Finish shifting out primitives, and add division/modulo.
This commit is contained in:
@@ -4,6 +4,7 @@ use std::cmp::Ordering;
|
|||||||
pub fn generic_cmp(a: &[u64], b: &[u64]) -> Ordering {
|
pub fn generic_cmp(a: &[u64], b: &[u64]) -> Ordering {
|
||||||
let mut i = a.len() - 1;
|
let mut i = a.len() - 1;
|
||||||
|
|
||||||
|
assert!(a.len() == b.len());
|
||||||
loop {
|
loop {
|
||||||
match a[i].cmp(&b[i]) {
|
match a[i].cmp(&b[i]) {
|
||||||
Ordering::Equal if i == 0 =>
|
Ordering::Equal if i == 0 =>
|
||||||
@@ -15,3 +16,291 @@ pub fn generic_cmp(a: &[u64], b: &[u64]) -> Ordering {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
fn le(a: &[u64], b: &[u64]) -> bool {
|
||||||
|
generic_cmp(a, b) != Ordering::Greater
|
||||||
|
}
|
||||||
|
|
||||||
|
fn ge(a: &[u64], b: &[u64]) -> bool {
|
||||||
|
generic_cmp(a, b) != Ordering::Less
|
||||||
|
}
|
||||||
|
|
||||||
|
#[inline]
|
||||||
|
pub fn generic_bitand(a: &mut [u64], b: &[u64]) {
|
||||||
|
let mut i = 0;
|
||||||
|
|
||||||
|
assert!(a.len() == b.len());
|
||||||
|
while i < a.len() {
|
||||||
|
a[i] &= b[i];
|
||||||
|
i += 1;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
#[inline]
|
||||||
|
pub fn generic_bitor(a: &mut [u64], b: &[u64]) {
|
||||||
|
let mut i = 0;
|
||||||
|
|
||||||
|
assert!(a.len() == b.len());
|
||||||
|
while i < a.len() {
|
||||||
|
a[i] |= b[i];
|
||||||
|
i += 1;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
#[inline]
|
||||||
|
pub fn generic_bitxor(a: &mut [u64], b: &[u64]) {
|
||||||
|
let mut i = 0;
|
||||||
|
|
||||||
|
assert!(a.len() == b.len());
|
||||||
|
while i < a.len() {
|
||||||
|
a[i] ^= b[i];
|
||||||
|
i += 1;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
#[inline]
|
||||||
|
pub fn generic_not(a: &mut [u64]) {
|
||||||
|
for x in a.iter_mut() {
|
||||||
|
*x = !*x;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
#[inline]
|
||||||
|
pub fn generic_shl(a: &mut [u64], orig: &[u64], amount: usize) {
|
||||||
|
let digits = amount / 64;
|
||||||
|
let bits = amount % 64;
|
||||||
|
|
||||||
|
assert!(a.len() == orig.len());
|
||||||
|
for i in 0..a.len() {
|
||||||
|
if i < digits {
|
||||||
|
a[i] = 0;
|
||||||
|
} else {
|
||||||
|
let origidx = i - digits;
|
||||||
|
let prev = if origidx == 0 { 0 } else { orig[origidx - 1] };
|
||||||
|
let (carry,_) = if bits == 0 { (0, false) }
|
||||||
|
else { prev.overflowing_shr(64 - bits as u32) };
|
||||||
|
a[i] = (orig[origidx] << bits) | carry;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
#[inline]
|
||||||
|
pub fn generic_shr(a: &mut [u64], orig: &[u64], amount: usize) {
|
||||||
|
let digits = amount / 64;
|
||||||
|
let bits = amount % 64;
|
||||||
|
|
||||||
|
assert!(a.len() == orig.len());
|
||||||
|
for i in 0..a.len() {
|
||||||
|
let oldidx = i + digits;
|
||||||
|
let caridx = i + digits + 1;
|
||||||
|
let old = if oldidx >= a.len() { 0 } else { orig[oldidx] };
|
||||||
|
let carry = if caridx >= a.len() { 0 } else { orig[caridx] };
|
||||||
|
let cb = if bits == 0 { 0 } else { carry << (64 - bits) };
|
||||||
|
a[i] = (old >> bits) | cb;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
#[inline]
|
||||||
|
pub fn generic_add(a: &mut [u64], b: &[u64]) {
|
||||||
|
let mut carry = 0;
|
||||||
|
|
||||||
|
assert!(a.len() == b.len());
|
||||||
|
for i in 0..a.len() {
|
||||||
|
let x = a[i] as u128;
|
||||||
|
let y = b[i] as u128;
|
||||||
|
let total = x + y + carry;
|
||||||
|
a[i] = total as u64;
|
||||||
|
carry = total >> 64;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
#[inline]
|
||||||
|
pub fn generic_sub(a: &mut [u64], b: &[u64]) {
|
||||||
|
let mut negated_rhs = b.to_vec();
|
||||||
|
generic_not(&mut negated_rhs);
|
||||||
|
let mut one = Vec::with_capacity(a.len());
|
||||||
|
one.resize(a.len(), 0);
|
||||||
|
one[0] = 1;
|
||||||
|
generic_add(&mut negated_rhs, &one);
|
||||||
|
generic_add(a, &negated_rhs);
|
||||||
|
}
|
||||||
|
|
||||||
|
#[inline]
|
||||||
|
pub fn generic_mul(a: &mut [u64], orig: &[u64], b: &[u64]) {
|
||||||
|
assert!(a.len() == orig.len());
|
||||||
|
assert!(a.len() == b.len());
|
||||||
|
assert!(a == orig);
|
||||||
|
|
||||||
|
// Build the output table. This is a little bit awkward because we don't
|
||||||
|
// know how big we're running, but hopefully the compiler is smart enough
|
||||||
|
// to work all this out.
