID)); 104| 7| } 105| | 106| 533| if(name == "SHA-384") { ------------------ | Branch (106:7): [True: 5, False: 528] ------------------ 107| 5| return std::vector(SHA_384_PKCS_ID, SHA_384_PKCS_ID + sizeof(SHA_384_PKCS_ID)); 108| 5| } 109| | 110| 528| if(name == "SHA-512") { ------------------ | Branch (110:7): [True: 528, False: 0] ------------------ 111| 528| return std::vector(SHA_512_PKCS_ID, SHA_512_PKCS_ID + sizeof(SHA_512_PKCS_ID)); 112| 528| } 113| | 114| 0| if(name == "SHA-512-256") { ------------------ | Branch (114:7): [True: 0, False: 0] ------------------ 115| 0| return std::vector(SHA_512_256_PKCS_ID, SHA_512_256_PKCS_ID + sizeof(SHA_512_256_PKCS_ID)); 116| 0| } 117| | 118| 0| if(name == "SHA-3(224)") { ------------------ | Branch (118:7): [True: 0, False: 0] ------------------ 119| 0| return std::vector(SHA3_224_PKCS_ID, SHA3_224_PKCS_ID + sizeof(SHA3_224_PKCS_ID)); 120| 0| } 121| | 122| 0| if(name == "SHA-3(256)") { ------------------ | Branch (122:7): [True: 0, False: 0] ------------------ 123| 0| return std::vector(SHA3_256_PKCS_ID, SHA3_256_PKCS_ID + sizeof(SHA3_256_PKCS_ID)); 124| 0| } 125| | 126| 0| if(name == "SHA-3(384)") { ------------------ | Branch (126:7): [True: 0, False: 0] ------------------ 127| 0| return std::vector(SHA3_384_PKCS_ID, SHA3_384_PKCS_ID + sizeof(SHA3_384_PKCS_ID)); 128| 0| } 129| | 130| 0| if(name == "SHA-3(512)") { ------------------ | Branch (130:7): [True: 0, False: 0] ------------------ 131| 0| return std::vector(SHA3_512_PKCS_ID, SHA3_512_PKCS_ID + sizeof(SHA3_512_PKCS_ID)); 132| 0| } 133| | 134| 0| if(name == "SM3") { ------------------ | Branch (134:7): [True: 0, False: 0] ------------------ 135| 0| return std::vector(SM3_PKCS_ID, SM3_PKCS_ID + sizeof(SM3_PKCS_ID)); 136| 0| } 137| | 138| 0| throw Invalid_Argument("No PKCS #1 identifier for " + std::string(name)); 139| 0|} _ZN5Botan9mgf1_maskERNS_12HashFunctionENSt3__14spanIKhLm18446744073709551615EEENS3_IhLm18446744073709551615EEE: 15| 7|void mgf1_mask(HashFunction& hash, std::span input, std::span output) { 16| 7| uint32_t counter = 0; 17| | 18| 7| const size_t hlen = hash.output_length(); 19| | 20| 7| BOTAN_ASSERT_NOMSG(hlen > 0); ------------------ | | 84| 7| do { \ | | 85| 7| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 7| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 7] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 7| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 7] | | ------------------ ------------------ 21| | 22| 7| std::vector buffer(hlen); 23| 40| while(!output.empty()) { ------------------ | Branch (23:10): [True: 33, False: 7] ------------------ 24| 33| hash.update(input); 25| 33| hash.update_be(counter); 26| 33| hash.final(buffer); 27| | 28| 33| const size_t xored = std::min(buffer.size(), output.size()); 29| 33| xor_buf(output.first(xored), std::span{buffer}.first(xored)); 30| 33| output = output.subspan(xored); 31| | 32| 33| ++counter; 33| 33| } 34| 7|} _ZN5Botan31PKCS1v15_SignaturePaddingScheme6updateEPKhm: 48| 540|void PKCS1v15_SignaturePaddingScheme::update(const uint8_t input[], size_t length) { 49| 540| m_hash->update(input, length); 50| 540|} _ZN5Botan31PKCS1v15_SignaturePaddingScheme8raw_dataEv: 52| 540|std::vector PKCS1v15_SignaturePaddingScheme::raw_data() { 53| 540| return m_hash->final_stdvec(); 54| 540|} _ZN5Botan31PKCS1v15_SignaturePaddingScheme6verifyENSt3__14spanIKhLm18446744073709551615EEES4_m: 68| 334| size_t key_bits) { 69| 334| if(raw.size() != m_hash->output_length()) { ------------------ | Branch (69:7): [True: 0, False: 334] ------------------ 70| 0| return false; 71| 0| } 72| | 73| 334| try { 74| 334| const auto pkcs1 = pkcs1v15_sig_encoding(raw, key_bits, m_hash_id); 75| 334| return constant_time_compare(coded, pkcs1); 76| 334| } catch(...) { 77| 0| return false; 78| 0| } 79| 334|} _ZN5Botan31PKCS1v15_SignaturePaddingSchemeC2ERKNS_27PK_Signature_Options_ReaderE: 82| 540| m_hash(HashFunction::create_or_throw(options.hash_function_name())) { 83| 540| acknowledge_always_deterministic(options); 84| 540| m_hash_id = pkcs_hash_id(m_hash->name()); 85| 540|} pkcs1_sig_padding.cpp:_ZN5Botan12_GLOBAL__N_121pkcs1v15_sig_encodingENSt3__14spanIKhLm18446744073709551615EEEmS4_: 26| 334| std::span hash_id) { 27| 334| const size_t output_length = output_bits / 8; 28| | 29| 334| if(output_length < hash_id.size() + msg.size() + 2 + 8) { ------------------ | Branch (29:7): [True: 0, False: 334] ------------------ 30| 0| throw Encoding_Error("pkcs1v15_sig_encoding: Output length is too small"); 31| 0| } 32| | 33| 334| std::vector padded(output_length); 34| 334| BufferStuffer stuffer(padded); 35| | 36| 334| stuffer.append(0x01); 37| 334| stuffer.append(0xFF, stuffer.remaining_capacity() - (1 + hash_id.size() + msg.size())); 38| 334| stuffer.append(0x00); 39| 334| stuffer.append(hash_id); 40| 334| stuffer.append(msg); 41| 334| BOTAN_ASSERT_NOMSG(stuffer.full()); ------------------ | | 84| 334| do { \ | | 85| 334| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 334| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 334] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 334| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 334] | | ------------------ ------------------ 42| | 43| 334| return padded; 44| 334|} _ZN5Botan4PSSRC2ERKNS_27PK_Signature_Options_ReaderE: 152| 29| m_hash(HashFunction::create_or_throw(options.hash_function_name())), 153| 29| m_salt_size(options.salt_size().value_or(m_hash->output_length())), 154| 29| m_required_salt_len(options.using_salt_size()) { 155| 29| if(options.using_deterministic_signature() && m_salt_size > 0) { ------------------ | Branch (155:7): [True: 0, False: 29] | Branch (155:50): [True: 0, False: 0] ------------------ 156| 0| throw Invalid_Argument("PSS with a non-zero salt cannot produce deterministic signatures"); 157| 0| } 158| 29|} _ZN5Botan4PSSR6updateEPKhm: 163| 29|void PSSR::update(const uint8_t input[], size_t length) { 164| 29| m_hash->update(input, length); 165| 29|} _ZN5Botan4PSSR8raw_dataEv: 170| 29|std::vector PSSR::raw_data() { 171| 29| return m_hash->final_stdvec(); 172| 29|} _ZN5Botan4PSSR6verifyENSt3__14spanIKhLm18446744073709551615EEES4_m: 182| 17|bool PSSR::verify(std::span coded, std::span raw, size_t key_bits) { 183| 17| size_t salt_size = 0; 184| 17| const bool ok = pss_verify(*m_hash, coded, raw, key_bits, &salt_size); 185| | 186| 17| if(m_required_salt_len && salt_size != m_salt_size) { ------------------ | Branch (186:7): [True: 17, False: 0] | Branch (186:30): [True: 17, False: 0] ------------------ 187| 17| return false; 188| 17| } 189| | 190| 0| return ok; 191| 17|} pssr.cpp:_ZN5Botan12_GLOBAL__N_110pss_verifyERNS_12HashFunctionENSt3__14spanIKhLm18446744073709551615EEES6_mPm: 72| 17| size_t* out_salt_size) { 73| 17| const size_t HASH_SIZE = hash.output_length(); 74| 17| const size_t key_bytes = ceil_tobytes(key_bits); 75| | 76| 17| if(key_bits < 8 * HASH_SIZE + 9) { ------------------ | Branch (76:7): [True: 0, False: 17] ------------------ 77| 0| return false; 78| 0| } 79| | 80| 17| if(message_hash.size() != HASH_SIZE) { ------------------ | Branch (80:7): [True: 0, False: 17] ------------------ 81| 0| return false; 82| 0| } 83| | 84| 17| if(pss_repr.size() > key_bytes || pss_repr.size() <= 1) { ------------------ | Branch (84:7): [True: 0, False: 17] | Branch (84:38): [True: 1, False: 16] ------------------ 85| 1| return false; 86| 1| } 87| | 88| 16| if(pss_repr[pss_repr.size() - 1] != 0xBC) { ------------------ | Branch (88:7): [True: 8, False: 8] ------------------ 89| 8| return false; 90| 8| } 91| | 92| 8| std::vector coded; 93| 8| if(pss_repr.size() < key_bytes) { ------------------ | Branch (93:7): [True: 1, False: 7] ------------------ 94| 1| coded.resize(key_bytes); 95| 1| BufferStuffer stuffer(coded); 96| 1| stuffer.append(0x00, key_bytes - pss_repr.size()); 97| 1| stuffer.append(pss_repr); 98| 7| } else { 99| 7| coded.assign(pss_repr.begin(), pss_repr.end()); 100| 7| } 101| | 102| | // We have to check this after potential zero padding above 103| 8| const size_t top_bits = 8 * ((key_bits + 7) / 8) - key_bits; 104| 8| if(top_bits > 8 - high_bit(coded[0])) { ------------------ | Branch (104:7): [True: 1, False: 7] ------------------ 105| 1| return false; 106| 1| } 107| | 108| 7| uint8_t* DB = coded.data(); 109| 7| const size_t DB_size = coded.size() - HASH_SIZE - 1; 110| | 111| 7| const uint8_t* H = &coded[DB_size]; 112| 7| const size_t H_size = HASH_SIZE; 113| | 114| 7| mgf1_mask(hash, {H, H_size}, {DB, DB_size}); 115| 7| DB[0] &= 0xFF >> top_bits; 116| | 117| 7| size_t salt_offset = 0; 118| 8| for(size_t j = 0; j != DB_size; ++j) { ------------------ | Branch (118:22): [True: 8, False: 0] ------------------ 119| 8| if(DB[j] == 0x01) { ------------------ | Branch (119:10): [True: 3, False: 5] ------------------ 120| 3| salt_offset = j + 1; 121| 3| break; 122| 3| } 123| 5| if(DB[j] != 0x00) { ------------------ | Branch (123:10): [True: 4, False: 1] ------------------ 124| 4| return false; 125| 4| } 126| 5| } 127| 3| if(salt_offset == 0) { ------------------ | Branch (127:7): [True: 0, False: 3] ------------------ 128| 0| return false; 129| 0| } 130| | 131| 3| const size_t salt_size = DB_size - salt_offset; 132| | 133| 3| std::array padding = {0}; 134| 3| hash.update(padding); 135| 3| hash.update(message_hash); 136| 3| hash.update(&DB[salt_offset], salt_size); 137| | 138| 3| const std::vector H2 = hash.final_stdvec(); 139| | 140| 3| const bool ok = CT::is_equal(H, H2.data(), HASH_SIZE).as_bool(); 141| | 142| 3| if(ok && out_salt_size != nullptr) { ------------------ | Branch (142:7): [True: 0, False: 3] | Branch (142:13): [True: 0, False: 0] ------------------ 143| 0| *out_salt_size = salt_size; 144| 0| } 145| | 146| 3| return ok; 147| 3|} _ZN5Botan22SignaturePaddingScheme15create_or_throwERKNS_27PK_Signature_Options_ReaderE: 37| 569| const PK_Signature_Options_Reader& options) { 38| | // Signing without padding is dangerous, so it must be requested explicitly 39| 569| if(!options.using_padding()) { ------------------ | Branch (39:7): [True: 0, False: 569] ------------------ 40| 0| throw Lookup_Error("RSA signatures require specifying a padding scheme"); 41| 0| } 42| | 43| 569| const std::string padding = options.padding().value(); 44| | 45| 569| if(padding == "Raw") { ------------------ | Branch (45:7): [True: 0, False: 569] ------------------ 46| 0|#if defined(BOTAN_HAS_EMSA_RAW) 47| | // Raw padding signs the input directly, so no hash function is involved 48| 0| return std::make_unique(options); 49| 0|#endif 50| 569| } else { 51| 569|#if defined(BOTAN_HAS_EMSA_PKCS1) 52| | // PKCS1v15 can also sign a digest the caller computed 53| 569| if(padding == "PKCS1v15" && options.using_externally_computed_prehash()) { ------------------ | Branch (53:10): [True: 540, False: 29] | Branch (53:35): [True: 0, False: 540] ------------------ 54| 0| return std::make_unique(options); 55| 0| } 56| 569|#endif 57| | 58| 569| if(!options.using_hash()) { ------------------ | Branch (58:10): [True: 0, False: 569] ------------------ 59| 0| throw Lookup_Error(fmt("RSA/{} signatures require specifying a hash function", padding)); 60| 0| } 61| | 62| 569| const std::string& hash_fn = options.hash_function_name(); 63| 569| const bool hash_available = HashFunction::create(hash_fn) != nullptr; 64| | 65| 569|#if defined(BOTAN_HAS_EMSA_PKCS1) 66| 569| if(padding == "PKCS1v15" && hash_available) { ------------------ | Branch (66:10): [True: 540, False: 29] | Branch (66:35): [True: 540, False: 0] ------------------ 67| 540| return std::make_unique(options); 68| 540| } 69| 29|#endif 70| | 71| 29|#if defined(BOTAN_HAS_PSS) 72| 29| if(padding == "PSS_Raw" && hash_available) { ------------------ | Branch (72:10): [True: 0, False: 29] | Branch (72:34): [True: 0, False: 0] ------------------ 73| 0| return std::make_unique(options); 74| 0| } 75| | 76| 29| if(padding == "PSS" && hash_available) { ------------------ | Branch (76:10): [True: 29, False: 0] | Branch (76:30): [True: 29, False: 0] ------------------ 77| 29| return std::make_unique(options); 78| 29| } 79| 0|#endif 80| | 81| 0|#if defined(BOTAN_HAS_ISO_9796) 82| 0| if(padding == "ISO_9796_DS2" && hash_available) { ------------------ | Branch (82:10): [True: 0, False: 0] | Branch (82:39): [True: 0, False: 0] ------------------ 83| 0| return std::make_unique(options); 84| 0| } 85| | 86| 0| if(padding == "ISO_9796_DS3" && hash_available) { ------------------ | Branch (86:10): [True: 0, False: 0] | Branch (86:39): [True: 0, False: 0] ------------------ 87| 0| return std::make_unique(options); 88| 0| } 89| 0|#endif 90| | 91| 0|#if defined(BOTAN_HAS_EMSA_X931) 92| 0| if(padding == "X9.31" && hash_available) { ------------------ | Branch (92:10): [True: 0, False: 0] | Branch (92:32): [True: 0, False: 0] ------------------ 93| 0| return std::make_unique(options); 94| 0| } 95| 0|#endif 96| 0| } 97| | 98| 0| throw Lookup_Error("Invalid or unavailable signature padding scheme " + options.to_string()); 99| 569|} _ZN5Botan7BlinderC2ERKNS_17Barrett_ReductionERNS_21RandomNumberGeneratorENSt3__18functionIFNS_6BigIntERKS8_EEESC_: 16| 272| m_reducer(reducer), 17| 272| m_rng(rng), 18| 272| m_fwd_fn(std::move(fwd)), 19| 272| m_inv_fn(std::move(inv)), 20| 272| m_modulus_bits(reducer.modulus_bits()), 21| 272| m_counter{} { 22| 272| const BigInt k = blinding_nonce(); 23| 272| m_e = m_fwd_fn(k); 24| 272| m_d = m_inv_fn(k); 25| 272|} _ZNK5Botan7Blinder14blinding_nonceEv: 27| 272|BigInt Blinder::blinding_nonce() const { 28| 272| return BigInt(m_rng, m_modulus_bits - 1); 29| 272|} _ZNK5Botan7Blinder5blindERKNS_6BigIntE: 31| 272|BigInt Blinder::blind(const BigInt& i) const { 32| 272| ++m_counter; 33| | 34| 272| if((ReinitInterval > 0) && (m_counter > ReinitInterval)) { ------------------ | Branch (34:7): [True: 272, Folded] | Branch (34:31): [True: 0, False: 272] ------------------ 35| 0| const BigInt k = blinding_nonce(); 36| 0| m_e = m_fwd_fn(k); 37| 0| m_d = m_inv_fn(k); 38| 0| m_counter = 0; 39| 272| } else { 40| 272| m_e = m_reducer.square(m_e); 41| 272| m_d = m_reducer.square(m_d); 42| 272| } 43| | 44| 272| return m_reducer.multiply(i, m_e); 45| 272|} _ZNK5Botan7Blinder7unblindERKNS_6BigIntE: 47| 272|BigInt Blinder::unblind(const BigInt& i) const { 48| 272| return m_reducer.multiply(i, m_d); 49| 272|} _ZN5Botan31ed25519_basepoint_mul_to_x25519ENSt3__14spanIhLm32EEERKNS_14Ed25519_ScalarE: 634| 10|void ed25519_basepoint_mul_to_x25519(std::span out, const Ed25519_Scalar& scalar) { 635| 10| const auto h = basepoint_mul(scalar); 636| | 637| | /* 638| | * The birational map from the twisted Edwards curve to Curve25519 sends 639| | * (x, y) to u = (1 + y) / (1 - y) (RFC 7748 Section 4.1), which for a 640| | * projective point (X : Y : Z) is (Z + Y) / (Z - Y). The map sends the 641| | * Ed25519 base point to u = 9, so this is the X25519 public key for the 642| | * scalar. 643| | * 644| | * The only point with Z == Y is the identity, where the inversion of zero 645| | * returns zero and so u == 0, matching what the Montgomery ladder produces 646| | * for the identity. A clamped X25519 scalar is never zero mod l so this 647| | * cannot happen for X25519 anyway. 648| | */ 649| 10| const auto u = (h.Z + h.Y) * (h.Z - h.Y).invert(); 650| 10| u.serialize_to(out); 651| 10| CT::unpoison(out); 652| 10|} ed25519_ge.cpp:_ZN5Botan12_GLOBAL__N_113basepoint_mulERKNS_14Ed25519_ScalarE: 582| 10|Ed25519_Point_Extended basepoint_mul(const Ed25519_Scalar& scalar) { 583| 10| static const std::array, 32> B_precomp = ed25519_base_precomp(); 584| | 585| 10| const auto a = scalar.to_bytes(); 586| | 587| 10| std::array e{}; 588| | 589| 10| CT::poison(a.data(), a.size()); 590| | 591| | // each e[i] is between 0 and 15 except e[63] which is between 0 and 7 592| 330| for(size_t i = 0; i != 32; ++i) { ------------------ | Branch (592:22): [True: 320, False: 10] ------------------ 593| 320| e[2 * i + 0] = (a[i] >> 0) & 0x0F; 594| 320| e[2 * i + 1] = (a[i] >> 4) & 0x0F; 595| 320| } 596| | 597| 10| int8_t carry = 0; 598| 640| for(size_t i = 0; i < 63; ++i) { ------------------ | Branch (598:22): [True: 630, False: 10] ------------------ 599| 630| e[i] += carry; 600| 630| carry = e[i] + 8; 601| 630| carry >>= 4; 602| 630| e[i] -= carry << 4; 603| 630| } 604| 10| e[63] += carry; 605| | /* each e[i] is between -8 and 8 */ 606| | 607| 10| auto h = Ed25519_Point_Extended::identity(); 608| 330| for(size_t i = 1; i < 64; i += 2) { ------------------ | Branch (608:22): [True: 320, False: 10] ------------------ 609| 320| h = Ed25519_Point_Extended::from(h + select(B_precomp[i / 2].data(), e[i])); 610| 320| } 611| | 612| 10| auto s = Ed25519_Point_Projective::from(h.dbl()); 613| 10| s = Ed25519_Point_Projective::from(s.dbl()); 614| 10| s = Ed25519_Point_Projective::from(s.dbl()); 615| 10| h = Ed25519_Point_Extended::from(s.dbl()); 616| | 617| 330| for(size_t i = 0; i != 64; i += 2) { ------------------ | Branch (617:22): [True: 320, False: 10] ------------------ 618| 320| h = Ed25519_Point_Extended::from(h + select(B_precomp[i / 2].data(), e[i])); 619| 320| } 620| | 621| 10| CT::unpoison(a.data(), a.size()); 622| | 623| 10| return h; 624| 10|} ed25519_ge.cpp:_ZN5Botan12_GLOBAL__N_120ed25519_base_precompEv: 360| 1|std::array, 32> ed25519_base_precomp() { 361| 1| constexpr size_t PTS = 32 * 8; 362| | 363| 1| auto pts_storage = std::make_unique>(); 364| 1| auto& pts = *pts_storage; 365| | 366| 1| auto base = ed25519_basepoint(); 367| 33| for(size_t i = 0; i != 32; ++i) { ------------------ | Branch (367:22): [True: 32, False: 1] ------------------ 368| 32| pts[8 * i] = base; 369| 32| const auto base_c = Ed25519_Point_Cached::from(base); 370| 256| for(size_t j = 1; j != 8; ++j) { ------------------ | Branch (370:25): [True: 224, False: 32] ------------------ 371| 224| pts[8 * i + j] = Ed25519_Point_Extended::from(pts[8 * i + j - 1] + base_c); 372| 224| } 373| | 374| | // The next row base is 256*base; the row ends with 8*base already 375| 32| base = pts[8 * i + 7]; 376| 192| for(size_t k = 0; k != 5; ++k) { ------------------ | Branch (376:25): [True: 160, False: 32] ------------------ 377| 160| base = Ed25519_Point_Extended::from(base.dbl()); 378| 160| } 379| 32| } 380| | 381| 1| auto prod_storage = std::make_unique>(); 382| 1| auto& prod = *prod_storage; 383| | 384| 1| prod[0] = pts[0].Z; 385| 256| for(size_t i = 1; i != PTS; ++i) { ------------------ | Branch (385:22): [True: 255, False: 1] ------------------ 386| 255| prod[i] = prod[i - 1] * pts[i].Z; 387| 255| } 388| | 389| 1| auto inv = prod[PTS - 1].invert(); 390| | 391| 1| std::array, 32> table; 392| 257| for(size_t i = PTS; i-- > 0;) { ------------------ | Branch (392:24): [True: 256, False: 1] ------------------ 393| 256| const auto z_inv = (i == 0) ? inv : inv * prod[i - 1]; ------------------ | Branch (393:26): [True: 1, False: 255] ------------------ 394| 256| inv = inv * pts[i].Z; 395| | 396| 256| const auto x = pts[i].X * z_inv; 397| 256| const auto y = pts[i].Y * z_inv; 398| 256| auto& n = table[i / 8][i % 8]; 399| 256| n.yplusx = y + x; 400| 256| n.yminusx = y - x; 401| 256| n.xy2d = ED25519_D2 * (x * y); 402| 256| } 403| | 404| 1| return table; 405| 1|} ed25519_ge.cpp:_ZN5Botan12_GLOBAL__N_117ed25519_basepointEv: 351| 1|const Ed25519_Point_Extended& ed25519_basepoint() { 352| 1| static const Ed25519_Point_Extended b = ed25519_derive_basepoint(); 353| 1| return b; 354| 1|} ed25519_ge.cpp:_ZN5Botan12_GLOBAL__N_124ed25519_derive_basepointEv: 325| 1|Ed25519_Point_Extended ed25519_derive_basepoint() { 326| 1| const auto y = Ed25519_FieldElement::from_word(4) * Ed25519_FieldElement::from_word(5).invert(); 327| | 328| | // Recover x = sqrt((y^2-1)/(d*y^2+1)) as in point decoding 329| 1| const auto yy = y.sqr(); 330| 1| const auto u = yy - Ed25519_FieldElement::one(); 331| 1| const auto v = ED25519_D * yy + Ed25519_FieldElement::one(); 332| 1| const auto v3 = v.sqr() * v; 333| 1| const auto v7 = v3.sqr() * v; 334| 1| auto x = (u * v3) * (u * v7).pow_22523(); 335| | 336| 1| if(!