x64.S 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827
  1. .text
  2. .type _vpaes_encrypt_core,@function
  3. .align 16
  4. _vpaes_encrypt_core:
  5. movq %rdx,%r9
  6. movq $16,%r11
  7. movl 240(%rdx),%eax
  8. movdqa %xmm9,%xmm1
  9. movdqa .Lk_ipt(%rip),%xmm2
  10. pandn %xmm0,%xmm1
  11. movdqu (%r9),%xmm5
  12. psrld $4,%xmm1
  13. pand %xmm9,%xmm0
  14. .byte 102,15,56,0,208
  15. movdqa .Lk_ipt+16(%rip),%xmm0
  16. .byte 102,15,56,0,193
  17. pxor %xmm5,%xmm2
  18. addq $16,%r9
  19. pxor %xmm2,%xmm0
  20. leaq .Lk_mc_backward(%rip),%r10
  21. jmp .Lenc_entry
  22. .align 16
  23. .Lenc_loop:
  24. movdqa %xmm13,%xmm4
  25. movdqa %xmm12,%xmm0
  26. .byte 102,15,56,0,226
  27. .byte 102,15,56,0,195
  28. pxor %xmm5,%xmm4
  29. movdqa %xmm15,%xmm5
  30. pxor %xmm4,%xmm0
  31. movdqa -64(%r11,%r10,1),%xmm1
  32. .byte 102,15,56,0,234
  33. movdqa (%r11,%r10,1),%xmm4
  34. movdqa %xmm14,%xmm2
  35. .byte 102,15,56,0,211
  36. movdqa %xmm0,%xmm3
  37. pxor %xmm5,%xmm2
  38. .byte 102,15,56,0,193
  39. addq $16,%r9
  40. pxor %xmm2,%xmm0
  41. .byte 102,15,56,0,220
  42. addq $16,%r11
  43. pxor %xmm0,%xmm3
  44. .byte 102,15,56,0,193
  45. andq $0x30,%r11
  46. subq $1,%rax
  47. pxor %xmm3,%xmm0
  48. .Lenc_entry:
  49. movdqa %xmm9,%xmm1
  50. movdqa %xmm11,%xmm5
  51. pandn %xmm0,%xmm1
  52. psrld $4,%xmm1
  53. pand %xmm9,%xmm0
  54. .byte 102,15,56,0,232
  55. movdqa %xmm10,%xmm3
  56. pxor %xmm1,%xmm0
  57. .byte 102,15,56,0,217
  58. movdqa %xmm10,%xmm4
  59. pxor %xmm5,%xmm3
  60. .byte 102,15,56,0,224
  61. movdqa %xmm10,%xmm2
  62. pxor %xmm5,%xmm4
  63. .byte 102,15,56,0,211
  64. movdqa %xmm10,%xmm3
  65. pxor %xmm0,%xmm2
  66. .byte 102,15,56,0,220
  67. movdqu (%r9),%xmm5
  68. pxor %xmm1,%xmm3
  69. jnz .Lenc_loop
  70. movdqa -96(%r10),%xmm4
  71. movdqa -80(%r10),%xmm0
  72. .byte 102,15,56,0,226
  73. pxor %xmm5,%xmm4
  74. .byte 102,15,56,0,195
  75. movdqa 64(%r11,%r10,1),%xmm1
  76. pxor %xmm4,%xmm0
  77. .byte 102,15,56,0,193
  78. .byte 0xf3,0xc3
  79. .size _vpaes_encrypt_core,.-_vpaes_encrypt_core
  80. .type _vpaes_decrypt_core,@function
  81. .align 16
  82. _vpaes_decrypt_core:
  83. movq %rdx,%r9
  84. movl 240(%rdx),%eax
  85. movdqa %xmm9,%xmm1
  86. movdqa .Lk_dipt(%rip),%xmm2
  87. pandn %xmm0,%xmm1
  88. movq %rax,%r11
  89. psrld $4,%xmm1
  90. movdqu (%r9),%xmm5
  91. shlq $4,%r11
  92. pand %xmm9,%xmm0
  93. .byte 102,15,56,0,208
