Apple-2gs-SW
/
65816-crypto
mirror of https://github.com/sheumann/65816-crypto.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
65816-crypto/aes.macros

373 lines
4.8 KiB
Plaintext
Raw Normal View History

Update to also support AES-192 and AES-256.
2017-06-27 06:36:56 +00:00
* This makes a function wrapper that is callable from C,
* taking a pointer to the state structure as its argument.
macro
CFunction &fn
phb
plx
ply
tdc
pld
plb
plb
phy
phx
plb
pha
jsl &fn
pld
rtl
mend
macro
ExpandKeyCore &xorback,&rconoffset
ShortRegs
ldy rk-3,x
lda Sbox,y
eor Rcon-&xorback+&rconoffset,x
eor rk-&xorback,x
sta rk,x
ldy rk-2,x
lda Sbox,y
eor rk+1-&xorback,x
sta rk+1,x
ldy rk-1,x
lda Sbox,y
eor rk+2-&xorback,x
sta rk+2,x
ldy rk-4,x
lda Sbox,y
eor rk+3-&xorback,x
sta rk+3,x
LongRegs
mend
* Secondary substitution step used when expanding AES-256 keys
macro
ExpandKeySubst &xorback,&rconoffset
ShortRegs
ldy rk-4,x
lda Sbox,y
eor rk-&xorback,x
sta rk,x
ldy rk+1-4,x
lda Sbox,y
eor rk+1-&xorback,x
sta rk+1,x
ldy rk+2-4,x
lda Sbox,y
eor rk+2-&xorback,x
sta rk+2,x
ldy rk+3-4,x
lda Sbox,y
eor rk+3-&xorback,x
sta rk+3,x
LongRegs
mend
macro
ExpandKeyIter &xorback,&nwords
lcla &i
lda rk,x
.loop1
eor rk+&i+4-&xorback,x
sta rk+&i+4,x
&i seta &i+4
aif &i/4<&nwords,.loop1
&i seta 2
lda rk+2,x
.loop2
eor rk+&i+4-&xorback,x
sta rk+&i+4,x
&i seta &i+4
aif &i/4<&nwords,.loop2
mend
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
macro
AddInitialRoundKey
lcla &i
.top
lda state1+&i
eor rk+&i
sta state1+&i
&i seta &i+2
aif &i<16,.top
mend
macro
Update to also support AES-192 and AES-256.
2017-06-27 06:36:56 +00:00
&lbl NormalRound &round
&lbl anop
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
aif &round/2*2=&round,.evenround
MixColumn 0,0,5,10,15,state1,state2
MixColumn 4,4,9,14,3,state1,state2
MixColumn 8,8,13,2,7,state1,state2
MixColumn 12,12,1,6,11,state1,state2
ago .done
.evenround
MixColumn 0,0,5,10,15,state2,state1
MixColumn 4,4,9,14,3,state2,state1
MixColumn 8,8,13,2,7,state2,state1
MixColumn 12,12,1,6,11,state2,state1
.done
mend
macro
MixColumn &i,&A,&B,&C,&D,&state,&out
Save a couple values on the stack rather than looking them up again. This is cycle-neutral (assuming a page-aligned DP), but it reduces instruction bytes and therefore may give a speedup on accelerators with caches.
2017-06-27 02:11:19 +00:00
Save a few cycles by not reloading the last written byte between rounds.
2017-06-27 02:49:16 +00:00
aif (&i=0).AND.(&round<>1),.skip
Save a couple values on the stack rather than looking them up again. This is cycle-neutral (assuming a page-aligned DP), but it reduces instruction bytes and therefore may give a speedup on accelerators with caches.
2017-06-27 02:11:19 +00:00
ldy &state+&D
Save a few cycles by not reloading the last written byte between rounds.
2017-06-27 02:49:16 +00:00
.skip
Save a couple values on the stack rather than looking them up again. This is cycle-neutral (assuming a page-aligned DP), but it reduces instruction bytes and therefore may give a speedup on accelerators with caches.