(x.sqr() * v - u).is_zero()) { ------------------ | Branch (336:7): [True: 0, False: 1] ------------------ 337| 0| x = x * ED25519_SQRTM1; 338| 0| } 339| 1| if(x.is_negative()) { ------------------ | Branch (339:7): [True: 1, False: 0] ------------------ 340| 1| x = -x; 341| 1| } 342| | 343| 1| Ed25519_Point_Extended b; 344| 1| b.X = x; 345| 1| b.Y = y; 346| 1| b.Z = Ed25519_FieldElement::one(); 347| 1| b.T = x * y; 348| 1| return b; 349| 1|} ed25519_ge.cpp:_ZN5Botan12_GLOBAL__N_120Ed25519_Point_Cached4fromERKNS0_22Ed25519_Point_ExtendedE: 198| 32| static constexpr Ed25519_Point_Cached from(const Ed25519_Point_Extended& p) { 199| 32| Ed25519_Point_Cached r; 200| 32| r.YplusX = p.Y + p.X; 201| 32| r.YminusX = p.Y - p.X; 202| 32| r.Z = p.Z; 203| 32| r.T2d = p.T * ED25519_D2; 204| 32| return r; 205| 32| } ed25519_ge.cpp:_ZN5Botan12_GLOBAL__N_1plERKNS0_22Ed25519_Point_ExtendedERKNS0_20Ed25519_Point_CachedE: 218| 224|inline constexpr Ed25519_Point_Completed operator+(const Ed25519_Point_Extended& p, const Ed25519_Point_Cached& q) { 219| 224| Ed25519_Point_Completed r; 220| 224| r.X = p.Y + p.X; // YpX1 = Y1+X1 221| 224| r.Y = p.Y - p.X; // YmX1 = Y1-X1 222| 224| r.Z = r.X * q.YplusX; // A = YpX1*YpX2 223| 224| r.Y = r.Y * q.YminusX; // B = YmX1*YmX2 224| 224| r.T = q.T2d * p.T; // C = T2d2*T1 225| 224| r.X = p.Z * q.Z; // ZZ = Z1*Z2 226| 224| const auto t0 = r.X + r.X; // D = 2*ZZ 227| 224| r.X = r.Z - r.Y; // X3 = A-B 228| 224| r.Y = r.Z + r.Y; // Y3 = A+B 229| 224| r.Z = t0 + r.T; // Z3 = D+C 230| 224| r.T = t0 - r.T; // T3 = D-C 231| 224| return r; 232| 224|} ed25519_ge.cpp:_ZN5Botan12_GLOBAL__N_122Ed25519_Point_Extended8identityEv: 128| 10| static constexpr Ed25519_Point_Extended identity() { 129| 10| Ed25519_Point_Extended h; 130| 10| h.X = Ed25519_FieldElement::zero(); 131| 10| h.Y = Ed25519_FieldElement::one(); 132| 10| h.Z = Ed25519_FieldElement::one(); 133| 10| h.T = Ed25519_FieldElement::zero(); 134| 10| return h; 135| 10| } ed25519_ge.cpp:_ZN5Botan12_GLOBAL__N_122Ed25519_Point_Extended4fromERKNS0_23Ed25519_Point_CompletedE: 148| 1.03k| static constexpr Ed25519_Point_Extended from(const Ed25519_Point_Completed& p) { 149| 1.03k| Ed25519_Point_Extended r; 150| 1.03k| r.X = p.X * p.T; 151| 1.03k| r.Y = p.Y * p.Z; 152| 1.03k| r.Z = p.Z * p.T; 153| 1.03k| r.T = p.X * p.Y; 154| 1.03k| return r; 155| 1.03k| } ed25519_ge.cpp:_ZN5Botan12_GLOBAL__N_1plERKNS0_22Ed25519_Point_ExtendedERKNS0_19Ed25519_Point_NielsE: 237| 640|inline constexpr Ed25519_Point_Completed operator+(const Ed25519_Point_Extended& p, const Ed25519_Point_Niels& q) { 238| 640| Ed25519_Point_Completed r; 239| 640| r.X = p.Y + p.X; // YpX1 = Y1+X1 240| 640| r.Y = p.Y - p.X; // YmX1 = Y1-X1 241| 640| r.Z = r.X * q.yplusx; // A = YpX1*ypx2 242| 640| r.Y = r.Y * q.yminusx; // B = YmX1*ymx2 243| 640| r.T = q.xy2d * p.T; // C = xy2d2*T1 244| 640| const auto t0 = p.Z + p.Z; // D = 2*Z1 245| 640| r.X = r.Z - r.Y; // X3 = A-B 246| 640| r.Y = r.Z + r.Y; // Y3 = A+B 247| 640| r.Z = t0 + r.T; // Z3 = D+C 248| 640| r.T = t0 - r.T; // T3 = D-C 249| 640| return r; 250| 640|} ed25519_ge.cpp:_ZN5Botan12_GLOBAL__N_16selectEPKNS0_19Ed25519_Point_NielsEa: 553| 640|Ed25519_Point_Niels select(const Ed25519_Point_Niels base[8], int8_t b) { 554| 640| const uint8_t bnegative = static_cast(b) >> 7; 555| 640| const uint8_t babs = b - ((-static_cast(bnegative) & b) * 2); 556| | 557| 640| auto t = Ed25519_Point_Niels::identity(); 558| | 559| 5.76k| for(size_t i = 0; i != 8; ++i) { ------------------ | Branch (559:22): [True: 5.12k, False: 640] ------------------ 560| 5.12k| const auto b_is_i1 = CT::Mask::is_equal(babs, static_cast(i + 1)).as_choice(); 561| 5.12k| t.yplusx.conditional_assign(b_is_i1, base[i].yplusx); 562| 5.12k| t.yminusx.conditional_assign(b_is_i1, base[i].yminusx); 563| 5.12k| t.xy2d.conditional_assign(b_is_i1, base[i].xy2d); 564| 5.12k| } 565| | 566| | // If negative have to swap yminusx and yplusx, and negate xy2d 567| 640| const auto is_negative = CT::Mask::expand(bnegative).as_choice(); 568| 640| Ed25519_FieldElement::conditional_swap(is_negative, t.yplusx, t.yminusx); 569| 640| t.xy2d.conditional_assign(is_negative, -t.xy2d); 570| | 571| 640| return t; 572| 640|} ed25519_ge.cpp:_ZN5Botan12_GLOBAL__N_119Ed25519_Point_Niels8identityEv: 179| 640| static constexpr Ed25519_Point_Niels identity() { 180| 640| Ed25519_Point_Niels h; 181| 640| h.yplusx = Ed25519_FieldElement::one(); 182| 640| h.yminusx = Ed25519_FieldElement::one(); 183| 640| h.xy2d = Ed25519_FieldElement::zero(); 184| 640| return h; 185| 640| } ed25519_ge.cpp:_ZN5Botan12_GLOBAL__N_124Ed25519_Point_Projective4fromERKNS0_23Ed25519_Point_CompletedE: 75| 30| static constexpr Ed25519_Point_Projective from(const Ed25519_Point_Completed& p) { 76| 30| Ed25519_Point_Projective r; 77| 30| r.X = p.X * p.T; 78| 30| r.Y = p.Y * p.Z; 79| 30| r.Z = p.Z * p.T; 80| 30| return r; 81| 30| } ed25519_ge.cpp:_ZNK5Botan12_GLOBAL__N_122Ed25519_Point_Extended3dblEv: 137| 170| constexpr Ed25519_Point_Completed dbl() const { 138| 170| Ed25519_Point_Projective q; 139| 170| q.X = X; 140| 170| q.Y = Y; 141| 170| q.Z = Z; 142| 170| return q.dbl(); 143| 170| } ed25519_ge.cpp:_ZNK5Botan12_GLOBAL__N_124Ed25519_Point_Projective3dblEv: 102| 200|constexpr Ed25519_Point_Completed Ed25519_Point_Projective::dbl() const { 103| 200| Ed25519_Point_Completed r; 104| 200| r.X = X.sqr(); // XX=X1^2 105| 200| r.Z = Y.sqr(); // YY=Y1^2 106| 200| r.T = Z.sqr2(); // B=2*Z1^2 107| 200| r.Y = X + Y; // A=X1+Y1 108| 200| const auto t0 = r.Y.sqr(); // AA=A^2 109| 200| r.Y = r.Z + r.X; // Y3=YY+XX 110| 200| r.Z = r.Z - r.X; // Z3=YY-XX 111| 200| r.X = t0 - r.Y; // X3=AA-Y3 112| 200| r.T = r.T - r.Z; // T3=B-Z3 113| 200| return r; 114| 200|} _ZN5Botan14Ed25519_Scalar10from_bytesENSt3__14spanIKhLm32EEE: 122| 10|Ed25519_Scalar Ed25519_Scalar::from_bytes(std::span b) { 123| | // x mod l == mont_mul(x, R) 124| 10| return Ed25519_Scalar(sc_mont_mul(sc_load(b), SC_R1)); 125| 10|} _ZNK5Botan14Ed25519_Scalar12serialize_toENSt3__14spanIhLm32EEE: 151| 10|void Ed25519_Scalar::serialize_to(std::span b) const { 152| 50| for(size_t i = 0; i != WORDS; ++i) { ------------------ | Branch (152:22): [True: 40, False: 10] ------------------ 153| 40| store_le(m_val[i], b.data() + sizeof(word) * i); 154| 40| } 155| 10|} ed25519_scalar.cpp:_ZN5Botan12_GLOBAL__N_111sc_mont_mulERKNSt3__15arrayImLm4EEES5_: 82| 10|std::array sc_mont_mul(const std::array& x, const std::array& y) { 83| 10| std::array z; // NOLINT(*-member-init) 84| 10| comba_mul(z.data(), x.data(), y.data()); 85| | 86| 10| std::array r; // NOLINT(*-member-init) 87| 10| std::array ws; // NOLINT(*-member-init) 88| 10| bigint_monty_redc(r.data(), z.data(), SC_L.data(), SC_WORDS, SC_L_DASH, ws.data(), ws.size()); 89| 10| return r; 90| 10|} ed25519_scalar.cpp:_ZN5Botan12_GLOBAL__N_17sc_loadENSt3__14spanIKhLm32EEE: 112| 10|std::array sc_load(std::span b) { 113| 10| std::array r; // NOLINT(*-member-init) 114| 50| for(size_t i = 0; i != SC_WORDS; ++i) { ------------------ | Branch (114:22): [True: 40, False: 10] ------------------ 115| 40| r[i] = load_le(b.data(), i); 116| 40| } 117| 10| return r; 118| 10|} _ZN5Botan16X25519_PublicKeyC1ENSt3__14spanIKhLm18446744073709551615EEE: 120| 10|X25519_PublicKey::X25519_PublicKey(std::span pub) { 121| 10| size_check(pub.size(), "public key"); 122| 10| m_public = std::make_shared(std::vector(pub.begin(), pub.end())); 123| 10|} _ZN5Botan17X25519_PrivateKeyC1ERNS_21RandomNumberGeneratorE: 145| 10|X25519_PrivateKey::X25519_PrivateKey(RandomNumberGenerator& rng) { 146| 10| load_x25519_keypair(rng.random_vec(32), m_public, m_private); 147| 10|} x25519.cpp:_ZN5Botan12_GLOBAL__N_110size_checkEmPKc: 52| 10|void size_check(size_t size, const char* thing) { 53| 10| if(size != 32) { ------------------ | Branch (53:7): [True: 10, False: 0] ------------------ 54| 10| throw Decoding_Error(fmt("Invalid size {} for X25519 {}", size, thing)); 55| 10| } 56| 10|} x25519.cpp:_ZN5Botan12_GLOBAL__N_119load_x25519_keypairENSt3__16vectorIhNS_16secure_allocatorIhEEEERNS1_10shared_ptrIKNS_21X25519_PublicKey_DataEEERNS6_IKNS_22X25519_PrivateKey_DataEEE: 86| 10| std::shared_ptr& sk_out) { 87| 10| BOTAN_ASSERT_NOMSG(secret.size() == 32); ------------------ | | 84| 10| do { \ | | 85| 10| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 10| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 10] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 10| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 10] | | ------------------ ------------------ 88| 10| std::vector pub(32); 89| 10| x25519_basepoint(std::span(pub.data(), 32), std::span(secret.data(), 32)); 90| 10| pk_out = std::make_shared(std::move(pub)); 91| 10| sk_out = std::make_shared(std::move(secret)); 92| 10|} _ZN5Botan22X25519_PrivateKey_DataC2ENSt3__16vectorIhNS_16secure_allocatorIhEEEE: 34| 10| explicit X25519_PrivateKey_Data(secure_vector key) : m_key(std::move(key)) {} _ZN5Botan21X25519_PublicKey_DataC2ENSt3__16vectorIhNS1_9allocatorIhEEEE: 24| 10| explicit X25519_PublicKey_Data(std::vector key) : m_key(std::move(key)) {} _ZN5Botan16x25519_basepointENSt3__14spanIhLm32EEENS1_IKhLm32EEE: 46| 10|void x25519_basepoint(std::span out, std::span scalar) { 47| | /* 48| | * Compute the public key as [k]B on the Ed25519 curve using the fixed-base 49| | * tables, then map the result to Curve25519. This gives the same result as 50| | * running the Montgomery ladder on u = 9 since the base points correspond 51| | * under the birational map and B has order l, but is several times faster. 52| | */ 53| 10| CT::poison(scalar); 54| | 55| 10| auto k = x25519_clamp(scalar); 56| 10| const auto s = Ed25519_Scalar::from_bytes(k); 57| 10| ed25519_basepoint_mul_to_x25519(out, s); 58| 10| secure_scrub_memory(k.data(), k.size()); 59| | 60| 10| CT::unpoison(scalar); 61| 10|} x25519_scalarmult.cpp:_ZN5Botan12_GLOBAL__N_112x25519_clampENSt3__14spanIKhLm32EEE: 20| 10|std::array x25519_clamp(std::span scalar) { 21| 10| std::array k{}; 22| 10| copy_mem(k, scalar); 23| 10| k[0] &= 248; 24| 10| k[31] &= 127; 25| 10| k[31] |= 64; 26| 10| return k; 27| 10|} _ZN5Botan9Gf448ElemC2ENSt3__14spanIKhLm56EEE: 356| 2|Gf448Elem::Gf448Elem(std::span x) /* NOLINT(*-member-init) */ { 357| 2| load_le(m_x, x); 358| 2|} _ZN5Botan9Gf448ElemC2Em: 360| 8.06k|Gf448Elem::Gf448Elem(uint64_t least_sig_word) /* NOLINT(*-member-init) */ { 361| 8.06k| clear_mem(m_x); 362| 8.06k| m_x[0] = least_sig_word; 363| 8.06k|} _ZNK5Botan9Gf448Elem8to_bytesENSt3__14spanIhLm56EEE: 365| 1|void Gf448Elem::to_bytes(std::span out) const { 366| 1| store_le(out, to_canonical(m_x)); 367| 1|} _ZNK5Botan9Gf448Elem8to_bytesEv: 369| 1|std::array Gf448Elem::to_bytes() const { 370| 1| std::array bytes{}; 371| 1| to_bytes(bytes); 372| 1| return bytes; 373| 1|} _ZN5Botan9Gf448Elem12ct_cond_swapENS_2CT4MaskImEERS0_: 375| 898|void Gf448Elem::ct_cond_swap(CT::Mask mask, Gf448Elem& other) { 376| 7.18k| for(size_t i = 0; i < WORDS_448; ++i) { ------------------ | Branch (376:22): [True: 6.28k, False: 898] ------------------ 377| 6.28k| mask.conditional_swap(m_x[i], other.m_x[i]); 378| 6.28k| } 379| 898|} _ZNK5Botan9Gf448ElemplERKS0_: 385| 1.79k|Gf448Elem Gf448Elem::operator+(const Gf448Elem& other) const { 386| 1.79k| Gf448Elem res(0); 387| 1.79k| gf_add(res.m_x, m_x, other.m_x); 388| 1.79k| return res; 389| 1.79k|} _ZNK5Botan9Gf448ElemmiERKS0_: 391| 1.79k|Gf448Elem Gf448Elem::operator-(const Gf448Elem& other) const { 392| 1.79k| Gf448Elem res(0); 393| 1.79k| gf_sub(res.m_x, m_x, other.m_x); 394| 1.79k| return res; 395| 1.79k|} _ZNK5Botan9Gf448ElemmlERKS0_: 403| 2.24k|Gf448Elem Gf448Elem::operator*(const Gf448Elem& other) const { 404| 2.24k| Gf448Elem res(0); 405| 2.24k| gf_mul(res.m_x, m_x, other.m_x); 406| 2.24k| return res; 407| 2.24k|} _ZNK5Botan9Gf448ElemdvERKS0_: 409| 1|Gf448Elem Gf448Elem::operator/(const Gf448Elem& other) const { 410| 1| Gf448Elem res(0); 411| 1| gf_inv(res.m_x, other.m_x); 412| 1| gf_mul(res.m_x, m_x, res.m_x); 413| 1| return res; 414| 1|} _ZN5Botan7mul_a24ERKNS_9Gf448ElemE: 439| 448|Gf448Elem mul_a24(const Gf448Elem& a) { 440| 448| Gf448Elem res(0); 441| 448| gf_mul_a24(res.words(), a.words()); 442| 448| return res; 443| 448|} _ZN5Botan6squareERKNS_9Gf448ElemE: 445| 1.79k|Gf448Elem square(const Gf448Elem& elem) { 446| 1.79k| Gf448Elem res(0); 447| 1.79k| gf_square(res.words(), elem.words()); 448| 1.79k| return res; 449| 1.79k|} curve448_gf.cpp:_ZN5Botan12_GLOBAL__N_112to_canonicalENSt3__14spanIKmLm7EEE: 335| 1|std::array to_canonical(std::span in) { 336| 1| const std::array p = {0xffffffffffffffff, 337| 1| 0xffffffffffffffff, 338| 1| 0xffffffffffffffff, 339| 1| 0xfffffffeffffffff, 340| 1| 0xffffffffffffffff, 341| 1| 0xffffffffffffffff, 342| 1| 0xffffffffffffffff}; 343| | 344| 1| std::array in_minus_p; // NOLINT(*-member-init) 345| 1| uint64_t borrow = 0; 346| 8| for(size_t i = 0; i < WORDS_448; ++i) { ------------------ | Branch (346:22): [True: 7, False: 1] ------------------ 347| 7| in_minus_p[i] = word_sub(in[i], p[i], &borrow); 348| 7| } 349| 1| std::array out; // NOLINT(*-member-init) 350| 1| CT::Mask::expand(borrow).select_n(out.data(), in.data(), in_minus_p.data(), WORDS_448); 351| 1| return out; 352| 1|} curve448_gf.cpp:_ZN5Botan12_GLOBAL__N_16gf_addENSt3__14spanImLm7EEENS2_IKmLm7EEES5_: 155| 1.79k| std::span b) { 156| 1.79k| std::array ws; // NOLINT(*-member-init) 157| | 158| 1.79k| uint64_t carry = 0; 159| 1.79k| ws[0] = word_add(a[0], b[0], &carry); 160| 1.79k| ws[1] = word_add(a[1], b[1], &carry); 161| 1.79k| ws[2] = word_add(a[2], b[2], &carry); 162| 1.79k| ws[3] = word_add(a[3], b[3], &carry); 163| 1.79k| ws[4] = word_add(a[4], b[4], &carry); 164| 1.79k| ws[5] = word_add(a[5], b[5], &carry); 165| 1.79k| ws[6] = word_add(a[6], b[6], &carry); 166| 1.79k| ws[7] = carry; 167| | 168| 1.79k| reduce_after_add(out, ws); 169| 1.79k|} curve448_gf.cpp:_ZN5Botan12_GLOBAL__N_116reduce_after_addENSt3__14spanImLm7EEENS2_IKmLm8EEE: 27| 6.73k|void reduce_after_add(std::span h_3, std::span h_1) { 28| 6.73k| std::array h_2; /* NOLINT(*-member-init) */ 29| 6.73k| uint64_t carry = 0; 30| | 31| 6.73k| constexpr uint64_t zero = 0; 32| | 33| | // Line 27+ (of the paper's algorithm 1) 34| 6.73k| h_2[0] = word_add(h_1[0], h_1[7], &carry); 35| 6.73k| h_2[1] = word_add(h_1[1], zero, &carry); 36| 6.73k| h_2[2] = word_add(h_1[2], zero, &carry); 37| | 38| | // Line 30 39| 6.73k| h_2[3] = word_add(h_1[3], h_1[7] << 32, &carry); 40| | 41| | // Line 31+ 42| 6.73k| h_2[4] = word_add(h_1[4], zero, &carry); 43| 6.73k| h_2[5] = word_add(h_1[5], zero, &carry); 44| 6.73k| h_2[6] = word_add(h_1[6], zero, &carry); 45| | 46| 6.73k| h_2[7] = carry; 47| | 48| 6.73k| carry = 0; 49| 6.73k| h_3[0] = word_add(h_2[0], h_2[7], &carry); 50| 6.73k| h_3[1] = word_add(h_2[1], zero, &carry); 51| 6.73k| h_3[2] = word_add(h_2[2], zero, &carry); 52| | // Line 37 53| 6.73k| h_3[3] = h_2[3] + (h_2[7] << 32) + carry; 54| | 55| | // Line 38 56| 6.73k| h_3[4] = h_2[4]; 57| 6.73k| h_3[5] = h_2[5]; 58| 6.73k| h_3[6] = h_2[6]; 59| 6.73k|} curve448_gf.cpp:_ZN5Botan12_GLOBAL__N_16gf_subENSt3__14spanImLm7EEENS2_IKmLm7EEES5_: 178| 1.79k| std::span b) { 179| 1.79k| std::array h_0; // NOLINT(*-member-init) 180| 1.79k| std::array h_1; // NOLINT(*-member-init) 181| | 182| 1.79k| uint64_t borrow = 0; 183| 1.79k| h_0[0] = word_sub(a[0], b[0], &borrow); 184| 1.79k| h_0[1] = word_sub(a[1], b[1], &borrow); 185| 1.79k| h_0[2] = word_sub(a[2], b[2], &borrow); 186| 1.79k| h_0[3] = word_sub(a[3], b[3], &borrow); 187| 1.79k| h_0[4] = word_sub(a[4], b[4], &borrow); 188| 1.79k| h_0[5] = word_sub(a[5], b[5], &borrow); 189| 1.79k| h_0[6] = word_sub(a[6], b[6], &borrow); 190| 1.79k| uint64_t delta = borrow; 191| 1.79k| uint64_t delta_p = delta << 32; 192| 1.79k| borrow = 0; 193| | 194| 1.79k| constexpr uint64_t zero = 0; 195| | 196| 1.79k| h_1[0] = word_sub(h_0[0], delta, &borrow); 197| 1.79k| h_1[1] = word_sub(h_0[1], zero, &borrow); 198| 1.79k| h_1[2] = word_sub(h_0[2], zero, &borrow); 199| 1.79k| h_1[3] = word_sub(h_0[3], delta_p, &borrow); 200| 1.79k| h_1[4] = word_sub(h_0[4], zero, &borrow); 201| 1.79k| h_1[5] = word_sub(h_0[5], zero, &borrow); 202| 1.79k| h_1[6] = word_sub(h_0[6], zero, &borrow); 203| | 204| 1.79k| delta = borrow; 205| 1.79k| delta_p = delta << 32; 206| 1.79k| borrow = 0; 207| | 208| 1.79k| out[0] = word_sub(h_1[0], delta, &borrow); 209| 1.79k| out[1] = word_sub(h_1[1], zero, &borrow); 210| 1.79k| out[2] = word_sub(h_1[2], zero, &borrow); 211| 1.79k| out[3] = word_sub(h_1[3], delta_p, &borrow); 212| 1.79k| out[4] = h_1[4]; 213| 1.79k| out[5] = h_1[5]; 214| 1.79k| out[6] = h_1[6]; 215| 1.79k|} curve448_gf.cpp:_ZN5Botan12_GLOBAL__N_16gf_mulENSt3__14spanImLm7EEENS2_IKmLm7EEES5_: 141| 2.25k| std::span b) { 142| 2.25k| std::array ws; // NOLINT(*-member-init) 143| 2.25k| comba_mul<7>(ws.data(), a.data(), b.data()); 144| 2.25k| reduce_after_mul(out, ws); 145| 2.25k|} curve448_gf.cpp:_ZN5Botan12_GLOBAL__N_116reduce_after_mulENSt3__14spanImLm7EEENS2_IKmLm14EEE: 66| 4.49k|void reduce_after_mul(std::span out, std::span in) { 67| 4.49k| std::array r; // NOLINT(*-member-init) 68| 4.49k| std::array s; // NOLINT(*-member-init) 69| 4.49k| std::array t_0; // NOLINT(*-member-init) 70| 4.49k| std::array h_1; // NOLINT(*-member-init) 71| | 72| 4.49k| uint64_t carry = 0; 73| | 74| | // Line 4 (of the paper's algorithm 1) 75| 4.49k| r[0] = word_add(in[0], in[7], &carry); 76| | 77| | // Line 5-7 78| 4.49k| r[1] = word_add(in[1], in[1 + 7], &carry); 79| 4.49k| r[2] = word_add(in[2], in[2 + 7], &carry); 80| 4.49k| r[3] = word_add(in[3], in[3 + 7], &carry); 81| 4.49k| r[4] = word_add(in[4], in[4 + 7], &carry); 82| 4.49k| r[5] = word_add(in[5], in[5 + 7], &carry); 83| 4.49k| r[6] = word_add(in[6], in[6 + 7], &carry); 84| 4.49k| r[7] = carry; 85| 4.49k| s[0] = r[0]; 86| 4.49k| s[1] = r[1]; 87| 4.49k| s[2] = r[2]; 88| | // Line 10 89| 4.49k| carry = 0; 90| 4.49k| s[3] = word_add(r[3], in[10] & 0xFFFFFFFF00000000, &carry); 91| | // Line 11-13 92| 4.49k| s[4] = word_add(r[4], in[4 + 7], &carry); 93| 4.49k| s[5] = word_add(r[5], in[5 + 7], &carry); 94| 4.49k| s[6] = word_add(r[6], in[6 + 7], &carry); 95| 4.49k| s[7] = r[7] + carry; 96| | 97| | // Line 15-17 98| 4.49k| t_0[0] = (in[0 + 11] << 32) | (in[0 + 10] >> 32); 99| 4.49k| t_0[1] = (in[1 + 11] << 32) | (in[1 + 10] >> 32); 100| 4.49k| t_0[2] = (in[2 + 11] << 32) | (in[2 + 10] >> 32); 101| | // Line 18 102| 4.49k| t_0[3] = (in[7] << 32) | (in[13] >> 32); 103| | // Line 19-21 104| 4.49k| t_0[4] = (in[4 + 4] << 32) | (in[4 + 3] >> 32); 105| 4.49k| t_0[5] = (in[5 + 4] << 32) | (in[5 + 3] >> 32); 106| 4.49k| t_0[6] = (in[6 + 4] << 32) | (in[6 + 3] >> 32); 107| 4.49k| carry = 0; 108| | // Line 23-25 109| 4.49k| h_1[0] = word_add(s[0], t_0[0], &carry); 110| 4.49k| h_1[1] = word_add(s[1], t_0[1], &carry); 111| 4.49k| h_1[2] = word_add(s[2], t_0[2], &carry); 112| 4.49k| h_1[3] = word_add(s[3], t_0[3], &carry); 113| 4.49k| h_1[4] = word_add(s[4], t_0[4], &carry); 114| 4.49k| h_1[5] = word_add(s[5], t_0[5], &carry); 115| 4.49k| h_1[6] = word_add(s[6], t_0[6], &carry); 116| 4.49k| h_1[7] = s[7] + carry; 117| | 118| 4.49k| reduce_after_add(out, h_1); 119| 4.49k|} curve448_gf.cpp:_ZN5Botan12_GLOBAL__N_16gf_invENSt3__14spanImLm7EEENS2_IKmLm7EEE: 316| 1|void gf_inv(std::span out, std::span a) { 317| 1| std::array x222; // NOLINT(*-member-init) 318| 1| std::array x223; // NOLINT(*-member-init) 319| 1| gf_pow_2_222m1(x222, x223, a); 320| | 321| | // (x223 << 223 + x222) << 2 + 1 322| 1| std::array t; // NOLINT(*-member-init) 323| 1| gf_sqr_n(t, x223, 223); 324| 1| gf_mul(t, t, x222); 325| 1| gf_sqr_n(t, t, 2); 326| 1| gf_mul(out, t, a); 327| 1|} curve448_gf.cpp:_ZN5Botan12_GLOBAL__N_110gf_mul_a24ENSt3__14spanImLm7EEENS2_IKmLm7EEE: 124| 448|void gf_mul_a24(std::span out, std::span a) { 125| 448| constexpr uint64_t A24 = 39081; 126| 448| std::array ws; // NOLINT(*-member-init) 127| 448| uint64_t carry = 0; 128| 448| ws[0] = word_madd2(a[0], A24, &carry); 129| 448| ws[1] = word_madd2(a[1], A24, &carry); 130| 448| ws[2] = word_madd2(a[2], A24, &carry); 131| 448| ws[3] = word_madd2(a[3], A24, &carry); 132| 448| ws[4] = word_madd2(a[4], A24, &carry); 133| 448| ws[5] = word_madd2(a[5], A24, &carry); 134| 448| ws[6] = word_madd2(a[6], A24, &carry); 135| 448| ws[7] = carry; 136| 448| reduce_after_add(out, ws); 137| 448|} curve448_gf.cpp:_ZN5Botan12_GLOBAL__N_19gf_squareENSt3__14spanImLm7EEENS2_IKmLm7EEE: 147| 2.23k|void gf_square(std::span out, std::span a) { 148| 2.23k| std::array ws; // NOLINT(*-member-init) 149| 2.23k| comba_sqr<7>(ws.data(), a.data()); 150| 2.23k| reduce_after_mul(out, ws); 151| 2.23k|} curve448_gf.cpp:_ZN5Botan12_GLOBAL__N_114gf_pow_2_222m1ENSt3__14spanImLm7EEES3_NS2_IKmLm7EEE: 245| 1| std::span a) { 246| 1| std::array t; // NOLINT(*-member-init) 247| | 248| | // _10 = a^2 249| 1| std::array a2; // NOLINT(*-member-init) 250| 1| gf_square(a2, a); 251| | 252| | // _11 = a^3 253| 1| std::array a3; // NOLINT(*-member-init) 254| 1| gf_mul(a3, a, a2); 255| | 256| | // _111 = a^7 257| 1| std::array a7; // NOLINT(*-member-init) 258| 1| gf_square(t, a3); 259| 1| gf_mul(a7, a, t); 260| | 261| | // _111111 = a^63 262| 1| std::array a63; // NOLINT(*-member-init) 263| 1| gf_sqr_n(t, a7, 3); 264| 1| gf_mul(a63, a7, t); 265| | 266| | // x12 = a^(2^12 - 1) 267| 1| std::array x12; // NOLINT(*-member-init) 268| 1| gf_sqr_n(t, a63, 6); 269| 1| gf_mul(x12, a63, t); 270| | 271| | // x24 = a^(2^24 - 1) 272| 1| std::array x24; // NOLINT(*-member-init) 273| 1| gf_sqr_n(t, x12, 12); 274| 1| gf_mul(x24, x12, t); 275| | 276| | // i34 = x24 << 6 = a^((2^24 - 1) * 2^6) 277| 1| std::array i34; // NOLINT(*-member-init) 278| 1| gf_sqr_n(i34, x24, 6); 279| | 280| | // x30 = a^(2^30 - 1) 281| 1| std::array x30; // NOLINT(*-member-init) 282| 1| gf_mul(x30, a63, i34); 283| | 284| | // x48 = a^(2^48 - 1) 285| 1| std::array x48; // NOLINT(*-member-init) 286| 1| gf_sqr_n(t, i34, 18); 287| 1| gf_mul(x48, x24, t); 288| | 289| | // x96 = a^(2^96 - 1) 290| 1| std::array x96; // NOLINT(*-member-init) 291| 1| gf_sqr_n(t, x48, 48); 292| 1| gf_mul(x96, x48, t); 293| | 294| | // x192 = a^(2^192 - 1) 295| 1| std::array x192; // NOLINT(*-member-init) 296| 1| gf_sqr_n(t, x96, 96); 297| 1| gf_mul(x192, x96, t); 298| | 299| | // x222 = a^(2^222 - 1) 300| 1| gf_sqr_n(t, x192, 30); 301| 1| gf_mul(x222, x30, t); 302| | 303| | // x223 = a^(2^223 - 1) 304| 1| gf_square(t, x222); 305| 1| gf_mul(x223, a, t); 306| 1|} curve448_gf.cpp:_ZN5Botan12_GLOBAL__N_18gf_sqr_nENSt3__14spanImLm7EEENS2_IKmLm7EEEm: 218| 10|void gf_sqr_n(std::span out, std::span a, size_t n) { 219| 10| gf_square(out, a); 220| 444| for(size_t i = 1; i < n; ++i) { ------------------ | Branch (220:22): [True: 434, False: 10] ------------------ 221| 434| gf_square(out, out); 222| 434| } 223| 10|} _ZN5Botan14X448_PublicKeyC1ENSt3__14spanIKhLm18446744073709551615EEE: 117| 1|X448_PublicKey::X448_PublicKey(std::span pub) { 118| 1| if(pub.size() != X448_LEN) { ------------------ | Branch (118:7): [True: 1, False: 0] ------------------ 119| 1| throw Decoding_Error("Invalid size for X448 public key"); 120| 1| } 121| 0| std::array pub_arr{}; 122| 0| copy_mem(pub_arr, pub); 123| 0| m_public = std::make_shared(pub_arr); 124| 0|} _ZN5Botan15X448_PrivateKeyC1ENSt3__14spanIKhLm18446744073709551615EEE: 134| 1|X448_PrivateKey::X448_PrivateKey(std::span secret_key) { 135| 1| if(secret_key.size() != X448_LEN) { ------------------ | Branch (135:7): [True: 0, False: 1] ------------------ 136| 0| throw Decoding_Error("Invalid size for X448 private key"); 137| 0| } 138| 1| load_x448_keypair(secure_vector(secret_key.begin(), secret_key.end()), m_public, m_private); 139| 1|} _ZN5Botan15X448_PrivateKeyC1ERNS_21RandomNumberGeneratorE: 141| 1|X448_PrivateKey::X448_PrivateKey(RandomNumberGenerator& rng) : X448_PrivateKey(rng.random_vec(X448_LEN)) {} x448.cpp:_ZN5Botan12_GLOBAL__N_117load_x448_keypairENSt3__16vectorIhNS_16secure_allocatorIhEEEERNS1_10shared_ptrIKNS_19X448_PublicKey_DataEEERNS6_IKNS_20X448_PrivateKey_DataEEE: 67| 1| std::shared_ptr& sk_out) { 68| 1| BOTAN_ASSERT_NOMSG(secret.size() == X448_LEN); ------------------ | | 84| 1| do { \ | | 85| 1| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 86| 1| if(!