  94. movdqa .Lk_dipt+16(%rip),%xmm0
  95. xorq $0x30,%r11
  96. leaq .Lk_dsbd(%rip),%r10
  97. .byte 102,15,56,0,193
  98. andq $0x30,%r11
  99. pxor %xmm5,%xmm2
  100. movdqa .Lk_mc_forward+48(%rip),%xmm5
  101. pxor %xmm2,%xmm0
  102. addq $16,%r9
  103. addq %r10,%r11
  104. jmp .Ldec_entry
  105. .align 16
  106. .Ldec_loop:
  107. movdqa -32(%r10),%xmm4
  108. movdqa -16(%r10),%xmm1
  109. .byte 102,15,56,0,226
  110. .byte 102,15,56,0,203
  111. pxor %xmm4,%xmm0
  112. movdqa 0(%r10),%xmm4
  113. pxor %xmm1,%xmm0
  114. movdqa 16(%r10),%xmm1
  115. .byte 102,15,56,0,226
  116. .byte 102,15,56,0,197
  117. .byte 102,15,56,0,203
  118. pxor %xmm4,%xmm0
  119. movdqa 32(%r10),%xmm4
  120. pxor %xmm1,%xmm0
  121. movdqa 48(%r10),%xmm1
  122. .byte 102,15,56,0,226
  123. .byte 102,15,56,0,197
  124. .byte 102,15,56,0,203
  125. pxor %xmm4,%xmm0
  126. movdqa 64(%r10),%xmm4
  127. pxor %xmm1,%xmm0
  128. movdqa 80(%r10),%xmm1
  129. .byte 102,15,56,0,226
  130. .byte 102,15,56,0,197
  131. .byte 102,15,56,0,203
  132. pxor %xmm4,%xmm0
  133. addq $16,%r9
  134. .byte 102,15,58,15,237,12
  135. pxor %xmm1,%xmm0
  136. subq $1,%rax
  137. .Ldec_entry:
  138. movdqa %xmm9,%xmm1
  139. pandn %xmm0,%xmm1
  140. movdqa %xmm11,%xmm2
  141. psrld $4,%xmm1
  142. pand %xmm9,%xmm0
  143. .byte 102,15,56,0,208
  144. movdqa %xmm10,%xmm3
  145. pxor %xmm1,%xmm0
  146. .byte 102,15,56,0,217
  147. movdqa %xmm10,%xmm4
  148. pxor %xmm2,%xmm3
  149. .byte 102,15,56,0,224
  150. pxor %xmm2,%xmm4
  151. movdqa %xmm10,%xmm2
  152. .byte 102,15,56,0,211
  153. movdqa %xmm10,%xmm3
  154. pxor %xmm0,%xmm2
  155. .byte 102,15,56,0,220
  156. movdqu (%r9),%xmm0
  157. pxor %xmm1,%xmm3
  158. jnz .Ldec_loop
  159. movdqa 96(%r10),%xmm4
  160. .byte 102,15,56,0,226
  161. pxor %xmm0,%xmm4
  162. movdqa 112(%r10),%xmm0
  163. movdqa -352(%r11),%xmm2
  164. .byte 102,15,56,0,195
  165. pxor %xmm4,%xmm0
  166. .byte 102,15,56,0,194
  167. .byte 0xf3,0xc3
  168. .size _vpaes_decrypt_core,.-_vpaes_decrypt_core
  169. .type _vpaes_schedule_core,@function
  170. .align 16
  171. _vpaes_schedule_core:
  172. call _vpaes_preheat
  173. movdqa .Lk_rcon(%rip),%xmm8
  174. movdqu (%rdi),%xmm0
  175. movdqa %xmm0,%xmm3
  176. leaq .Lk_ipt(%rip),%r11
  177. call _vpaes_schedule_transform
  178. movdqa %xmm0,%xmm7
  179. leaq .Lk_sr(%rip),%r10
  180. testq %rcx,%rcx
  181. jnz .Lschedule_am_decrypting
  182. movdqu %xmm0,(%rdx)
  183. jmp .Lschedule_go
