timing.c 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525
  1. /*
  2. * Portable interface to the CPU cycle counter
  3. *
  4. * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
  5. * SPDX-License-Identifier: Apache-2.0
  6. *
  7. * Licensed under the Apache License, Version 2.0 (the "License"); you may
  8. * not use this file except in compliance with the License.
  9. * You may obtain a copy of the License at
  10. *
  11. * http://www.apache.org/licenses/LICENSE-2.0
  12. *
  13. * Unless required by applicable law or agreed to in writing, software
  14. * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
  15. * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16. * See the License for the specific language governing permissions and
  17. * limitations under the License.
  18. *
  19. * This file is part of mbed TLS (https://tls.mbed.org)
  20. */
  21. #if !defined(MBEDTLS_CONFIG_FILE)
  22. #include "mbedtls/config.h"
  23. #else
  24. #include MBEDTLS_CONFIG_FILE
  25. #endif
  26. #if defined(MBEDTLS_SELF_TEST) && defined(MBEDTLS_PLATFORM_C)
  27. #include "mbedtls/platform.h"
  28. #else
  29. #include <stdio.h>
  30. #define mbedtls_printf printf
  31. #endif
  32. #if defined(MBEDTLS_TIMING_C)
  33. #include "mbedtls/timing.h"
  34. #if !defined(MBEDTLS_TIMING_ALT)
  35. #if !defined(unix) && !defined(__unix__) && !defined(__unix) && \
  36. !defined(__APPLE__) && !defined(_WIN32)
  37. #error "This module only works on Unix and Windows, see MBEDTLS_TIMING_C in config.h"
  38. #endif
  39. #ifndef asm
  40. #define asm __asm
  41. #endif
  42. #if defined(_WIN32) && !defined(EFIX64) && !defined(EFI32)
  43. #include <windows.h>
  44. #include <winbase.h>
  45. struct _hr_time
  46. {
  47. LARGE_INTEGER start;
  48. };
  49. #else
  50. #include <unistd.h>
  51. #include <sys/types.h>
  52. #include <sys/time.h>
  53. #include <signal.h>
  54. #include <time.h>
  55. struct _hr_time
  56. {
  57. struct timeval start;
  58. };
  59. #endif /* _WIN32 && !EFIX64 && !EFI32 */
  60. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  61. ( defined(_MSC_VER) && defined(_M_IX86) ) || defined(__WATCOMC__)
  62. #define HAVE_HARDCLOCK
  63. unsigned long mbedtls_timing_hardclock( void )
  64. {
  65. unsigned long tsc;
  66. __asm rdtsc
  67. __asm mov [tsc], eax
  68. return( tsc );
  69. }
  70. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  71. ( _MSC_VER && _M_IX86 ) || __WATCOMC__ */
  72. /* some versions of mingw-64 have 32-bit longs even on x84_64 */
  73. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  74. defined(__GNUC__) && ( defined(__i386__) || ( \
  75. ( defined(__amd64__) || defined( __x86_64__) ) && __SIZEOF_LONG__ == 4 ) )
  76. #define HAVE_HARDCLOCK
  77. unsigned long mbedtls_timing_hardclock( void )
  78. {
  79. unsigned long lo, hi;
  80. asm volatile( "rdtsc" : "=a" (lo), "=d" (hi) );
  81. return( lo );
  82. }
  83. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  84. __GNUC__ && __i386__ */
  85. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  86. defined(__GNUC__) && ( defined(__amd64__) || defined(__x86_64__) )
  87. #define HAVE_HARDCLOCK
  88. unsigned long mbedtls_timing_hardclock( void )
  89. {
  90. unsigned long lo, hi;
  91. asm volatile( "rdtsc" : "=a" (lo), "=d" (hi) );
  92. return( lo | ( hi << 32 ) );
  93. }
  94. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  95. __GNUC__ && ( __amd64__ || __x86_64__ ) */
  96. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  97. defined(__GNUC__) && ( defined(__powerpc__) || defined(__ppc__) )
  98. #define HAVE_HARDCLOCK
  99. unsigned long mbedtls_timing_hardclock( void )
  100. {
  101. unsigned long tbl, tbu0, tbu1;
  102. do
  103. {
  104. asm volatile( "mftbu %0" : "=r" (tbu0) );
  105. asm volatile( "mftb %0" : "=r" (tbl ) );
  106. asm volatile( "mftbu %0" : "=r" (tbu1) );