(expr)) { \ | | ------------------ | | | Branch (86:10): [True: 0, False: 1] | | ------------------ | | 87| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 88| 0| Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \ | | 89| 0| } \ | | 90| 1| } while(0) | | ------------------ | | | Branch (90:12): [Folded, False: 1] | | ------------------ ------------------ 69| 1| std::array pub{}; 70| 1| { 71| 1| const auto scope = CT::scoped_poison(secret); 72| 1| x448_basepoint_from_data(pub, std::span(secret).first()); 73| 1| CT::unpoison(pub); 74| 1| } 75| 1| pk_out = std::make_shared(pub); 76| 1| sk_out = std::make_shared(std::move(secret)); 77| 1|} _ZN5Botan20X448_PrivateKey_DataC2ENSt3__16vectorIhNS_16secure_allocatorIhEEEE: 34| 1| explicit X448_PrivateKey_Data(secure_vector key) : m_key(std::move(key)) {} x448.cpp:_ZN5Botan12_GLOBAL__N_124x448_basepoint_from_dataENSt3__14spanIhLm56EEENS2_IKhLm56EEE: 48| 1|void x448_basepoint_from_data(std::span mypublic, std::span secret) { 49| 1| const auto bp = x448_basepoint(decode_scalar(secret)); 50| 1| const auto bp_bytes = encode_point(bp); 51| 1| copy_mem(mypublic, bp_bytes); 52| 1|} _ZN5Botan19X448_PublicKey_DataC2ENSt3__15arrayIhLm56EEE: 24| 1| explicit X448_PublicKey_Data(std::array key) : m_key(key) {} _ZN5Botan12encode_pointERKNS_6StrongINSt3__15arrayIhLm56EEENS_9Point448_EJEEE: 21| 1|secure_vector encode_point(const Point448& p) { 22| 1| return {p.begin(), p.end()}; 23| 1|} _ZN5Botan13decode_scalarENSt3__14spanIKhLm18446744073709551615EEE: 30| 1|ScalarX448 decode_scalar(std::span scalar_bytes) { 31| 1| BOTAN_ARG_CHECK(scalar_bytes.size() == X448_LEN, "Invalid size for X448 scalar"); ------------------ | | 35| 1| do { \ | | 36| 1| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 1| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 1] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 1| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 1] | | ------------------ ------------------ 32| 1| auto buf = typecast_copy(scalar_bytes); 33| | 34| 1| buf[0] &= 0xfc; 35| 1| buf[55] |= 0x80; 36| | 37| 1| return buf; 38| 1|} _ZN5Botan14x448_basepointERKNS_6StrongINSt3__15arrayIhLm56EEENS_11ScalarX448_EJEEE: 41| 1|Point448 x448_basepoint(const ScalarX448& k) { 42| 1| const Point448 u({5}); 43| 1| return x448(k, u); 44| 1|} _ZN5Botan4x448ERKNS_6StrongINSt3__15arrayIhLm56EEENS_11ScalarX448_EJEEERKNS0_IS3_NS_9Point448_EJEEE: 48| 1|Point448 x448(const ScalarX448& k, const Point448& u) { 49| 1| const Gf448Elem x_1 = Gf448Elem(u.get()); 50| 1| Gf448Elem x_2 = Gf448Elem::one(); 51| 1| Gf448Elem z_2 = Gf448Elem::zero(); 52| 1| Gf448Elem x_3 = Gf448Elem(u.get()); 53| 1| Gf448Elem z_3 = Gf448Elem::one(); 54| 1| auto swap = CT::Mask::cleared(); 55| | 56| 449| for(int16_t t = 448 - 1; t >= 0; --t) { ------------------ | Branch (56:29): [True: 448, False: 1] ------------------ 57| 448| const auto k_t = CT::Mask::expand(get_bit(k, t)); 58| 448| swap ^= k_t; 59| | 60| 448| x_2.ct_cond_swap(swap, x_3); 61| 448| z_2.ct_cond_swap(swap, z_3); 62| 448| swap = k_t; 63| | 64| 448| const auto A = x_2 + z_2; 65| 448| const auto AA = square(A); 66| 448| const auto B = x_2 - z_2; 67| 448| const auto BB = square(B); 68| 448| const auto E = AA - BB; 69| 448| const auto C = x_3 + z_3; 70| 448| const auto D = x_3 - z_3; 71| 448| const auto DA = D * A; 72| 448| const auto CB = C * B; 73| 448| x_3 = square(DA + CB); 74| 448| z_3 = x_1 * square(DA - CB); 75| 448| x_2 = AA * BB; 76| 448| z_2 = E * (AA + mul_a24(E)); 77| 448| } 78| | 79| 1| x_2.ct_cond_swap(swap, x_3); 80| 1| z_2.ct_cond_swap(swap, z_3); 81| | 82| 1| const auto res = x_2 / z_2; 83| | 84| 1| return Point448(res.to_bytes()); 85| 1|} x448_internal.cpp:_ZN5Botan12_GLOBAL__N_17get_bitERKNS_6StrongINSt3__15arrayIhLm56EEENS_11ScalarX448_EJEEEm: 16| 448|uint64_t get_bit(const ScalarX448& scalar, size_t bit) { 17| 448| return (scalar[bit / 8] >> (bit % 8)) & 1; 18| 448|} _ZN5Botan12DH_PublicKeyC1ERKNS_19AlgorithmIdentifierENSt3__14spanIKhLm18446744073709551615EEE: 17| 3|DH_PublicKey::DH_PublicKey(const AlgorithmIdentifier& alg_id, std::span key_bits) { 18| 3| m_public_key = std::make_shared(alg_id, key_bits, DL_Group_Format::ANSI_X9_42); 19| 3|} _ZN5Botan12DH_PublicKeyC1ERKNS_8DL_GroupERKNS_6BigIntE: 21| 272|DH_PublicKey::DH_PublicKey(const DL_Group& group, const BigInt& y) { 22| 272| m_public_key = std::make_shared(group, y); 23| 272|} _ZNK5Botan12DH_PublicKey10key_lengthEv: 29| 272|size_t DH_PublicKey::key_length() const { 30| 272| return m_public_key->p_bits(); 31| 272|} _ZNK5Botan12DH_PublicKey19raw_public_key_bitsEv: 45| 544|std::vector DH_PublicKey::raw_public_key_bits() const { 46| 544| return m_public_key->public_key_as_bytes(); 47| 544|} _ZN5Botan13DH_PrivateKeyC1ERNS_21RandomNumberGeneratorERKNS_8DL_GroupE: 61| 316|DH_PrivateKey::DH_PrivateKey(RandomNumberGenerator& rng, const DL_Group& group) { 62| 316| m_private_key = std::make_shared(group, rng); 63| 316| m_public_key = m_private_key->public_key(); 64| 316|} _ZNK5Botan13DH_PrivateKey12public_valueEv: 84| 272|std::vector DH_PrivateKey::public_value() const { 85| 272| return raw_public_key_bits(); 86| 272|} _ZNK5Botan13DH_PrivateKey24_create_key_agreement_opERNS_21RandomNumberGeneratorERKNS_31PK_Key_Agreement_Options_ReaderE: 150| 272| RandomNumberGenerator& rng, const PK_Key_Agreement_Options_Reader& options) const { 151| 272| require_software_provider(options, algo_name()); 152| | 153| 272| return std::make_unique(this->m_private_key, options, rng); 154| 272|} dh.cpp:_ZN5Botan12_GLOBAL__N_115DH_KA_OperationC2ERKNSt3__110shared_ptrIKNS_13DL_PrivateKeyEEERKNS_31PK_Key_Agreement_Options_ReaderERNS_21RandomNumberGeneratorE: 110| 272| PK_Ops::Key_Agreement_with_KDF(options), 111| 272| m_key(key), 112| 272| m_key_bits(m_key->private_key().bits()), 113| 272| m_blinder( 114| 272| m_key->group()._reducer_mod_p(), 115| 272| rng, 116| 272| [](const BigInt& k) { return k; }, 117| 272| [this](const BigInt& k) { return powermod_x_p(group().inverse_mod_p(k)); }) {} dh.cpp:_ZZN5Botan12_GLOBAL__N_115DH_KA_OperationC1ERKNSt3__110shared_ptrIKNS_13DL_PrivateKeyEEERKNS_31PK_Key_Agreement_Options_ReaderERNS_21RandomNumberGeneratorEENKUlRKNS_6BigIntEE_clESG_: 116| 272| [](const BigInt& k) { return k; }, dh.cpp:_ZZN5Botan12_GLOBAL__N_115DH_KA_OperationC1ERKNSt3__110shared_ptrIKNS_13DL_PrivateKeyEEERKNS_31PK_Key_Agreement_Options_ReaderERNS_21RandomNumberGeneratorEENKUlRKNS_6BigIntEE0_clESG_: 117| 272| [this](const BigInt& k) { return powermod_x_p(group().inverse_mod_p(k)); }) {} dh.cpp:_ZNK5Botan12_GLOBAL__N_115DH_KA_Operation12powermod_x_pERKNS_6BigIntE: 126| 544| BigInt powermod_x_p(const BigInt& v) const { return group().power_b_p(v, m_key->private_key(), m_key_bits); } dh.cpp:_ZNK5Botan12_GLOBAL__N_115DH_KA_Operation5groupEv: 124| 1.36k| const DL_Group& group() const { return m_key->group(); } dh.cpp:_ZN5Botan12_GLOBAL__N_115DH_KA_Operation9raw_agreeEPKhm: 133| 272|secure_vector DH_KA_Operation::raw_agree(const uint8_t w[], size_t w_len) { 134| 272| BigInt v = BigInt::from_bytes(std::span{w, w_len}); 135| | 136| 272| if(v <= 1 || v >= group().get_p() - 1) { ------------------ | Branch (136:7): [True: 0, False: 272] | Branch (136:7): [True: 0, False: 272] | Branch (136:17): [True: 0, False: 272] ------------------ 137| 0| throw Invalid_Argument("DH agreement - invalid key provided"); 138| 0| } 139| | 140| 272| v = m_blinder.blind(v); 141| 272| v = powermod_x_p(v); 142| 272| v = m_blinder.unblind(v); 143| | 144| 272| return v.serialize>(group().p_bytes()); 145| 272|} _ZN5Botan12DL_PublicKeyC2ERKNS_8DL_GroupERKNS_6BigIntE: 49| 588| m_group(group), m_public_key(check_dl_public_key_input(public_key, m_group)) {} _ZN5Botan12DL_PublicKeyC2ERKNS_19AlgorithmIdentifierENSt3__14spanIKhLm18446744073709551615EEENS_15DL_Group_FormatE: 54| 5| m_group(alg_id.parameters(), format), 55| 5| m_public_key(check_dl_public_key_input(decode_single_bigint(key_bits), m_group)) {} _ZNK5Botan12DL_PublicKey19public_key_as_bytesEv: 57| 544|std::vector DL_PublicKey::public_key_as_bytes() const { 58| 544| return m_public_key.serialize(m_group.p_bytes()); 59| 544|} _ZNK5Botan12DL_PublicKey6p_bitsEv: 75| 272|size_t DL_PublicKey::p_bits() const { 76| 272| return m_group.p_bits(); 77| 272|} _ZN5Botan13DL_PrivateKeyC2ERKNS_8DL_GroupERNS_21RandomNumberGeneratorE: 85| 316| m_group(group), 86| 316| m_private_key(generate_private_dl_key(group, rng)), 87| 316| m_public_key(m_group.power_g_p(m_private_key, m_private_key.bits())) {} _ZNK5Botan13DL_PrivateKey10public_keyEv: 108| 316|std::shared_ptr DL_PrivateKey::public_key() const { 109| 316| return std::make_shared(m_group, m_public_key); 110| 316|} dl_scheme.cpp:_ZN5Botan12_GLOBAL__N_125check_dl_public_key_inputERKNS_6BigIntERKNS_8DL_GroupE: 38| 588|BigInt check_dl_public_key_input(const BigInt& y, const DL_Group& group) { 39| | // The subgroup check (y^q == 1 mod p) is deferred to check_key() since it can be expensive 40| 588| if(y <= 1 || y >= group.get_p() - 1) { ------------------ | Branch (40:7): [True: 0, False: 588] | Branch (40:7): [True: 0, False: 588] | Branch (40:17): [True: 0, False: 588] ------------------ 41| 0| throw Decoding_Error("Invalid DL public key"); 42| 0| } 43| 588| return y; 44| 588|} dl_scheme.cpp:_ZN5Botan12_GLOBAL__N_123generate_private_dl_keyERKNS_8DL_GroupERNS_21RandomNumberGeneratorE: 23| 316|BigInt generate_private_dl_key(const DL_Group& group, RandomNumberGenerator& rng) { 24| 316| if(group.has_q() && group.q_bits() >= 160 && group.q_bits() <= 384) { ------------------ | Branch (24:7): [True: 0, False: 316] | Branch (24:24): [True: 0, False: 0] | Branch (24:49): [True: 0, False: 0] ------------------ 25| 0| return BigInt::random_integer(rng, BigInt::from_s32(2), group.get_q()); 26| 316| } else { 27| 316| return BigInt(rng, group.exponent_bits()); 28| 316| } 29| 316|} _ZN5Botan8DL_Group19DER_decode_DL_groupENSt3__14spanIKhLm18446744073709551615EEENS_15DL_Group_FormatENS_15DL_Group_SourceE: 170| 5| DL_Group_Source source) { 171| 5| BER_Decoder outer(data, BER_Decoder::Limits::DER()); 172| 5| BER_Decoder inner = outer.start_sequence(); 173| 5| outer.verify_end(); 174| | 175| 5| if(format == DL_Group_Format::ANSI_X9_57) { ------------------ | Branch (175:7): [True: 1, False: 4] ------------------ 176| | /* 177| | This format is p, q, g with no additional data following 178| | */ 179| 1| BigInt p; 180| 1| BigInt q; 181| 1| BigInt g; 182| 1| inner.decode(p).decode(q).decode(g).verify_end(); 183| 1| return DL_Group_Data::create(p, q, g, source); 184| 4| } else if(format == DL_Group_Format::ANSI_X9_42) { ------------------ | Branch (184:14): [True: 1, False: 3] ------------------ 185| | /* 186| | This format is p, g, q with optional cofactor and seed following 187| | */ 188| 1| BigInt p; 189| 1| BigInt g; 190| 1| BigInt q; 191| 1| inner.decode(p).decode(g).decode(q).discard_remaining(); 192| 1| return DL_Group_Data::create(p, q, g, source); 193| 3| } else if(format == DL_Group_Format::PKCS_3) { ------------------ | Branch (193:14): [True: 0, False: 3] ------------------ 194| | /* 195| | This format is p, g followed by optional privateValueLength (recommended exponent size) 196| | */ 197| 0| BigInt p; 198| 0| BigInt g; 199| 0| inner.decode(p).decode(g).discard_remaining(); 200| 0| return DL_Group_Data::create(p, g, source); 201| 3| } else { 202| 3| throw Invalid_Argument("Unknown DL_Group encoding"); 203| 3| } 204| 5|} _ZN5Botan8DL_Group18load_DL_group_infoEPKcS2_: 220| 292|std::shared_ptr DL_Group::load_DL_group_info(const char* p_str, const char* g_str) { 221| 292| const BigInt p(p_str); 222| 292| const BigInt q = (p - 1) / 2; 223| 292| const BigInt g(g_str); 224| | 225| 292| return DL_Group_Data::create(p, q, g, DL_Group_Source::Builtin); 226| 292|} _ZN5Botan8DL_Group9from_nameENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 266| 292|DL_Group DL_Group::from_name(std::string_view name) { 267| 292| const auto data = DL_group_info(name); 268| | 269| 292| if(!data) { ------------------ | Branch (269:7): [True: 0, False: 292] ------------------ 270| 0| throw Invalid_Argument(fmt("DL_Group: Unknown group '{}'", name)); 271| 0| } 272| | 273| 292| return DL_Group(data); 274| 292|} _ZN5Botan8DL_GroupC2ERKNS_6BigIntES3_: 398| 540|DL_Group::DL_Group(const BigInt& p, const BigInt& g) { 399| 540| m_data = DL_Group_Data::create(p, g, DL_Group_Source::ExternalSource); 400| 540|} _ZNK5Botan8DL_Group4dataEv: 413| 38.2k|const DL_Group_Data& DL_Group::data() const { 414| 38.2k| if(m_data) { ------------------ | Branch (414:7): [True: 38.2k, False: 0] ------------------ 415| 38.2k| return *m_data; 416| 38.2k| } 417| | 418| 0| throw Invalid_State("DL_Group uninitialized"); 419| 38.2k|} _ZNK5Botan8DL_Group12verify_groupERNS_21RandomNumberGeneratorEb: 470| 530|bool DL_Group::verify_group(RandomNumberGenerator& rng, bool strong) const { 471| 530| const bool from_builtin = (source() == DL_Group_Source::Builtin); 472| | 473| 530| if(!strong && from_builtin) { ------------------ | Branch (473:7): [True: 530, False: 0] | Branch (473:18): [True: 0, False: 530] ------------------ 474| 0| return true; 475| 0| } 476| | 477| 530| const BigInt& p = get_p(); 478| 530| const BigInt& q = get_q(); 479| 530| const BigInt& g = get_g(); 480| | 481| 530| if(g < 2 || p < 3 || q < 0) { ------------------ | Branch (481:7): [True: 0, False: 530] | Branch (481:16): [True: 0, False: 530] | Branch (481:25): [True: 0, False: 530] ------------------ 482| 0| return false; 483| 0| } 484| | 485| 530| const size_t test_prob = strong ? 128 : 12; ------------------ | Branch (485:29): [True: 0, False: 530] ------------------ 486| 530| const bool is_randomly_generated = (source() != DL_Group_Source::ExternalSource); 487| | 488| 530| if(!is_prime_vartime(p, rng, test_prob, is_randomly_generated)) { ------------------ | Branch (488:7): [True: 214, False: 316] ------------------ 489| 214| return false; 490| 214| } 491| | 492| 316| if(q != 0) { ------------------ | Branch (492:7): [True: 0, False: 316] ------------------ 493| 0| if((p - 1) % q != 0) { ------------------ | Branch (493:10): [True: 0, False: 0] ------------------ 494| 0| return false; 495| 0| } 496| 0| if(data().power_g_p_vartime(q) != 1) { ------------------ | Branch (496:10): [True: 0, False: 0] ------------------ 497| 0| return false; 498| 0| } 499| 0| if(!is_prime_vartime(q, rng, test_prob, is_randomly_generated)) { ------------------ | Branch (499:10): [True: 0, False: 0] ------------------ 500| 0| return false; 501| 0| } 502| 316| } else { 503| 316| if(!from_builtin && !is_randomly_generated) { ------------------ | Branch (503:10): [True: 316, False: 0] | Branch (503:27): [True: 316, False: 0] ------------------ 504| | // If we got this p,g from some unknown source, try to verify 505| | // that the group order is not too absurdly small. 506| | 507| 316| const size_t upper_bound = strong ? 1000 : 100; ------------------ | Branch (507:37): [True: 0, False: 316] ------------------ 508| | 509| 31.2k| for(size_t i = 2; i != upper_bound; ++i) { ------------------ | Branch (509:28): [True: 30.9k, False: 316] ------------------ 510| 30.9k| if(data().power_g_p_vartime(BigInt::from_word(i)) == 1) { ------------------ | Branch (510:16): [True: 0, False: 30.9k] ------------------ 511| 0| return false; 512| 0| } 513| 30.9k| } 514| 316| } 515| 316| } 516| | 517| 316| return true; 518| 316|} _ZNK5Botan8DL_Group5get_pEv: 523| 2.27k|const BigInt& DL_Group::get_p() const { 524| 2.27k| return data().p(); 525| 2.27k|} _ZNK5Botan8DL_Group5get_gEv: 530| 530|const BigInt& DL_Group::get_g() const { 531| 530| return data().g(); 532| 530|} _ZNK5Botan8DL_Group5get_qEv: 537| 530|const BigInt& DL_Group::get_q() const { 538| 530| return data().q(); 539| 530|} _ZNK5Botan8DL_Group5has_qEv: 545| 316|bool DL_Group::has_q() const { 546| 316| return data().q_is_set(); 547| 316|} _ZNK5Botan8DL_Group6p_bitsEv: 549| 272|size_t DL_Group::p_bits() const { 550| 272| return data().p_bits(); 551| 272|} _ZNK5Botan8DL_Group7p_bytesEv: 553| 816|size_t DL_Group::p_bytes() const { 554| 816| return data().p_bytes(); 555| 816|} _ZNK5Botan8DL_Group13exponent_bitsEv: 571| 316|size_t DL_Group::exponent_bits() const { 572| 316| return data().exponent_bits(); 573| 316|} _ZNK5Botan8DL_Group13inverse_mod_pERKNS_6BigIntE: 575| 272|BigInt DL_Group::inverse_mod_p(const BigInt& x) const { 576| | // precompute?? 577| 272| return inverse_mod_public_prime(x, get_p()); 578| 272|} _ZNK5Botan8DL_Group14_reducer_mod_pEv: 588| 272|const Barrett_Reduction& DL_Group::_reducer_mod_p() const { 589| 272| return data().reducer_mod_p(); 590| 272|} _ZNK5Botan8DL_Group9power_g_pERKNS_6BigIntEm: 622| 316|BigInt DL_Group::power_g_p(const BigInt& x, size_t max_x_bits) const { 623| 316| return data().power_g_p(x, max_x_bits); 624| 316|} _ZNK5Botan8DL_Group9power_b_pERKNS_6BigIntES3_m: 632| 544|BigInt DL_Group::power_b_p(const BigInt& b, const BigInt& x, size_t max_x_bits) const { 633| 544| return data().power_b_p(b, x, max_x_bits); 634| 544|} _ZNK5Botan8DL_Group6sourceEv: 636| 1.06k|DL_Group_Source DL_Group::source() const { 637| 1.06k| return data().source(); 638| 1.06k|} _ZN5Botan8DL_GroupC2ENSt3__14spanIKhLm18446744073709551615EEENS_15DL_Group_FormatE: 681| 5|DL_Group::DL_Group(std::span der, DL_Group_Format format) { 682| 5| m_data = DER_decode_DL_group(der, format, DL_Group_Source::ExternalSource); 683| 5|} _ZN5Botan13DL_Group_Data6createERKNS_6BigIntES3_S3_NS_15DL_Group_SourceE: 52| 292| DL_Group_Source source) { 53| 292| check_dl_group_params(p, q, g); 54| 292| return std::make_shared(p, q, g, source); 55| 292| } dl_group.cpp:_ZN5Botan12_GLOBAL__N_121check_dl_group_paramsERKNS_6BigIntES3_S3_: 38| 292|void check_dl_group_params(const BigInt& p, const BigInt& q, const BigInt& g) { 39| 292| check_dl_group_params(p, g); 40| 292| if(q.signum() <= 0 || q.is_even() || q.bits() >= p.bits()) { ------------------ | Branch (40:7): [True: 0, False: 292] | Branch (40:26): [True: 0, False: 292] | Branch (40:41): [True: 0, False: 292] ------------------ 41| 0| throw Decoding_Error("Invalid DL group subgroup order"); 42| 0| } 43| 292|} dl_group.cpp:_ZN5Botan12_GLOBAL__N_121check_dl_group_paramsERKNS_6BigIntES3_: 29| 832|void check_dl_group_params(const BigInt& p, const BigInt& g) { 30| 832| if(p.signum() <= 0 || p.is_even() || p.bits() < 3 || p.bits() > 16384) { ------------------ | Branch (30:7): [True: 0, False: 832] | Branch (30:26): [True: 6, False: 826] | Branch (30:41): [True: 0, False: 826] | Branch (30:57): [True: 0, False: 826] ------------------ 31| 6| throw Decoding_Error("Invalid DL group prime"); 32| 6| } 33| 826| if(g.signum() <= 0 || g < 2 || g >= p) { ------------------ | Branch (33:7): [True: 1, False: 825] | Branch (33:26): [True: 1, False: 824] | Branch (33:35): [True: 2, False: 822] ------------------ 34| 4| throw Decoding_Error("Invalid DL group generator"); 35| 4| } 36| 826|} _ZN5Botan13DL_Group_DataC2ERKNS_6BigIntES3_S3_NS_15DL_Group_SourceE: 65| 292| m_p(p), 66| 292| m_q(q), 67| 292| m_g(g), 68| 292| m_mod_p(Barrett_Reduction::for_public_modulus(p)), 69| 292| m_mod_q(Barrett_Reduction::for_public_modulus(q)), 70| 292| m_monty_params(m_p, m_mod_p), 71| 292| m_monty(monty_precompute(m_monty_params, m_g, /*window bits=*/4)), 72| 292| m_p_bits(p.bits()), 73| 292| m_q_bits(q.bits()), 74| | // For DL crypto in a prime-order subgroup, security is bounded by 75| | // both the NFS cost in Z_p* and Pollard rho in the q-order subgroup. 76| 292| m_estimated_strength(std::min(dl_work_factor(m_p_bits), m_q_bits / 2)), 77| 292| m_exponent_bits(dl_exponent_size(m_p_bits)), 78| 292| m_source(source) {} _ZN5Botan13DL_Group_DataD2Ev: 94| 822| ~DL_Group_Data() = default; _ZN5Botan13DL_Group_Data6createERKNS_6BigIntES3_NS_15DL_Group_SourceE: 57| 540| static std::shared_ptr create(const BigInt& p, const BigInt& g, DL_Group_Source source) { 58| 540| check_dl_group_params(p, g); 59| 540| return std::make_shared(p, g, source); 60| 540| } _ZN5Botan13DL_Group_DataC2ERKNS_6BigIntES3_NS_15DL_Group_SourceE: 83| 530| m_p(p), 84| 530| m_g(g), 85| 530| m_mod_p(Barrett_Reduction::for_public_modulus(p)), 86| 530| m_monty_params(m_p, m_mod_p), 87| 530| m_monty(monty_precompute(m_monty_params, m_g, /*window bits=*/4)), 88| 530| m_p_bits(p.bits()), 89| 530| m_q_bits(0), 90| 530| m_estimated_strength(dl_work_factor(m_p_bits)), 91| 530| m_exponent_bits(dl_exponent_size(m_p_bits)), 92| 530| m_source(source) {} _ZNK5Botan13DL_Group_Data17power_g_p_vartimeERKNS_6BigIntE: 132| 30.9k| BigInt power_g_p_vartime(const BigInt& k) const { return monty_execute_vartime(*m_monty, k).value(); } _ZNK5Botan13DL_Group_Data1pEv: 101| 2.27k| const BigInt& p() const { return m_p; } _ZNK5Botan13DL_Group_Data1gEv: 105| 530| const BigInt& g() const { return m_g; } _ZNK5Botan13DL_Group_Data1qEv: 103| 530| const BigInt& q() const { return m_q; } _ZNK5Botan13DL_Group_Data8q_is_setEv: 142| 316| bool q_is_set() const { return m_q_bits > 0; } _ZNK5Botan13DL_Group_Data6p_bitsEv: 116| 272| size_t p_bits() const { return m_p_bits; } _ZNK5Botan13DL_Group_Data7p_bytesEv: 120| 816| size_t p_bytes() const { return (m_p_bits + 7) / 8; } _ZNK5Botan13DL_Group_Data13exponent_bitsEv: 126| 316| size_t exponent_bits() const { return m_exponent_bits; } _ZNK5Botan13DL_Group_Data13reducer_mod_pEv: 107| 272| const Barrett_Reduction& reducer_mod_p() const { return m_mod_p; } _ZNK5Botan13DL_Group_Data9power_g_pERKNS_6BigIntEm: 128| 316| BigInt power_g_p(const BigInt& k, size_t max_k_bits) const { 129| 316| return monty_execute(*m_monty, k, max_k_bits).value(); 130| 316| } _ZNK5Botan13DL_Group_Data9power_b_pERKNS_6BigIntES3_m: 134| 544| BigInt power_b_p(const BigInt& b, const BigInt& k, size_t max_k_bits) const { 135| 544| return monty_exp(m_monty_params, b, k, max_k_bits).value(); 136| 544| } _ZNK5Botan13DL_Group_Data6sourceEv: 150| 1.06k| DL_Group_Source source() const { return m_source; } _ZN5Botan8DL_Group13DL_group_infoENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 13| 292|std::shared_ptr DL_Group::DL_group_info(std::string_view name) { 14| | /* TLS FFDHE groups */ 15| | 16| 292| if(name == "ffdhe/ietf/2048") { ------------------ | Branch (16:7): [True: 137, False: 155] ------------------ 17| 137| return load_DL_group_info( 18| 137| "0x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| 137| "0x2"); 20| 137| } 21| | 22| 155| if(name == "ffdhe/ietf/3072") { ------------------ | Branch (22:7): [True: 9, False: 146] ------------------ 23| 9| return load_DL_group_info( 24| 9| "0xFFFFFFFFFFFFFFFFADF85458A2BB4A9AAFDC5620273D3CF1D8B9C583CE2D3695A9E13641146433FBCC939DCE249B3EF97D2FE363630C75D8F681B202AEC4617AD3DF1ED5D5FD65612433F51F5F066ED0856365553DED1AF3B557135E7F57C935984F0C70E0E68B77E2A689DAF3EFE8721DF158A136ADE73530ACCA4F483A797ABC0AB182B324FB61D108A94BB2C8E3FBB96ADAB760D7F4681D4F42A3DE394DF4AE56EDE76372BB190B07A7C8EE0A6D709E02FCE1CDF7E2ECC03404CD28342F619172FE9CE98583FF8E4F1232EEF28183C3FE3B1B4C6FAD733BB5FCBC2EC22005C58EF1837D1683B2C6F34A26C1B2EFFA886B4238611FCFDCDE355B3B6519035BBC34F4DEF99C023861B46FC9D6E6C9077AD91D2691F7F7EE598CB0FAC186D91CAEFE130985139270B4130C93BC437944F4FD4452E2D74DD364F2E21E71F54BFF5CAE82AB9C9DF69EE86D2BC522363A0DABC521979B0DEADA1DBF9A42D5C4484E0ABCD06BFA53DDEF3C1B20EE3FD59D7C25E41D2B66C62E37FFFFFFFFFFFFFFFF", 25| 9| "0x2"); 26| 9| } 27| | 28| 146| if(name == "ffdhe/ietf/4096") { ------------------ | Branch (28:7): [True: 0, False: 146] ------------------ 29| 0| return load_DL_group_info( 30| 0| "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| 0| "0x2"); 32| 