  184. .Lschedule_am_decrypting:
  185. movdqa (%r8,%r10,1),%xmm1
  186. .byte 102,15,56,0,217
  187. movdqu %xmm3,(%rdx)
  188. xorq $0x30,%r8
  189. .Lschedule_go:
  190. cmpl $192,%esi
  191. ja .Lschedule_256
  192. je .Lschedule_192
  193. .Lschedule_128:
  194. movl $10,%esi
  195. .Loop_schedule_128:
  196. call _vpaes_schedule_round
  197. decq %rsi
  198. jz .Lschedule_mangle_last
  199. call _vpaes_schedule_mangle
  200. jmp .Loop_schedule_128
  201. .align 16
  202. .Lschedule_192:
  203. movdqu 8(%rdi),%xmm0
  204. call _vpaes_schedule_transform
  205. movdqa %xmm0,%xmm6
  206. pxor %xmm4,%xmm4
  207. movhlps %xmm4,%xmm6
  208. movl $4,%esi
  209. .Loop_schedule_192:
  210. call _vpaes_schedule_round
  211. .byte 102,15,58,15,198,8
  212. call _vpaes_schedule_mangle
  213. call _vpaes_schedule_192_smear
  214. call _vpaes_schedule_mangle
  215. call _vpaes_schedule_round
  216. decq %rsi
  217. jz .Lschedule_mangle_last
  218. call _vpaes_schedule_mangle
  219. call _vpaes_schedule_192_smear
  220. jmp .Loop_schedule_192
  221. .align 16
  222. .Lschedule_256:
  223. movdqu 16(%rdi),%xmm0
  224. call _vpaes_schedule_transform
  225. movl $7,%esi
  226. .Loop_schedule_256:
  227. call _vpaes_schedule_mangle
  228. movdqa %xmm0,%xmm6
  229. call _vpaes_schedule_round
  230. decq %rsi
  231. jz .Lschedule_mangle_last
  232. call _vpaes_schedule_mangle
  233. pshufd $0xFF,%xmm0,%xmm0
  234. movdqa %xmm7,%xmm5
  235. movdqa %xmm6,%xmm7
  236. call _vpaes_schedule_low_round
  237. movdqa %xmm5,%xmm7
  238. jmp .Loop_schedule_256
  239. .align 16
  240. .Lschedule_mangle_last:
  241. leaq .Lk_deskew(%rip),%r11
  242. testq %rcx,%rcx
  243. jnz .Lschedule_mangle_last_dec
  244. movdqa (%r8,%r10,1),%xmm1
  245. .byte 102,15,56,0,193
  246. leaq .Lk_opt(%rip),%r11
  247. addq $32,%rdx
  248. .Lschedule_mangle_last_dec:
  249. addq $-16,%rdx
  250. pxor .Lk_s63(%rip),%xmm0
  251. call _vpaes_schedule_transform
  252. movdqu %xmm0,(%rdx)
  253. pxor %xmm0,%xmm0
  254. pxor %xmm1,%xmm1
  255. pxor %xmm2,%xmm2
  256. pxor %xmm3,%xmm3
  257. pxor %xmm4,%xmm4
  258. pxor %xmm5,%xmm5
  259. pxor %xmm6,%xmm6
  260. pxor %xmm7,%xmm7
  261. .byte 0xf3,0xc3
  262. .size _vpaes_schedule_core,.-_vpaes_schedule_core
  263. .type _vpaes_schedule_192_smear,@function
  264. .align 16
  265. _vpaes_schedule_192_smear:
  266. pshufd $0x80,%xmm6,%xmm1
  267. pshufd $0xFE,%xmm7,%xmm0
  268. pxor %xmm1,%xmm6