|
||||||
|
let mut table = Vec::with_capacity(a.len());
|
||||||
|
for _ in 0..a.len() {
|
||||||
|
let mut row = Vec::with_capacity(a.len());
|
||||||
|
row.resize(a.len(), 0);
|
||||||
|
table.push(row);
|
||||||
|
}
|
||||||
|
// This uses "simple" grade school techniques to work things out. But,
|
||||||
|
// for reference, consider two 4 digit numbers:
|
||||||
|
//
|
||||||
|
// l0c3 l0c2 l0c1 l0c0 [orig]
|
||||||
|
// x l1c3 l1c2 l1c1 l1c0 [b]
|
||||||
|
// ------------------------------------------------------------
|
||||||
|
// (l0c3*l1c0) (l0c2*l1c0) (l0c1*l1c0) (l0c0*l1c0)
|
||||||
|
// (l0c2*l1c1) (l0c1*l1c1) (l0c0*l1c1)
|
||||||
|
// (l0c1*l1c2) (l0c0*l1c2)
|
||||||
|
// (l0c0*l1c3)
|
||||||
|
// ------------------------------------------------------------
|
||||||
|
// AAAAA BBBBB CCCCC DDDDD
|
||||||
|
for line in 0..a.len() {
|
||||||
|
let maxcol = a.len() - line;
|
||||||
|
for col in 0..maxcol {
|
||||||
|
let left = orig[col] as u128;
|
||||||
|
let right = b[line] as u128;
|
||||||
|
table[line][col + line] = left * right;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
// ripple the carry across each line, ensuring that each entry in the
|
||||||
|
// table is 64-bits
|
||||||
|
for line in 0..a.len() {
|
||||||
|
let mut carry = 0;
|
||||||
|
for col in 0..a.len() {
|
||||||
|
table[line][col] = table[line][col] + carry;
|
||||||
|
carry = table[line][col] >> 64;
|
||||||
|
table[line][col] &= 0xFFFFFFFFFFFFFFFF;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
// now do the final addition across the lines, rippling the carry as
|
||||||
|
// normal
|
||||||
|
let mut carry = 0;
|
||||||
|
for col in 0..a.len() {
|
||||||
|
let mut total = carry;
|
||||||
|
for line in 0..a.len() {
|
||||||
|
total += table[line][col];
|
||||||
|
}
|
||||||
|
a[col] = total as u64;
|
||||||
|
carry = total >> 64;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
#[inline]
|
||||||
|
pub fn generic_div(inx: &[u64], iny: &[u64],
|
||||||
|
outq: &mut [u64], outr: &mut [u64])
|
||||||
|
{
|
||||||
|
assert!(inx.len() == inx.len());
|
||||||
|
assert!(inx.len() == iny.len());
|
||||||
|
assert!(inx.len() == outq.len());
|
||||||
|
assert!(inx.len() == outr.len());
|
||||||
|
// This algorithm is from the Handbook of Applied Cryptography, Chapter 14,
|
||||||
|
// algorithm 14.20. It has a couple assumptions about the inputs, namely that
|
||||||
|
// n >= t >= 1 and y[t] != 0, where n and t refer to the number of digits in
|
||||||
|
// the numbers. Which means that if we used the inputs unmodified, we can't
|
||||||
|
// divide by single-digit numbers.
|
||||||
|
//
|
||||||
|
// To deal with this, we multiply inx and iny by 2^64, so that we push out
|
||||||
|
// t by one.
|
||||||
|
//
|
||||||
|
// In addition, this algorithm starts to go badly when y[t] is very small
|
||||||
|
// and x[n] is very large. Really, really badly. This can be fixed by
|
||||||
|
// insuring that the top bit is set in y[t], which we can achieve by
|
||||||
|
// shifting everyone over a maxiumum of 63 bits.