0| } 33| | 34| 146| if(name == "ffdhe/ietf/6144") { ------------------ | Branch (34:7): [True: 0, False: 146] ------------------ 35| 0| return load_DL_group_info( 36| 0| "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| 0| "0x2"); 38| 0| } 39| | 40| 146| if(name == "ffdhe/ietf/8192") { ------------------ | Branch (40:7): [True: 0, False: 146] ------------------ 41| 0| return load_DL_group_info( 42| 0| "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x2"); 43| 0| } 44| | 45| | /* IETF IPsec groups */ 46| | 47| 146| if(name == "modp/ietf/1024") { ------------------ | Branch (47:7): [True: 0, False: 146] ------------------ 48| 0| return load_DL_group_info( 49| 0| "0xFFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E088A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE649286651ECE65381FFFFFFFFFFFFFFFF", 50| 0| "0x2"); 51| 0| } 52| | 53| 146| if(name == "modp/ietf/1536") { ------------------ | Branch (53:7): [True: 0, False: 146] ------------------ 54| 0| return load_DL_group_info( 55| 0| "0xFFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E088A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3DC2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F83655D23DCA3AD961C62F356208552BB9ED529077096966D670C354E4ABC9804F1746C08CA237327FFFFFFFFFFFFFFFF", 56| 0| "0x2"); 57| 0| } 58| | 59| 146| if(name == "modp/ietf/2048") { ------------------ | Branch (59:7): [True: 137, False: 9] ------------------ 60| 137| return load_DL_group_info( 61| 137| "0x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| 137| "0x2"); 63| 137| } 64| | 65| 9| if(name == "modp/ietf/3072") { ------------------ | Branch (65:7): [True: 9, False: 0] ------------------ 66| 9| return load_DL_group_info( 67| 9| "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| 9| "0x2"); 69| 9| } 70| | 71| 0| if(name == "modp/ietf/4096") { ------------------ | Branch (71:7): [True: 0, False: 0] ------------------ 72| 0| return load_DL_group_info( 73| 0| "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| 0| "0x2"); 75| 0| } 76| | 77| 0| if(name == "modp/ietf/6144") { ------------------ | Branch (77:7): [True: 0, False: 0] ------------------ 78| 0| return load_DL_group_info( 79| 0| "0xFFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E088A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3DC2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F83655D23DCA3AD961C62F356208552BB9ED529077096966D670C354E4ABC9804F1746C08CA18217C32905E462E36CE3BE39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9DE2BCBF6955817183995497CEA956AE515D2261898FA051015728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6BF12FFA06D98A0864D87602733EC86A64521F2B18177B200CBBE117577A615D6C770988C0BAD946E208E24FA074E5AB3143DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D788719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA993B4EA988D8FDDC186FFB7DC90A6C08F4DF435C93402849236C3FAB4D27C7026C1D4DCB2602646DEC9751E763DBA37BDF8FF9406AD9E530EE5DB382F413001AEB06A53ED9027D831179727B0865A8918DA3EDBEBCF9B14ED44CE6CBACED4BB1BDB7F1447E6CC254B332051512BD7AF426FB8F401378CD2BF5983CA01C64B92ECF032EA15D1721D03F482D7CE6E74FEF6D55E702F46980C82B5A84031900B1C9E59E7C97FBEC7E8F323A97A7E36CC88BE0F1D45B7FF585AC54BD407B22B4154AACC8F6D7EBF48E1D814CC5ED20F8037E0A79715EEF29BE32806A1D58BB7C5DA76F550AA3D8A1FBFF0EB19CCB1A313D55CDA56C9EC2EF29632387FE8D76E3C0468043E8F663F4860EE12BF2D5B0B7474D6E694F91E6DCC4024FFFFFFFFFFFFFFFF", 80| 0| "0x2"); 81| 0| } 82| | 83| 0| if(name == "modp/ietf/8192") { ------------------ | Branch (83:7): [True: 0, False: 0] ------------------ 84| 0| return load_DL_group_info( 85| 0| "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x2"); 86| 0| } 87| | 88| | /* SRP groups 89| | 90| | SRP groups have a p st (p-1)/2 is prime, but g is not a generator 91| | of subgroup of size q, so set q == 0 to bypass generator check 92| | 93| | Missing q doesn't matter for SRP, and nothing but SRP should be 94| | using these parameters. 95| | */ 96| | 97| 0| if(name == "modp/srp/1024") { ------------------ | Branch (97:7): [True: 0, False: 0] ------------------ 98| 0| return load_DL_group_info( 99| 0| "0xEEAF0AB9ADB38DD69C33F80AFA8FC5E86072618775FF3C0B9EA2314C9C256576D674DF7496EA81D3383B4813D692C6E0E0D5D8E250B98BE48E495C1D6089DAD15DC7D7B46154D6B6CE8EF4AD69B15D4982559B297BCF1885C529F566660E57EC68EDBC3C05726CC02FD4CBF4976EAA9AFD5138FE8376435B9FC61D2FC0EB06E3", 100| 0| "0", 101| 0| "0x2"); 102| 0| } 103| | 104| 0| if(name == "modp/srp/1536") { ------------------ | Branch (104:7): [True: 0, False: 0] ------------------ 105| 0| return load_DL_group_info( 106| 0| "0x9DEF3CAFB939277AB1F12A8617A47BBBDBA51DF499AC4C80BEEEA9614B19CC4D5F4F5F556E27CBDE51C6A94BE4607A291558903BA0D0F84380B655BB9A22E8DCDF028A7CEC67F0D08134B1C8B97989149B609E0BE3BAB63D47548381DBC5B1FC764E3F4B53DD9DA1158BFD3E2B9C8CF56EDF019539349627DB2FD53D24B7C48665772E437D6C7F8CE442734AF7CCB7AE837C264AE3A9BEB87F8A2FE9B8B5292E5A021FFF5E91479E8CE7A28C2442C6F315180F93499A234DCF76E3FED135F9BB", 107| 0| "0", 108| 0| "0x2"); 109| 0| } 110| | 111| 0| if(name == "modp/srp/2048") { ------------------ | Branch (111:7): [True: 0, False: 0] ------------------ 112| 0| return load_DL_group_info( 113| 0| "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| 0| "0", 115| 0| "0x2"); 116| 0| } 117| | 118| 0| if(name == "modp/srp/3072") { ------------------ | Branch (118:7): [True: 0, False: 0] ------------------ 119| 0| return load_DL_group_info( 120| 0| "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| 0| "0", 122| 0| "0x5"); 123| 0| } 124| | 125| 0| if(name == "modp/srp/4096") { ------------------ | Branch (125:7): [True: 0, False: 0] ------------------ 126| 0| return load_DL_group_info( 127| 0| "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| 0| "0", 129| 0| "0x5"); 130| 0| } 131| | 132| 0| if(name == "modp/srp/6144") { ------------------ | Branch (132:7): [True: 0, False: 0] ------------------ 133| 0| return load_DL_group_info( 134| 0| "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| 0| "0", 136| 0| "0x5"); 137| 0| } 138| | 139| 0| if(name == "modp/srp/8192") { ------------------ | Branch (139:7): [True: 0, False: 0] ------------------ 140| 0| return load_DL_group_info( 141| 0| "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x13"); 142| 0| } 143| | 144| | /* DSA groups */ 145| | 146| 0| if(name == "dsa/jce/1024") { ------------------ | Branch (146:7): [True: 0, False: 0] ------------------ 147| 0| return load_DL_group_info( 148| 0| "0xFD7F53811D75122952DF4A9C2EECE4E7F611B7523CEF4400C31E3F80B6512669455D402251FB593D8D58FABFC5F5BA30F6CB9B556CD7813B801D346FF26660B76B9950A5A49F9FE8047B1022C24FBBA9D7FEB7C61BF83B57E7C6A8A6150F04FB83F6D3C51EC3023554135A169132F675F3AE2B61D72AEFF22203199DD14801C7", 149| 0| "0x9760508F15230BCCB292B982A2EB840BF0581CF5", 150| 0| "0x469603512E30278CD3947595DB22EEC9826A6322ADC97344F41D740C325724C8F9EFBAA7D4D803FF8C609DCD100EBC5BDFCFAD7C6A425FAEA786EA2050EBE98351EA1FDA1FDF24D6947AA6B9AA23766953802F4D7D4A8ECBA06D19768A2491FFB16D0EF9C43A99B5F71672FF6F0A24B444D0736D04D38A1A1322DAF6CDD88C9D"); 151| 0| } 152| | 153| 0| if(name == "dsa/botan/2048") { ------------------ | Branch (153:7): [True: 0, False: 0] ------------------ 154| 0| return load_DL_group_info( 155| 0| "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| 0| "0x8CD7D450F86F0AD94EEE4CE469A8756D1EBD1058241943EAFFB0B354585E924D", 157| 0| "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| 0| } 159| | 160| 0| if(name == "dsa/botan/3072") { ------------------ | Branch (160:7): [True: 0, False: 0] ------------------ 161| 0| return load_DL_group_info("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xB3EBD364EC69EF8CF3BAF643B75734B16339B2E49E5CDE1B59C1E9FB40EE0C5B", "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| 0| } 163| | 164| 0| return std::shared_ptr(); 165| 0|} _ZN5Botan13DSA_PublicKeyC1ERKNS_19AlgorithmIdentifierENSt3__14spanIKhLm18446744073709551615EEE: 85| 2|DSA_PublicKey::DSA_PublicKey(const AlgorithmIdentifier& alg_id, std::span key_bits) { 86| 2| m_public_key = std::make_shared(alg_id, key_bits, DL_Group_Format::ANSI_X9_57); 87| | 88| 2| check_dsa_group(m_public_key->group()); 89| 2|} _ZN5Botan14EC_AffinePointC2ENSt3__110unique_ptrINS_19EC_AffinePoint_DataENS1_14default_deleteIS3_EEEE: 16| 600|EC_AffinePoint::EC_AffinePoint(std::unique_ptr point) : m_point(std::move(point)) { 17| 600| BOTAN_ASSERT_NONNULL(m_point); ------------------ | | 123| 600| do { \ | | 124| 600| if((ptr) == nullptr) { \ | | ------------------ | | | Branch (124:10): [True: 0, False: 600] | | ------------------ | | 125| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 126| 0| Botan::assertion_failure(#ptr " is not null", "", __func__, __FILE__, __LINE__); \ | | 127| 0| } \ | | 128| 600| } while(0) | | ------------------ | | | Branch (128:12): [Folded, False: 600] | | ------------------ ------------------ 18| 600|} _ZN5Botan14EC_AffinePointC2EOS0_: 22| 1.20k|EC_AffinePoint::EC_AffinePoint(EC_AffinePoint&& other) noexcept : m_point(std::move(other.m_point)) {} _ZNK5Botan14EC_AffinePoint15to_legacy_pointEv: 46| 600|EC_Point EC_AffinePoint::to_legacy_point() const { 47| 600| return m_point->to_legacy_point(); 48| 600|} _ZNK5Botan14EC_AffinePoint11is_identityEv: 118| 600|bool EC_AffinePoint::is_identity() const { 119| 600| return inner().is_identity(); 120| 600|} _ZN5Botan14EC_AffinePointD2Ev: 152| 1.80k|EC_AffinePoint::~EC_AffinePoint() = default; _ZN5Botan14EC_AffinePoint22deserialize_compressedERKNS_8EC_GroupENSt3__14spanIKhLm18446744073709551615EEE: 195| 920| std::span bytes) { 196| 920| if(auto pt = group._data()->point_deserialize_compressed(bytes)) { ------------------ | Branch (196:12): [True: 0, False: 920] ------------------ 197| 0| return EC_AffinePoint(std::move(pt)); 198| 920| } else { 199| 920| return {}; 200| 920| } 201| 920|} _ZN5Botan14EC_AffinePoint24deserialize_uncompressedERKNS_8EC_GroupENSt3__14spanIKhLm18446744073709551615EEE: 204| 924| std::span bytes) { 205| 924| if(auto pt = group._data()->point_deserialize_uncompressed(bytes)) { ------------------ | Branch (205:12): [True: 4, False: 920] ------------------ 206| 4| return EC_AffinePoint(std::move(pt)); 207| 920| } else { 208| 920| return {}; 209| 920| } 210| 924|} _ZN5Botan14EC_AffinePoint5g_mulERKNS_9EC_ScalarERNS_21RandomNumberGeneratorE: 212| 596|EC_AffinePoint EC_AffinePoint::g_mul(const EC_Scalar& scalar, RandomNumberGenerator& rng) { 213| 596| auto pt = scalar._inner().group()->point_g_mul(scalar.inner(), rng); 214| 596| return EC_AffinePoint(std::move(pt)); 215| 596|} _ZNK5Botan14EC_AffinePoint6_groupEv: 292| 600|const std::shared_ptr& EC_AffinePoint::_group() const { 293| 600| return inner().group(); 294| 600|} _ZN5Botan8EC_Group13ec_group_dataEv: 240| 1.57k|EC_Group_Data_Map& EC_Group::ec_group_data() { 241| | /* 242| | * This exists purely to ensure the allocator is constructed before g_ec_data, 243| | * which ensures that its destructor runs after ~g_ec_data is complete. 244| | */ 245| | 246| 1.57k| static const Allocator_Initializer g_init_allocator; 247| 1.57k| static EC_Group_Data_Map g_ec_data; 248| 1.57k| return g_ec_data; 249| 1.57k|} _ZN5Botan8EC_Group18load_EC_group_infoEPKcS2_S2_S2_S2_S2_RKNS_3OIDE: 263| 13| const OID& oid) { 264| 13| BOTAN_ARG_CHECK(oid.has_value(), "EC_Group::load_EC_group_info OID must be set"); ------------------ | | 35| 13| do { \ | | 36| 13| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 13| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 13] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 13| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 13] | | ------------------ ------------------ 265| | 266| 13| const BigInt p(p_str); 267| 13| const BigInt a(a_str); 268| 13| const BigInt b(b_str); 269| 13| const BigInt g_x(g_x_str); 270| 13| const BigInt g_y(g_y_str); 271| 13| const BigInt order(order_str); 272| 13| const BigInt cofactor(1); // implicit 273| | 274| 13| return EC_Group_Data::create(p, a, b, g_x, g_y, order, cofactor, oid, EC_Group_Source::Builtin); 275| 13|} _ZN5Botan8EC_Group19DER_decode_EC_groupENSt3__14spanIKhLm18446744073709551615EEENS_15EC_Group_SourceE: 279| 395| EC_Group_Source source) { 280| 395| BER_Decoder dec(der, BER_Decoder::Limits::DER()); 281| | 282| 395| const auto next_obj_type = dec.peek_next_object().type_tag(); 283| | 284| 395| if(next_obj_type == ASN1_Type::ObjectId) { ------------------ | Branch (284:7): [True: 389, False: 6] ------------------ 285| 389| OID oid; 286| 389| dec.decode(oid).verify_end(); 287| | 288| 389| const auto data = ec_group_data().lookup(oid); 289| 389| if(!data) { ------------------ | Branch (289:10): [True: 58, False: 331] ------------------ 290| 58| throw Decoding_Error(fmt("Unknown namedCurve OID '{}'", oid.to_string())); 291| 58| } 292| | 293| 331| return std::make_pair(data, false); 294| 389| } else if(next_obj_type == ASN1_Type::Sequence) { ------------------ | Branch (294:14): [True: 5, False: 1] ------------------ 295| 5| BigInt p; 296| 5| BigInt a; 297| 5| BigInt b; 298| 5| BigInt order; 299| 5| BigInt cofactor; 300| 5| std::vector base_pt; 301| 5| std::vector seed; 302| | 303| 5| dec.start_sequence() 304| 5| .decode_and_check(1, "Unknown ECC param version code") 305| 5| .start_sequence() 306| 5| .decode_and_check(OID({1, 2, 840, 10045, 1, 1}), "Only prime ECC fields supported") 307| 5| .decode(p) 308| 5| .end_cons() 309| 5| .start_sequence() 310| 5| .decode_octet_string_bigint(a) 311| 5| .decode_octet_string_bigint(b) 312| 5| .decode_optional_string(seed, ASN1_Type::BitString, ASN1_Type::BitString, ASN1_Class::Universal) 313| 5| .end_cons() 314| 5| .decode(base_pt, ASN1_Type::OctetString) 315| 5| .decode(order) 316| 5| .decode(cofactor) 317| 5| .end_cons() 318| 5| .verify_end(); 319| | 320| | // TODO(Botan4) Require cofactor == 1 321| 5| if(cofactor <= 0 || cofactor >= 16) { ------------------ | Branch (321:10): [True: 5, False: 0] | Branch (321:27): [True: 0, False: 0] ------------------ 322| 0| throw Decoding_Error("Invalid ECC cofactor parameter"); 323| 0| } 324| | 325| 5| if(p.bits() < 112 || p.bits() > 521 || p.signum() < 0) { ------------------ | Branch (325:10): [True: 5, False: 0] | Branch (325:28): [True: 0, False: 0] | Branch (325:46): [True: 0, False: 0] ------------------ 326| 0| throw Decoding_Error("ECC p parameter is invalid size"); 327| 0| } 328| | 329| | // A can be zero 330| 5| if(a.signum() < 0 || a >= p) { ------------------ | Branch (330:10): [True: 5, False: 0] | Branch (330:28): [True: 0, False: 0] ------------------ 331| 0| throw Decoding_Error("Invalid ECC a parameter"); 332| 0| } 333| | 334| | // B must be > 0 335| | // 336| | // Technically this is not true but we have historically rejected this and 337| | // nobody has noted it as an issue, so it is retained. 338| 5| if(b.signum() <= 0 || b >= p) { ------------------ | Branch (338:10): [True: 5, False: 0] | Branch (338:29): [True: 0, False: 0] ------------------ 339| 0| throw Decoding_Error("Invalid ECC b parameter"); 340| 0| } 341| | 342| 5| if(order.signum() <= 0 || order >= 2 * p) { ------------------ | Branch (342:10): [True: 5, False: 0] | Branch (342:10): [True: 0, False: 5] | Branch (342:33): [True: 0, False: 0] ------------------ 343| 0| throw Decoding_Error("Invalid ECC group order"); 344| 0| } 345| | 346| 5| if(p == order) { ------------------ | Branch (346:10): [True: 0, False: 5] ------------------ 347| 0| throw Decoding_Error("Anomalous elliptic curves are not supported"); 348| 0| } 349| | 350| 5| if(const auto data = ec_group_data().lookup_from_params(p, a, b, base_pt, order, cofactor)) { ------------------ | Branch (350:21): [True: 0, False: 5] ------------------ 351| 0| return std::make_pair(data, true); 352| 0| } 353| | 354| | /* 355| | TODO(Botan4) the remaining code is used only to handle the case of decoding an EC_Group 356| | which is neither a builtin group nor a group that was registered by the application. 357| | It can all be removed and replaced with a throw 358| | */ 359| | 360| 5| const auto mod_p = Barrett_Reduction::for_public_modulus(p); 361| 5| if(!is_bailie_psw_probable_prime_vartime(p)) { ------------------ | Branch (361:10): [True: 0, False: 5] ------------------ 362| 0| throw Decoding_Error("ECC p parameter is not a prime"); 363| 0| } 364| | 365| 5| if(!is_bailie_psw_probable_prime_vartime(order)) { ------------------ | Branch (365:10): [True: 0, False: 5] ------------------ 366| 0| throw Decoding_Error("Invalid ECC order parameter"); 367| 0| } 368| | 369| 5| if((p - cofactor * order).abs().bits() > (p.bits() / 2) + 1) { ------------------ | Branch (369:10): [True: 0, False: 5] ------------------ 370| 0| throw Decoding_Error("Invalid ECC Hasse bound"); 371| 0| } 372| | 373| 5| const auto discriminant = mod_p.reduce(mod_p.multiply(BigInt::from_s32(4), mod_p.cube(a)) + 374| 5| mod_p.multiply(BigInt::from_s32(27), mod_p.square(b))); 375| 5| if(discriminant == 0) { ------------------ | Branch (375:10): [True: 0, False: 5] ------------------ 376| 0| throw Decoding_Error("Invalid ECC curve discriminant"); 377| 0| } 378| | 379| 5| const size_t p_bytes = p.bytes(); 380| 5| if(base_pt.size() != 1 + p_bytes && base_pt.size() != 1 + 2 * p_bytes) { ------------------ | Branch (380:10): [True: 0, False: 5] | Branch (380:43): [True: 0, False: 0] ------------------ 381| 0| throw Decoding_Error("Invalid ECC base point encoding"); 382| 0| } 383| | 384| 5| auto [g_x, g_y] = [&]() { 385| 5| const uint8_t hdr = base_pt[0]; 386| | 387| 5| if(hdr == 0x04 && base_pt.size() == 1 + 2 * p_bytes) { 388| 5| const BigInt x = BigInt::from_bytes(std::span{base_pt}.subspan(1, p_bytes)); 389| 5| const BigInt y = BigInt::from_bytes(std::span{base_pt}.subspan(1 + p_bytes, p_bytes)); 390| | 391| 5| if(x < p && y < p) { 392| 5| return std::make_pair(x, y); 393| 5| } 394| 5| } else if((hdr == 0x02 || hdr == 0x03) && base_pt.size() == 1 + p_bytes) { 395| | // TODO(Botan4) remove this branch; we won't support compressed points 396| 5| const BigInt x = BigInt::from_bytes(std::span{base_pt}.subspan(1, p_bytes)); 397| 5| BigInt y = sqrt_modulo_prime(((x * x + a) * x + b) % p, p); 398| | 399| 5| if(x < p && y >= 0) { 400| 5| const bool y_mod_2 = (hdr & 0x01) == 1; 401| 5| if(y.get_bit(0) != y_mod_2) { 402| 5| y = p - y; 403| 5| } 404| | 405| 5| return std::make_pair(x, y); 406| 5| } 407| 5| } 408| | 409| 5| throw Decoding_Error("Invalid ECC base point encoding"); 410| 5| }(); 411| | 412| | // TODO(Botan4) we can remove this check since we'll only accept pre-registered groups 413| 5| const auto y2 = mod_p.square(g_y); 414| 5| const auto x3_ax_b = mod_p.reduce(mod_p.cube(g_x) + mod_p.multiply(a, g_x) + b); 415| 5| if(y2 != x3_ax_b) { ------------------ | Branch (415:10): [True: 0, False: 5] ------------------ 416| 0| throw Decoding_Error("Invalid ECC base point"); 417| 0| } 418| | 419| | /* 420| | * Create the group data without registering it in the global map. 421| | * 422| | * Applications that need persistent custom groups should register them 423| | * via the relevant EC_Group constructor 424| | */ 425| 5| const auto data = EC_Group_Data::create(p, a, b, g_x, g_y, order, cofactor, OID(), source); 426| | 427| 5| if(!EC_Group::verify_generator_order(data)) { ------------------ | Branch (427:10): [True: 0, False: 5] ------------------ 428| 0| throw Decoding_Error("ECC generator does not have the claimed order"); 429| 0| } 430| | 431| 5| return std::make_pair(data, true); 432| 5| } else if(next_obj_type == ASN1_Type::Null) { ------------------ | Branch (432:14): [True: 0, False: 1] ------------------ 433| 0| throw Decoding_Error("Decoding ImplicitCA ECC parameters is not supported"); 434| 1| } else { 435| 1| throw Decoding_Error( 436| 1| fmt("Unexpected tag {} while decoding ECC domain params", asn1_tag_to_string(next_obj_type))); 437| 1| } 438| 395|} _ZN5Botan8EC_GroupD2Ev: 442| 4.83k|EC_Group::~EC_Group() = default; _ZN5Botan8EC_GroupC2ERKS0_: 444| 1.52k|EC_Group::EC_Group(const EC_Group&) = default; _ZN5Botan8EC_GroupC2ENSt3__110shared_ptrIKNS_13EC_Group_DataEEE: 449| 1.78k|EC_Group::EC_Group(std::shared_ptr data) : m_data(std::move(data)) {} _ZN5Botan8EC_Group9from_nameENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 529| 1.19k|EC_Group EC_Group::from_name(std::string_view name) { 530| 1.19k| std::shared_ptr data; 531| | 532| 1.19k| if(auto oid = OID::from_name(name)) { ------------------ | Branch (532:12): [True: 1.19k, False: 0] ------------------ 533| 1.19k| data = ec_group_data().lookup(oid.value()); 534| 1.19k| } 535| | 536| 1.19k| if(!data) { ------------------ | Branch (536:7): [True: 0, False: 1.19k] ------------------ 537| 0| throw Invalid_Argument(fmt("Unknown EC_Group '{}'", name)); 538| 0| } 539| | 540| 1.19k| return EC_Group(std::move(data)); 541| 1.19k|} _ZN5Botan8EC_GroupC2ENSt3__14spanIKhLm18446744073709551615EEE: 703| 395|EC_Group::EC_Group(std::span der) { 704| 395| const auto data = DER_decode_EC_group(der, EC_Group_Source::ExternalSource); 705| 395| m_data = data.first; 706| 395| m_explicit_encoding = data.second; 707| 395|} _ZNK5Botan8EC_Group4dataEv: 714| 600|const EC_Group_Data& EC_Group::data() const { 715| 600| if(m_data == nullptr) { ------------------ | Branch (715:7): [True: 0, False: 600] ------------------ 716| 0| throw Invalid_State("EC_Group uninitialized"); 717| 0| } 718| 600| return *m_data; 719| 600|} _ZNK5Botan8EC_Group13get_curve_oidEv: 805| 600|const OID& EC_Group::get_curve_oid() const { 806| 600| return data().oid(); 807| 600|} _ZN5Botan17EC_Group_Data_Map6lookupERKNS_3OIDE: 54| 1.57k| std::shared_ptr lookup(const OID& oid) { 55| 1.57k| const lock_guard_type lock(m_mutex); 56| | 57| 10.4k| for(auto i : m_registered_curves) { ------------------ | Branch (57:21): [True: 10.4k, False: 71] ------------------ 58| 10.4k| if(i->oid() == oid) { ------------------ | Branch (58:16): [True: 1.50k, False: 8.98k] ------------------ 59| 1.50k| return i; 60| 1.50k| } 61| 10.4k| } 62| | 63| | // Not found, check hardcoded data 64| 71| std::shared_ptr data = EC_Group::EC_group_info(oid); 65| | 66| 71| if(data) { ------------------ | Branch (66:13): [True: 13, False: 58] ------------------ 67| | // The requested OID may be an alias for a curve whose canonical OID differs 68| | // TODO(Botan4) remove this once we require exactly one canonical OID per curve 69| 13| if(data->oid() != oid) { ------------------ | Branch (69:16): [True: 0, False: 13] ------------------ 70| 0| for(const auto& i : m_registered_curves) { ------------------ | Branch (70:34): [True: 0, False: 0] ------------------ 71| 0| if(i->oid() == data->oid()) { ------------------ | Branch (71:22): [True: 0, False: 0] ------------------ 72| 0| return i; 73| 0| } 74| 0| } 75| 0| } 76| | 77| 13| m_registered_curves.push_back(data); 78| 13| return data; 79| 13| } 80| | 81| | // Nope, unknown curve 82| 58| return std::shared_ptr(); 83| 71| } _ZN5Botan13EC_Group_DataD2Ev: 28| 13|EC_Group_Data::~EC_Group_Data() = default; _ZN5Botan13EC_Group_DataC2ERKNS_6BigIntES3_S3_S3_S3_S3_S3_RKNS_3OIDENS_15EC_Group_SourceE: 40| 13| m_p(p), 41| 13| m_a(a), 42| 13| m_b(b), 43| 13| m_g_x(g_x), 44| 13| m_g_y(g_y), 45| 13| m_order(order), 46| 13| m_cofactor(cofactor), 47| |#if defined(BOTAN_HAS_LEGACY_EC_POINT) 48| 13| m_mod_field(Barrett_Reduction::for_public_modulus(p)), 49| 13| m_mod_order(Barrett_Reduction::for_public_modulus(order)), 50| 13| m_monty(m_p, m_mod_field), 51| |#endif 52| 13| m_oid(oid), 53| 13| m_p_words(p.sig_words()), 54| 13| m_p_bits(p.bits()), 55| 13| m_order_bits(order.bits()), 56| 13| m_order_bytes((m_order_bits + 7) / 8), 57| 13| m_a_is_minus_3(a == p - 3), 58| 13| m_a_is_zero(a.is_zero()), 59| 13| m_has_cofactor(m_cofactor != 1), 60| 13| m_order_is_less_than_p(m_order < p), 61| 13| m_source(source) { 62| | // Verify the generator (x, y) satisfies y^2 = x^3 + a*x + b (mod p) 63| 13| const auto mod_p = Barrett_Reduction::for_public_modulus(p); 64| 13| const BigInt y2 = mod_p.square(g_y); 65| 13| const BigInt x3_ax_b = mod_p.reduce(mod_p.cube(g_x) + mod_p.multiply(a, g_x) + b); 66| 13| if(y2 != x3_ax_b) { ------------------ | Branch (66:7): [True: 0, False: 13] ------------------ 67| 0| throw Invalid_Argument("EC_Group generator is not on the curve"); 68| 0| } 69| | 70| | // TODO(Botan4) we can assume/assert the OID is set 71| 13| if(!m_oid.empty()) { ------------------ | Branch (71:7): [True: 13, False: 0] ------------------ 72| 13| DER_Encoder der(m_der_named_curve); 73| 13| der.encode(m_oid); 74| | 75| 13| if(const auto name = m_oid.registered_name()) { ------------------ | Branch (75:21): [True: 13, False: 0] ------------------ 76| 13| if(auto pcurve = PCurve::PrimeOrderCurve::for_named_curve(*name)) { ------------------ | Branch (76:18): [True: 8, False: 5] ------------------ 77| 8| const bool same_params = [&]() { 78| 8| if(m_source == EC_Group_Source::Builtin) { 79| 8| return true; 80| 8| } 81| | 82| 8| if(const auto group_oid = OID::from_name(*name)) { 83| 8| if(const auto group_info = EC_Group::EC_group_info(*group_oid)) { 84| 8| return group_info->params_match(p, a, b, g_x, g_y, order, cofactor); 85| 8| } 86| 8| } 87| | 88| 8| return false; 89| 8| }(); 90| | 91| 8| if(same_params) { ------------------ | Branch (91:16): [True: 8, False: 0] ------------------ 92| 8| m_pcurve = std::move(pcurve); 93| 8| } 94| 8| } 95| 13| } 96| 13| if(m_pcurve) { ------------------ | Branch (96:10): [True: 8, False: 5] ------------------ 97| 8| m_engine = EC_Group_Engine::Optimized; 98| 8| } 99| 13| } 100| | 101| | // Try a generic pcurves instance 102| 13| if(!m_pcurve && !m_has_cofactor) { ------------------ | Branch (102:7): [True: 5, False: 8] | Branch (102:20): [True: 5, False: 0] ------------------ 103| 5| m_pcurve = PCurve::PrimeOrderCurve::from_params(p, a, b, g_x, g_y, order); 104| 5| if(m_pcurve) { ------------------ | Branch (104:10): [True: 1, False: 4] ------------------ 105| 1| m_engine = EC_Group_Engine::Generic; 106| 1| } 107| | // possibly still null here, if parameters unsuitable or if the 108| | // pcurves_generic module wasn't included in the build 109| 5| } 110| | 111| 13|#if defined(BOTAN_HAS_LEGACY_EC_POINT) 112| 13| secure_vector ws; 113| 13| m_a_r = m_monty.mul(a, m_monty.R2(), ws); 114| 13| m_b_r = m_monty.mul(b, m_monty.R2(), ws); 115| 13| if(!m_pcurve) { ------------------ | Branch (115:7): [True: 4, False: 9] ------------------ 116| 4| m_engine = EC_Group_Engine::Legacy; 117| 4| } 118| |#else 119| | if(!m_pcurve) { 120| | if(m_oid.empty()) { 121| | throw Not_Implemented("EC_Group this group is not supported in this build configuration"); 122| | } else { 123| | throw Not_Implemented( 124| | fmt("EC_Group the group {} is not supported in this build configuration", oid.to_string())); 125| | } 126| | } 127| |#endif 128| 13|} _ZN5Botan13EC_Group_Data6createERKNS_6BigIntES3_S3_S3_S3_S3_S3_RKNS_3OIDENS_15EC_Group_SourceE: 138| 13| EC_Group_Source source) { 139| 13| auto group = std::make_shared(p, a, b, g_x, g_y, order, cofactor, oid, source); 140| | 141| 13|#if defined(BOTAN_HAS_LEGACY_EC_POINT) 142| 13| group->m_curve = CurveGFp(group.get()); 143| 13| group->m_base_point = EC_Point(group->m_curve, g_x, g_y); 144| 13| if(!group->m_pcurve) { ------------------ | Branch (144:7): [True: 4, False: 9] ------------------ 145| 4| group->m_base_mult = std::make_unique(group->m_base_point, group->m_mod_order); 146| 4| } 147| 13|#endif 148| | 149| 13| return group; 150| 13|} _ZNK5Botan13EC_Group_Data13scalar_randomERNS_21RandomNumberGeneratorE: 310| 596|std::unique_ptr EC_Group_Data::scalar_random(RandomNumberGenerator& rng) const { 311| 596| if(m_pcurve) { ------------------ | Branch (311:7): [True: 596, False: 0] ------------------ 312| 596| return std::make_unique(shared_from_this(), m_pcurve->random_scalar(rng)); 313| 596| } else { 314| 0|#if defined(BOTAN_HAS_LEGACY_EC_POINT) 315| 0| return std::make_unique(shared_from_this(), 316| 0| BigInt::random_integer(rng, BigInt::one(), m_order)); 317| |#else 318| | throw Not_Implemented("Legacy EC interfaces disabled in this build configuration"); 319| |#endif 320| 0| } 321| 596|} _ZNK5Botan13EC_Group_Data30point_deserialize_uncompressedENSt3__14spanIKhLm18446744073709551615EEE: 402| 924| std::span bytes) const { 403| 924| if(bytes.size() != 1 + 2 * p_bytes() || bytes[0] != 0x04) { ------------------ | Branch (403:7): [True: 606, False: 318] | Branch (403:44): [True: 13, False: 305] ------------------ 404| 619| return {}; 405| 619| } 406| | 407| 305| if(m_pcurve) { ------------------ | Branch (407:7): [True: 178, False: 127] ------------------ 408| 178| if(auto pt = m_pcurve->deserialize_point_uncompressed(bytes)) { ------------------ | Branch (408:15): [True: 4, False: 174] ------------------ 409| 4| return std::make_unique(shared_from_this(), std::move(*pt)); 410| 174| } else { 411| 174| return {}; 412| 174| } 413| 178| } else { 414| 127|#if defined(BOTAN_HAS_LEGACY_EC_POINT) 415| 127| try { 416| 127| auto pt = Botan::OS2ECP(bytes, m_curve); 417| 127| return std::make_unique(shared_from_this(), std::move(pt)); 418| 127| } catch(...) { 419| 127| return {}; 420| 127| } 421| |#else 422| | throw Not_Implemented("Legacy EC interfaces disabled in this build configuration"); 423| |#endif 424| 127| } 425| 305|} _ZNK5Botan13EC_Group_Data28point_deserialize_compressedENSt3__14spanIKhLm18446744073709551615EEE: 427| 920|std::unique_ptr EC_Group_Data::point_deserialize_compressed(std::span bytes) const { 428| 920| if(bytes.size() != 1 + p_bytes() || (bytes[0] != 0x02 && bytes[0] != 0x03)) { ------------------ | Branch (428:7): [True: 920, False: 0] | Branch (428:41): [True: 0, False: 0] | Branch (428:61): [True: 0, False: 0] ------------------ 429| 920| return {}; 430| 920| } 431| | 432| 0| if(m_pcurve) { ------------------ | Branch (432:7): [True: 0, False: 0] ------------------ 433| 0| if(auto pt = m_pcurve->deserialize_point_compressed(bytes)) { ------------------ | Branch (433:15): [True: 0, False: 0] ------------------ 434| 0| return std::make_unique(shared_from_this(), std::move(*pt)); 435| 0| } else { 436| 0| return {}; 437| 0| } 438| 0| } else { 439| 0|#if defined(BOTAN_HAS_LEGACY_EC_POINT) 440| 0| try { 441| 0| auto pt = Botan::OS2ECP(bytes, m_curve); 442| 0| return std::make_unique(shared_from_this(), std::move(pt)); 443| 0| } catch(...) { 444| 0| return {}; 445| 0| } 446| |#else 447| | throw Not_Implemented("Legacy EC interfaces disabled in this build configuration"); 448| |#endif 449| 0| } 450| 0|} _ZNK5Botan13EC_Group_Data11point_g_mulERKNS_14EC_Scalar_DataERNS_21RandomNumberGeneratorE: 556| 596| RandomNumberGenerator& rng) const { 557| 596| if(m_pcurve) { ------------------ | Branch (557:7): [True: 596, False: 0] ------------------ 558| 596| const auto& k = EC_Scalar_Data_PC::checked_ref(scalar); 559| 596| auto pt = m_pcurve->point_to_affine(m_pcurve->mul_by_g(k.value(), rng)); 560| 596| return std::make_unique(shared_from_this(), std::move(pt)); 561| 596| } else { 562| 0|#if defined(BOTAN_HAS_LEGACY_EC_POINT) 563| 0| const auto& group = scalar.group(); 564| 0| const auto& bn = EC_Scalar_Data_BN::checked_ref(scalar); 565| | 566| 0| BOTAN_STATE_CHECK(group->m_base_mult != nullptr); ------------------ | | 51| 0| do { \ | | 52| 0| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 0| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 0] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 0| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 0] | | ------------------ ------------------ 567| 0| std::vector ws; 568| 0| auto pt = group->m_base_mult->mul(bn.value(), rng, m_order, ws); 569| 0| return std::make_unique(shared_from_this(), std::move(pt)); 570| |#else 571| | throw Not_Implemented("Legacy EC interfaces disabled in this build configuration"); 572| |#endif 573| 0| } 574| 596|} ec_inner_data.cpp:_ZZN5Botan13EC_Group_DataC1ERKNS_6BigIntES3_S3_S3_S3_S3_S3_RKNS_3OIDENS_15EC_Group_SourceEENK3$_0clEv: 77| 8| const bool same_params = [&]() { 78| 8| if(m_source == EC_Group_Source::Builtin) { ------------------ | Branch (78:19): [True: 8, False: 0] ------------------ 79| 8| return true; 80| 8| } 81| | 82| 0| if(const auto group_oid = OID::from_name(*name)) { ------------------ | Branch (82:30): [True: 0, False: 0] ------------------ 83| 0| if(const auto group_info = EC_Group::EC_group_info(*group_oid)) { ------------------ | Branch (83:33): [True: 0, False: 0] ------------------ 84| 0| return group_info->params_match(p, a, b, g_x, g_y, order, cofactor); 85| 0| } 86| 0| } 87| | 88| 0| return false; 89| 0| }(); _ZN5Botan17EC_Scalar_Data_PC11checked_refERKNS_14EC_Scalar_DataE: 14| 596|const EC_Scalar_Data_PC& EC_Scalar_Data_PC::checked_ref(const EC_Scalar_Data& data) { 15| 596| const auto* p = dynamic_cast(&data); 16| 596| if(p == nullptr) { ------------------ | Branch (16:7): [True: 0, False: 596] ------------------ 17| 0| throw Invalid_State("Failed conversion to EC_Scalar_Data_PC"); 18| 0| } 19| 596| return *p; 20| 596|} _ZNK5Botan17EC_Scalar_Data_PC5groupEv: 22| 2.38k|const std::shared_ptr& EC_Scalar_Data_PC::group() const { 23| 2.38k| return m_group; 24| 2.38k|} _ZNK5Botan17EC_Scalar_Data_PC5bytesEv: 26| 596|size_t EC_Scalar_Data_PC::bytes() const { 27| 596| return this->group()->order_bytes(); 28| 596|} _ZNK5Botan17EC_Scalar_Data_PC7is_zeroEv: 34| 596|bool EC_Scalar_Data_PC::is_zero() const { 35| 596| const auto& pcurve = this->group()->pcurve(); 36| 596| return pcurve.scalar_is_zero(m_v); 37| 596|} _ZN5Botan17EC_Scalar_Data_PC7zeroizeEv: 49| 596|void EC_Scalar_Data_PC::zeroize() { 50| 596| m_v._zeroize(); 51| 596|} _ZNK5Botan17EC_Scalar_Data_PC12serialize_toENSt3__14spanIhLm18446744073709551615EEE: 82| 596|void EC_Scalar_Data_PC::serialize_to(std::span bytes) const { 83| 596| BOTAN_ARG_CHECK(bytes.size() == m_group->order_bytes(), "Invalid output length"); ------------------ | | 35| 596| do { \ | | 36| 596| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 596| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 596] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 596| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 596] | | ------------------ ------------------ 84| 596| m_group->pcurve().serialize_scalar(bytes, m_v); 85| 596|} _ZN5Botan22EC_AffinePoint_Data_PCC2ENSt3__110shared_ptrIKNS_13EC_Group_DataEEENS_6PCurve15PrimeOrderCurve11AffinePointE: 89| 600| m_group(std::move(group)), m_pt(std::move(pt)) { 90| 600| const auto& pcurve = m_group->pcurve(); 91| | 92| 600| if(!pcurve.affine_point_is_identity(m_pt)) { ------------------ | Branch (92:7): [True: 600, False: 0] ------------------ 93| 600| m_xy.resize(1 + 2 * field_element_bytes()); 94| 600| pcurve.serialize_point(m_xy, m_pt); 95| 600| } 96| 600|} _ZNK5Botan22EC_AffinePoint_Data_PC5groupEv: 110| 600|const std::shared_ptr& EC_AffinePoint_Data_PC::group() const { 111| 600| return m_group; 112| 600|} _ZNK5Botan22EC_AffinePoint_Data_PC19field_element_bytesEv: 130| 1.20k|size_t EC_AffinePoint_Data_PC::field_element_bytes() const { 131| 1.20k| return m_group->pcurve().field_element_bytes(); 132| 1.20k|} _ZNK5Botan22EC_AffinePoint_Data_PC11is_identityEv: 134| 1.20k|bool EC_AffinePoint_Data_PC::is_identity() const { 135| 1.20k| return m_xy.empty(); 136| 1.20k|} _ZNK5Botan22EC_AffinePoint_Data_PC15to_legacy_pointEv: 178| 600|EC_Point EC_AffinePoint_Data_PC::to_legacy_point() const { 179| 600| if(this->is_identity()) { ------------------ | Branch (179:7): [True: 0, False: 600] ------------------ 180| 0| return EC_Point(m_group->curve()); 181| 600| } else { 182| 600| const size_t fe_bytes = this->field_element_bytes(); 183| 600| return EC_Point(m_group->curve(), 184| 600| BigInt::from_bytes(std::span{m_xy}.subspan(1, fe_bytes)), 185| 600| BigInt::from_bytes(std::span{m_xy}.last(fe_bytes))); 186| 600| } 187| 600|} _ZN5Botan8EC_Group13EC_group_infoERKNS_3OIDE: 16| 71|std::shared_ptr EC_Group::EC_group_info(const OID& oid) { 17| | // secp256r1 18| 71| if(oid == OID{1, 2, 840, 10045, 3, 1, 7}) { ------------------ | Branch (18:7): [True: 1, False: 70] ------------------ 19| 1| return load_EC_group_info( 20| 1| "0xFFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFF", 21| 1| "0xFFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFC", 22| 1| "0x5AC635D8AA3A93E7B3EBBD55769886BC651D06B0CC53B0F63BCE3C3E27D2604B", 23| 1| "0x6B17D1F2E12C4247F8BCE6E563A440F277037D812DEB33A0F4A13945D898C296", 24| 1| "0x4FE342E2FE1A7F9B8EE7EB4A7C0F9E162BCE33576B315ECECBB6406837BF51F5", 25| 1| "0xFFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551", 26| 1| oid); 27| 1| } 28| | 29| | // secp384r1 30| 70| if(oid == OID{1, 3, 132, 0, 34}) { ------------------ | Branch (30:7): [True: 1, False: 69] ------------------ 31| 1| return load_EC_group_info( 32| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFF0000000000000000FFFFFFFF", 33| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFF0000000000000000FFFFFFFC", 34| 1| "0xB3312FA7E23EE7E4988E056BE3F82D19181D9C6EFE8141120314088F5013875AC656398D8A2ED19D2A85C8EDD3EC2AEF", 35| 1| "0xAA87CA22BE8B05378EB1C71EF320AD746E1D3B628BA79B9859F741E082542A385502F25DBF55296C3A545E3872760AB7", 36| 1| "0x3617DE4A96262C6F5D9E98BF9292DC29F8F41DBD289A147CE9DA3113B5F0B8C00A60B1CE1D7E819D7A431D7C90EA0E5F", 37| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC7634D81F4372DDF581A0DB248B0A77AECEC196ACCC52973", 38| 1| oid); 39| 1| } 40| | 41| | // secp521r1 42| 69| if(oid == OID{1, 3, 132, 0, 35}) { ------------------ | Branch (42:7): [True: 1, False: 68] ------------------ 43| 1| return load_EC_group_info( 44| 1| "0x1FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF", 45| 1| "0x1FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC", 46| 1| "0x51953EB9618E1C9A1F929A21A0B68540EEA2DA725B99B315F3B8B489918EF109E156193951EC7E937B1652C0BD3BB1BF073573DF883D2C34F1EF451FD46B503F00", 47| 1| "0xC6858E06B70404E9CD9E3ECB662395B4429C648139053FB521F828AF606B4D3DBAA14B5E77EFE75928FE1DC127A2FFA8DE3348B3C1856A429BF97E7E31C2E5BD66", 48| 1| "0x11839296A789A3BC0045C8A5FB42C7D1BD998F54449579B446817AFBD17273E662C97EE72995EF42640C550B9013FAD0761353C7086A272C24088BE94769FD16650", 49| 1| "0x1FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFA51868783BF2F966B7FCC0148F709A5D03BB5C9B8899C47AEBB6FB71E91386409", 50| 1| oid); 51| 1| } 52| | 53| | // brainpool160r1 54| 68| if(oid == OID{1, 3, 36, 3, 3, 2, 8, 1, 1, 1}) { ------------------ | Branch (54:7): [True: 0, False: 68] ------------------ 55| 0| return load_EC_group_info( 56| 0| "0xE95E4A5F737059DC60DFC7AD95B3D8139515620F", 57| 0| "0x340E7BE2A280EB74E2BE61BADA745D97E8F7C300", 58| 0| "0x1E589A8595423412134FAA2DBDEC95C8D8675E58", 59| 0| "0xBED5AF16EA3F6A4F62938C4631EB5AF7BDBCDBC3", 60| 0| "0x1667CB477A1A8EC338F94741669C976316DA6321", 61| 0| "0xE95E4A5F737059DC60DF5991D45029409E60FC09", 62| 0| oid); 63| 0| } 64| | 65| | // brainpool192r1 66| 68| if(oid == OID{1, 3, 36, 3, 3, 2, 8, 1, 1, 3}) { ------------------ | Branch (66:7): [True: 0, False: 68] ------------------ 67| 0| return load_EC_group_info( 68| 0| "0xC302F41D932A36CDA7A3463093D18DB78FCE476DE1A86297", 69| 0| "0x6A91174076B1E0E19C39C031FE8685C1CAE040E5C69A28EF", 70| 0| "0x469A28EF7C28CCA3DC721D044F4496BCCA7EF4146FBF25C9", 71| 0| "0xC0A0647EAAB6A48753B033C56CB0F0900A2F5C4853375FD6", 72| 0| "0x14B690866ABD5BB88B5F4828C1490002E6773FA2FA299B8F", 73| 0| "0xC302F41D932A36CDA7A3462F9E9E916B5BE8F1029AC4ACC1", 74| 0| oid); 75| 0| } 76| | 77| | // brainpool224r1 78| 68| if(oid == OID{1, 3, 36, 3, 3, 2, 8, 1, 1, 5}) { ------------------ | Branch (78:7): [True: 0, False: 68] ------------------ 79| 0| return load_EC_group_info( 80| 0| "0xD7C134AA264366862A18302575D1D787B09F075797DA89F57EC8C0FF", 81| 0| "0x68A5E62CA9CE6C1C299803A6C1530B514E182AD8B0042A59CAD29F43", 82| 0| "0x2580F63CCFE44138870713B1A92369E33E2135D266DBB372386C400B", 83| 0| "0xD9029AD2C7E5CF4340823B2A87DC68C9E4CE3174C1E6EFDEE12C07D", 84| 0| "0x58AA56F772C0726F24C6B89E4ECDAC24354B9E99CAA3F6D3761402CD", 85| 0| "0xD7C134AA264366862A18302575D0FB98D116BC4B6DDEBCA3A5A7939F", 86| 0| oid); 87| 0| } 88| | 89| | // brainpool256r1 90| 68| if(oid == OID{1, 3, 36, 3, 3, 2, 8, 1, 1, 7}) { ------------------ | Branch (90:7): [True: 1, False: 67] ------------------ 91| 1| return load_EC_group_info( 92| 1| "0xA9FB57DBA1EEA9BC3E660A909D838D726E3BF623D52620282013481D1F6E5377", 93| 1| "0x7D5A0975FC2C3057EEF67530417AFFE7FB8055C126DC5C6CE94A4B44F330B5D9", 94| 1| "0x26DC5C6CE94A4B44F330B5D9BBD77CBF958416295CF7E1CE6BCCDC18FF8C07B6", 95| 1| "0x8BD2AEB9CB7E57CB2C4B482FFC81B7AFB9DE27E1E3BD23C23A4453BD9ACE3262", 96| 1| "0x547EF835C3DAC4FD97F8461A14611DC9C27745132DED8E545C1D54C72F046997", 97| 1| "0xA9FB57DBA1EEA9BC3E660A909D838D718C397AA3B561A6F7901E0E82974856A7", 98| 1| oid); 99| 1| } 100| | 101| | // brainpool320r1 102| 67| if(oid == OID{1, 3, 36, 3, 3, 2, 8, 1, 1, 9}) { ------------------ | Branch (102:7): [True: 0, False: 67] ------------------ 103| 0| return load_EC_group_info( 104| 0| "0xD35E472036BC4FB7E13C785ED201E065F98FCFA6F6F40DEF4F92B9EC7893EC28FCD412B1F1B32E27", 105| 0| "0x3EE30B568FBAB0F883CCEBD46D3F3BB8A2A73513F5EB79DA66190EB085FFA9F492F375A97D860EB4", 106| 0| "0x520883949DFDBC42D3AD198640688A6FE13F41349554B49ACC31DCCD884539816F5EB4AC8FB1F1A6", 107| 0| "0x43BD7E9AFB53D8B85289BCC48EE5BFE6F20137D10A087EB6E7871E2A10A599C710AF8D0D39E20611", 108| 0| "0x14FDD05545EC1CC8AB4093247F77275E0743FFED117182EAA9C77877AAAC6AC7D35245D1692E8EE1", 109| 0| "0xD35E472036BC4FB7E13C785ED201E065F98FCFA5B68F12A32D482EC7EE8658E98691555B44C59311", 110| 0| oid); 111| 0| } 112| | 113| | // brainpool384r1 114| 67| if(oid == OID{1, 3, 36, 3, 3, 2, 8, 1, 1, 11}) { ------------------ | Branch (114:7): [True: 1, False: 66] ------------------ 115| 1| return load_EC_group_info( 116| 1| "0x8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B412B1DA197FB71123ACD3A729901D1A71874700133107EC53", 117| 1| "0x7BC382C63D8C150C3C72080ACE05AFA0C2BEA28E4FB22787139165EFBA91F90F8AA5814A503AD4EB04A8C7DD22CE2826", 118| 1| "0x4A8C7DD22CE28268B39B55416F0447C2FB77DE107DCD2A62E880EA53EEB62D57CB4390295DBC9943AB78696FA504C11", 119| 1| "0x1D1C64F068CF45FFA2A63A81B7C13F6B8847A3E77EF14FE3DB7FCAFE0CBD10E8E826E03436D646AAEF87B2E247D4AF1E", 120| 1| "0x8ABE1D7520F9C2A45CB1EB8E95CFD55262B70B29FEEC5864E19C054FF99129280E4646217791811142820341263C5315", 121| 1| "0x8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B31F166E6CAC0425A7CF3AB6AF6B7FC3103B883202E9046565", 122| 1| oid); 123| 1| } 124| | 125| | // brainpool512r1 126| 66| if(oid == OID{1, 3, 36, 3, 3, 2, 8, 1, 1, 13}) { ------------------ | Branch (126:7): [True: 1, False: 65] ------------------ 127| 1| return load_EC_group_info( 128| 1| "0xAADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA703308717D4D9B009BC66842AECDA12AE6A380E62881FF2F2D82C68528AA6056583A48F3", 129| 1| "0x7830A3318B603B89E2327145AC234CC594CBDD8D3DF91610A83441CAEA9863BC2DED5D5AA8253AA10A2EF1C98B9AC8B57F1117A72BF2C7B9E7C1AC4D77FC94CA", 130| 1| "0x3DF91610A83441CAEA9863BC2DED5D5AA8253AA10A2EF1C98B9AC8B57F1117A72BF2C7B9E7C1AC4D77FC94CADC083E67984050B75EBAE5DD2809BD638016F723", 131| 1| "0x81AEE4BDD82ED9645A21322E9C4C6A9385ED9F70B5D916C1B43B62EEF4D0098EFF3B1F78E2D0D48D50D1687B93B97D5F7C6D5047406A5E688B352209BCB9F822", 132| 1| "0x7DDE385D566332ECC0EABFA9CF7822FDF209F70024A57B1AA000C55B881F8111B2DCDE494A5F485E5BCA4BD88A2763AED1CA2B2FA8F0540678CD1E0F3AD80892", 133| 1| "0xAADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA70330870553E5C414CA92619418661197FAC10471DB1D381085DDADDB58796829CA90069", 134| 1| oid); 135| 1| } 136| | 137| | // frp256v1 138| 65| if(oid == OID{1, 2, 250, 1, 223, 101, 256, 1}) { ------------------ | Branch (138:7): [True: 0, False: 65] ------------------ 139| 0| return load_EC_group_info( 140| 0| "0xF1FD178C0B3AD58F10126DE8CE42435B3961ADBCABC8CA6DE8FCF353D86E9C03", 141| 0| "0xF1FD178C0B3AD58F10126DE8CE42435B3961ADBCABC8CA6DE8FCF353D86E9C00", 142| 0| "0xEE353FCA5428A9300D4ABA754A44C00FDFEC0C9AE4B1A1803075ED967B7BB73F", 143| 0| "0xB6B3D4C356C139EB31183D4749D423958C27D2DCAF98B70164C97A2DD98F5CFF", 144| 0| "0x6142E0F7C8B204911F9271F0F3ECEF8C2701C307E8E4C9E183115A1554062CFB", 145| 0| "0xF1FD178C0B3AD58F10126DE8CE42435B53DC67E140D2BF941FFDD459C6D655E1", 146| 0| oid); 147| 0| } 148| | 149| | // gost_256A 150| 65| if(oid == OID{1, 2, 643, 7, 1, 2, 1, 1, 1} || oid == OID{1, 2, 643, 2, 2, 35, 1} || oid == OID{1, 2, 643, 2, 2, 36, 0}) { ------------------ | Branch (150:7): [True: 0, False: 65] | Branch (150:7): [True: 0, False: 65] | Branch (150:50): [True: 0, False: 65] | Branch (150:88): [True: 0, False: 65] ------------------ 151| 0| return load_EC_group_info( 152| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFD97", 153| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFD94", 154| 0| "0xA6", 155| 0| "0x1", 156| 0| "0x8D91E471E0989CDA27DF505A453F2B7635294F2DDF23E3B122ACC99C9E9F1E14", 157| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF6C611070995AD10045841B09B761B893", 158| 0| OID{1, 2, 643, 7, 1, 2, 1, 1, 1}); 159| 0| } 160| | 161| | // gost_512A 162| 65| if(oid == OID{1, 2, 643, 7, 1, 2, 1, 2, 1}) { ------------------ | Branch (162:7): [True: 0, False: 65] ------------------ 163| 0| return load_EC_group_info( 164| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFDC7", 165| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFDC4", 166| 0| "0xE8C2505DEDFC86DDC1BD0B2B6667F1DA34B82574761CB0E879BD081CFD0B6265EE3CB090F30D27614CB4574010DA90DD862EF9D4EBEE4761503190785A71C760", 167| 0| "0x3", 168| 0| "0x7503CFE87A836AE3A61B8816E25450E6CE5E1C93ACF1ABC1778064FDCBEFA921DF1626BE4FD036E93D75E6A50E3A41E98028FE5FC235F5B889A589CB5215F2A4", 169| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF27E69532F48D89116FF22B8D4E0560609B4B38ABFAD2B85DCACDB1411F10B275", 170| 0| oid); 171| 0| } 172| | 173| | // secp160k1 174| 65| if(oid == OID{1, 3, 132, 0, 9}) { ------------------ | Branch (174:7): [True: 1, False: 64] ------------------ 175| 1| return load_EC_group_info( 176| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC73", 177| 1| "0x0", 178| 1| "0x7", 179| 1| "0x3B4C382CE37AA192A4019E763036F4F5DD4D7EBB", 180| 1| "0x938CF935318FDCED6BC28286531733C3F03C4FEE", 181| 1| "0x100000000000000000001B8FA16DFAB9ACA16B6B3", 182| 1| oid); 183| 1| } 184| | 185| | // secp160r1 186| 64| if(oid == OID{1, 3, 132, 0, 8}) { ------------------ | Branch (186:7): [True: 1, False: 63] ------------------ 187| 1| return load_EC_group_info( 188| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF7FFFFFFF", 189| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF7FFFFFFC", 190| 1| "0x1C97BEFC54BD7A8B65ACF89F81D4D4ADC565FA45", 191| 1| "0x4A96B5688EF573284664698968C38BB913CBFC82", 192| 1| "0x23A628553168947D59DCC912042351377AC5FB32", 193| 1| "0x100000000000000000001F4C8F927AED3CA752257", 194| 1| oid); 195| 1| } 196| | 197| | // secp160r2 198| 63| if(oid == OID{1, 3, 132, 0, 30}) { ------------------ | Branch (198:7): [True: 1, False: 62] ------------------ 199| 1| return load_EC_group_info( 200| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC73", 201| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC70", 202| 1| "0xB4E134D3FB59EB8BAB57274904664D5AF50388BA", 203| 1| "0x52DCB034293A117E1F4FF11B30F7199D3144CE6D", 204| 1| "0xFEAFFEF2E331F296E071FA0DF9982CFEA7D43F2E", 205| 1| "0x100000000000000000000351EE786A818F3A1A16B", 206| 1| oid); 207| 1| } 208| | 209| | // secp192k1 210| 62| if(oid == OID{1, 3, 132, 0, 31}) { ------------------ | Branch (210:7): [True: 1, False: 61] ------------------ 211| 1| return load_EC_group_info( 212| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFEE37", 213| 1| "0x0", 214| 1| "0x3", 215| 1| "0xDB4FF10EC057E9AE26B07D0280B7F4341DA5D1B1EAE06C7D", 216| 1| "0x9B2F2F6D9C5628A7844163D015BE86344082AA88D95E2F9D", 217| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFE26F2FC170F69466A74DEFD8D", 218| 1| oid); 219| 1| } 220| | 221| | // secp192r1 222| 61| if(oid == OID{1, 2, 840, 10045, 3, 1, 1}) { ------------------ | Branch (222:7): [True: 0, False: 61] ------------------ 223| 0| return load_EC_group_info( 224| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFF", 225| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFC", 226| 0| "0x64210519E59C80E70FA7E9AB72243049FEB8DEECC146B9B1", 227| 0| "0x188DA80EB03090F67CBF20EB43A18800F4FF0AFD82FF1012", 228| 0| "0x7192B95FFC8DA78631011ED6B24CDD573F977A11E794811", 229| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFF99DEF836146BC9B1B4D22831", 230| 0| oid); 231| 0| } 232| | 233| | // secp224k1 234| 61| if(oid == OID{1, 3, 132, 0, 32}) { ------------------ | Branch (234:7): [True: 1, False: 60] ------------------ 235| 1| return load_EC_group_info( 236| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFE56D", 237| 1| "0x0", 238| 1| "0x5", 239| 1| "0xA1455B334DF099DF30FC28A169A467E9E47075A90F7E650EB6B7A45C", 240| 1| "0x7E089FED7FBA344282CAFBD6F7E319F7C0B0BD59E2CA4BDB556D61A5", 241| 1| "0x10000000000000000000000000001DCE8D2EC6184CAF0A971769FB1F7", 242| 1| oid); 243| 1| } 244| | 245| | // secp224r1 246| 60| if(oid == OID{1, 3, 132, 0, 33}) { ------------------ | Branch (246:7): [True: 1, False: 59] ------------------ 247| 1| return load_EC_group_info( 248| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF000000000000000000000001", 249| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFE", 250| 1| "0xB4050A850C04B3ABF54132565044B0B7D7BFD8BA270B39432355FFB4", 251| 1| "0xB70E0CBD6BB4BF7F321390B94A03C1D356C21122343280D6115C1D21", 252| 1| "0xBD376388B5F723FB4C22DFE6CD4375A05A07476444D5819985007E34", 253| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFF16A2E0B8F03E13DD29455C5C2A3D", 254| 1| oid); 255| 1| } 256| | 257| | // secp256k1 258| 59| if(oid == OID{1, 3, 132, 0, 10}) { ------------------ | Branch (258:7): [True: 1, False: 58] ------------------ 259| 1| return load_EC_group_info( 260| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFC2F", 261| 1| "0x0", 262| 1| "0x7", 263| 1| "0x79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798", 264| 1| "0x483ADA7726A3C4655DA4FBFC0E1108A8FD17B448A68554199C47D08FFB10D4B8", 265| 1| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141", 266| 1| oid); 267| 1| } 268| | 269| | // sm2p256v1 270| 58| if(oid == OID{1, 2, 156, 10197, 1, 301}) { ------------------ | Branch (270:7): [True: 0, False: 58] ------------------ 271| 0| return load_EC_group_info( 272| 0| "0xFFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00000000FFFFFFFFFFFFFFFF", 273| 0| "0xFFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00000000FFFFFFFFFFFFFFFC", 274| 0| "0x28E9FA9E9D9F5E344D5A9E4BCF6509A7F39789F515AB8F92DDBCBD414D940E93", 275| 0| "0x32C4AE2C1F1981195F9904466A39C9948FE30BBFF2660BE1715A4589334C74C7", 276| 0| "0xBC3736A2F4F6779C59BDCEE36B692153D0A9877CC62A474002DF32E52139F0A0", 277| 0| "0xFFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFF7203DF6B21C6052B53BBF40939D54123", 278| 0| oid); 279| 0| } 280| | 281| | // x962_p192v2 282| 58| if(oid == OID{1, 2, 840, 10045, 3, 1, 2}) { ------------------ | Branch (282:7): [True: 0, False: 58] ------------------ 283| 0| return load_EC_group_info( 284| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFF", 285| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFC", 286| 0| "0xCC22D6DFB95C6B25E49C0D6364A4E5980C393AA21668D953", 287| 0| "0xEEA2BAE7E1497842F2DE7769CFE9C989C072AD696F48034A", 288| 0| "0x6574D11D69B6EC7A672BB82A083DF2F2B0847DE970B2DE15", 289| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFE5FB1A724DC80418648D8DD31", 290| 0| oid); 291| 0| } 292| | 293| | // x962_p192v3 294| 58| if(oid == OID{1, 2, 840, 10045, 3, 1, 3}) { ------------------ | Branch (294:7): [True: 0, False: 58] ------------------ 295| 0| return load_EC_group_info( 296| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFF", 297| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFC", 298| 0| "0x22123DC2395A05CAA7423DAECCC94760A7D462256BD56916", 299| 0| "0x7D29778100C65A1DA1783716588DCE2B8B4AEE8E228F1896", 300| 0| "0x38A90F22637337334B49DCB66A6DC8F9978ACA7648A943B0", 301| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFF7A62D031C83F4294F640EC13", 302| 0| oid); 303| 0| } 304| | 305| | // x962_p239v1 306| 58| if(oid == OID{1, 2, 840, 10045, 3, 1, 4}) { ------------------ | Branch (306:7): [True: 0, False: 58] ------------------ 307| 0| return load_EC_group_info( 308| 0| "0x7FFFFFFFFFFFFFFFFFFFFFFF7FFFFFFFFFFF8000000000007FFFFFFFFFFF", 309| 0| "0x7FFFFFFFFFFFFFFFFFFFFFFF7FFFFFFFFFFF8000000000007FFFFFFFFFFC", 310| 0| "0x6B016C3BDCF18941D0D654921475CA71A9DB2FB27D1D37796185C2942C0A", 311| 0| "0xFFA963CDCA8816CCC33B8642BEDF905C3D358573D3F27FBBD3B3CB9AAAF", 312| 0| "0x7DEBE8E4E90A5DAE6E4054CA530BA04654B36818CE226B39FCCB7B02F1AE", 313| 0| "0x7FFFFFFFFFFFFFFFFFFFFFFF7FFFFF9E5E9A9F5D9071FBD1522688909D0B", 314| 0| oid); 315| 0| } 316| | 317| | // x962_p239v2 318| 58| if(oid == OID{1, 2, 840, 10045, 3, 1, 5}) { ------------------ | Branch (318:7): [True: 0, False: 58] ------------------ 319| 0| return load_EC_group_info( 320| 0| "0x7FFFFFFFFFFFFFFFFFFFFFFF7FFFFFFFFFFF8000000000007FFFFFFFFFFF", 321| 0| "0x7FFFFFFFFFFFFFFFFFFFFFFF7FFFFFFFFFFF8000000000007FFFFFFFFFFC", 322| 0| "0x617FAB6832576CBBFED50D99F0249C3FEE58B94BA0038C7AE84C8C832F2C", 323| 0| "0x38AF09D98727705120C921BB5E9E26296A3CDCF2F35757A0EAFD87B830E7", 324| 0| "0x5B0125E4DBEA0EC7206DA0FC01D9B081329FB555DE6EF460237DFF8BE4BA", 325| 0| "0x7FFFFFFFFFFFFFFFFFFFFFFF800000CFA7E8594377D414C03821BC582063", 326| 0| oid); 327| 0| } 328| | 329| | // x962_p239v3 330| 58| if(oid == OID{1, 2, 840, 10045, 3, 1, 6}) { ------------------ | Branch (330:7): [True: 0, False: 58] ------------------ 331| 0| return load_EC_group_info( 332| 0| "0x7FFFFFFFFFFFFFFFFFFFFFFF7FFFFFFFFFFF8000000000007FFFFFFFFFFF", 333| 0| "0x7FFFFFFFFFFFFFFFFFFFFFFF7FFFFFFFFFFF8000000000007FFFFFFFFFFC", 334| 0| "0x255705FA2A306654B1F4CB03D6A750A30C250102D4988717D9BA15AB6D3E", 335| 0| "0x6768AE8E18BB92CFCF005C949AA2C6D94853D0E660BBF854B1C9505FE95A", 336| 0| "0x1607E6898F390C06BC1D552BAD226F3B6FCFE48B6E818499AF18E3ED6CF3", 337| 0| "0x7FFFFFFFFFFFFFFFFFFFFFFF7FFFFF975DEB41B3A6057C3C432146526551", 338| 0| oid); 339| 0| } 340| | 341| | // numsp512d1 342| 58| if(oid == OID{1, 3, 6, 1, 4, 1, 25258, 4, 3}) { ------------------ | Branch (342:7): [True: 0, False: 58] ------------------ 343| 0| return load_EC_group_info( 344| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFDC7", 345| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFDC4", 346| 0| "0x1D99B", 347| 0| "0x2", 348| 0| "0x1C282EB23327F9711952C250EA61AD53FCC13031CF6DD336E0B9328433AFBDD8CC5A1C1F0C716FDC724DDE537C2B0ADB00BB3D08DC83755B205CC30D7F83CF28", 349| 0| "0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF5B3CA4FB94E7831B4FC258ED97D0BDC63B568B36607CD243CE153F390433555D", 350| 0| oid); 351| 0| } 352| | 353| 58| return std::shared_ptr(); 354| 58|} _ZN5Botan9EC_ScalarC2ENSt3__110unique_ptrINS_14EC_Scalar_DataENS1_14default_deleteIS3_EEEE: 19| 596|EC_Scalar::EC_Scalar(std::unique_ptr scalar) : m_scalar(std::move(scalar)) { 20| 596| BOTAN_ASSERT_NONNULL(m_scalar); ------------------ | | 123| 596| do { \ | | 124| 596| if((ptr) == nullptr) { \ | | ------------------ | | | Branch (124:10): [True: 0, False: 596] | | ------------------ | | 125| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 126| 0| Botan::assertion_failure(#ptr " is not null", "", __func__, __FILE__, __LINE__); \ | | 127| 0| } \ | | 128| 596| } while(0) | | ------------------ | | | Branch (128:12): [Folded, False: 596] | | ------------------ ------------------ 21| 596|} _ZN5Botan9EC_ScalarC2EOS0_: 25| 1.19k|EC_Scalar::EC_Scalar(EC_Scalar&& other) noexcept : m_scalar(std::move(other.m_scalar)) {} _ZN5Botan9EC_ScalarD2Ev: 46| 1.78k|EC_Scalar::~EC_Scalar() = default; _ZNK5Botan9EC_Scalar5groupEv: 48| 596|EC_Group EC_Scalar::group() const { 49| 596| return EC_Group(inner().group()); 50| 596|} _ZN5Botan9EC_Scalar6randomERKNS_8EC_GroupERNS_21RandomNumberGeneratorE: 68| 596|EC_Scalar EC_Scalar::random(const EC_Group& group, RandomNumberGenerator& rng) { 69| 596| return EC_Scalar(group._data()->scalar_random(rng)); 70| 596|} _ZNK5Botan9EC_Scalar9to_bigintEv: 84| 596|BigInt EC_Scalar::to_bigint() const { 85| 596| secure_vector bytes(m_scalar->bytes()); 86| 596| m_scalar->serialize_to(bytes); 87| 596| return BigInt::from_bytes(bytes); 88| 596|} _ZNK5Botan9EC_Scalar7is_zeroEv: 141| 596|bool EC_Scalar::is_zero() const { 142| 596| return inner().is_zero(); 143| 596|} _ZN5Botan9EC_Scalar7zeroizeEv: 186| 596|void EC_Scalar::zeroize() { 187| 596| m_scalar->zeroize(); 188| 596|} _ZN5Botan8CurveGFpC2EPKNS_13EC_Group_DataE: 28| 13|CurveGFp::CurveGFp(const EC_Group_Data* group) : m_group(group) { 29| 13| BOTAN_ASSERT_NONNULL(m_group); ------------------ | | 123| 13| do { \ | | 124| 13| if((ptr) == nullptr) { \ | | ------------------ | | | Branch (124:10): [True: 0, False: 13] | | ------------------ | | 125| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 126| 0| Botan::assertion_failure(#ptr " is not null", "", __func__, __FILE__, __LINE__); \ | | 127| 0| } \ | | 128| 13| } while(0) | | ------------------ | | | Branch (128:12): [Folded, False: 13] | | ------------------ ------------------ 30| 13|} _ZNK5Botan8CurveGFp5groupEv: 32| 5.90k|const EC_Group_Data& CurveGFp::group() const { 33| 5.90k| BOTAN_ASSERT_NONNULL(m_group); ------------------ | | 123| 5.90k| do { \ | | 124| 5.90k| if((ptr) == nullptr) { \ | | ------------------ | | | Branch (124:10): [True: 0, False: 5.90k] | | ------------------ | | 125| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 126| 0| Botan::assertion_failure(#ptr " is not null", "", __func__, __FILE__, __LINE__); \ | | 127| 0| } \ | | 128| 5.90k| } while(0) | | ------------------ | | | Branch (128:12): [Folded, False: 5.90k] | | ------------------ ------------------ 34| 5.90k| return *m_group; 35| 5.90k|} _ZNK5Botan8CurveGFp5get_aEv: 37| 127|const BigInt& CurveGFp::get_a() const { 38| 127| return this->group().a(); 39| 127|} _ZNK5Botan8CurveGFp5get_bEv: 41| 127|const BigInt& CurveGFp::get_b() const { 42| 127| return this->group().b(); 43| 127|} _ZNK5Botan8CurveGFp5get_pEv: 45| 127|const BigInt& CurveGFp::get_p() const { 46| 127| return this->group().p(); 47| 127|} _ZNK5Botan8CurveGFp11get_p_wordsEv: 49| 1.42k|size_t CurveGFp::get_p_words() const { 50| 1.42k| return this->group().p_words(); 51| 1.42k|} _ZN5Botan8EC_PointC2ERKNS_8CurveGFpENS_6BigIntES4_: 115| 738| m_curve(curve), m_x(std::move(x)), m_y(std::move(y)), m_z(m_curve.group().monty().R1()) { 116| 738| const auto& group = m_curve.group(); 117| | 118| 738| if(m_x < 0 || m_x >= group.p()) { ------------------ | Branch (118:7): [True: 0, False: 738] | Branch (118:18): [True: 0, False: 738] ------------------ 119| 0| throw Invalid_Argument("Invalid EC_Point affine x"); 120| 0| } 121| 738| if(m_y < 0 || m_y >= group.p()) { ------------------ | Branch (121:7): [True: 0, False: 738] | Branch (121:18): [True: 0, False: 738] ------------------ 122| 0| throw Invalid_Argument("Invalid EC_Point affine y"); 123| 0| } 124| | 125| 738| secure_vector monty_ws(monty_ws_size(group)); 126| | 127| 738| to_rep(group, m_x, monty_ws); 128| 738| to_rep(group, m_y, monty_ws); 129| 738|} _ZN5Botan8EC_Point3addERKS0_RNSt3__16vectorINS_6BigIntENS3_9allocatorIS5_EEEE: 266| 1.42k|void EC_Point::add(const EC_Point& other, std::vector& workspace) { 267| 1.42k| BOTAN_ARG_CHECK(m_curve == other.m_curve, "cannot add points on different curves"); ------------------ | | 35| 1.42k| do { \ | | 36| 1.42k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 1.42k| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 1.42k] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 1.42k| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 1.42k] | | ------------------ ------------------ 268| | 269| 1.42k| const size_t p_words = m_curve.get_p_words(); 270| | 271| 1.42k| add(other.m_x._data(), 272| 1.42k| std::min(p_words, other.m_x.size()), 273| 1.42k| other.m_y._data(), 274| 1.42k| std::min(p_words, other.m_y.size()), 275| 1.42k| other.m_z._data(), 276| 1.42k| std::min(p_words, other.m_z.size()), 277| 1.42k| workspace); 278| 1.42k|} _ZN5Botan8EC_Point3addEPKmmS2_mS2_mRNSt3__16vectorINS_6BigIntENS3_9allocatorIS5_EEEE: 286| 1.42k| std::vector& ws_bn) { 287| 1.42k| if((CT::all_zeros(x_words, x_size) & CT::all_zeros(z_words, z_size)).as_bool()) { ------------------ | Branch (287:7): [True: 0, False: 1.42k] ------------------ 288| 0| return; 289| 0| } 290| | 291| 1.42k| const auto& group = m_curve.group(); 292| | 293| 1.42k| if(is_zero()) { ------------------ | Branch (293:7): [True: 0, False: 1.42k] ------------------ 294| 0| m_x.set_words(x_words, x_size); 295| 0| m_y.set_words(y_words, y_size); 296| 0| m_z.set_words(z_words, z_size); 297| 0| return; 298| 0| } 299| | 300| 1.42k| resize_ws(ws_bn, monty_ws_size(group)); 301| | 302| 1.42k| secure_vector& ws = ws_bn[0].get_word_vector(); 303| 1.42k| secure_vector& sub_ws = ws_bn[1].get_word_vector(); 304| | 305| 1.42k| BigInt& T0 = ws_bn[2]; 306| 1.42k| BigInt& T1 = ws_bn[3]; 307| 1.42k| BigInt& T2 = ws_bn[4]; 308| 1.42k| BigInt& T3 = ws_bn[5]; 309| 1.42k| BigInt& T4 = ws_bn[6]; 310| 1.42k| BigInt& T5 = ws_bn[7]; 311| | 312| | /* 313| | https://hyperelliptic.org/EFD/g1p/auto-shortw-jacobian-3.html#addition-add-1998-cmo-2 314| | */ 315| | 316| 1.42k| const BigInt& p = group.p(); 317| | 318| 1.42k| fe_sqr(group, T0, z_words, z_size, ws); // z2^2 319| 1.42k| fe_mul(group, T1, m_x, T0, ws); // x1*z2^2 320| 1.42k| fe_mul(group, T3, z_words, z_size, T0, ws); // z2^3 321| 1.42k| fe_mul(group, T2, m_y, T3, ws); // y1*z2^3 322| | 323| 1.42k| fe_sqr(group, T3, m_z, ws); // z1^2 324| 1.42k| fe_mul(group, T4, x_words, x_size, T3, ws); // x2*z1^2 325| | 326| 1.42k| fe_mul(group, T5, m_z, T3, ws); // z1^3 327| 1.42k| fe_mul(group, T0, y_words, y_size, T5, ws); // y2*z1^3 328| | 329| 1.42k| T4.mod_sub(T1, p, sub_ws); // x2*z1^2 - x1*z2^2 330| | 331| 1.42k| T0.mod_sub(T2, p, sub_ws); 332| | 333| 1.42k| if(T4.is_zero()) { ------------------ | Branch (333:7): [True: 0, False: 1.42k] ------------------ 334| 0| if(T0.is_zero()) { ------------------ | Branch (334:10): [True: 0, False: 0] ------------------ 335| 0| mult2(ws_bn); 336| 0| return; 337| 0| } 338| | 339| | // setting to zero: 340| 0| m_x.clear(); 341| 0| m_y = group.monty().R1(); 342| 0| m_z.clear(); 343| 0| return; 344| 0| } 345| | 346| 1.42k| fe_sqr(group, T5, T4, ws); 347| | 348| 1.42k| fe_mul(group, T3, T1, T5, ws); 349| | 350| 1.42k| fe_mul(group, T1, T5, T4, ws); 351| | 352| 1.42k| fe_sqr(group, m_x, T0, ws); 353| 1.42k| m_x.mod_sub(T1, p, sub_ws); 354| 1.42k| m_x.mod_sub(T3, p, sub_ws); 355| 1.42k| m_x.mod_sub(T3, p, sub_ws); 356| | 357| 1.42k| T3.mod_sub(m_x, p, sub_ws); 358| | 359| 1.42k| fe_mul(group, m_y, T0, T3, ws); 360| 1.42k| fe_mul(group, T3, T2, T1, ws); 361| | 362| 1.42k| m_y.mod_sub(T3, p, sub_ws); 363| | 364| 1.42k| fe_mul(group, T3, z_words, z_size, m_z, ws); 365| 1.42k| fe_mul(group, m_z, T3, T4, ws); 366| 1.42k|} _ZN5Botan8EC_Point5mult2ERNSt3__16vectorINS_6BigIntENS1_9allocatorIS3_EEEE: 388| 1.06k|void EC_Point::mult2(std::vector& ws_bn) { 389| 1.06k| if(is_zero()) { ------------------ | Branch (389:7): [True: 0, False: 1.06k] ------------------ 390| 0| return; 391| 0| } 392| | 393| 1.06k| const auto& group = m_curve.group(); 394| | 395| 1.06k| if(m_y.is_zero()) { ------------------ | Branch (395:7): [True: 0, False: 1.06k] ------------------ 396| 0| *this = EC_Point(m_curve); // setting myself to zero 397| 0| return; 398| 0| } 399| | 400| 1.06k| resize_ws(ws_bn, monty_ws_size(group)); 401| | 402| 1.06k| secure_vector& ws = ws_bn[0].get_word_vector(); 403| 1.06k| secure_vector& sub_ws = ws_bn[1].get_word_vector(); 404| | 405| 1.06k| BigInt& T0 = ws_bn[2]; 406| 1.06k| BigInt& T1 = ws_bn[3]; 407| 1.06k| BigInt& T2 = ws_bn[4]; 408| 1.06k| BigInt& T3 = ws_bn[5]; 409| 1.06k| BigInt& T4 = ws_bn[6]; 410| | 411| | /* 412| | https://hyperelliptic.org/EFD/g1p/auto-shortw-jacobian-3.html#doubling-dbl-1986-cc 413| | */ 414| 1.06k| const BigInt& p = group.p(); 415| | 416| 1.06k| fe_sqr(group, T0, m_y, ws); 417| | 418| 1.06k| fe_mul(group, T1, m_x, T0, ws); 419| 1.06k| fe_smul<4>(T1, p, sub_ws); 420| | 421| 1.06k| if(group.a_is_zero()) { ------------------ | Branch (421:7): [True: 582, False: 486] ------------------ 422| | // if a == 0 then 3*x^2 + a*z^4 is just 3*x^2 423| 582| fe_sqr(group, T4, m_x, ws); // x^2 424| 582| fe_smul<3>(T4, p, sub_ws); // 3*x^2 425| 582| } else if(group.a_is_minus_3()) { ------------------ | Branch (425:14): [True: 486, False: 0] ------------------ 426| | /* 427| | if a == -3 then 428| | 3*x^2 + a*z^4 == 3*x^2 - 3*z^4 == 3*(x^2-z^4) == 3*(x-z^2)*(x+z^2) 429| | */ 430| 486| fe_sqr(group, T3, m_z, ws); // z^2 431| | 432| | // (x-z^2) 433| 486| T2 = m_x; 434| 486| T2.mod_sub(T3, p, sub_ws); 435| | 436| | // (x+z^2) 437| 486| T3.mod_add(m_x, p, sub_ws); 438| | 439| 486| fe_mul(group, T4, T2, T3, ws); // (x-z^2)*(x+z^2) 440| | 441| 486| fe_smul<3>(T4, p, sub_ws); // 3*(x-z^2)*(x+z^2) 442| 486| } else { 443| 0| fe_sqr(group, T3, m_z, ws); // z^2 444| 0| fe_sqr(group, T4, T3, ws); // z^4 445| 0| fe_mul(group, T3, group.monty_a(), T4, ws); // a*z^4 446| | 447| 0| fe_sqr(group, T4, m_x, ws); // x^2 448| 0| fe_smul<3>(T4, p, sub_ws); 449| 0| T4.mod_add(T3, p, sub_ws); // 3*x^2 + a*z^4 450| 0| } 451| | 452| 1.06k| fe_sqr(group, T2, T4, ws); 453| 1.06k| T2.mod_sub(T1, p, sub_ws); 454| 1.06k| T2.mod_sub(T1, p, sub_ws); 455| | 456| 1.06k| fe_sqr(group, T3, T0, ws); 457| 1.06k| fe_smul<8>(T3, p, sub_ws); 458| | 459| 1.06k| T1.mod_sub(T2, p, sub_ws); 460| | 461| 1.06k| fe_mul(group, T0, T4, T1, ws); 462| 1.06k| T0.mod_sub(T3, p, sub_ws); 463| | 464| 1.06k| m_x.swap(T2); 465| | 466| 1.06k| fe_mul(group, T2, m_y, m_z, ws); 467| 1.06k| fe_smul<2>(T2, p, sub_ws); 468| | 469| 1.06k| m_y.swap(T0); 470| 1.06k| m_z.swap(T2); 471| 1.06k|} _ZN5Botan8EC_Point16force_all_affineENSt3__14spanIS0_Lm18446744073709551615EEERNS1_6vectorImNS_16secure_allocatorImEEEE: 520| 4|void EC_Point::force_all_affine(std::span points, secure_vector& ws) { 521| 4| if(points.size() <= 1) { ------------------ | Branch (521:7): [True: 0, False: 4] ------------------ 522| 0| for(auto& point : points) { ------------------ | Branch (522:23): [True: 0, False: 0] ------------------ 523| 0| point.force_affine(); 524| 0| } 525| 0| return; 526| 0| } 527| | 528| 2.49k| for(const auto& point : points) { ------------------ | Branch (528:26): [True: 2.49k, False: 4] ------------------ 529| 2.49k| if(point.is_zero()) { ------------------ | Branch (529:10): [True: 0, False: 2.49k] ------------------ 530| 0| throw Invalid_State("Cannot convert zero ECC point to affine"); 531| 0| } 532| 2.49k| } 533| | 534| | /* 535| | For >= 2 points use Montgomery's trick 536| | 537| | See Algorithm 2.26 in "Guide to Elliptic Curve Cryptography" 538| | (Hankerson, Menezes, Vanstone) 539| | 540| | TODO is it really necessary to save all k points in c? 541| | */ 542| | 543| 4| const auto& group = points[0].m_curve.group(); 544| 4| const BigInt& rep_1 = group.monty().R1(); 545| | 546| 4| if(ws.size() < monty_ws_size(group)) { ------------------ | Branch (546:7): [True: 0, False: 4] ------------------ 547| 0| ws.resize(monty_ws_size(group)); 548| 0| } 549| | 550| 4| std::vector c(points.size()); 551| 4| c[0] = points[0].m_z; 552| | 553| 2.49k| for(size_t i = 1; i != points.size(); ++i) { ------------------ | Branch (553:22): [True: 2.48k, False: 4] ------------------ 554| 2.48k| fe_mul(group, c[i], c[i - 1], points[i].m_z, ws); 555| 2.48k| } 556| | 557| 4| BigInt s_inv = invert_element(group, c[c.size() - 1], ws); 558| | 559| 4| BigInt z_inv; 560| 4| BigInt z2_inv; 561| 4| BigInt z3_inv; 562| | 563| 2.49k| for(size_t i = points.size() - 1; i != 0; i--) { ------------------ | Branch (563:38): [True: 2.48k, False: 4] ------------------ 564| 2.48k| EC_Point& point = points[i]; 565| | 566| 2.48k| fe_mul(group, z_inv, s_inv, c[i - 1], ws); 567| | 568| 2.48k| s_inv = fe_mul(group, s_inv, point.m_z, ws); 569| | 570| 2.48k| fe_sqr(group, z2_inv, z_inv, ws); 571| 2.48k| fe_mul(group, z3_inv, z2_inv, z_inv, ws); 572| 2.48k| point.m_x = fe_mul(group, point.m_x, z2_inv, ws); 573| 2.48k| point.m_y = fe_mul(group, point.m_y, z3_inv, ws); 574| 2.48k| point.m_z = rep_1; 575| 2.48k| } 576| | 577| 4| fe_sqr(group, z2_inv, s_inv, ws); 578| 4| fe_mul(group, z3_inv, z2_inv, s_inv, ws); 579| 4| points[0].m_x = fe_mul(group, points[0].m_x, z2_inv, ws); 580| 4| points[0].m_y = fe_mul(group, points[0].m_y, z3_inv, ws); 581| 4| points[0].m_z = rep_1; 582| 4|} _ZNK5Botan8EC_Point12on_the_curveEv: 675| 125|bool EC_Point::on_the_curve() const { 676| | /* 677| | Is the point still on the curve?? (If everything is correct, the 678| | point is always on its curve; then the function will return true. 679| | If somehow the state is corrupted, which suggests a fault attack 680| | (or internal computational error), then return false. 