|
|
|
@ -332,7 +332,7 @@ mov %rdx,%r11
|
|
|
|
|
# qhasm: a0 += *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_2P0
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P0,<a0=int64#3
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P0,<a0=%rdx
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P0,%rdx
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P0(%rip),%rdx
|
|
|
|
|
|
|
|
|
|
# qhasm: x0 = *(uint64 *)(pp + 0)
|
|
|
|
|
# asm 1: movq 0(<pp=int64#2),>x0=int64#10
|
|
|
|
@ -357,7 +357,7 @@ mov %r8,%r12
|
|
|
|
|
# qhasm: a1 += *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<a1=int64#5
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<a1=%r8
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%r8
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%r8
|
|
|
|
|
|
|
|
|
|
# qhasm: x1 = *(uint64 *)(pp + 8)
|
|
|
|
|
# asm 1: movq 8(<pp=int64#2),>x1=int64#11
|
|
|
|
@ -382,7 +382,7 @@ mov %r9,%r13
|
|
|
|
|
# qhasm: a2 += *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<a2=int64#6
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<a2=%r9
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%r9
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%r9
|
|
|
|
|
|
|
|
|
|
# qhasm: x2 = *(uint64 *)(pp + 16)
|
|
|
|
|
# asm 1: movq 16(<pp=int64#2),>x2=int64#12
|
|
|
|
@ -407,7 +407,7 @@ mov %rax,%r14
|
|
|
|
|
# qhasm: a3 += *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<a3=int64#7
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<a3=%rax
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%rax
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: x3 = *(uint64 *)(pp + 24)
|
|
|
|
|
# asm 1: movq 24(<pp=int64#2),>x3=int64#13
|
|
|
|
@ -432,7 +432,7 @@ mov %r10,%r15
|
|
|
|
|
# qhasm: a4 += *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<a4=int64#8
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<a4=%r10
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%r10
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%r10
|
|
|
|
|
|
|
|
|
|
# qhasm: x4 = *(uint64 *)(pp + 32)
|
|
|
|
|
# asm 1: movq 32(<pp=int64#2),>x4=int64#14
|
|
|
|
@ -532,7 +532,7 @@ mov %rdx,%r11
|
|
|
|
|
# qhasm: t10 += *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_2P0
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P0,<t10=int64#3
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P0,<t10=%rdx
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P0,%rdx
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P0(%rip),%rdx
|
|
|
|
|
|
|
|
|
|
# qhasm: rx0 = *(uint64 *) (qp + 0)
|
|
|
|
|
# asm 1: movq 0(<qp=int64#4),>rx0=int64#10
|
|
|
|
@ -557,7 +557,7 @@ mov %r8,%r12
|
|
|
|
|
# qhasm: t11 += *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<t11=int64#5
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<t11=%r8
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%r8
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%r8
|
|
|
|
|
|
|
|
|
|
# qhasm: rx1 = *(uint64 *) (qp + 8)
|
|
|
|
|
# asm 1: movq 8(<qp=int64#4),>rx1=int64#11
|
|
|
|
@ -582,7 +582,7 @@ mov %r9,%r13
|
|
|
|
|
# qhasm: t12 += *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<t12=int64#6
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<t12=%r9
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%r9
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%r9
|
|
|
|
|
|
|
|
|
|
# qhasm: rx2 = *(uint64 *) (qp + 16)
|
|
|
|
|
# asm 1: movq 16(<qp=int64#4),>rx2=int64#12
|
|
|
|
@ -607,7 +607,7 @@ mov %rax,%r14
|
|
|
|
|
# qhasm: t13 += *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<t13=int64#7
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<t13=%rax
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%rax
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: rx3 = *(uint64 *) (qp + 24)
|
|
|
|
|
# asm 1: movq 24(<qp=int64#4),>rx3=int64#13
|
|
|
|
@ -632,7 +632,7 @@ mov %r10,%r15
|
|
|
|
|
# qhasm: t14 += *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<t14=int64#8
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<t14=%r10
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%r10
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%r10
|
|
|
|
|
|
|
|
|
|
# qhasm: rx4 = *(uint64 *) (qp + 32)
|
|
|
|
|
# asm 1: movq 32(<qp=int64#4),>rx4=int64#14
|
|
|
|
@ -1237,7 +1237,7 @@ adc %rdx,%r15
|
|
|
|
|
# qhasm: mulredmask = *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51
|
|
|
|
|
# asm 1: movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,>mulredmask=int64#3
|
|
|
|
|
# asm 2: movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,>mulredmask=%rdx
|
|
|
|
|
movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,%rdx
|
|
|
|
|
movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51(%rip),%rdx
|
|
|
|
|
|
|
|
|
|
# qhasm: mulr01 = (mulr01.a0) << 13
|
|
|
|
|
# asm 1: shld $13,<a0=int64#5,<mulr01=int64#6
|