|
||||||
|
//
|
||||||
|
// What this means is, just for safety, we add a 0 at the beginning and
|
||||||
|
// end of each number.
|
||||||
|
let mut y = iny.to_vec();
|
||||||
|
let mut x = inx.to_vec();
|
||||||
|
y.insert(0,0); y.push(0);
|
||||||
|
x.insert(0,0); x.push(0);
|
||||||
|
// 0. Compute 'n' and 't'
|
||||||
|
let n = x.len() - 1;
|
||||||
|
let mut t = y.len() - 1;
|
||||||
|
while (t > 0) && (y[t] == 0) { t -= 1 }
|
||||||
|
assert!(y[t] != 0); // this is where division by zero will fire
|
||||||
|
// 0.5. Figure out a shift we can do such that the high bit of y[t] is
|
||||||
|
// set, and then shift x and y left by that much.
|
||||||
|
let additional_shift: usize = y[t].leading_zeros() as usize;
|
||||||
|
let origx = x.clone();
|
||||||
|
let origy = y.clone();
|
||||||
|
generic_shl(&mut x, &origx, additional_shift);
|
||||||
|
generic_shl(&mut y, &origy, additional_shift);
|
||||||
|
// 1. For j from 0 to (n - 1) do: q_j <- 0
|
||||||
|
let mut q = Vec::with_capacity(y.len());
|
||||||
|
q.resize(y.len(), 0);
|
||||||
|
for qj in q.iter_mut() { *qj = 0 }
|
||||||
|
// 2. While (x >= yb^(n-t)) do the following:
|
||||||
|
// q_(n-t) <- q_(n-t) + 1
|
||||||
|
// x <- x - yb^(n-t)
|
||||||
|
let mut ybnt = y.clone();
|
||||||
|
generic_shl(&mut ybnt, &y, 64 * (n - t));
|
||||||
|
while ge(&x, &ybnt) {
|
||||||
|
q[n-t] = q[n-t] + 1;
|
||||||
|
generic_sub(&mut x, &ybnt);
|
||||||
|
}
|
||||||
|
// 3. For i from n down to (t + 1) do the following:
|
||||||
|
let mut i = n;
|
||||||
|
while i >= (t + 1) {
|
||||||
|
// 3.1. if x_i = y_t, then set q_(i-t-1) <- b - 1; otherwise set
|
||||||
|
// q_(i-t-1) <- floor((x_i * b + x_(i-1)) / y_t).
|
||||||
|
if x[i] == y[t] {
|
||||||
|
q[i-t-1] = 0xFFFFFFFFFFFFFFFF;
|
||||||
|
} else {
|
||||||
|
let top = ((x[i] as u128) << 64) + (x[i-1] as u128);
|
||||||
|
let bot = y[t] as u128;
|
||||||
|
let solution = top / bot;
|
||||||
|
q[i-t-1] = solution as u64;
|
||||||
|
}
|
||||||
|
// 3.2. While (q_(i-t-1)(y_t * b + y_(t-1)) > x_i(b2) + x_(i-1)b +
|
||||||
|
// x_(i-2)) do:
|
||||||
|
// q_(i - t - 1) <- q_(i - t 1) - 1.
|
||||||
|
loop {
|
||||||
|
let mut left = Vec::with_capacity(x.len());
|
||||||
|
left.resize(x.len(), 0);
|
||||||
|
left[0] = q[i - t - 1];
|
||||||
|
let mut leftright = Vec::with_capacity(x.len());
|
||||||
|
leftright.resize(x.len(), 0);
|
||||||
|
leftright[0] = y[t-1];
|
||||||
|
|
||||||
|
let copy = left.clone();
|
||||||
|
generic_mul(&mut left, ©, &leftright);
|
||||||
|
let mut right = Vec::with_capacity(x.len());
|
||||||
|
right.resize(x.len(), 0);
|
||||||
|
right[0] = x[i-2];
|
||||||
|
right[1] = x[i-1];
|
||||||
|
right[2] = x[i];
|
||||||
|
|
||||||
|
if le(&left, &right) {
|
||||||
|
break
|
||||||
|
}
|
||||||
|
|
||||||
|
q[i - t - 1] -= 1;
|
||||||
|
}
|
||||||
|
// 3.3. x <- x - q_(i - t - 1) * y * b^(i-t-1)
|
||||||
|
let mut right = Vec::with_capacity(y.len());
|
||||||
|
right.resize(y.len(), 0);
|
||||||
|
right[i - t - 1] = q[i - t - 1];
|
||||||
|
let rightclone = right.clone();
|
||||||
|
generic_mul(&mut right, &rightclone, &y);
|
||||||
|
let wentnegative = generic_cmp(&x, &right) == Ordering::Less;
|
||||||
|
generic_sub(&mut x, &right);
|
||||||
|
// 3.4. if x < 0 then set x <- x + yb^(i-t-1) and
|
||||||
|
// q_(i-t-1) <- q_(i-t-1) - 1
|
||||||
|
if wentnegative {
|
||||||
|
let mut ybit1 = y.to_vec();
|
||||||
|
generic_shl(&mut ybit1, &y, 64 * (i - t - 1));
|
||||||
|
generic_add(&mut x, &ybit1);
|
||||||
|
q[i - t - 1] -= 1;
|
||||||
|
}
|
||||||
|
i -= 1;
|
||||||
|
}
|
||||||
|
// 4. r <- x
|
||||||
|
let finalx = x.clone();
|
||||||
|
generic_shr(&mut x, &finalx, additional_shift);
|
||||||
|
for i in 0..outr.len() {
|
||||||
|
outr[i] = x[i + 1]; // note that for the remainder, we're dividing by
|
||||||
|
// our normalization value.