  269. pxor %xmm1,%xmm1
  270. pxor %xmm0,%xmm6
  271. movdqa %xmm6,%xmm0
  272. movhlps %xmm1,%xmm6
  273. .byte 0xf3,0xc3
  274. .size _vpaes_schedule_192_smear,.-_vpaes_schedule_192_smear
  275. .type _vpaes_schedule_round,@function
  276. .align 16
  277. _vpaes_schedule_round:
  278. pxor %xmm1,%xmm1
  279. .byte 102,65,15,58,15,200,15
  280. .byte 102,69,15,58,15,192,15
  281. pxor %xmm1,%xmm7
  282. pshufd $0xFF,%xmm0,%xmm0
  283. .byte 102,15,58,15,192,1
  284. _vpaes_schedule_low_round:
  285. movdqa %xmm7,%xmm1
  286. pslldq $4,%xmm7
  287. pxor %xmm1,%xmm7
  288. movdqa %xmm7,%xmm1
  289. pslldq $8,%xmm7
  290. pxor %xmm1,%xmm7
  291. pxor .Lk_s63(%rip),%xmm7
  292. movdqa %xmm9,%xmm1
  293. pandn %xmm0,%xmm1
  294. psrld $4,%xmm1
  295. pand %xmm9,%xmm0
  296. movdqa %xmm11,%xmm2
  297. .byte 102,15,56,0,208
  298. pxor %xmm1,%xmm0
  299. movdqa %xmm10,%xmm3
  300. .byte 102,15,56,0,217
  301. pxor %xmm2,%xmm3
  302. movdqa %xmm10,%xmm4
  303. .byte 102,15,56,0,224
  304. pxor %xmm2,%xmm4
  305. movdqa %xmm10,%xmm2
  306. .byte 102,15,56,0,211
  307. pxor %xmm0,%xmm2
  308. movdqa %xmm10,%xmm3
  309. .byte 102,15,56,0,220
  310. pxor %xmm1,%xmm3
  311. movdqa %xmm13,%xmm4
  312. .byte 102,15,56,0,226
  313. movdqa %xmm12,%xmm0
  314. .byte 102,15,56,0,195
  315. pxor %xmm4,%xmm0
  316. pxor %xmm7,%xmm0
  317. movdqa %xmm0,%xmm7
  318. .byte 0xf3,0xc3
  319. .size _vpaes_schedule_round,.-_vpaes_schedule_round
  320. .type _vpaes_schedule_transform,@function
  321. .align 16
  322. _vpaes_schedule_transform:
  323. movdqa %xmm9,%xmm1
  324. pandn %xmm0,%xmm1
  325. psrld $4,%xmm1
  326. pand %xmm9,%xmm0
  327. movdqa (%r11),%xmm2
  328. .byte 102,15,56,0,208
  329. movdqa 16(%r11),%xmm0
  330. .byte 102,15,56,0,193
  331. pxor %xmm2,%xmm0
  332. .byte 0xf3,0xc3
  333. .size _vpaes_schedule_transform,.-_vpaes_schedule_transform
  334. .type _vpaes_schedule_mangle,@function
  335. .align 16
  336. _vpaes_schedule_mangle:
  337. movdqa %xmm0,%xmm4
  338. movdqa .Lk_mc_forward(%rip),%xmm5
  339. testq %rcx,%rcx
  340. jnz .Lschedule_mangle_dec
  341. addq $16,%rdx
  342. pxor .Lk_s63(%rip),%xmm4
  343. .byte 102,15,56,0,229
  344. movdqa %xmm4,%xmm3
  345. .byte 102,15,56,0,229
  346. pxor %xmm4,%xmm3
  347. .byte 102,15,56,0,229
  348. pxor %xmm4,%xmm3
  349. jmp .Lschedule_mangle_both
  350. .align 16
  351. .Lschedule_mangle_dec:
  352. leaq .Lk_dksd(%rip),%r11
  353. movdqa %xmm9,%xmm1
