[lkml]   [2017]   [Dec]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH] crypto: x86/twofish-3way - Fix %rbp usage
On Mon, Dec 18, 2017 at 04:40:26PM -0800, Eric Biggers wrote:
> From: Eric Biggers <>
> Using %rbp as a temporary register breaks frame pointer convention and
> breaks stack traces when unwinding from an interrupt in the crypto code.
> In twofish-3way, we can't simply replace %rbp with another register
> because there are none available. Instead, we use the stack to hold the
> values that %rbp, %r11, and %r12 were holding previously. Each of these
> values represents the half of the output from the previous Feistel round
> that is being passed on unchanged to the following round. They are only
> used once per round, when they are exchanged with %rax, %rbx, and %rcx.
> As a result, we free up 3 registers (one per block) and can reassign
> them so that %rbp is not used, and additionally %r14 and %r15 are not
> used so they do not need to be saved/restored.
> There may be a small overhead caused by replacing 'xchg REG, REG' with
> the needed sequence 'mov MEM, REG; mov REG, MEM; mov REG, REG' once per
> round. But, counterintuitively, when I tested "ctr-twofish-3way" on a
> Haswell processor, the new version was actually about 2% faster.
> (Perhaps 'xchg' is not as well optimized as plain moves.)
> Reported-by: syzbot <>
> Signed-off-by: Eric Biggers <>

Thanks a lot for fixing this!

Reviewed-by: Josh Poimboeuf <>


 \ /
  Last update: 2017-12-19 23:38    [W:0.160 / U:1.340 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site