|
||||||
|
}
|
||||||
|
// 5. return (q,r)
|
||||||
|
for i in 0..outq.len() {
|
||||||
|
outq[i] = q[i];
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|||||||
@@ -5,8 +5,10 @@
|
|||||||
//! of course, but that's its origin.
|
//! of course, but that's its origin.
|
||||||
|
|
||||||
mod core;
|
mod core;
|
||||||
|
mod traits;
|
||||||
|
|
||||||
use self::core::{generic_cmp};
|
use self::core::*;
|
||||||
|
use self::traits::*;
|
||||||
use std::cmp::Ordering;
|
use std::cmp::Ordering;
|
||||||
use std::ops::*;
|
use std::ops::*;
|
||||||
|
|
||||||
@@ -111,13 +113,7 @@ impl BitOrAssign for U512 {
|
|||||||
|
|
||||||
impl<'a> BitOrAssign<&'a U512> for U512 {
|
impl<'a> BitOrAssign<&'a U512> for U512 {
|
||||||
fn bitor_assign(&mut self, other: &U512) {
|
fn bitor_assign(&mut self, other: &U512) {
|
||||||
let mut oback = other.contents.iter();
|
generic_bitor(&mut self.contents, &other.contents)
|
||||||
for x in self.contents.iter_mut() {
|
|
||||||
match oback.next() {
|
|
||||||
None => panic!("Internal error in cryptonum (|=)."),
|
|
||||||
Some(v) => *x = *x | *v
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -176,10 +172,7 @@ impl<'a> Not for &'a U512 {
|
|||||||
|
|
||||||
fn not(self) -> U512 {
|
fn not(self) -> U512 {
|
||||||
let mut output = self.clone();
|
let mut output = self.clone();
|
||||||
|
generic_not(&mut output.contents);
|
||||||
for x in output.contents.iter_mut() {
|
|
||||||
*x = !*x;
|
|
||||||
}
|
|
||||||
output
|
output
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@@ -194,13 +187,7 @@ impl BitAndAssign for U512 {
|
|||||||
|
|
||||||
impl<'a> BitAndAssign<&'a U512> for U512 {
|
impl<'a> BitAndAssign<&'a U512> for U512 {
|
||||||
fn bitand_assign(&mut self, other: &U512) {
|
fn bitand_assign(&mut self, other: &U512) {
|
||||||
let mut oback = other.contents.iter();
|
generic_bitand(&mut self.contents, &other.contents)
|
||||||
for x in self.contents.iter_mut() {
|
|
||||||
match oback.next() {
|
|
||||||
None => panic!("Internal error in cryptonum (&=)."),
|
|
||||||
Some(v) => *x = *x & *v
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -254,13 +241,7 @@ impl BitXorAssign for U512 {
|
|||||||
|
|
||||||
impl<'a> BitXorAssign<&'a U512> for U512 {
|
impl<'a> BitXorAssign<&'a U512> for U512 {
|
||||||
fn bitxor_assign(&mut self, other: &U512) {
|
fn bitxor_assign(&mut self, other: &U512) {
|
||||||
let mut oback = other.contents.iter();
|
generic_bitxor(&mut self.contents, &other.contents);
|
||||||
for x in self.contents.iter_mut() {
|
|
||||||
match oback.next() {
|
|
||||||
None => panic!("Internal error in cryptonum (&=)."),
|
|
||||||
Some(v) => *x = *x ^ *v
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -308,21 +289,8 @@ impl<'a> BitXor<&'a U512> for &'a U512 {
|
|||||||
|
|
||||||
impl ShlAssign<usize> for U512 {
|
impl ShlAssign<usize> for U512 {
|
||||||
fn shl_assign(&mut self, amount: usize) {
|
fn shl_assign(&mut self, amount: usize) {
|
||||||
let digits = amount / 64;
|
let copy = self.contents.clone();
|
||||||
let bits = amount % 64;
|
generic_shl(&mut self.contents, ©, amount);
|
||||||
let orig = self.contents.clone();
|
|
||||||
|
|
||||||
for i in 0..8 {
|
|
||||||
if i < digits {
|
|
||||||
self.contents[i] = 0;
|
|
||||||
} else {
|
|
||||||
let origidx = i - digits;
|
|
||||||
let prev = if origidx == 0 { 0 } else { orig[origidx - 1] };
|
|
||||||
let (carry,_) = if bits == 0 { (0, false) }
