1  /* { dg-do run } */
       2  /* { dg-options "-O2 -msha" } */
       3  /* { dg-require-effective-target sha } */
       4  
       5  #include "sha-check.h"
       6  #include "m128-check.h"
       7  #include <x86intrin.h>
       8  #include <immintrin.h>
       9  
      10  static int
      11  ch (int e, int f, int g)
      12  {
      13    return (e & f) ^ (~e & g);
      14  }
      15  
      16  static int
      17  maj (int a, int b, int c)
      18  {
      19    return (a & b) ^ (a & c) ^ (b & c);
      20  }
      21  
      22  static int
      23  s0 (int a)
      24  {
      25    return __rord (a, 2) ^ __rord (a, 13) ^ __rord (a, 22);
      26  }
      27  
      28  static int
      29  s1 (int e)
      30  {
      31    return __rord (e, 6) ^ __rord (e, 11) ^ __rord (e, 25);
      32  }
      33  
      34  static void
      35  compute_sha256rnds2 (int *src0, int *src1, int *src2, int *res)
      36  {
      37    int wk[2] = { src0[0], src0[1] };
      38    int a[3], b[3], c[3], d[3], e[3], f[3], g[3], h[3];
      39  
      40    a[0] = src2[3];
      41    b[0] = src2[2];
      42    c[0] = src1[3];
      43    d[0] = src1[2];
      44    e[0] = src2[1];
      45    f[0] = src2[0];
      46    g[0] = src1[1];
      47    h[0] = src1[0];
      48  
      49    int i;
      50    for (i = 0; i <= 1; i++)
      51      {
      52        a[i+1] = ch (e[i], f[i], g[i]) + s1 (e[i]) + wk[i] + h[i]
      53  	       + maj (a[i], b[i], c[i]) + s0 (a[i]);
      54        b[i+1] = a[i];
      55        c[i+1] = b[i];
      56        d[i+1] = c[i];
      57        e[i+1] = ch (e[i], f[i], g[i]) + s1 (e[i]) + wk[i] + h[i] + d[i];
      58        f[i+1] = e[i];
      59        g[i+1] = f[i];
      60        h[i+1] = g[i];
      61      }
      62  
      63    res[0] = f[2];
      64    res[1] = e[2];
      65    res[2] = b[2];
      66    res[3] = a[2];
      67  }
      68  
      69  static void
      70  sha_test (void)
      71  {
      72    union128i_d s0, s1, s2, res;
      73    int res_ref[4];
      74  
      75    s0.x = _mm_set_epi32 (0, 0, 111, 222);
      76    s1.x = _mm_set_epi32 (333, 444, 555, 666);
      77    s2.x = _mm_set_epi32 (777, 888, 999, 123);
      78  
      79    res.x = _mm_sha256rnds2_epu32 (s1.x, s2.x, s0.x);
      80  
      81    compute_sha256rnds2 (s0.a, s1.a, s2.a, res_ref);
      82  
      83    if (check_union128i_d (res, res_ref))
      84      abort ();
      85  }