2017-06-27 02:11:19 +00:00
lda Sbox,Y
pha
Cut out a few instructions by reusing subexpressions in registers.
2017-06-27 01:53:17 +00:00
ldx &state+&A
Save a couple values on the stack rather than looking them up again. This is cycle-neutral (assuming a page-aligned DP), but it reduces instruction bytes and therefore may give a speedup on accelerators with caches.
2017-06-27 02:11:19 +00:00
eor Xtime2Sbox,X
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
ldy &state+&B
eor Xtime3Sbox,Y
Cut out a few instructions by reusing subexpressions in registers.
2017-06-27 01:53:17 +00:00
ldy &state+&C
eor Sbox,Y
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
eor rk+&round*16+&i
sta &out+&i
Cut out a few instructions by reusing subexpressions in registers.
2017-06-27 01:53:17 +00:00
Save a couple values on the stack rather than looking them up again. This is cycle-neutral (assuming a page-aligned DP), but it reduces instruction bytes and therefore may give a speedup on accelerators with caches.
2017-06-27 02:11:19 +00:00
pla
eor Xtime3Sbox,Y
Cut out a few instructions by reusing subexpressions in registers.
2017-06-27 01:53:17 +00:00
eor Sbox,X
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
ldy &state+&B
eor Xtime2Sbox,Y
eor rk+&round*16+&i+1
sta &out+&i+1
Cut out a few instructions by reusing subexpressions in registers.
2017-06-27 01:53:17 +00:00
Save a couple values on the stack rather than looking them up again. This is cycle-neutral (assuming a page-aligned DP), but it reduces instruction bytes and therefore may give a speedup on accelerators with caches.
2017-06-27 02:11:19 +00:00
lda Sbox,Y
pha
ldy &state+&D
eor Xtime3Sbox,Y
Cut out a few instructions by reusing subexpressions in registers.
2017-06-27 01:53:17 +00:00
eor Sbox,X
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
ldy &state+&C
eor Xtime2Sbox,Y
eor rk+&round*16+&i+2
sta &out+&i+2
Cut out a few instructions by reusing subexpressions in registers.
2017-06-27 01:53:17 +00:00
Save a couple values on the stack rather than looking them up again. This is cycle-neutral (assuming a page-aligned DP), but it reduces instruction bytes and therefore may give a speedup on accelerators with caches.
2017-06-27 02:11:19 +00:00
pla
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
eor Sbox,Y
Save a couple values on the stack rather than looking them up again. This is cycle-neutral (assuming a page-aligned DP), but it reduces instruction bytes and therefore may give a speedup on accelerators with caches.
2017-06-27 02:11:19 +00:00
eor Xtime3Sbox,X
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
ldy &state+&D
eor Xtime2Sbox,Y
Update to also support AES-192 and AES-256.
2017-06-27 06:36:56 +00:00
aif (rk+&round*16+&i+3)>255,.bigindex
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
eor rk+&round*16+&i+3
Update to also support AES-192 and AES-256.
2017-06-27 06:36:56 +00:00
ago .cont
.bigindex
ldx #&round*16+&i+3
eor rk,X
.cont
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
sta &out+&i+3
Save a few cycles by not reloading the last written byte between rounds.
2017-06-27 02:49:16 +00:00
aif &i<>12,.skip2
tay
.skip2
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
mend
macro
FinalRound &round
Save a few cycles by not reloading the last written byte between rounds.
2017-06-27 02:49:16 +00:00
FinalRoundStep 3,15,1
FinalRoundStep 15,11
FinalRoundStep 11,7
FinalRoundStep 7,3
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
FinalRoundStep 0,0
FinalRoundStep 4,4
FinalRoundStep 8,8
FinalRoundStep 12,12
Save a few cycles by not reloading the last written byte between rounds.
2017-06-27 02:49:16 +00:00
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
FinalRoundStep 13,1
FinalRoundStep 1,5
FinalRoundStep 5,9
FinalRoundStep 9,13
Save a few cycles by not reloading the last written byte between rounds.