|
|
||||||
else { prev.overflowing_shr(64 - bits as u32) };
|
|
||||||
self.contents[i] = (orig[origidx] << bits) | carry;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -350,18 +318,8 @@ impl<'a> Shl<usize> for &'a U512 {
|
|||||||
|
|
||||||
impl ShrAssign<usize> for U512 {
|
impl ShrAssign<usize> for U512 {
|
||||||
fn shr_assign(&mut self, amount: usize) {
|
fn shr_assign(&mut self, amount: usize) {
|
||||||
let digits = amount / 64;
|
let copy = self.contents.clone();
|
||||||
let bits = amount % 64;
|
generic_shr(&mut self.contents, ©, amount);
|
||||||
let orig = self.contents.clone();
|
|
||||||
|
|
||||||
for i in 0..8 {
|
|
||||||
let oldidx = i + digits;
|
|
||||||
let caridx = i + digits + 1;
|
|
||||||
let old = if oldidx > 7 { 0 } else { orig[oldidx] };
|
|
||||||
let carry = if caridx > 7 { 0 } else { orig[caridx] };
|
|
||||||
let cb = if bits == 0 { 0 } else { carry << (64 - bits) };
|
|
||||||
self.contents[i] = (old >> bits) | cb;
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -395,15 +353,7 @@ impl AddAssign<U512> for U512 {
|
|||||||
|
|
||||||
impl<'a> AddAssign<&'a U512> for U512 {
|
impl<'a> AddAssign<&'a U512> for U512 {
|
||||||
fn add_assign(&mut self, rhs: &U512) {
|
fn add_assign(&mut self, rhs: &U512) {
|
||||||
let mut carry = 0;
|
generic_add(&mut self.contents, &rhs.contents);
|
||||||
|
|
||||||
for i in 0..8 {
|
|
||||||
let a = self.contents[i] as u128;
|
|
||||||
let b = rhs.contents[i] as u128;
|
|
||||||
let total = a + b + carry;
|
|
||||||
self.contents[i] = total as u64;
|
|
||||||
carry = total >> 64;
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -457,9 +407,7 @@ impl SubAssign<U512> for U512 {
|
|||||||
|
|
||||||
impl<'a> SubAssign<&'a U512> for U512 {
|
impl<'a> SubAssign<&'a U512> for U512 {
|
||||||
fn sub_assign(&mut self, rhs: &U512) {
|
fn sub_assign(&mut self, rhs: &U512) {
|
||||||
let negated_rhs = !rhs;
|
generic_sub(&mut self.contents, &rhs.contents);
|
||||||
let inverse_rhs = negated_rhs + U512::from_u64(1);
|
|
||||||
self.add_assign(inverse_rhs);
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -513,49 +461,8 @@ impl MulAssign<U512> for U512 {
|
|||||||
|
|
||||||
impl<'a> MulAssign<&'a U512> for U512 {
|
impl<'a> MulAssign<&'a U512> for U512 {
|
||||||
fn mul_assign(&mut self, rhs: &U512) {
|
fn mul_assign(&mut self, rhs: &U512) {
|
||||||
let orig = self.contents.clone();
|
let copy = self.contents.clone();
|
||||||
let mut table = [[0 as u128; 8]; 8];
|
generic_mul(&mut self.contents, ©, &rhs.contents);
|
||||||
// This uses "simple" grade school techniques to work things out. But,
|
|
||||||
// for reference, consider two 4 digit numbers:
|
|
||||||
//
|
|
||||||
// l0c3 l0c2 l0c1 l0c0 [orig]
|
|
||||||
// x l1c3 l1c2 l1c1 l1c0 [rhs.contents]
|
|
||||||
// ------------------------------------------------------------
|
|
||||||
// (l0c3*l1c0) (l0c2*l1c0) (l0c1*l1c0) (l0c0*l1c0)
|
|
||||||
// (l0c2*l1c1) (l0c1*l1c1) (l0c0*l1c1)
|
|
||||||
// (l0c1*l1c2) (l0c0*l1c2)
|
|
||||||
// (l0c0*l1c3)
|
|
||||||
// ------------------------------------------------------------
|
|
||||||
// AAAAA BBBBB CCCCC DDDDD
|
|
||||||
for line in 0..8 {
|
|
||||||
let maxcol = 8 - line;
|
|
||||||
for col in 0..maxcol {
|
|
||||||
let left = orig[col] as u128;
|
|
||||||
let right = rhs.contents[line] as u128;
|
|
||||||
table[line][col + line] = left * right;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