  107. }
  108. while( tbu0 != tbu1 );
  109. return( tbl );
  110. }
  111. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  112. __GNUC__ && ( __powerpc__ || __ppc__ ) */
  113. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  114. defined(__GNUC__) && defined(__sparc64__)
  115. #if defined(__OpenBSD__)
  116. #warning OpenBSD does not allow access to tick register using software version instead
  117. #else
  118. #define HAVE_HARDCLOCK
  119. unsigned long mbedtls_timing_hardclock( void )
  120. {
  121. unsigned long tick;
  122. asm volatile( "rdpr %%tick, %0;" : "=&r" (tick) );
  123. return( tick );
  124. }
  125. #endif /* __OpenBSD__ */
  126. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  127. __GNUC__ && __sparc64__ */
  128. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  129. defined(__GNUC__) && defined(__sparc__) && !defined(__sparc64__)
  130. #define HAVE_HARDCLOCK
  131. unsigned long mbedtls_timing_hardclock( void )
  132. {
  133. unsigned long tick;
  134. asm volatile( ".byte 0x83, 0x41, 0x00, 0x00" );
  135. asm volatile( "mov %%g1, %0" : "=r" (tick) );
  136. return( tick );
  137. }
  138. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  139. __GNUC__ && __sparc__ && !__sparc64__ */
  140. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  141. defined(__GNUC__) && defined(__alpha__)
  142. #define HAVE_HARDCLOCK
  143. unsigned long mbedtls_timing_hardclock( void )
  144. {
  145. unsigned long cc;
  146. asm volatile( "rpcc %0" : "=r" (cc) );
  147. return( cc & 0xFFFFFFFF );
  148. }
  149. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  150. __GNUC__ && __alpha__ */
  151. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  152. defined(__GNUC__) && defined(__ia64__)
  153. #define HAVE_HARDCLOCK
  154. unsigned long mbedtls_timing_hardclock( void )
  155. {
  156. unsigned long itc;
  157. asm volatile( "mov %0 = ar.itc" : "=r" (itc) );
  158. return( itc );
  159. }
  160. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  161. __GNUC__ && __ia64__ */
  162. #if !defined(HAVE_HARDCLOCK) && defined(_MSC_VER) && \
  163. !defined(EFIX64) && !defined(EFI32)
  164. #define HAVE_HARDCLOCK
  165. unsigned long mbedtls_timing_hardclock( void )
  166. {
  167. LARGE_INTEGER offset;
  168. QueryPerformanceCounter( &offset );
  169. return( (unsigned long)( offset.QuadPart ) );
  170. }
  171. #endif /* !HAVE_HARDCLOCK && _MSC_VER && !EFIX64 && !EFI32 */
  172. #if !defined(HAVE_HARDCLOCK)
  173. #define HAVE_HARDCLOCK
  174. static int hardclock_init = 0;
  175. static struct timeval tv_init;
  176. unsigned long mbedtls_timing_hardclock( void )
  177. {
  178. struct timeval tv_cur;
  179. if( hardclock_init == 0 )
  180. {
  181. gettimeofday( &tv_init, NULL );
  182. hardclock_init = 1;
  183. }
  184. gettimeofday( &tv_cur, NULL );
  185. return( ( tv_cur.tv_sec - tv_init.tv_sec ) * 1000000
  186. + ( tv_cur.tv_usec - tv_init.tv_usec ) );
  187. }
  188. #endif /* !HAVE_HARDCLOCK */
  189. volatile int mbedtls_timing_alarmed = 0;
  190. #if defined(_WIN32) && !defined(EFIX64) && !defined(EFI32)
  191. unsigned long mbedtls_timing_get_timer( struct mbedtls_timing_hr_time *val, int reset )
  192. {
  193. unsigned long delta;
  194. LARGE_INTEGER offset, hfreq;
  195. struct _hr_time *t = (struct _hr_time *) val;
  196. QueryPerformanceCounter( &offset );
  197. QueryPerformanceFrequency( &hfreq );
  198. delta = (unsigned long)( ( 1000 *
  199. ( offset.QuadPart - t->start.QuadPart ) ) /
  200. hfreq.QuadPart );
  201. if( reset )
  202. QueryPerformanceCounter( &t->start );
  203. return( delta );
  204. }
  205. /* It's OK to use a global because alarm() is supposed to be global anyway */
  206. static DWORD alarmMs;
  207. static DWORD WINAPI TimerProc( LPVOID TimerContext )
  208. {
  209. ((void) TimerContext);
  210. Sleep( alarmMs );