  354. pandn %xmm4,%xmm1
  355. psrld $4,%xmm1
  356. pand %xmm9,%xmm4
  357. movdqa 0(%r11),%xmm2
  358. .byte 102,15,56,0,212
  359. movdqa 16(%r11),%xmm3
  360. .byte 102,15,56,0,217
  361. pxor %xmm2,%xmm3
  362. .byte 102,15,56,0,221
  363. movdqa 32(%r11),%xmm2
  364. .byte 102,15,56,0,212
  365. pxor %xmm3,%xmm2
  366. movdqa 48(%r11),%xmm3
  367. .byte 102,15,56,0,217
  368. pxor %xmm2,%xmm3
  369. .byte 102,15,56,0,221
  370. movdqa 64(%r11),%xmm2
  371. .byte 102,15,56,0,212
  372. pxor %xmm3,%xmm2
  373. movdqa 80(%r11),%xmm3
  374. .byte 102,15,56,0,217
  375. pxor %xmm2,%xmm3
  376. .byte 102,15,56,0,221
  377. movdqa 96(%r11),%xmm2
  378. .byte 102,15,56,0,212
  379. pxor %xmm3,%xmm2
  380. movdqa 112(%r11),%xmm3
  381. .byte 102,15,56,0,217
  382. pxor %xmm2,%xmm3
  383. addq $-16,%rdx
  384. .Lschedule_mangle_both:
  385. movdqa (%r8,%r10,1),%xmm1
  386. .byte 102,15,56,0,217
  387. addq $-16,%r8
  388. andq $0x30,%r8
  389. movdqu %xmm3,(%rdx)
  390. .byte 0xf3,0xc3
  391. .size _vpaes_schedule_mangle,.-_vpaes_schedule_mangle
  392. .globl vpaes_set_encrypt_key
  393. .type vpaes_set_encrypt_key,@function
  394. .align 16
  395. vpaes_set_encrypt_key:
  396. movl %esi,%eax
  397. shrl $5,%eax
  398. addl $5,%eax
  399. movl %eax,240(%rdx)
  400. movl $0,%ecx
  401. movl $0x30,%r8d
  402. call _vpaes_schedule_core
  403. xorl %eax,%eax
  404. .byte 0xf3,0xc3
  405. .size vpaes_set_encrypt_key,.-vpaes_set_encrypt_key
  406. .globl vpaes_set_decrypt_key
  407. .type vpaes_set_decrypt_key,@function
  408. .align 16
  409. vpaes_set_decrypt_key:
  410. movl %esi,%eax
  411. shrl $5,%eax
  412. addl $5,%eax
  413. movl %eax,240(%rdx)
  414. shll $4,%eax
  415. leaq 16(%rdx,%rax,1),%rdx
  416. movl $1,%ecx
  417. movl %esi,%r8d
  418. shrl $1,%r8d
  419. andl $32,%r8d
  420. xorl $32,%r8d
  421. call _vpaes_schedule_core
  422. xorl %eax,%eax
  423. .byte 0xf3,0xc3
  424. .size vpaes_set_decrypt_key,.-vpaes_set_decrypt_key
  425. .globl vpaes_encrypt
  426. .type vpaes_encrypt,@function
  427. .align 16
  428. vpaes_encrypt:
  429. movdqu (%rdi),%xmm0
  430. call _vpaes_preheat
  431. call _vpaes_encrypt_core
  432. movdqu %xmm0,(%rsi)
  433. .byte 0xf3,0xc3
  434. .size vpaes_encrypt,.-vpaes_encrypt
  435. .globl vpaes_decrypt
  436. .type vpaes_decrypt,@function
  437. .align 16
  438. vpaes_decrypt:
  439. movdqu (%rdi),%xmm0
  440. call _vpaes_preheat
  441. call _vpaes_decrypt_core
