blob: 9b63a0010a0bc9221679eac976ed666a8a5c7b94 [file] [log] [blame]
Manuel Pégourié-Gonnard92ac76f2013-12-16 17:12:53 +01001/**
2 * \file aesni.h
3 *
4 * \brief AES-NI for hardware AES acceleration on some Intel processors
Manuel Pégourié-Gonnardad54c492018-12-13 11:15:26 +01005 *
Manuel Pégourié-Gonnardb66e7db2018-12-18 09:57:18 +01006 * \warning These functions are only for internal use by other library
7 * functions; you must not call them directly.
Darryl Greena40a1012018-01-05 15:33:17 +00008 */
9/*
Bence Szépkútia2947ac2020-08-19 16:37:36 +020010 * Copyright The Mbed TLS Contributors
Bence Szépkútif744bd72020-06-05 13:02:18 +020011 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
12 *
13 * This file is provided under the Apache License 2.0, or the
14 * GNU General Public License v2.0 or later.
15 *
16 * **********
17 * Apache License 2.0:
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +020018 *
19 * Licensed under the Apache License, Version 2.0 (the "License"); you may
20 * not use this file except in compliance with the License.
21 * You may obtain a copy of the License at
22 *
23 * http://www.apache.org/licenses/LICENSE-2.0
24 *
25 * Unless required by applicable law or agreed to in writing, software
26 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
27 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
28 * See the License for the specific language governing permissions and
29 * limitations under the License.
Manuel Pégourié-Gonnard92ac76f2013-12-16 17:12:53 +010030 *
Bence Szépkútif744bd72020-06-05 13:02:18 +020031 * **********
32 *
33 * **********
34 * GNU General Public License v2.0 or later:
35 *
36 * This program is free software; you can redistribute it and/or modify
37 * it under the terms of the GNU General Public License as published by
38 * the Free Software Foundation; either version 2 of the License, or
39 * (at your option) any later version.
40 *
41 * This program is distributed in the hope that it will be useful,
42 * but WITHOUT ANY WARRANTY; without even the implied warranty of
43 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
44 * GNU General Public License for more details.
45 *
46 * You should have received a copy of the GNU General Public License along
47 * with this program; if not, write to the Free Software Foundation, Inc.,
48 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
49 *
50 * **********
Manuel Pégourié-Gonnard92ac76f2013-12-16 17:12:53 +010051 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020052#ifndef MBEDTLS_AESNI_H
53#define MBEDTLS_AESNI_H
Manuel Pégourié-Gonnard92ac76f2013-12-16 17:12:53 +010054
Ron Eldor8b0cf2e2018-02-14 16:02:41 +020055#if !defined(MBEDTLS_CONFIG_FILE)
56#include "config.h"
57#else
58#include MBEDTLS_CONFIG_FILE
59#endif
60
Manuel Pégourié-Gonnard92ac76f2013-12-16 17:12:53 +010061#include "aes.h"
62
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020063#define MBEDTLS_AESNI_AES 0x02000000u
64#define MBEDTLS_AESNI_CLMUL 0x00000002u
Manuel Pégourié-Gonnard8eaf20b2013-12-18 19:14:53 +010065
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020066#if defined(MBEDTLS_HAVE_ASM) && defined(__GNUC__) && \
Manuel Pégourié-Gonnard92ac76f2013-12-16 17:12:53 +010067 ( defined(__amd64__) || defined(__x86_64__) ) && \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020068 ! defined(MBEDTLS_HAVE_X86_64)
69#define MBEDTLS_HAVE_X86_64
Manuel Pégourié-Gonnard92ac76f2013-12-16 17:12:53 +010070#endif
71
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020072#if defined(MBEDTLS_HAVE_X86_64)
Manuel Pégourié-Gonnard92ac76f2013-12-16 17:12:53 +010073
Manuel Pégourié-Gonnard1a901472015-03-10 16:12:29 +000074#ifdef __cplusplus
75extern "C" {
76#endif
77
Manuel Pégourié-Gonnard92ac76f2013-12-16 17:12:53 +010078/**
Manuel Pégourié-Gonnardb66e7db2018-12-18 09:57:18 +010079 * \brief Internal function to detect the AES-NI feature in CPUs.
Manuel Pégourié-Gonnardad54c492018-12-13 11:15:26 +010080 *
81 * \note This function is only for internal use by other library
82 * functions; you must not call it directly.
Manuel Pégourié-Gonnard92ac76f2013-12-16 17:12:53 +010083 *
Manuel Pégourié-Gonnard8eaf20b2013-12-18 19:14:53 +010084 * \param what The feature to detect
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020085 * (MBEDTLS_AESNI_AES or MBEDTLS_AESNI_CLMUL)
Manuel Pégourié-Gonnard8eaf20b2013-12-18 19:14:53 +010086 *
87 * \return 1 if CPU has support for the feature, 0 otherwise
Manuel Pégourié-Gonnard92ac76f2013-12-16 17:12:53 +010088 */
Manuel Pégourié-Gonnardc730ed32015-06-02 10:38:50 +010089int mbedtls_aesni_has_support( unsigned int what );
Manuel Pégourié-Gonnard92ac76f2013-12-16 17:12:53 +010090
Manuel Pégourié-Gonnard5b685652013-12-18 11:45:21 +010091/**
Manuel Pégourié-Gonnardb66e7db2018-12-18 09:57:18 +010092 * \brief Internal AES-NI AES-ECB block encryption and decryption
Manuel Pégourié-Gonnardad54c492018-12-13 11:15:26 +010093 *
94 * \note This function is only for internal use by other library
95 * functions; you must not call it directly.