// ripple the carry across each line, ensuring that each entry in the
|
|
||||||
// table is 64-bits
|
|
||||||
for line in 0..8 {
|
|
||||||
let mut carry = 0;
|
|
||||||
for col in 0..8 {
|
|
||||||
table[line][col] = table[line][col] + carry;
|
|
||||||
carry = table[line][col] >> 64;
|
|
||||||
table[line][col] &= 0xFFFFFFFFFFFFFFFF;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
// now do the final addition across the lines, rippling the carry as
|
|
||||||
// normal
|
|
||||||
let mut carry = 0;
|
|
||||||
for col in 0..8 {
|
|
||||||
let mut total = carry;
|
|
||||||
for line in 0..8 {
|
|
||||||
total += table[line][col];
|
|
||||||
}
|
|
||||||
self.contents[col] = total as u64;
|
|
||||||
carry = total >> 64;
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -601,83 +508,124 @@ impl<'a,'b> Mul<&'a U512> for &'b U512 {
|
|||||||
|
|
||||||
//------------------------------------------------------------------------------
|
//------------------------------------------------------------------------------
|
||||||
|
|
||||||
// fn divmod(inx: U512, y: U512) -> (U512, U512) {
|
impl CryptoNum for U512 {
|
||||||
// let mut x = inx.clone();
|
fn divmod(&self, a: &U512, q: &mut U512, r: &mut U512) {
|
||||||
//
|
generic_div(&self.contents, &a.contents,
|
||||||
// // This algorithm is from the Handbook of Applied Cryptography, Chapter 14,
|
&mut q.contents, &mut r.contents);
|
||||||
// // algorithm 14.20.
|
}
|
||||||
//
|
}
|
||||||
// // 0. Compute 'n' and 't'
|
|
||||||
// let n = 8;
|
//------------------------------------------------------------------------------
|
||||||
// let mut t = 8;
|
|
||||||
// while (t > 0) && (y.contents[t] == 0) { t -= 1 }
|
impl DivAssign<U512> for U512 {
|
||||||
// assert!(y[t] != 0); // this is where division by zero will fire
|
fn div_assign(&mut self, rhs: U512) {
|
||||||
//
|
self.div_assign(&rhs);
|
||||||
// // 1. For j from 0 to (n - 1) do: q_j <- 0
|
}
|
||||||
// let mut q = [0; 9];
|
}
|
||||||
// // 2. While (x >= yb^(n-t)) do the following:
|
|
||||||
// // q_(n-t) <- q_(n-t) + 1
|
impl<'a> DivAssign<&'a U512> for U512 {
|
||||||
// // x <- x - yb^(n-t)
|
fn div_assign(&mut self, rhs: &U512) {
|
||||||
// let mut ybnt = iny << (64 * (n - t));
|
let copy = self.contents.clone();
|
||||||
// while x >= ybnt {
|
let mut dead = [0; 8];
|
||||||
// q[n-t] = q[n-t] + 1;
|
generic_div(©, &rhs.contents, &mut self.contents, &mut dead);
|
||||||
// x = x - ybnt;
|
}
|
||||||
// }
|
}
|
||||||
// // 3. For i from n down to (t + 1) do the following:
|
|
||||||
// let mut i = n;
|
impl Div<U512> for U512 {
|
||||||
// while i >= (t + 1) {
|
type Output = U512;
|
||||||
// // 3.1. if x_i = y_t, then set q_(i-t-1) <- b - 1; otherwise set
|
|
||||||
// // q_(i-t-1) <- floor((x_i * b + x_(i-1)) / y_t).
|
fn div(self, rhs: U512) -> U512 {
|
||||||
// if x[i] == y[t] {
|
let mut res = self.clone();
|
||||||
// q[i-t-1] = 0xFFFFFFFFFFFFFFFF;
|
res.div_assign(rhs);
|
||||||
// } else {
|
res
|
||||||
// let top = ((x[i] as u128) << 64) + (x[i-1] as u128);
|
}
|
||||||
// let bot = y[t] as u128;
|
}
|
||||||
// let solution = top / bot;
|
|
||||||
// q[i-t-1] = solution as u64;
|
impl<'a> Div<U512> for &'a U512 {
|
||||||
// }
|
type Output = U512;
|
||||||
// // 3.2. While (q_(i-t-1)(y_t * b + y_(t-1)) > x_i(b2) + x_(i-1)b +
|
|
||||||
// // x_(i-2)) do:
|
fn div(self, rhs: U512) -> U512 {
|
||||||
// // q_(i - t - 1) <- q_(i - t 1) - 1.