681| | */ 682| 125| if(is_zero()) { ------------------ | Branch (682:7): [True: 0, False: 125] ------------------ 683| 0| return true; 684| 0| } 685| | 686| 125| const auto& group = m_curve.group(); 687| 125| secure_vector monty_ws; 688| | 689| 125| const BigInt y2 = from_rep_to_tmp(group, fe_sqr(group, m_y, monty_ws), monty_ws); 690| 125| const BigInt x3 = fe_mul(group, m_x, fe_sqr(group, m_x, monty_ws), monty_ws); 691| 125| const BigInt ax = fe_mul(group, m_x, group.monty_a(), monty_ws); 692| 125| const BigInt z2 = fe_sqr(group, m_z, monty_ws); 693| | 694| 125| const BigInt& monty_b = group.monty_b(); 695| | 696| | // Is z equal to 1 (in Montgomery form)? 697| 125| if(m_z == z2) { ------------------ | Branch (697:7): [True: 125, False: 0] ------------------ 698| 125| if(y2 != from_rep_to_tmp(group, x3 + ax + monty_b, monty_ws)) { ------------------ | Branch (698:10): [True: 125, False: 0] ------------------ 699| 125| return false; 700| 125| } 701| 125| } 702| | 703| 0| const BigInt z3 = fe_mul(group, m_z, z2, monty_ws); 704| 0| const BigInt ax_z4 = fe_mul(group, ax, fe_sqr(group, z2, monty_ws), monty_ws); 705| 0| const BigInt b_z6 = fe_mul(group, monty_b, fe_sqr(group, z3, monty_ws), monty_ws); 706| | 707| 0| if(y2 != from_rep_to_tmp(group, x3 + ax_z4 + b_z6, monty_ws)) { ------------------ | Branch (707:7): [True: 0, False: 0] ------------------ 708| 0| return false; 709| 0| } 710| | 711| 0| return true; 712| 0|} _ZN5Botan8EC_Point4swapERS0_: 792| 2.74k|void EC_Point::swap(EC_Point& other) noexcept { 793| 2.74k| m_curve.swap(other.m_curve); 794| 2.74k| m_x.swap(other.m_x); 795| 2.74k| m_y.swap(other.m_y); 796| 2.74k| m_z.swap(other.m_z); 797| 2.74k|} _ZN5Botan6OS2ECPENSt3__14spanIKhLm18446744073709551615EEERKNS_8CurveGFpE: 866| 127|EC_Point OS2ECP(std::span data, const CurveGFp& curve) { 867| 127| return OS2ECP(data.data(), data.size(), curve); 868| 127|} _ZN5Botan6OS2ECPEPKhmRKNS_8CurveGFpE: 870| 127|EC_Point OS2ECP(const uint8_t data[], size_t data_len, const CurveGFp& curve) { 871| 127| if(data_len == 1 && data[0] == 0) { ------------------ | Branch (871:7): [True: 0, False: 127] | Branch (871:24): [True: 0, False: 0] ------------------ 872| | // SEC1 standard representation of the point at infinity 873| 0| return EC_Point(curve); 874| 0| } 875| | 876| 127| const auto [g_x, g_y] = OS2ECP(data, data_len, curve.get_p(), curve.get_a(), curve.get_b()); 877| | 878| 127| EC_Point point(curve, g_x, g_y); 879| | 880| 127| if(!point.on_the_curve()) { ------------------ | Branch (880:7): [True: 125, False: 2] ------------------ 881| 125| throw Decoding_Error("OS2ECP: Decoded point was not on the curve"); 882| 125| } 883| | 884| 2| return point; 885| 127|} _ZN5Botan6OS2ECPEPKhmRKNS_6BigIntES4_S4_: 887| 127|std::pair OS2ECP(const uint8_t pt[], size_t pt_len, const BigInt& p, const BigInt& a, const BigInt& b) { 888| 127| if(pt_len <= 1) { ------------------ | Branch (888:7): [True: 0, False: 127] ------------------ 889| 0| throw Decoding_Error("OS2ECP invalid point encoding"); 890| 0| } 891| | 892| 127| const uint8_t pc = pt[0]; 893| 127| const size_t p_bytes = p.bytes(); 894| | 895| 127| BigInt x; 896| 127| BigInt y; 897| | 898| 127| if(pc == 2 || pc == 3) { ------------------ | Branch (898:7): [True: 0, False: 127] | Branch (898:18): [True: 0, False: 127] ------------------ 899| 0| if(pt_len != 1 + p_bytes) { ------------------ | Branch (899:10): [True: 0, False: 0] ------------------ 900| 0| throw Decoding_Error("OS2ECP invalid point encoding"); 901| 0| } 902| 0| x = BigInt::decode(&pt[1], pt_len - 1); 903| | 904| 0| const bool y_mod_2 = ((pc & 0x01) == 1); 905| 0| y = decompress_point(y_mod_2, x, p, a, b); 906| 127| } else if(pc == 4) { ------------------ | Branch (906:14): [True: 127, False: 0] ------------------ 907| 127| if(pt_len != 1 + 2 * p_bytes) { ------------------ | Branch (907:10): [True: 0, False: 127] ------------------ 908| 0| throw Decoding_Error("OS2ECP invalid point encoding"); 909| 0| } 910| | 911| 127| x = BigInt::decode(&pt[1], p_bytes); 912| 127| y = BigInt::decode(&pt[p_bytes + 1], p_bytes); 913| 127| } else if(pc == 6 || pc == 7) { ------------------ | Branch (913:14): [True: 0, False: 0] | Branch (913:25): [True: 0, False: 0] ------------------ 914| 0| if(pt_len != 1 + 2 * p_bytes) { ------------------ | Branch (914:10): [True: 0, False: 0] ------------------ 915| 0| throw Decoding_Error("OS2ECP invalid point encoding"); 916| 0| } 917| | 918| 0| x = BigInt::decode(&pt[1], p_bytes); 919| 0| y = BigInt::decode(&pt[p_bytes + 1], p_bytes); 920| | 921| 0| const bool y_mod_2 = ((pc & 0x01) == 1); 922| | 923| 0| if(decompress_point(y_mod_2, x, p, a, b) != y) { ------------------ | Branch (923:10): [True: 0, False: 0] ------------------ 924| 0| throw Decoding_Error("OS2ECP: Decoding error in hybrid format"); 925| 0| } 926| 0| } else { 927| 0| throw Decoding_Error("OS2ECP: Unknown format type " + std::to_string(static_cast(pc))); 928| 0| } 929| | 930| 127| if(x >= p || y >= p) { ------------------ | Branch (930:7): [True: 1, False: 126] | Branch (930:17): [True: 1, False: 125] ------------------ 931| 2| throw Decoding_Error("OS2ECP invalid point encoding"); 932| 2| } 933| | 934| 125| return std::make_pair(x, y); 935| 127|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_113monty_ws_sizeERKNS_13EC_Group_DataE: 102| 3.23k|size_t monty_ws_size(const EC_Group_Data& group) { 103| 3.23k| return 2 * group.p_words(); 104| 3.23k|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_16to_repERKNS_13EC_Group_DataERNS_6BigIntERNSt3__16vectorImNS_16secure_allocatorImEEEE: 55| 1.47k|void to_rep(const EC_Group_Data& group, BigInt& x, secure_vector& ws) { 56| 1.47k| group.monty().mul_by(x, group.monty().R2(), ws); 57| 1.47k|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_16fe_sqrERKNS_13EC_Group_DataERKNS_6BigIntERNSt3__16vectorImNS_16secure_allocatorImEEEE: 94| 375|BigInt fe_sqr(const EC_Group_Data& group, const BigInt& x, secure_vector& ws) { 95| 375| return group.monty().sqr(x, ws); 96| 375|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_16fe_mulERKNS_13EC_Group_DataERKNS_6BigIntES6_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 82| 7.72k|inline BigInt fe_mul(const EC_Group_Data& group, const BigInt& x, const BigInt& y, secure_vector& ws) { 83| 7.72k| return group.monty().mul(x, y, ws); 84| 7.72k|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_19resize_wsERNSt3__16vectorINS_6BigIntENS1_9allocatorIS3_EEEEm: 163| 2.49k|inline void resize_ws(std::vector& ws_bn, size_t cap_size) { 164| 2.49k| BOTAN_ASSERT(ws_bn.size() >= EC_Point::WORKSPACE_SIZE, "Expected size for EC_Point workspace"); ------------------ | | 71| 2.49k| do { \ | | 72| 2.49k| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 73| 2.49k| if(!(expr)) { \ | | ------------------ | | | Branch (73:10): [True: 0, False: 2.49k] | | ------------------ | | 74| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 75| 0| Botan::assertion_failure(#expr, assertion_made, __func__, __FILE__, __LINE__); \ | | 76| 0| } \ | | 77| 2.49k| } while(0) | | ------------------ | | | Branch (77:12): [Folded, False: 2.49k] | | ------------------ ------------------ 165| | 166| 19.9k| for(auto& ws : ws_bn) { ------------------ | Branch (166:17): [True: 19.9k, False: 2.49k] ------------------ 167| 19.9k| if(ws.size() < cap_size) { ------------------ | Branch (167:10): [True: 32, False: 19.9k] ------------------ 168| 32| ws.get_word_vector().resize(cap_size); 169| 32| } 170| 19.9k| } 171| 2.49k|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_16fe_sqrERKNS_13EC_Group_DataERNS_6BigIntERKS4_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 86| 11.0k|void fe_sqr(const EC_Group_Data& group, BigInt& z, const BigInt& x, secure_vector& ws) { 87| 11.0k| group.monty().sqr(z, x, ws); 88| 11.0k|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_16fe_mulERKNS_13EC_Group_DataERNS_6BigIntEPKmmRKS4_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 72| 5.69k| const EC_Group_Data& group, BigInt& z, const word x_w[], size_t x_size, const BigInt& y, secure_vector& ws) { 73| 5.69k| group.monty().mul(z, y, std::span{x_w, x_size}, ws); 74| 5.69k|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_16fe_mulERKNS_13EC_Group_DataERNS_6BigIntERKS4_S7_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 67| 22.5k|inline void fe_mul(const EC_Group_Data& group, BigInt& z, const BigInt& x, const BigInt& y, secure_vector& ws) { 68| 22.5k| group.monty().mul(z, x, y, ws); 69| 22.5k|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_16fe_sqrERKNS_13EC_Group_DataERNS_6BigIntEPKmmRNSt3__16vectorImNS_16secure_allocatorImEEEE: 90| 1.42k|void fe_sqr(const EC_Group_Data& group, BigInt& z, const word x_w[], size_t x_size, secure_vector& ws) { 91| 1.42k| group.monty().sqr(z, std::span{x_w, x_size}, ws); 92| 1.42k|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_114invert_elementERKNS_13EC_Group_DataERKNS_6BigIntERNSt3__16vectorImNS_16secure_allocatorImEEEE: 98| 4|BigInt invert_element(const EC_Group_Data& group, const BigInt& x, secure_vector& ws) { 99| 4| return group.monty().mul(inverse_mod_public_prime(x, group.p()), group.monty().R3(), ws); 100| 4|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_115from_rep_to_tmpERKNS_13EC_Group_DataERKNS_6BigIntERNSt3__16vectorImNS_16secure_allocatorImEEEE: 63| 250|BigInt from_rep_to_tmp(const EC_Group_Data& group, const BigInt& x, secure_vector& ws) { 64| 250| return group.monty().redc(x, ws); 65| 250|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_17fe_smulILm4EEEvRNS_6BigIntERKS2_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 77| 1.06k|inline void fe_smul(BigInt& z, const BigInt& p, secure_vector& ws) { 78| 1.06k| static_assert(M == 2 || M == 3 || M == 4 || M == 8); 79| 1.06k| z.mod_mul(M, p, ws); 80| 1.06k|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_17fe_smulILm3EEEvRNS_6BigIntERKS2_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 77| 1.06k|inline void fe_smul(BigInt& z, const BigInt& p, secure_vector& ws) { 78| 1.06k| static_assert(M == 2 || M == 3 || M == 4 || M == 8); 79| 1.06k| z.mod_mul(M, p, ws); 80| 1.06k|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_17fe_smulILm8EEEvRNS_6BigIntERKS2_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 77| 1.06k|inline void fe_smul(BigInt& z, const BigInt& p, secure_vector& ws) { 78| 1.06k| static_assert(M == 2 || M == 3 || M == 4 || M == 8); 79| 1.06k| z.mod_mul(M, p, ws); 80| 1.06k|} ec_point.cpp:_ZN5Botan12_GLOBAL__N_17fe_smulILm2EEEvRNS_6BigIntERKS2_RNSt3__16vectorImNS_16secure_allocatorImEEEE: 77| 1.06k|inline void fe_smul(BigInt& z, const BigInt& p, secure_vector& ws) { 78| 1.06k| static_assert(M == 2 || M == 3 || M == 4 || M == 8); 79| 1.06k| z.mod_mul(M, p, ws); 80| 1.06k|} _ZN5Botan30EC_Point_Base_Point_PrecomputeC2ERKNS_8EC_PointERKNS_17Barrett_ReductionE: 43| 4| m_base_point(base), m_mod_order(mod_order), m_p_words(base.get_curve().get_p_words()) { 44| 4| std::vector ws(EC_Point::WORKSPACE_SIZE); 45| | 46| 4| const size_t order_bits = mod_order.modulus_bits(); 47| | 48| 4| const size_t T_bits = ceil_division(order_bits + blinding_size(order_bits), WindowBits); 49| | 50| 4| std::vector T(WindowSize * T_bits); 51| | 52| 4| EC_Point g = base; 53| 4| EC_Point g2; 54| 4| EC_Point g4; 55| | 56| 360| for(size_t i = 0; i != T_bits; i++) { ------------------ | Branch (56:22): [True: 356, False: 4] ------------------ 57| 356| g2 = g; 58| 356| g2.mult2(ws); 59| 356| g4 = g2; 60| 356| g4.mult2(ws); 61| | 62| 356| T[7 * i + 0] = g; 63| 356| T[7 * i + 1] = std::move(g2); 64| 356| T[7 * i + 2] = T[7 * i + 1].plus(T[7 * i + 0], ws); // g2+g 65| 356| T[7 * i + 3] = g4; 66| 356| T[7 * i + 4] = T[7 * i + 3].plus(T[7 * i + 0], ws); // g4+g 67| 356| T[7 * i + 5] = T[7 * i + 3].plus(T[7 * i + 1], ws); // g4+g2 68| 356| T[7 * i + 6] = T[7 * i + 3].plus(T[7 * i + 2], ws); // g4+g2+g 69| | 70| 356| g.swap(g4); 71| 356| g.mult2(ws); 72| 356| } 73| | 74| 4| EC_Point::force_all_affine(T, ws[0].get_word_vector()); 75| | 76| 4| m_W.resize(T.size() * 2 * m_p_words); 77| | 78| 4| word* p = m_W.data(); 79| 2.49k| for(const auto& pt : T) { ------------------ | Branch (79:23): [True: 2.49k, False: 4] ------------------ 80| 2.49k| pt.get_x().encode_words(p, m_p_words); 81| 2.49k| p += m_p_words; 82| 2.49k| pt.get_y().encode_words(p, m_p_words); 83| 2.49k| p += m_p_words; 84| 2.49k| } 85| 4|} point_mul.cpp:_ZN5Botan12_GLOBAL__N_113blinding_sizeEm: 20| 4|size_t blinding_size(size_t order_bits) { 21| 4| return (order_bits + 1) / 2; 22| 4|} _ZN5Botan17EC_PublicKey_DataC2ERKNS_8EC_GroupENSt3__14spanIKhLm18446744073709551615EEE: 38| 328| EC_PublicKey_Data(group, decode_ec_public_key_point(group, bytes)) {} _ZN5Botan17EC_PublicKey_DataC2ENS_8EC_GroupENS_14EC_AffinePointE: 41| 600| m_group(std::move(group)), m_point(std::move(pt)) { 42| | // Checking that the point lies on the curve is done in the deserialization 43| | // of EC_AffinePoint. 44| 600| if(m_point.is_identity()) { ------------------ | Branch (44:7): [True: 0, False: 600] ------------------ 45| 0| throw Decoding_Error("ECC public key cannot be point at infinity"); 46| 0| } 47| | 48| 600| if(m_point._group() != m_group._data()) { ------------------ | Branch (48:7): [True: 0, False: 600] ------------------ 49| 0| if(m_point.group() != m_group) { ------------------ | Branch (49:10): [True: 0, False: 0] ------------------ 50| 0| throw Decoding_Error("ECC public key point is not an element of the specified group"); 51| 0| } 52| | 53| | // Same curve but a distinct EC_Group_Data (eg an unregistered explicit 54| | // group decoded twice); point arithmetic requires a shared representation 55| 0| if(auto rebound = EC_AffinePoint::deserialize_uncompressed(m_group, m_point.serialize_uncompressed())) { ------------------ | Branch (55:15): [True: 0, False: 0] ------------------ 56| 0| m_point = std::move(rebound).value(); 57| 0| } else { 58| 0| throw Decoding_Error("ECC public key point is not an element of the specified group"); 59| 0| } 60| 0| } 61| | 62| 600|#if defined(BOTAN_HAS_LEGACY_EC_POINT) 63| 600| m_legacy_point = m_point.to_legacy_point(); 64| 600|#endif 65| 600|} _ZN5Botan18EC_PrivateKey_DataC2ENS_8EC_GroupENS_9EC_ScalarE: 68| 596| m_group(std::move(group)), m_scalar(std::move(x)), m_legacy_x(m_scalar.to_bigint()) { 69| 596| if(m_scalar.group()._data() != m_group._data()) { ------------------ | Branch (69:7): [True: 0, False: 596] ------------------ 70| 0| if(m_scalar.group() != m_group) { ------------------ | Branch (70:10): [True: 0, False: 0] ------------------ 71| 0| throw Decoding_Error("ECC private key scalar is not an element of the specified group"); 72| 0| } 73| | 74| 0| if(auto rebound = EC_Scalar::deserialize(m_group, m_scalar.serialize>())) { ------------------ | Branch (74:15): [True: 0, False: 0] ------------------ 75| 0| m_scalar = std::move(rebound).value(); 76| 0| } else { 77| 0| throw Decoding_Error("ECC private key scalar is not an element of the specified group"); 78| 0| } 79| 0| } 80| | 81| | // Checking that the scalar is lower than the group order is ensured in the 82| | // deserialization of the EC_Scalar or during the random generation respectively. 83| 596| if(m_scalar.is_zero()) { ------------------ | Branch (83:7): [True: 0, False: 596] ------------------ 84| 0| throw Decoding_Error("ECC private key cannot be zero"); 85| 0| } 86| 596|} _ZN5Botan18EC_PrivateKey_DataD2Ev: 120| 596|EC_PrivateKey_Data::~EC_PrivateKey_Data() { 121| 596| m_scalar.zeroize(); 122| 596|} _ZNK5Botan18EC_PrivateKey_Data10public_keyERNS_21RandomNumberGeneratorEb: 125| 596| bool with_modular_inverse) const { 126| 596| const auto public_point = [&] { 127| 596| if(with_modular_inverse) { 128| 596| return EC_AffinePoint::g_mul(m_scalar.invert(), rng); 129| 596| } else { 130| 596| return EC_AffinePoint::g_mul(m_scalar, rng); 131| 596| } 132| 596| }; 133| | 134| 596| return std::make_shared(m_group, public_point()); 135| 596|} ec_key_data.cpp:_ZN5Botan12_GLOBAL__N_126decode_ec_public_key_pointERKNS_8EC_GroupENSt3__14spanIKhLm18446744073709551615EEE: 17| 328|EC_AffinePoint decode_ec_public_key_point(const EC_Group& group, std::span bytes) { 18| | /* 19| | * RFC 5480 section 2.2: 20| | * The first octet of the OCTET STRING indicates whether the key is 21| | * compressed or uncompressed. The uncompressed form is indicated 22| | * by 0x04 and the compressed form is indicated by either 0x02 or 23| | * 0x03 (see 2.3.3 in [SEC1]). The public key MUST be rejected if 24| | * any other value is included in the first octet. 25| | */ 26| 328| if(auto pt_uncompressed = EC_AffinePoint::deserialize_uncompressed(group, bytes)) { ------------------ | Branch (26:12): [True: 4, False: 324] ------------------ 27| 4| return std::move(pt_uncompressed).value(); 28| 324| } else if(auto pt_compressed = EC_AffinePoint::deserialize_compressed(group, bytes)) { ------------------ | Branch (28:19): [True: 0, False: 324] ------------------ 29| 0| return std::move(pt_compressed).value(); 30| 324| } else { 31| 324| throw Decoding_Error("Failed to deserialize elliptic curve point"); 32| 324| } 33| 328|} ec_key_data.cpp:_ZZNK5Botan18EC_PrivateKey_Data10public_keyERNS_21RandomNumberGeneratorEbENK3$_0clEv: 126| 596| const auto public_point = [&] { 127| 596| if(with_modular_inverse) { ------------------ | Branch (127:10): [True: 0, False: 596] ------------------ 128| 0| return EC_AffinePoint::g_mul(m_scalar.invert(), rng); 129| 596| } else { 130| 596| return EC_AffinePoint::g_mul(m_scalar, rng); 131| 596| } 132| 596| }; _ZN5Botan12EC_PublicKey27assert_algorithm_identifierERKNS_19AlgorithmIdentifierENSt3__117basic_string_viewIcNS4_11char_traitsIcEEEE: 49| 401| std::string_view alg_name) { 50| 401| if(alg_id.oid() != OID::from_string(alg_name)) { ------------------ | Branch (50:7): [True: 6, False: 395] ------------------ 51| 6| throw Decoding_Error( 52| 6| fmt("Unexpected AlgorithmIdentifier OID {} in association with {} key", alg_id.oid(), alg_name)); 53| 6| } 54| | 55| 395| return alg_id; // NOLINT(*-return-const-ref-from-parameter) 56| 401|} _ZN5Botan12EC_PublicKeyC2ERKNS_19AlgorithmIdentifierENSt3__14spanIKhLm18446744073709551615EEE: 71| 395|EC_PublicKey::EC_PublicKey(const AlgorithmIdentifier& alg_id, std::span key_bits) { 72| 395| m_public_key = std::make_shared(EC_Group(alg_id.parameters()), key_bits); 73| 395| m_domain_encoding = default_encoding_for(domain()); // NOLINT(*-prefer-member-initializer) 74| 395|} _ZNK5Botan12EC_PublicKey6domainEv: 76| 600|const EC_Group& EC_PublicKey::domain() const { 77| 600| BOTAN_STATE_CHECK(m_public_key != nullptr); ------------------ | | 51| 600| do { \ | | 52| 600| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 53| 600| if(!