  442. movdqu %xmm0,(%rsi)
  443. .byte 0xf3,0xc3
  444. .size vpaes_decrypt,.-vpaes_decrypt
  445. .globl vpaes_cbc_encrypt
  446. .type vpaes_cbc_encrypt,@function
  447. .align 16
  448. vpaes_cbc_encrypt:
  449. xchgq %rcx,%rdx
  450. subq $16,%rcx
  451. jc .Lcbc_abort
  452. movdqu (%r8),%xmm6
  453. subq %rdi,%rsi
  454. call _vpaes_preheat
  455. cmpl $0,%r9d
  456. je .Lcbc_dec_loop
  457. jmp .Lcbc_enc_loop
  458. .align 16
  459. .Lcbc_enc_loop:
  460. movdqu (%rdi),%xmm0
  461. pxor %xmm6,%xmm0
  462. call _vpaes_encrypt_core
  463. movdqa %xmm0,%xmm6
  464. movdqu %xmm0,(%rsi,%rdi,1)
  465. leaq 16(%rdi),%rdi
  466. subq $16,%rcx
  467. jnc .Lcbc_enc_loop
  468. jmp .Lcbc_done
  469. .align 16
  470. .Lcbc_dec_loop:
  471. movdqu (%rdi),%xmm0
  472. movdqa %xmm0,%xmm7
  473. call _vpaes_decrypt_core
  474. pxor %xmm6,%xmm0
  475. movdqa %xmm7,%xmm6
  476. movdqu %xmm0,(%rsi,%rdi,1)
  477. leaq 16(%rdi),%rdi
  478. subq $16,%rcx
  479. jnc .Lcbc_dec_loop
  480. .Lcbc_done:
  481. movdqu %xmm6,(%r8)
  482. .Lcbc_abort:
  483. .byte 0xf3,0xc3
  484. .size vpaes_cbc_encrypt,.-vpaes_cbc_encrypt
  485. .type _vpaes_preheat,@function
  486. .align 16
  487. _vpaes_preheat:
  488. leaq .Lk_s0F(%rip),%r10
  489. movdqa -32(%r10),%xmm10
  490. movdqa -16(%r10),%xmm11
  491. movdqa 0(%r10),%xmm9
  492. movdqa 48(%r10),%xmm13
  493. movdqa 64(%r10),%xmm12
  494. movdqa 80(%r10),%xmm15
  495. movdqa 96(%r10),%xmm14
  496. .byte 0xf3,0xc3
  497. .size _vpaes_preheat,.-_vpaes_preheat
  498. .type _vpaes_consts,@object
  499. .align 64
  500. _vpaes_consts:
  501. .Lk_inv:
  502. .quad 0x0E05060F0D080180, 0x040703090A0B0C02
  503. .quad 0x01040A060F0B0780, 0x030D0E0C02050809
  504. .Lk_s0F:
  505. .quad 0x0F0F0F0F0F0F0F0F, 0x0F0F0F0F0F0F0F0F
  506. .Lk_ipt:
  507. .quad 0xC2B2E8985A2A7000, 0xCABAE09052227808
  508. .quad 0x4C01307D317C4D00, 0xCD80B1FCB0FDCC81
  509. .Lk_sb1:
  510. .quad 0xB19BE18FCB503E00, 0xA5DF7A6E142AF544
  511. .quad 0x3618D415FAE22300, 0x3BF7CCC10D2ED9EF
  512. .Lk_sb2:
  513. .quad 0xE27A93C60B712400, 0x5EB7E955BC982FCD
  514. .quad 0x69EB88400AE12900, 0xC2A163C8AB82234A
  515. .Lk_sbo:
  516. .quad 0xD0D26D176FBDC700, 0x15AABF7AC502A878
  517. .quad 0xCFE474A55FBB6A00, 0x8E1E90D1412B35FA
  518. .Lk_mc_forward:
  519. .quad 0x0407060500030201, 0x0C0F0E0D080B0A09
  520. .quad 0x080B0A0904070605, 0x000302010C0F0E0D
  521. .quad 0x0C0F0E0D080B0A09, 0x0407060500030201