|
let mut res = self.clone();
|
||||||
// loop {
|
res.div_assign(rhs);
|
||||||
// let mut left = U512::from_u64(q[i-t-1]);
|
res
|
||||||
// left *= U512{ contents: [y[t-1], y[t], 0, 0, 0, 0, 0, 0] };
|
}
|
||||||
// let right = U512{ contents: [x[i-2], x[i-1], x[i], 0, 0, 0, 0, 0] };
|
}
|
||||||
//
|
|
||||||
// if left <= right {
|
impl<'a> Div<&'a U512> for U512 {
|
||||||
// break;
|
type Output = U512;
|
||||||
// }
|
|
||||||
//
|
fn div(self, rhs: &U512) -> U512 {
|
||||||
// q[i - t - 1] -= 1;
|
let mut res = self.clone();
|
||||||
// }
|
res.div_assign(rhs);
|
||||||
// // 3.3. x <- x - q_(i - t - 1) * y * b^(i-t-1)
|
res
|
||||||
// let xprime = U512{ contents: x[1..9] };
|
}
|
||||||
// let mut bit1 = U512::zero();
|
}
|
||||||
// bit1.contents[i - t - 1] = 1;
|
|
||||||
// let subside = U512::from_u64(q[i - t -1]) * iny * bit1;
|
impl<'a,'b> Div<&'a U512> for &'b U512 {
|
||||||
// let wentnegative = xprime < subside;
|
type Output = U512;
|
||||||
// xprime -= subside;
|
|
||||||
// // 3.4. if x < 0 then set x <- x + yb^(i-t-1) and
|
fn div(self, rhs: &U512) -> U512 {
|
||||||
// // q_(i-t-1) <- q_(i-t-1) - 1
|
let mut res = self.clone();
|
||||||
// if wentnegative {
|
res.div_assign(rhs);
|
||||||
// let mut ybit1 = iny << (64 * (i - t - 1));
|
res
|
||||||
// xprime += ybit1;
|
}
|
||||||
// q[i - t - 1] -= 1;
|
}
|
||||||
// }
|
|
||||||
// }
|
//------------------------------------------------------------------------------
|
||||||
// // 4. r <- x
|
|
||||||
// let rval = U512::zero();
|
impl RemAssign<U512> for U512 {
|
||||||
// for i in 0..8 {
|
fn rem_assign(&mut self, rhs: U512) {
|
||||||
// rval.contents[i] = x[i];
|
self.rem_assign(&rhs);
|
||||||
// }
|
}
|
||||||
// // 5. return (q,r)
|
}
|
||||||
// let qval = U512::zero();
|
|
||||||
// for i in 0..8 {
|
impl<'a> RemAssign<&'a U512> for U512 {
|
||||||
// qval.contents[i] = q[i];
|
fn rem_assign(&mut self, rhs: &U512) {
|
||||||
// }
|
let copy = self.contents.clone();
|
||||||
// //
|
let mut dead = [0; 8];
|
||||||
// (qval, rval)
|
generic_div(©, &rhs.contents, &mut dead, &mut self.contents);
|
||||||
// }
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
impl Rem<U512> for U512 {
|
||||||
|
type Output = U512;
|
||||||
|
|
||||||
|
fn rem(self, rhs: U512) -> U512 {
|
||||||
|
let mut res = self.clone();
|
||||||
|
res.rem_assign(rhs);
|
||||||
|
res
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
impl<'a> Rem<U512> for &'a U512 {
|
||||||
|
type Output = U512;
|
||||||
|
|
||||||
|
fn rem(self, rhs: U512) -> U512 {
|
||||||
|
let mut res = self.clone();
|
||||||
|
res.rem_assign(rhs);
|
||||||
|
res
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
impl<'a> Rem<&'a U512> for U512 {
|
||||||
|
type Output = U512;
|
||||||
|
|
||||||
|
fn rem(self, rhs: &U512) -> U512 {
|
||||||
|
let mut res = self.clone();
|
||||||
|
res.rem_assign(rhs);
|
||||||
|
res
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
impl<'a,'b> Rem<&'a U512> for &'b U512 {
|
||||||
|
type Output = U512;
|
||||||
|
|
||||||
|
fn rem(self, rhs: &U512) -> U512 {
|
||||||
|
let mut res = self.clone();
|
||||||
|
res.rem_assign(rhs);
|
||||||
|
res
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
//------------------------------------------------------------------------------
|
//------------------------------------------------------------------------------