|
|
|
@ -1987,7 +1987,7 @@ adc %rdx,%r15
|
|
|
|
|
# qhasm: mulredmask = *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51
|
|
|
|
|
# asm 1: movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,>mulredmask=int64#3
|
|
|
|
|
# asm 2: movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,>mulredmask=%rdx
|
|
|
|
|
movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,%rdx
|
|
|
|
|
movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51(%rip),%rdx
|
|
|
|
|
|
|
|
|
|
# qhasm: mulr01 = (mulr01.rx0) << 13
|
|
|
|
|
# asm 1: shld $13,<rx0=int64#5,<mulr01=int64#6
|
|
|
|
@ -2202,27 +2202,27 @@ mov %r12,%r15
|
|
|
|
|
# qhasm: rx0 += *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_2P0
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P0,<rx0=int64#5
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P0,<rx0=%r8
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P0,%r8
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P0(%rip),%r8
|
|
|
|
|
|
|
|
|
|
# qhasm: rx1 += *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rx1=int64#7
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rx1=%rax
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%rax
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: rx2 += *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rx2=int64#8
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rx2=%r10
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%r10
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%r10
|
|
|
|
|
|
|
|
|
|
# qhasm: rx3 += *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rx3=int64#9
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rx3=%r11
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%r11
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%r11
|
|
|
|
|
|
|
|
|
|
# qhasm: rx4 += *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rx4=int64#10
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rx4=%r12
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%r12
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%r12
|
|
|
|
|
|
|
|
|
|
# qhasm: ry0 += a0_stack
|
|
|
|
|
# asm 1: addq <a0_stack=stack64#8,<ry0=int64#3
|
|
|
|
@ -2862,7 +2862,7 @@ adc %rdx,%r15
|
|
|
|
|
# qhasm: mulredmask = *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51
|
|
|
|
|
# asm 1: movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,>mulredmask=int64#3
|
|
|
|
|
# asm 2: movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,>mulredmask=%rdx
|
|
|
|
|
movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,%rdx
|
|
|
|
|
movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51(%rip),%rdx
|
|
|
|
|
|
|
|
|
|
# qhasm: mulr01 = (mulr01.c0) << 13
|
|
|
|
|
# asm 1: shld $13,<c0=int64#5,<mulr01=int64#6
|
|
|
|
@ -3090,7 +3090,7 @@ imulq $19,%rdx,%rax
|
|
|
|
|
movq %rax,96(%rsp)
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D2
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D2
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D2(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: c0 = mulrax
|
|
|
|
|
# asm 1: mov <mulrax=int64#7,>c0=int64#5
|
|
|
|
@ -3118,7 +3118,7 @@ imulq $19,%rdx,%rax
|
|
|
|
|
movq %rax,104(%rsp)
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D1
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D1
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D1(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c0 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c0=int64#5
|
|
|
|
@ -3136,7 +3136,7 @@ adc %rdx,%r9
|
|
|
|
|
movq 56(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D0
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D0
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D0(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c0 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c0=int64#5
|
|
|
|
@ -3154,7 +3154,7 @@ adc %rdx,%r9
|
|
|
|
|
movq 56(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D1
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D1
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D1(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: c1 = mulrax
|
|
|
|
|
# asm 1: mov <mulrax=int64#7,>c1=int64#8
|
|
|
|
@ -3172,7 +3172,7 @@ mov %rdx,%r11
|
|
|
|
|
movq 56(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D2
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D2
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D2(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: c2 = mulrax
|
|
|
|
|
# asm 1: mov <mulrax=int64#7,>c2=int64#10
|
|
|
|
@ -3190,7 +3190,7 @@ mov %rdx,%r13
|
|
|
|
|
movq 56(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D3
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D3
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D3(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: c3 = mulrax
|
|
|
|
|