(expr)) { \ | | ------------------ | | | Branch (53:10): [True: 0, False: 600] | | ------------------ | | 54| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 55| 0| Botan::throw_invalid_state(#expr, __func__, __FILE__); \ | | 56| 0| } \ | | 57| 600| } while(0) | | ------------------ | | | Branch (57:12): [Folded, False: 600] | | ------------------ ------------------ 78| 600| return m_public_key->group(); 79| 600|} _ZN5Botan12EC_PublicKey18set_point_encodingENS_15EC_Point_FormatE: 114| 1.19k|void EC_PublicKey::set_point_encoding(EC_Point_Format enc) { 115| 1.19k| if(enc != EC_Point_Format::Compressed && enc != EC_Point_Format::Uncompressed && enc != EC_Point_Format::Hybrid) { ------------------ | Branch (115:7): [True: 1.19k, False: 0] | Branch (115:45): [True: 0, False: 1.19k] | Branch (115:85): [True: 0, False: 0] ------------------ 116| 0| throw Invalid_Argument("Invalid point encoding for EC_PublicKey"); 117| 0| } 118| | 119| 1.19k| m_point_encoding = enc; 120| 1.19k|} _ZN5Botan13EC_PrivateKeyC2ERNS_21RandomNumberGeneratorERKNS_8EC_GroupEb: 155| 596| m_with_modular_inverse(with_modular_inverse) { 156| 596| auto scalar = EC_Scalar::random(ec_group, rng); 157| 596| m_private_key = std::make_shared(ec_group, std::move(scalar)); 158| 596| m_public_key = m_private_key->public_key(rng, with_modular_inverse); 159| 596| m_domain_encoding = default_encoding_for(domain()); 160| 596|} ecc_key.cpp:_ZN5Botan12_GLOBAL__N_120default_encoding_forERKNS_8EC_GroupE: 38| 600|EC_Group_Encoding default_encoding_for(const EC_Group& group) { 39| 600| if(group.get_curve_oid().empty()) { ------------------ | Branch (39:7): [True: 0, False: 600] ------------------ 40| 0| return EC_Group_Encoding::Explicit; 41| 600| } else { 42| 600| return EC_Group_Encoding::NamedCurve; 43| 600| } 44| 600|} _ZN5Botan8PEM_Code6decodeERNS_10DataSourceERNSt3__112basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEE: 64| 65|secure_vector decode(DataSource& source, std::string& label) { 65| 65| const size_t RANDOM_CHAR_LIMIT = 8; 66| | 67| 65| label.clear(); 68| | 69| 65| const std::string PEM_HEADER1 = "-----BEGIN "; 70| 65| const std::string PEM_HEADER2 = "-----"; 71| 65| size_t position = 0; 72| | 73| 16.8k| while(position != PEM_HEADER1.length()) { ------------------ | Branch (73:10): [True: 16.7k, False: 48] ------------------ 74| 16.7k| auto b = source.read_byte(); 75| | 76| 16.7k| if(!b) { ------------------ | Branch (76:10): [True: 16, False: 16.7k] ------------------ 77| 16| throw Decoding_Error("PEM: No PEM header found"); 78| 16| } 79| 16.7k| if(static_cast(*b) == PEM_HEADER1[position]) { ------------------ | Branch (79:10): [True: 945, False: 15.8k] ------------------ 80| 945| ++position; 81| 15.8k| } else if(position >= RANDOM_CHAR_LIMIT) { ------------------ | Branch (81:17): [True: 1, False: 15.8k] ------------------ 82| 1| throw Decoding_Error("PEM: Malformed PEM header"); 83| 15.8k| } else { 84| 15.8k| position = 0; 85| 15.8k| } 86| 16.7k| } 87| 48| position = 0; 88| 1.89k| while(position != PEM_HEADER2.length()) { ------------------ | Branch (88:10): [True: 1.85k, False: 35] ------------------ 89| 1.85k| auto b = source.read_byte(); 90| | 91| 1.85k| if(!b) { ------------------ | Branch (91:10): [True: 7, False: 1.85k] ------------------ 92| 7| throw Decoding_Error("PEM: No PEM header found"); 93| 7| } 94| 1.85k| if(static_cast(*b) == PEM_HEADER2[position]) { ------------------ | Branch (94:10): [True: 182, False: 1.67k] ------------------ 95| 182| ++position; 96| 1.67k| } else if(position > 0) { ------------------ | Branch (96:17): [True: 4, False: 1.66k] ------------------ 97| 4| throw Decoding_Error("PEM: Malformed PEM header"); 98| 4| } 99| | 100| 1.84k| if(position == 0) { ------------------ | Branch (100:10): [True: 1.66k, False: 182] ------------------ 101| 1.66k| if(label.size() >= 128) { ------------------ | Branch (101:13): [True: 2, False: 1.66k] ------------------ 102| 2| throw Decoding_Error("PEM: Label too long"); 103| 2| } 104| 1.66k| label += static_cast(*b); 105| 1.66k| } 106| 1.84k| } 107| | 108| 35| std::vector b64; 109| | 110| 35| const std::string PEM_TRAILER = fmt("-----END {}-----", label); 111| 35| position = 0; 112| 1.56k| while(position != PEM_TRAILER.length()) { ------------------ | Branch (112:10): [True: 1.56k, False: 0] ------------------ 113| 1.56k| auto b = source.read_byte(); 114| | 115| 1.56k| if(!b) { ------------------ | Branch (115:10): [True: 13, False: 1.55k] ------------------ 116| 13| throw Decoding_Error("PEM: No PEM trailer found"); 117| 13| } 118| 1.55k| if(static_cast(*b) == PEM_TRAILER[position]) { ------------------ | Branch (118:10): [True: 53, False: 1.49k] ------------------ 119| 53| ++position; 120| 1.49k| } else if(position > 0) { ------------------ | Branch (120:17): [True: 22, False: 1.47k] ------------------ 121| 22| throw Decoding_Error("PEM: Malformed PEM trailer"); 122| 22| } 123| | 124| 1.52k| if(position == 0) { ------------------ | Branch (124:10): [True: 1.47k, False: 53] ------------------ 125| 1.47k| b64.push_back(*b); 126| 1.47k| } 127| 1.52k| } 128| | 129| 0| return base64_decode(b64.data(), b64.size()); 130| 35|} _ZN5Botan8PEM_Code7matchesERNS_10DataSourceENSt3__117basic_string_viewIcNS3_11char_traitsIcEEEEm: 146| 6.32k|bool matches(DataSource& source, std::string_view extra, size_t search_range) { 147| 6.32k| const std::string PEM_HEADER = fmt("-----BEGIN {}", extra); 148| | 149| 6.32k| std::array stack_buf{}; 150| 6.32k| std::vector heap_buf; 151| 6.32k| uint8_t* search_buf = stack_buf.data(); 152| 6.32k| if(search_range > stack_buf.size()) { ------------------ | Branch (152:7): [True: 0, False: 6.32k] ------------------ 153| 0| heap_buf.resize(search_range); 154| 0| search_buf = heap_buf.data(); 155| 0| } 156| | 157| 6.32k| const size_t got = source.peek(search_buf, search_range, 0); 158| | 159| 6.32k| if(got < PEM_HEADER.length()) { ------------------ | Branch (159:7): [True: 1, False: 6.31k] ------------------ 160| 1| return false; 161| 1| } 162| | 163| 6.31k| return std::search(search_buf, search_buf + got, PEM_HEADER.begin(), PEM_HEADER.end()) != search_buf + got; 164| 6.32k|} _ZN5Botan15load_public_keyERKNS_19AlgorithmIdentifierENSt3__14spanIKhLm18446744073709551615EEE: 131| 2.32k| [[maybe_unused]] std::span key_bits) { 132| 2.32k| const std::string alg_name = [&]() -> std::string { 133| 2.32k| if(const auto name = alg_id.oid().registered_name()) { 134| 2.32k| const std::vector alg_info = split_on(*name, '/'); 135| 2.32k| if(!alg_info.empty()) { 136| 2.32k| return alg_info[0]; 137| 2.32k| } 138| 2.32k| } 139| | 140| 2.32k| throw Decoding_Error( 141| 2.32k| fmt("Public key decoding failed, no algorithm associated with {}", alg_id.oid().to_string())); 142| 2.32k| }(); 143| | 144| 2.32k|#if defined(BOTAN_HAS_RSA) 145| 2.32k| if(alg_name == "RSA") { ------------------ | Branch (145:7): [True: 953, False: 1.36k] ------------------ 146| 953| return std::make_unique(alg_id, key_bits); 147| 953| } 148| 1.36k|#endif 149| | 150| 1.36k|#if defined(BOTAN_HAS_X25519) 151| 1.36k| if(alg_name == "X25519" || alg_name == "Curve25519") { ------------------ | Branch (151:7): [True: 932, False: 437] | Branch (151:31): [True: 0, False: 437] ------------------ 152| 0| return std::make_unique(alg_id, key_bits); 153| 0| } 154| 1.36k|#endif 155| | 156| 1.36k|#if defined(BOTAN_HAS_X448) 157| 1.36k| if(alg_name == "X448") { ------------------ | Branch (157:7): [True: 0, False: 1.36k] ------------------ 158| 0| return std::make_unique(alg_id, key_bits); 159| 0| } 160| 1.36k|#endif 161| | 162| 1.36k|#if defined(BOTAN_HAS_MCELIECE) 163| 1.36k| if(alg_name == "McEliece") { ------------------ | Branch (163:7): [True: 0, False: 1.36k] ------------------ 164| 0| return std::make_unique(alg_id, key_bits); 165| 0| } 166| 1.36k|#endif 167| | 168| 1.36k|#if defined(BOTAN_HAS_FRODOKEM) 169| 1.36k| if(alg_name == "FrodoKEM" || alg_name.starts_with("FrodoKEM-") || alg_name.starts_with("eFrodoKEM-")) { ------------------ | Branch (169:7): [True: 932, False: 437] | Branch (169:33): [True: 0, False: 437] | Branch (169:70): [True: 0, False: 437] ------------------ 170| 0| return std::make_unique(alg_id, key_bits); 171| 0| } 172| 1.36k|#endif 173| | 174| 1.36k|#if defined(BOTAN_HAS_KYBER) || defined(BOTAN_HAS_KYBER_90S) 175| 1.36k| if(alg_name == "Kyber" || alg_name.starts_with("Kyber-")) { ------------------ | Branch (175:7): [True: 932, False: 437] | Branch (175:30): [True: 0, False: 437] ------------------ 176| 0| return std::make_unique(alg_id, key_bits); 177| 0| } 178| 1.36k|#endif 179| | 180| 1.36k|#if defined(BOTAN_HAS_ML_KEM) 181| 1.36k| if(alg_name.starts_with("ML-KEM-")) { ------------------ | Branch (181:7): [True: 0, False: 1.36k] ------------------ 182| 0| return std::make_unique(alg_id, key_bits); 183| 0| } 184| 1.36k|#endif 185| | 186| 1.36k|#if defined(BOTAN_HAS_ECDSA) 187| 1.36k| if(alg_name == "ECDSA") { ------------------ | Branch (187:7): [True: 401, False: 968] ------------------ 188| 401| return std::make_unique(alg_id, key_bits); 189| 401| } 190| 968|#endif 191| | 192| 968|#if defined(BOTAN_HAS_ECDH) 193| 968| if(alg_name == "ECDH") { ------------------ | Branch (193:7): [True: 0, False: 968] ------------------ 194| 0| return std::make_unique(alg_id, key_bits); 195| 0| } 196| 968|#endif 197| | 198| 968|#if defined(BOTAN_HAS_DIFFIE_HELLMAN) 199| 968| if(alg_name == "DH") { ------------------ | Branch (199:7): [True: 3, False: 965] ------------------ 200| 3| return std::make_unique(alg_id, key_bits); 201| 3| } 202| 965|#endif 203| | 204| 965|#if defined(BOTAN_HAS_DSA) 205| 965| if(alg_name == "DSA") { ------------------ | Branch (205:7): [True: 2, False: 963] ------------------ 206| 2| return std::make_unique(alg_id, key_bits); 207| 2| } 208| 963|#endif 209| | 210| 963|#if defined(BOTAN_HAS_ELGAMAL) 211| 963| if(alg_name == "ElGamal") { ------------------ | Branch (211:7): [True: 0, False: 963] ------------------ 212| 0| return std::make_unique(alg_id, key_bits); 213| 0| } 214| 963|#endif 215| | 216| 963|#if defined(BOTAN_HAS_ECGDSA) 217| 963| if(alg_name == "ECGDSA") { ------------------ | Branch (217:7): [True: 0, False: 963] ------------------ 218| 0| return std::make_unique(alg_id, key_bits); 219| 0| } 220| 963|#endif 221| | 222| 963|#if defined(BOTAN_HAS_ECKCDSA) 223| 963| if(alg_name == "ECKCDSA") { ------------------ | Branch (223:7): [True: 0, False: 963] ------------------ 224| 0| return std::make_unique(alg_id, key_bits); 225| 0| } 226| 963|#endif 227| | 228| 963|#if defined(BOTAN_HAS_ED25519) 229| 963| if(alg_name == "Ed25519") { ------------------ | Branch (229:7): [True: 0, False: 963] ------------------ 230| 0| return std::make_unique(alg_id, key_bits); 231| 0| } 232| 963|#endif 233| | 234| 963|#if defined(BOTAN_HAS_ED448) 235| 963| if(alg_name == "Ed448") { ------------------ | Branch (235:7): [True: 0, False: 963] ------------------ 236| 0| return std::make_unique(alg_id, key_bits); 237| 0| } 238| 963|#endif 239| | 240| 963|#if defined(BOTAN_HAS_GOST_34_10_2001) 241| 963| if(alg_name == "GOST-34.10" || alg_name == "GOST-34.10-2012-256" || alg_name == "GOST-34.10-2012-512") { ------------------ | Branch (241:7): [True: 932, False: 31] | Branch (241:35): [True: 0, False: 31] | Branch (241:72): [True: 0, False: 31] ------------------ 242| 0| return std::make_unique(alg_id, key_bits); 243| 0| } 244| 963|#endif 245| | 246| 963|#if defined(BOTAN_HAS_SM2) 247| 963| if(alg_name == "SM2" || alg_name == "SM2_Sig" || alg_name == "SM2_Enc") { ------------------ | Branch (247:7): [True: 932, False: 31] | Branch (247:28): [True: 0, False: 31] | Branch (247:53): [True: 0, False: 31] ------------------ 248| 0| return std::make_unique(alg_id, key_bits); 249| 0| } 250| 963|#endif 251| | 252| 963|#if defined(BOTAN_HAS_XMSS_RFC8391) 253| 963| if(alg_name == "XMSS") { ------------------ | Branch (253:7): [True: 0, False: 963] ------------------ 254| 0| return std::make_unique(alg_id, key_bits); 255| 0| } 256| 963|#endif 257| | 258| 963|#if defined(BOTAN_HAS_DILITHIUM) || defined(BOTAN_HAS_DILITHIUM_AES) 259| 963| if(alg_name == "Dilithium" || alg_name.starts_with("Dilithium-")) { ------------------ | Branch (259:7): [True: 932, False: 31] | Branch (259:34): [True: 0, False: 31] ------------------ 260| 0| return std::make_unique(alg_id, key_bits); 261| 0| } 262| 963|#endif 263| | 264| 963|#if defined(BOTAN_HAS_ML_DSA) 265| 963| if(alg_name.starts_with("ML-DSA-")) { ------------------ | Branch (265:7): [True: 0, False: 963] ------------------ 266| 0| return std::make_unique(alg_id, key_bits); 267| 0| } 268| 963|#endif 269| | 270| 963|#if defined(BOTAN_HAS_HSS_LMS) 271| 963| if(alg_name == "HSS-LMS") { ------------------ | Branch (271:7): [True: 0, False: 963] ------------------ 272| 0| return std::make_unique(alg_id, key_bits); 273| 0| } 274| 963|#endif 275| | 276| 963|#if defined(BOTAN_HAS_SPHINCS_PLUS_WITH_SHA2) || defined(BOTAN_HAS_SPHINCS_PLUS_WITH_SHAKE) 277| 963| if(alg_name == "SPHINCS+" || alg_name.starts_with("SphincsPlus-")) { ------------------ | Branch (277:7): [True: 932, False: 31] | Branch (277:33): [True: 0, False: 31] ------------------ 278| 0| return std::make_unique(alg_id, key_bits); 279| 0| } 280| 963|#endif 281| | 282| 963|#if defined(BOTAN_HAS_SLH_DSA_WITH_SHA2) || defined(BOTAN_HAS_SLH_DSA_WITH_SHAKE) 283| 963| if(alg_name.starts_with("SLH-DSA-") || alg_name.starts_with("Hash-SLH-DSA-")) { ------------------ | Branch (283:7): [True: 932, False: 31] | Branch (283:43): [True: 0, False: 31] ------------------ 284| 0| return std::make_unique(alg_id, key_bits); 285| 0| } 286| 963|#endif 287| | 288| 963|#if defined(BOTAN_HAS_CLASSICMCELIECE) 289| 963| if(alg_name.starts_with("ClassicMcEliece")) { ------------------ | Branch (289:7): [True: 0, False: 963] ------------------ 290| 0| return std::make_unique(alg_id, key_bits); 291| 0| } 292| 963|#endif 293| | 294| 963| throw Decoding_Error(fmt("Unknown or unavailable public key algorithm '{}'", alg_name)); 295| 963|} pk_algs.cpp:_ZZN5Botan15load_public_keyERKNS_19AlgorithmIdentifierENSt3__14spanIKhLm18446744073709551615EEEENK3$_0clEv: 132| 2.32k| const std::string alg_name = [&]() -> std::string { 133| 2.32k| if(const auto name = alg_id.oid().registered_name()) { ------------------ | Branch (133:21): [True: 1.39k, False: 932] ------------------ 134| 1.39k| const std::vector alg_info = split_on(*name, '/'); 135| 1.39k| if(!alg_info.empty()) { ------------------ | Branch (135:13): [True: 1.39k, False: 0] ------------------ 136| 1.39k| return alg_info[0]; 137| 1.39k| } 138| 1.39k| } 139| | 140| 932| throw Decoding_Error( 141| 932| fmt("Public key decoding failed, no algorithm associated with {}", alg_id.oid().to_string())); 142| 2.32k| }(); _ZN5Botan22format_hex_fingerprintENSt3__14spanIKhLm18446744073709551615EEE: 47| 5.69k|std::string format_hex_fingerprint(std::span bits) { 48| 5.69k| const std::string hex = hex_encode(bits); 49| | 50| 5.69k| std::string fprint; 51| 5.69k| fprint.reserve(3 * bits.size()); 52| | 53| 153k| for(size_t i = 0; i != hex.size(); i += 2) { ------------------ | Branch (53:22): [True: 148k, False: 5.69k] ------------------ 54| 148k| if(i != 0) { ------------------ | Branch (54:10): [True: 142k, False: 5.69k] ------------------ 55| 142k| fprint.push_back(':'); 56| 142k| } 57| | 58| 148k| fprint.push_back(hex[i]); 59| 148k| fprint.push_back(hex[i + 1]); 60| 148k| } 61| | 62| 5.69k| return fprint; 63| 5.69k|} _ZN5Botan6PK_Ops23Encryption_with_PaddingC2ERKNS_28PK_Encryption_Options_ReaderE: 37| 36| m_padding(EncryptionPaddingScheme::create_or_throw(options)) {} _ZN5Botan6PK_Ops23Encryption_with_PaddingD2Ev: 39| 36|PK_Ops::Encryption_with_Padding::~Encryption_with_Padding() = default; _ZN5Botan6PK_Ops23Encryption_with_Padding7encryptENSt3__14spanIKhLm18446744073709551615EEERNS_21RandomNumberGeneratorE: 46| 36| RandomNumberGenerator& rng) { 47| 36| const size_t max_input_bits = max_ptext_input_bits(); 48| 36| const size_t max_input_bytes = (max_input_bits + 7) / 8; 49| 36| BOTAN_ARG_CHECK(msg.size() <= max_input_bytes, "Plaintext too large"); ------------------ | | 35| 36| do { \ | | 36| 36| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 36| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 36] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 36| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 36] | | ------------------ ------------------ 50| | 51| 36| secure_vector padded_ptext(max_input_bytes); 52| 36| const size_t written = m_padding->pad(padded_ptext, msg, max_input_bits, rng); 53| 36| return raw_encrypt(std::span{padded_ptext}.first(written), rng); 54| 36|} _ZN5Botan6PK_Ops22Key_Agreement_with_KDFC2ERKNS_31PK_Key_Agreement_Options_ReaderE: 85| 272|PK_Ops::Key_Agreement_with_KDF::Key_Agreement_with_KDF(const PK_Key_Agreement_Options_Reader& options) { 86| 272| if(options.using_kdf()) { ------------------ | Branch (86:7): [True: 0, False: 272] ------------------ 87| 0| m_kdf = KDF::create_or_throw(options.kdf().value()); 88| 272| } else if(!options.using_raw_shared_key()) { ------------------ | Branch (88:14): [True: 0, False: 272] ------------------ 89| 0| throw Invalid_Argument( 90| 0| "Key agreement does not produce a uniform shared key, so a KDF must be specified (or the raw shared key " 91| 0| "explicitly requested)"); 92| 0| } 93| 272|} _ZN5Botan6PK_Ops22Key_Agreement_with_KDFD2Ev: 95| 272|PK_Ops::Key_Agreement_with_KDF::~Key_Agreement_with_KDF() = default; _ZN5Botan6PK_Ops22Key_Agreement_with_KDF5agreeEmNSt3__14spanIKhLm18446744073709551615EEES5_: 99| 272| std::span salt) { 100| 272| if(!salt.empty() && m_kdf == nullptr) { ------------------ | Branch (100:7): [True: 0, False: 272] | Branch (100:24): [True: 0, False: 0] ------------------ 101| 0| throw Invalid_Argument("PK_Key_Agreement::derive_key requires a KDF to use a salt"); 102| 0| } 103| | 104| 272| secure_vector z = raw_agree(other_key.data(), other_key.size()); 105| 272| if(m_kdf) { ------------------ | Branch (105:7): [True: 0, False: 272] ------------------ 106| 0| return m_kdf->derive_key(key_len, z, salt.data(), salt.size()); 107| 0| } 108| 272| return z; 109| 272|} _ZN5Botan20PK_Signature_OptionsD2Ev: 19| 2.87k|PK_Signature_Options::~PK_Signature_Options() = default; _ZN5Botan20PK_Signature_Options9with_hashENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 21| 569|PK_Signature_Options PK_Signature_Options::with_hash(std::string_view hash) { 22| 569| BOTAN_STATE_CHECK_MSG(!m_hash_fn.has_value(), "PK_Signature_Options::with_hash cannot specify hash twice"); ------------------ | | 61| 569| do { \ | | 62| 569| if(!(expr)) \ | | ------------------ | | | Branch (62:10): [True: 0, False: 569] | | ------------------ | | 63| 569| Botan::throw_invalid_state(msg, __func__, __FILE__); \ | | 64| 569| } while(0) | | ------------------ | | | Branch (64:12): [Folded, False: 569] | | ------------------ ------------------ 23| 569| auto next = (*this); 24| 569| if(!hash.empty()) { ------------------ | Branch (24:7): [True: 569, False: 0] ------------------ 25| 569| next.m_hash_fn = hash; 26| 569| } 27| 569| return next; 28| 569|} _ZN5Botan20PK_Signature_Options12with_paddingENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 30| 569|PK_Signature_Options PK_Signature_Options::with_padding(std::string_view padding) { 31| 569| BOTAN_STATE_CHECK_MSG(!m_padding.has_value(), "PK_Signature_Options::with_padding cannot specify padding twice"); ------------------ | | 61| 569| do { \ | | 62| 569| if(!(expr)) \ | | ------------------ | | | Branch (62:10): [True: 0, False: 569] | | ------------------ | | 63| 569| Botan::throw_invalid_state(msg, __func__, __FILE__); \ | | 64| 569| } while(0) | | ------------------ | | | Branch (64:12): [Folded, False: 569] | | ------------------ ------------------ 32| 569| auto next = (*this); 33| 569| if(!padding.empty()) { ------------------ | Branch (33:7): [True: 569, False: 0] ------------------ 34| 569| next.m_padding = padding; 35| 569| } 36| 569| return next; 37| 569|} _ZN5Botan20PK_Signature_Options13with_providerENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 67| 569|PK_Signature_Options PK_Signature_Options::with_provider(std::string_view provider) { 68| 569| BOTAN_STATE_CHECK_MSG(provider.empty() || !m_provider.has_value(), ------------------ | | 61| 569| do { \ | | 62| 569| if(!(expr)) \ | | ------------------ | | | Branch (62:12): [True: 569, False: 0] | | | Branch (62:12): [True: 0, False: 0] | | ------------------ | | 63| 569| Botan::throw_invalid_state(msg, __func__, __FILE__); \ | | 64| 569| } while(0) | | ------------------ | | | Branch (64:12): [Folded, False: 569] | | ------------------ ------------------ 69| 569| "PK_Signature_Options::with_provider cannot specify provider twice"); 70| 569| auto next = (*this); 71| 569| if(!provider.empty()) { ------------------ | Branch (71:7): [True: 0, False: 569] ------------------ 72| 0| next.m_provider = provider; 73| 0| } 74| 569| return next; 75| 569|} _ZN5Botan20PK_Signature_Options14with_salt_sizeEm: 92| 29|PK_Signature_Options PK_Signature_Options::with_salt_size(size_t salt_size) { 93| 29| BOTAN_STATE_CHECK_MSG(!m_salt_size.has_value(), ------------------ | | 61| 29| do { \ | | 62| 29| if(!(expr)) \ | | ------------------ | | | Branch (62:10): [True: 0, False: 29] | | ------------------ | | 63| 29| Botan::throw_invalid_state(msg, __func__, __FILE__); \ | | 64| 29| } while(0) | | ------------------ | | | Branch (64:12): [Folded, False: 29] | | ------------------ ------------------ 94| 29| "PK_Signature_Options::with_salt_size cannot specify salt size twice"); 95| 29| BOTAN_ARG_CHECK(salt_size <= 1024, "Unreasonable salt size"); ------------------ | | 35| 29| do { \ | | 36| 29| /* NOLINTNEXTLINE(*-simplify-boolean-expr) */ \ | | 37| 29| if(!(expr)) { \ | | ------------------ | | | Branch (37:10): [True: 0, False: 29] | | ------------------ | | 38| 0| /* NOLINTNEXTLINE(bugprone-lambda-function-name) */ \ | | 39| 0| Botan::throw_invalid_argument(msg, __func__, __FILE__); \ | | 40| 0| } \ | | 41| 29| } while(0) | | ------------------ | | | Branch (41:12): [Folded, False: 29] | | ------------------ ------------------ 96| 29| auto next = (*this); 97| 29| next.m_salt_size = salt_size; 98| 29| return next; 99| 29|} _ZN5Botan20PK_Signature_Options26with_der_encoded_signatureEb: 110| 569|PK_Signature_Options PK_Signature_Options::with_der_encoded_signature(bool der) { 111| 569| BOTAN_STATE_CHECK_MSG(!m_use_der, ------------------ | | 61| 569| do { \ | | 62| 569| if(!(expr)) \ | | ------------------ | | | Branch (62:10): [True: 0, False: 569] | | ------------------ | | 63| 569| Botan::throw_invalid_state(msg, __func__, __FILE__); \ | | 64| 569| } while(0) | | ------------------ | | | Branch (64:12): [Folded, False: 569] | | ------------------ ------------------ 112| 569| "PK_Signature_Options::with_der_encoded_signature cannot specify DER encoding twice"); 113| 569| auto next = (*this); 114| 569| next.m_use_der = der; 115| 569| return next; 116| 569|} _ZNK5Botan27PK_Signature_Options_Reader14using_providerEv: 135| 569|bool PK_Signature_Options_Reader::using_provider() const { 136| 569| note_examined(Option::Provider); 137| 569| return provider_is_in_use(m_options.m_provider); 138| 569|} _ZNK5Botan27PK_Signature_Options_Reader18hash_function_nameEv: 140| 1.13k|const std::string& PK_Signature_Options_Reader::hash_function_name() const { 141| 1.13k| note_examined(Option::Hash); 142| | 143| 1.13k| if(m_options.m_hash_fn.has_value()) { ------------------ | Branch (143:7): [True: 1.13k, False: 0] ------------------ 144| 1.13k| return m_options.m_hash_fn.value(); 145| 1.13k| } 146| | 147| 0| throw Invalid_State("This signature scheme requires specifying a hash function"); 148| 1.13k|} _ZNK5Botan27PK_Signature_Options_Reader14options_in_useEv: 150| 569|uint32_t PK_Signature_Options_Reader::options_in_use() const { 151| 569| uint32_t in_use = 0; 152| | 153| 569| const auto set_if = [&](bool cond, Option option) { 154| 569| if(cond) { 155| 569| in_use |= static_cast(option); 156| 569| } 157| 569| }; 158| | 159| 569| const auto& o = m_options; 160| | 161| 569| set_if(o.m_hash_fn.has_value(), Option::Hash); 162| 569| set_if(o.m_using_prehash, Option::Prehash); 163| 569| set_if(o.m_using_external_prehash, Option::ExternalPrehash); 164| 569| set_if(o.m_padding.has_value(), Option::Padding); 165| 569| set_if(o.m_context.has_value(), Option::Context); 166| 569| set_if(provider_is_in_use(o.m_provider), Option::Provider); 167| 569| set_if(o.m_salt_size.has_value(), Option::SaltSize); 168| 569| set_if(o.m_use_der, Option::DerEncoded); 169| 569| set_if(o.m_deterministic_sig && m_usage == Usage::Signing, Option::Deterministic); ------------------ | Branch (169:11): [True: 0, False: 569] | Branch (169:36): [True: 0, False: 0] ------------------ 170| 569| set_if(o.m_explicit_trailer_field, Option::ExplicitTrailer); 171| | 172| 569| return in_use; 173| 569|} _ZNK5Botan27PK_Signature_Options_Reader19throw_if_unexaminedENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE: 205| 569|void PK_Signature_Options_Reader::throw_if_unexamined(std::string_view algo_name) const { 206| 569| const uint32_t unexamined = options_in_use() & ~m_examined; 207| | 208| 569| if(unexamined != 0) { ------------------ | Branch (208:7): [True: 0, False: 569] ------------------ 209| 0| throw_for_unexamined_options