Manuel Pégourié-Gonnard5b685652013-12-18 11:45:21 +010096 *
97 * \param ctx AES context
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020098 * \param mode MBEDTLS_AES_ENCRYPT or MBEDTLS_AES_DECRYPT
Manuel Pégourié-Gonnard5b685652013-12-18 11:45:21 +010099 * \param input 16-byte input block
100 * \param output 16-byte output block
101 *
Manuel Pégourié-Gonnardd333f672013-12-26 11:44:46 +0100102 * \return 0 on success (cannot fail)
Manuel Pégourié-Gonnard5b685652013-12-18 11:45:21 +0100103 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200104int mbedtls_aesni_crypt_ecb( mbedtls_aes_context *ctx,
Manuel Pégourié-Gonnardad54c492018-12-13 11:15:26 +0100105 int mode,
106 const unsigned char input[16],
107 unsigned char output[16] );
Manuel Pégourié-Gonnard5b685652013-12-18 11:45:21 +0100108
Manuel Pégourié-Gonnardd333f672013-12-26 11:44:46 +0100109/**
Manuel Pégourié-Gonnardad54c492018-12-13 11:15:26 +0100110 * \brief Internal GCM multiplication: c = a * b in GF(2^128)
111 *
112 * \note This function is only for internal use by other library
113 * functions; you must not call it directly.
Manuel Pégourié-Gonnardd333f672013-12-26 11:44:46 +0100114 *
115 * \param c Result
116 * \param a First operand
117 * \param b Second operand
118 *
119 * \note Both operands and result are bit strings interpreted as
120 * elements of GF(2^128) as per the GCM spec.
Manuel Pégourié-Gonnardd333f672013-12-26 11:44:46 +0100121 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200122void mbedtls_aesni_gcm_mult( unsigned char c[16],
Manuel Pégourié-Gonnardad54c492018-12-13 11:15:26 +0100123 const unsigned char a[16],
124 const unsigned char b[16] );
Manuel Pégourié-Gonnardd333f672013-12-26 11:44:46 +0100125
Manuel Pégourié-Gonnard01e31bb2013-12-28 15:58:30 +0100126/**
Manuel Pégourié-Gonnardb66e7db2018-12-18 09:57:18 +0100127 * \brief Internal round key inversion. This function computes
128 * decryption round keys from the encryption round keys.
Manuel Pégourié-Gonnardad54c492018-12-13 11:15:26 +0100129 *
130 * \note This function is only for internal use by other library
131 * functions; you must not call it directly.
Manuel Pégourié-Gonnard01e31bb2013-12-28 15:58:30 +0100132 *
133 * \param invkey Round keys for the equivalent inverse cipher
134 * \param fwdkey Original round keys (for encryption)
135 * \param nr Number of rounds (that is, number of round keys minus one)
136 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200137void mbedtls_aesni_inverse_key( unsigned char *invkey,
Manuel Pégourié-Gonnardad54c492018-12-13 11:15:26 +0100138 const unsigned char *fwdkey,
139 int nr );
Manuel Pégourié-Gonnard01e31bb2013-12-28 15:58:30 +0100140
Manuel Pégourié-Gonnard47a35362013-12-28 20:45:04 +0100141/**
Manuel Pégourié-Gonnardb66e7db2018-12-18 09:57:18 +0100142 * \brief Internal key expansion for encryption
Manuel Pégourié-Gonnardad54c492018-12-13 11:15:26 +0100143 *
144 * \note This function is only for internal use by other library
145 * functions; you must not call it directly.
Manuel Pégourié-Gonnard47a35362013-12-28 20:45:04 +0100146 *
147 * \param rk Destination buffer where the round keys are written
148 * \param key Encryption key
149 * \param bits Key size in bits (must be 128, 192 or 256)
150 *
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200151 * \return 0 if successful, or MBEDTLS_ERR_AES_INVALID_KEY_LENGTH
Manuel Pégourié-Gonnard47a35362013-12-28 20:45:04 +0100152 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200153int mbedtls_aesni_setkey_enc( unsigned char *rk,
Manuel Pégourié-Gonnardad54c492018-12-13 11:15:26 +0100154 const unsigned char *key,
155 size_t bits );
Manuel Pégourié-Gonnard47a35362013-12-28 20:45:04 +0100156
Manuel Pégourié-Gonnard1a901472015-03-10 16:12:29 +0000157#ifdef __cplusplus
158}
159#endif
160
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200161#endif /* MBEDTLS_HAVE_X86_64 */
Manuel Pégourié-Gonnard92ac76f2013-12-16 17:12:53 +0100162
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200163#endif /* MBEDTLS_AESNI_H */