# asm 1: mov <mulrax=int64#7,>c3=int64#12
|
|
|
|
@ -3208,7 +3208,7 @@ mov %rdx,%r15
|
|
|
|
|
movq 56(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D4
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D4
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D4(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: c4 = mulrax
|
|
|
|
|
# asm 1: mov <mulrax=int64#7,>c4=int64#14
|
|
|
|
@ -3226,7 +3226,7 @@ mov %rdx,%rbp
|
|
|
|
|
movq 64(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D0
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D0
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D0(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c1 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c1=int64#8
|
|
|
|
@ -3244,7 +3244,7 @@ adc %rdx,%r11
|
|
|
|
|
movq 64(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D1
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D1
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D1(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c2 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c2=int64#10
|
|
|
|
@ -3262,7 +3262,7 @@ adc %rdx,%r13
|
|
|
|
|
movq 64(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D2
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D2
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D2(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c3 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c3=int64#12
|
|
|
|
@ -3280,7 +3280,7 @@ adc %rdx,%r15
|
|
|
|
|
movq 64(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D3
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D3
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D3(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c4 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c4=int64#14
|
|
|
|
@ -3303,7 +3303,7 @@ movq 64(%rsp),%rdx
|
|
|
|
|
imulq $19,%rdx,%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D4
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D4
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D4(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c0 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c0=int64#5
|
|
|
|
@ -3321,7 +3321,7 @@ adc %rdx,%r9
|
|
|
|
|
movq 72(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D0
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D0
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D0(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c2 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c2=int64#10
|
|
|
|
@ -3339,7 +3339,7 @@ adc %rdx,%r13
|
|
|
|
|
movq 72(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D1
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D1
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D1(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c3 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c3=int64#12
|
|
|
|
@ -3357,7 +3357,7 @@ adc %rdx,%r15
|
|
|
|
|
movq 72(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D2
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D2
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D2(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c4 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c4=int64#14
|
|
|
|
@ -3380,7 +3380,7 @@ movq 72(%rsp),%rdx
|
|
|
|
|
imulq $19,%rdx,%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D3
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D3
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D3(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c0 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c0=int64#5
|
|
|
|
@ -3403,7 +3403,7 @@ movq 72(%rsp),%rdx
|
|
|
|
|
imulq $19,%rdx,%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D4
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D4
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D4(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c1 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c1=int64#8
|
|
|
|
@ -3421,7 +3421,7 @@ adc %rdx,%r11
|
|
|
|
|
movq 80(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D0
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D0
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D0(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c3 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c3=int64#12
|
|
|
|
@ -3439,7 +3439,7 @@ adc %rdx,%r15
|
|
|
|
|
movq 80(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D1
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D1
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D1(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c4 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c4=int64#14
|
|
|
|
@ -3457,7 +3457,7 @@ adc %rdx,%rbp
|
|
|
|
|
movq 96(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D3
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D3
