1 /* mpn_sec_div_qr, mpn_sec_div_r -- Compute Q = floor(U / V), U = U mod V.
2 Side-channel silent under the assumption that the used instructions are
5 Contributed to the GNU project by Torbjörn Granlund.
7 Copyright 2011-2014 Free Software Foundation, Inc.
9 This file is part of the GNU MP Library.
11 The GNU MP Library is free software; you can redistribute it and/or modify
12 it under the terms of either:
14 * the GNU Lesser General Public License as published by the Free
15 Software Foundation; either version 3 of the License, or (at your
16 option) any later version.
20 * the GNU General Public License as published by the Free Software
21 Foundation; either version 2 of the License, or (at your option) any
24 or both in parallel, as here.
26 The GNU MP Library is distributed in the hope that it will be useful, but
27 WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
28 or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
31 You should have received copies of the GNU General Public License and the
32 GNU Lesser General Public License along with the GNU MP Library. If not,
33 see https://www.gnu.org/licenses/. */
39 #if OPERATION_sec_div_qr
40 #define FNAME mpn_sec_div_qr
41 #define FNAME_itch mpn_sec_div_qr_itch
43 #define RETTYPE mp_limb_t
45 #if OPERATION_sec_div_r
46 #define FNAME mpn_sec_div_r
47 #define FNAME_itch mpn_sec_div_r_itch
53 FNAME_itch (mp_size_t nn
, mp_size_t dn
)
55 #if OPERATION_sec_div_qr
56 /* Needs (nn + dn + 1) + mpn_sec_pi1_div_qr's needs of (2nn' - dn + 1) for a
57 total of 3nn + 4 limbs at tp. Note that mpn_sec_pi1_div_qr's nn is one
58 greater than ours, therefore +4 and not just +2. */
61 #if OPERATION_sec_div_r
62 /* Needs (nn + dn + 1) + mpn_sec_pi1_div_r's needs of (dn + 1) for a total of
63 nn + 2dn + 2 limbs at tp. */
64 return nn
+ 2 * dn
+ 2;
70 mp_ptr np
, mp_size_t nn
,
71 mp_srcptr dp
, mp_size_t dn
,
81 ASSERT (dp
[dn
- 1] != 0);
84 count_leading_zeros (cnt
, d1
);
90 dp2
= tp
; /* dn limbs */
91 mpn_lshift (dp2
, dp
, dn
, cnt
);
93 np2
= tp
+ dn
; /* (nn + 1) limbs */
94 cy
= mpn_lshift (np2
, np
, nn
, cnt
);
99 invert_limb (inv32
, d0
);
101 /* We add nn + dn to tp here, not nn + 1 + dn, as expected. This is
102 since nn here will have been incremented. */
103 #if OPERATION_sec_div_qr
104 qh
= mpn_sec_pi1_div_qr (np2
+ dn
, np2
, nn
, dp2
, dn
, inv32
, tp
+ nn
+ dn
);
105 ASSERT (qh
== 0); /* FIXME: this indicates inefficiency! */
106 MPN_COPY (qp
, np2
+ dn
, nn
- dn
- 1);
109 mpn_sec_pi1_div_r (np2
, nn
, dp2
, dn
, inv32
, tp
+ nn
+ dn
);
112 mpn_rshift (np
, np2
, dn
, cnt
);
114 #if OPERATION_sec_div_qr
120 /* FIXME: Consider copying np => np2 here, adding a 0-limb at the top.
121 That would simplify the underlying pi1 function, since then it could
125 invert_limb (inv32
, d0
);
127 #if OPERATION_sec_div_qr
128 return mpn_sec_pi1_div_qr (qp
, np
, nn
, dp
, dn
, inv32
, tp
);
130 mpn_sec_pi1_div_r (np
, nn
, dp
, dn
, inv32
, tp
);