|
||||||
|
|
||||||
@@ -1008,4 +956,74 @@ mod test {
|
|||||||
(&a << 4) == (&a * U512::from_u64(16))
|
(&a << 4) == (&a * U512::from_u64(16))
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
#[test]
|
||||||
|
fn div_tests() {
|
||||||
|
assert_eq!(U512{ contents: [2,0,0,0,0,0,0,0] } /
|
||||||
|
U512{ contents: [2,0,0,0,0,0,0,0] },
|
||||||
|
U512{ contents: [1,0,0,0,0,0,0,0] });
|
||||||
|
assert_eq!(U512{ contents: [2,0,0,0,0,0,0,0] } /
|
||||||
|
U512{ contents: [1,0,0,0,0,0,0,0] },
|
||||||
|
U512{ contents: [2,0,0,0,0,0,0,0] });
|
||||||
|
assert_eq!(U512{ contents: [4,0,0,0,0,0,0,0] } /
|
||||||
|
U512{ contents: [3,0,0,0,0,0,0,0] },
|
||||||
|
U512{ contents: [1,0,0,0,0,0,0,0] });
|
||||||
|
assert_eq!(U512{ contents: [4,0,0,0,0,0,0,0] } /
|
||||||
|
U512{ contents: [5,0,0,0,0,0,0,0] },
|
||||||
|
U512{ contents: [0,0,0,0,0,0,0,0] });
|
||||||
|
assert_eq!(U512{ contents: [4,0,0,0,0,0,0,0] } /
|
||||||
|
U512{ contents: [4,0,0,0,0,0,0,0] },
|
||||||
|
U512{ contents: [1,0,0,0,0,0,0,0] });
|
||||||
|
assert_eq!(U512{ contents: [0,0,0,0,0,0,0,4] } /
|
||||||
|
U512{ contents: [0,0,0,0,0,0,0,4] },
|
||||||
|
U512{ contents: [1,0,0,0,0,0,0,0] });
|
||||||
|
assert_eq!(U512{ contents: [0,0,0,0,0,0,0,4] } /
|
||||||
|
U512{ contents: [1,0,0,0,0,0,0,0] },
|
||||||
|
U512{ contents: [0,0,0,0,0,0,0,4] });
|
||||||
|
assert_eq!(U512{ contents: [0,0,0,0,0,0,0,0xFFFFFFFFFFFFFFFF] } /
|
||||||
|
U512{ contents: [1,0,0,0,0,0,0,0] },
|
||||||
|
U512{ contents: [0,0,0,0,0,0,0,0xFFFFFFFFFFFFFFFF] });
|
||||||
|
}
|
||||||
|
|
||||||
|
#[test]
|
||||||
|
fn mod_tests() {
|
||||||
|
assert_eq!(U512{ contents: [4,0,0,0,0,0,0,0] } %
|
||||||
|
U512{ contents: [5,0,0,0,0,0,0,0] },
|
||||||
|
U512{ contents: [4,0,0,0,0,0,0,0] });
|
||||||
|
assert_eq!(U512{ contents: [5,0,0,0,0,0,0,0] } %
|
||||||
|
U512{ contents: [4,0,0,0,0,0,0,0] },
|
||||||
|
U512{ contents: [1,0,0,0,0,0,0,0] });
|
||||||
|
assert_eq!(U512{ contents: [5,5,5,5,5,5,5,5] } %
|
||||||
|
U512{ contents: [4,4,4,4,4,4,4,4] },
|
||||||
|
U512{ contents: [1,1,1,1,1,1,1,1] });
|
||||||
|
}
|
||||||
|
|
||||||
|
#[test]
|
||||||
|
fn divmod_tests() {
|
||||||
|
let a = U512::from_u64(4);
|
||||||
|
let b = U512::from_u64(3);
|
||||||
|
let mut q = U512::zero();
|
||||||
|
let mut r = U512::zero();
|
||||||
|
a.divmod(&b, &mut q, &mut r);
|
||||||
|
assert_eq!(q, U512{ contents: [1,0,0,0,0,0,0,0] });
|
||||||
|
assert_eq!(r, U512{ contents: [1,0,0,0,0,0,0,0] });
|
||||||
|
}
|
||||||
|
|
||||||
|
quickcheck! {
|
||||||
|
fn div_identity(a: U512) -> bool {
|
||||||
|
&a / U512::from_u64(1) == a
|
||||||
|
}
|
||||||
|
fn div_self_is_one(a: U512) -> bool {
|
||||||
|
if a == U512::zero() {
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
&a / &a == U512::from_u64(1)
|
||||||
|
}
|
||||||
|
fn euclid_is_alive(a: U512, b: U512) -> bool {
|
||||||
|
let mut q = U512::zero();
|
||||||
|
let mut r = U512::zero();
|
||||||
|
a.divmod(&b, &mut q, &mut r);
|
||||||
|
a == ((b * q) + r)
|
||||||
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
5
src/cryptonum/traits.rs
Normal file
5
src/cryptonum/traits.rs
Normal file
@@ -0,0 +1,5 @@
|
|||||||
|
|
||||||
|
pub trait CryptoNum {
|
||||||
|
fn divmod(&self, a: &Self, q: &mut Self, r: &mut Self);
|
||||||
|
}
|
||||||
|
|
||||||
Reference in New Issue
Block a user