1 // Copyright 2018 The BoringSSL Authors 2 // 3 // Licensed under the Apache License, Version 2.0 (the "License"); 4 // you may not use this file except in compliance with the License. 5 // You may obtain a copy of the License at 6 // 7 // https://www.apache.org/licenses/LICENSE-2.0 8 // 9 // Unless required by applicable law or agreed to in writing, software 10 // distributed under the License is distributed on an "AS IS" BASIS, 11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 // See the License for the specific language governing permissions and 13 // limitations under the License. 14 15 #ifndef OPENSSL_HEADER_CRYPTO_HRSS_INTERNAL_H 16 #define OPENSSL_HEADER_CRYPTO_HRSS_INTERNAL_H 17 18 #include <openssl/base.h> 19 #include "../internal.h" 20 21 #if defined(__cplusplus) 22 extern "C" { 23 #endif 24 25 26 #define HRSS_N 701 27 #define BITS_PER_WORD (sizeof(crypto_word_t) * 8) 28 #define WORDS_PER_POLY ((HRSS_N + BITS_PER_WORD - 1) / BITS_PER_WORD) 29 #define BITS_IN_LAST_WORD (HRSS_N % BITS_PER_WORD) 30 31 struct poly2 { 32 crypto_word_t v[WORDS_PER_POLY]; 33 }; 34 35 struct poly3 { 36 struct poly2 s, a; 37 }; 38 39 OPENSSL_EXPORT void HRSS_poly3_mul(struct poly3 *out, const struct poly3 *x, 40 const struct poly3 *y); 41 OPENSSL_EXPORT void HRSS_poly3_invert(struct poly3 *out, 42 const struct poly3 *in); 43 44 // On x86-64, we can use the AVX2 code from [HRSS]. (The authors have given 45 // explicit permission for this and signed a CLA.) However it's 57KB of object 46 // code, so it's not used if |OPENSSL_SMALL| is defined. 47 #if !defined(OPENSSL_NO_ASM) && !defined(OPENSSL_SMALL) && \ 48 defined(OPENSSL_X86_64) && defined(OPENSSL_LINUX) 49 #define POLY_RQ_MUL_ASM 50 // POLY_MUL_RQ_SCRATCH_SPACE is the number of bytes of scratch space needed 51 // by the assembly function poly_Rq_mul. 52 #define POLY_MUL_RQ_SCRATCH_SPACE (6144 + 6144 + 12288 + 512 + 9408 + 32) 53 54 // poly_Rq_mul is defined in assembly. Inputs and outputs must be 16-byte- 55 // aligned. 56 extern void poly_Rq_mul( 57 uint16_t r[HRSS_N + 3], const uint16_t a[HRSS_N + 3], 58 const uint16_t b[HRSS_N + 3], 59 // The following should be `scratch[POLY_MUL_RQ_SCRATCH_SPACE]` but 60 // GCC 11.1 has a bug with unions that breaks that. 61 uint8_t scratch[]); 62 #endif 63 64 65 #if defined(__cplusplus) 66 } // extern "C" 67 #endif 68 69 #endif // !OPENSSL_HEADER_CRYPTO_HRSS_INTERNAL_H 70