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D3(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c1 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c1=int64#8
|
|
|
|
@ -3475,7 +3475,7 @@ adc %rdx,%r11
|
|
|
|
|
movq 96(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D4
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D4
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D4(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c2 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c2=int64#10
|
|
|
|
@ -3493,7 +3493,7 @@ adc %rdx,%r13
|
|
|
|
|
movq 88(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D0
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D0
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D0(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c4 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c4=int64#14
|
|
|
|
@ -3511,7 +3511,7 @@ adc %rdx,%rbp
|
|
|
|
|
movq 104(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D2
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D2
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D2(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c1 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c1=int64#8
|
|
|
|
@ -3529,7 +3529,7 @@ adc %rdx,%r11
|
|
|
|
|
movq 104(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D3
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D3
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D3(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c2 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c2=int64#10
|
|
|
|
@ -3547,7 +3547,7 @@ adc %rdx,%r13
|
|
|
|
|
movq 104(%rsp),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: (uint128) mulrdx mulrax = mulrax * *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_EC2D4
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D4
|
|
|
|
|
mulq crypto_sign_ed25519_amd64_51_30k_batch_EC2D4(%rip)
|
|
|
|
|
|
|
|
|
|
# qhasm: carry? c3 += mulrax
|
|
|
|
|
# asm 1: add <mulrax=int64#7,<c3=int64#12
|
|
|
|
@ -3562,7 +3562,7 @@ adc %rdx,%r15
|
|
|
|
|
# qhasm: mulredmask = *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51
|
|
|
|
|
# asm 1: movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,>mulredmask=int64#3
|
|
|
|
|
# asm 2: movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,>mulredmask=%rdx
|
|
|
|
|
movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,%rdx
|
|
|
|
|
movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51(%rip),%rdx
|
|
|
|
|
|
|
|
|
|
# qhasm: mulr01 = (mulr01.c0) << 13
|
|
|
|
|
# asm 1: shld $13,<c0=int64#5,<mulr01=int64#6
|
|
|
|
@ -4312,7 +4312,7 @@ adc %rdx,%r15
|
|
|
|
|
# qhasm: mulredmask = *(uint64 *) &crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51
|
|
|
|
|
# asm 1: movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,>mulredmask=int64#2
|
|
|
|
|
# asm 2: movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,>mulredmask=%rsi
|
|
|
|
|
movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51,%rsi
|
|
|
|
|
movq crypto_sign_ed25519_amd64_51_30k_batch_REDMASK51(%rip),%rsi
|
|
|
|
|
|
|
|
|
|
# qhasm: mulr01 = (mulr01.rt0) << 13
|
|
|
|
|
# asm 1: shld $13,<rt0=int64#5,<mulr01=int64#6
|
|
|
|
@ -4552,27 +4552,27 @@ mov %r10,%r13
|
|
|
|
|
# qhasm: rt0 += *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_2P0
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P0,<rt0=int64#5
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P0,<rt0=%r8
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P0,%r8
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P0(%rip),%r8
|
|
|
|
|
|
|
|
|
|
# qhasm: rt1 += *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rt1=int64#4
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rt1=%rcx
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%rcx
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%rcx
|
|
|
|
|
|
|
|
|
|
# qhasm: rt2 += *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rt2=int64#6
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rt2=%r9
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%r9
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%r9
|
|
|
|
|
|
|
|
|
|
# qhasm: rt3 += *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rt3=int64#7
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rt3=%rax
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%rax
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%rax
|
|
|
|
|
|
|
|
|
|
# qhasm: rt4 += *(uint64 *)&crypto_sign_ed25519_amd64_51_30k_batch_2P1234
|
|
|
|
|
# asm 1: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rt4=int64#8
|
|
|
|
|
# asm 2: add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,<rt4=%r10
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234,%r10
|
|
|
|
|
add crypto_sign_ed25519_amd64_51_30k_batch_2P1234(%rip),%r10
|
|
|
|
|
|
|
|
|
|
# qhasm: rz0 += c0_stack
|
|
|
|
|
# asm 1: addq <c0_stack=stack64#8,<rz0=int64#2
|
|
|
|
|