  522. .quad 0x000302010C0F0E0D, 0x080B0A0904070605
  523. .Lk_mc_backward:
  524. .quad 0x0605040702010003, 0x0E0D0C0F0A09080B
  525. .quad 0x020100030E0D0C0F, 0x0A09080B06050407
  526. .quad 0x0E0D0C0F0A09080B, 0x0605040702010003
  527. .quad 0x0A09080B06050407, 0x020100030E0D0C0F
  528. .Lk_sr:
  529. .quad 0x0706050403020100, 0x0F0E0D0C0B0A0908
  530. .quad 0x030E09040F0A0500, 0x0B06010C07020D08
  531. .quad 0x0F060D040B020900, 0x070E050C030A0108
  532. .quad 0x0B0E0104070A0D00, 0x0306090C0F020508
  533. .Lk_rcon:
  534. .quad 0x1F8391B9AF9DEEB6, 0x702A98084D7C7D81
  535. .Lk_s63:
  536. .quad 0x5B5B5B5B5B5B5B5B, 0x5B5B5B5B5B5B5B5B
  537. .Lk_opt:
  538. .quad 0xFF9F4929D6B66000, 0xF7974121DEBE6808
  539. .quad 0x01EDBD5150BCEC00, 0xE10D5DB1B05C0CE0
  540. .Lk_deskew:
  541. .quad 0x07E4A34047A4E300, 0x1DFEB95A5DBEF91A
  542. .quad 0x5F36B5DC83EA6900, 0x2841C2ABF49D1E77
  543. .Lk_dksd:
  544. .quad 0xFEB91A5DA3E44700, 0x0740E3A45A1DBEF9
  545. .quad 0x41C277F4B5368300, 0x5FDC69EAAB289D1E
  546. .Lk_dksb:
  547. .quad 0x9A4FCA1F8550D500, 0x03D653861CC94C99
  548. .quad 0x115BEDA7B6FC4A00, 0xD993256F7E3482C8
  549. .Lk_dkse:
  550. .quad 0xD5031CCA1FC9D600, 0x53859A4C994F5086
  551. .quad 0xA23196054FDC7BE8, 0xCD5EF96A20B31487
  552. .Lk_dks9:
  553. .quad 0xB6116FC87ED9A700, 0x4AED933482255BFC
  554. .quad 0x4576516227143300, 0x8BB89FACE9DAFDCE
  555. .Lk_dipt:
  556. .quad 0x0F505B040B545F00, 0x154A411E114E451A
  557. .quad 0x86E383E660056500, 0x12771772F491F194
  558. .Lk_dsb9:
  559. .quad 0x851C03539A86D600, 0xCAD51F504F994CC9
  560. .quad 0xC03B1789ECD74900, 0x725E2C9EB2FBA565
  561. .Lk_dsbd:
  562. .quad 0x7D57CCDFE6B1A200, 0xF56E9B13882A4439
  563. .quad 0x3CE2FAF724C6CB00, 0x2931180D15DEEFD3
  564. .Lk_dsbb:
  565. .quad 0xD022649296B44200, 0x602646F6B0F2D404
  566. .quad 0xC19498A6CD596700, 0xF3FF0C3E3255AA6B
  567. .Lk_dsbe:
  568. .quad 0x46F2929626D4D000, 0x2242600464B4F6B0
  569. .quad 0x0C55A6CDFFAAC100, 0x9467F36B98593E32
  570. .Lk_dsbo:
  571. .quad 0x1387EA537EF94000, 0xC7AA6DB9D4943E2D
  572. .quad 0x12D7560F93441D00, 0xCA4B8159D8C58E9C
  573. .byte 86,101,99,116,111,114,32,80,101,114,109,117,116,97,116,105,111,110,32,65,69,83,32,102,111,114,32,120,56,54,95,54,52,47,83,83,83,69,51,44,32,77,105,107,101,32,72,97,109,98,117,114,103,32,40,83,116,97,110,102,111,114,100,32,85,110,105,118,101,114,115,105,116,121,41,0
  574. .align 64
  575. .size _vpaes_consts,.-_vpaes_consts