2017-06-27 02:49:16 +00:00
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
FinalRoundStep 10,2
FinalRoundStep 2,10
FinalRoundStep 14,6
FinalRoundStep 6,14
mend
macro
Save a few cycles by not reloading the last written byte between rounds.
2017-06-27 02:49:16 +00:00
FinalRoundStep &to,&from,&skipldy
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
Save a few cycles by not reloading the last written byte between rounds.
2017-06-27 02:49:16 +00:00
aif C:&skipldy,.skip
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
ldy state2+&from
Save a few cycles by not reloading the last written byte between rounds.
2017-06-27 02:49:16 +00:00
.skip
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
lda Sbox,Y
Update to also support AES-192 and AES-256.
2017-06-27 06:36:56 +00:00
aif (rk+&round*16+&to)>255,.bigindex
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
eor rk+&round*16+&to
Update to also support AES-192 and AES-256.
2017-06-27 06:36:56 +00:00
ago .cont
.bigindex
ldx #&round*16+&to
eor rk,X
.cont
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
sta state1+&to
mend
Add basic decryption implementation for AES-128 and AES-192.
2017-06-27 23:17:00 +00:00
macro
InvNormalRound &round,&state
lcla &i
lclc &state
lclc &out
aif &round/2*2=&round,.evenround
&state setc state2
&out setc state1
ago .cont
.evenround
&state setc state1
&out setc state2
.cont
.loop
lda &state+&i
eor rk+&round*16+&i
sta &state+&i
&i seta &i+2
aif &i<16,.loop
aif &round=0,.skip
ShortRegs
InvMixColumn 0,5,10,15,0
InvMixColumn 4,9,14,3,4
InvMixColumn 8,13,2,7,8
InvMixColumn 12,1,6,11,12
LongRegs
.skip
mend
macro
InvMixColumn &A,&B,&C,&D,&i
ldy &state+&i+0
lda XtimeE,Y
ldy &state+&i+1
eor XtimeB,Y
ldy &state+&i+2
eor XtimeD,Y
ldy &state+&i+3
eor Xtime9,Y
tay
lda InvSbox,Y
sta &out+&A
ldy &state+&i+0
lda Xtime9,Y
ldy &state+&i+1
eor XtimeE,Y
ldy &state+&i+2
eor XtimeB,Y
ldy &state+&i+3
eor XtimeD,Y
tay
lda InvSbox,Y
sta &out+&B
ldy &state+&i+0
lda XtimeD,Y
ldy &state+&i+1
eor Xtime9,Y
ldy &state+&i+2
eor XtimeE,Y
ldy &state+&i+3
eor XtimeB,Y
tay
lda InvSbox,Y
sta &out+&C
ldy &state+&i+0
lda XtimeB,Y
ldy &state+&i+1
eor XtimeD,Y
ldy &state+&i+2
eor Xtime9,Y
ldy &state+&i+3
eor XtimeE,Y
tay
lda InvSbox,Y
sta &out+&D
mend
macro
InvFinalRoundStep &to,&from
lda state1+&from
eor rk+&round*16+&from
tay
lda InvSbox,Y
sta state2+&to
mend
macro
InvFinalRound &round
ShortRegs
InvFinalRoundStep 0,0
InvFinalRoundStep 4,4
InvFinalRoundStep 8,8
InvFinalRoundStep 12,12
InvFinalRoundStep 1,13
InvFinalRoundStep 13,9
InvFinalRoundStep 9,5
InvFinalRoundStep 5,1
InvFinalRoundStep 10,2
InvFinalRoundStep 2,10
InvFinalRoundStep 14,6
InvFinalRoundStep 6,14
InvFinalRoundStep 15,3
InvFinalRoundStep 3,7
InvFinalRoundStep 7,11
InvFinalRoundStep 11,15
LongRegs
mend
Initial working implementation of AES-128 encryption.
2017-06-27 01:41:44 +00:00
macro
ShortRegs
sep #$30
longa off
longi off
mend
macro
LongRegs
rep #$30
longa on
longi on
mend