  211. mbedtls_timing_alarmed = 1;
  212. return( TRUE );
  213. }
  214. void mbedtls_set_alarm( int seconds )
  215. {
  216. DWORD ThreadId;
  217. mbedtls_timing_alarmed = 0;
  218. alarmMs = seconds * 1000;
  219. CloseHandle( CreateThread( NULL, 0, TimerProc, NULL, 0, &ThreadId ) );
  220. }
  221. #else /* _WIN32 && !EFIX64 && !EFI32 */
  222. unsigned long mbedtls_timing_get_timer( struct mbedtls_timing_hr_time *val, int reset )
  223. {
  224. unsigned long delta;
  225. struct timeval offset;
  226. struct _hr_time *t = (struct _hr_time *) val;
  227. gettimeofday( &offset, NULL );
  228. if( reset )
  229. {
  230. t->start.tv_sec = offset.tv_sec;
  231. t->start.tv_usec = offset.tv_usec;
  232. return( 0 );
  233. }
  234. delta = ( offset.tv_sec - t->start.tv_sec ) * 1000
  235. + ( offset.tv_usec - t->start.tv_usec ) / 1000;
  236. return( delta );
  237. }
  238. static void sighandler( int signum )
  239. {
  240. mbedtls_timing_alarmed = 1;
  241. signal( signum, sighandler );
  242. }
  243. void mbedtls_set_alarm( int seconds )
  244. {
  245. mbedtls_timing_alarmed = 0;
  246. signal( SIGALRM, sighandler );
  247. alarm( seconds );
  248. }
  249. #endif /* _WIN32 && !EFIX64 && !EFI32 */
  250. /*
  251. * Set delays to watch
  252. */
  253. void mbedtls_timing_set_delay( void *data, uint32_t int_ms, uint32_t fin_ms )
  254. {
  255. mbedtls_timing_delay_context *ctx = (mbedtls_timing_delay_context *) data;
  256. ctx->int_ms = int_ms;
  257. ctx->fin_ms = fin_ms;
  258. if( fin_ms != 0 )
  259. (void) mbedtls_timing_get_timer( &ctx->timer, 1 );
  260. }
  261. /*
  262. * Get number of delays expired
  263. */
  264. int mbedtls_timing_get_delay( void *data )
  265. {
  266. mbedtls_timing_delay_context *ctx = (mbedtls_timing_delay_context *) data;
  267. unsigned long elapsed_ms;
  268. if( ctx->fin_ms == 0 )
  269. return( -1 );
  270. elapsed_ms = mbedtls_timing_get_timer( &ctx->timer, 0 );
  271. if( elapsed_ms >= ctx->fin_ms )
  272. return( 2 );
  273. if( elapsed_ms >= ctx->int_ms )
  274. return( 1 );
  275. return( 0 );
  276. }
  277. #endif /* !MBEDTLS_TIMING_ALT */
  278. #if defined(MBEDTLS_SELF_TEST)
  279. /*
  280. * Busy-waits for the given number of milliseconds.
  281. * Used for testing mbedtls_timing_hardclock.
  282. */
  283. static void busy_msleep( unsigned long msec )
  284. {
  285. struct mbedtls_timing_hr_time hires;
  286. unsigned long i = 0; /* for busy-waiting */
  287. volatile unsigned long j; /* to prevent optimisation */
  288. (void) mbedtls_timing_get_timer( &hires, 1 );
  289. while( mbedtls_timing_get_timer( &hires, 0 ) < msec )
  290. i++;
  291. j = i;
  292. (void) j;
  293. }
  294. #define FAIL do \
  295. { \
  296. if( verbose != 0 ) \
  297. mbedtls_printf( "failed\n" ); \
  298. \
  299. return( 1 ); \
  300. } while( 0 )
  301. /*
  302. * Checkup routine
  303. *
  304. * Warning: this is work in progress, some tests may not be reliable enough
  305. * yet! False positives may happen.
  306. */
  307. int mbedtls_timing_self_test( int verbose )
  308. {
  309. unsigned long cycles, ratio;
  310. unsigned long millisecs, secs;
  311. int hardfail;
  312. struct mbedtls_timing_hr_time hires;
  313. uint32_t a, b;
  314. mbedtls_timing_delay_context ctx;
  315. if( verbose != 0 )
  316. mbedtls_printf( " TIMING tests note: will take some time!\n" );
  317. if( verbose != 0 )
  318. mbedtls_printf( " TIMING test #1 (set_alarm / get_timer): " );
  319. for( secs = 1; secs <= 3; secs++ )
  320. {
  321. (void) mbedtls_timing_get_timer( &hires, 1 );
  322. mbedtls_set_alarm( (int) secs );
  323. while( !mbedtls_timing_alarmed )
  324. ;
  325. millisecs = mbedtls_timing_get_timer( &hires, 0 );
  326. /* For some reason on Windows it looks like alarm has an extra delay
  327. * (maybe related to creating a new thread). Allow some room here. */
  328. if( millisecs < 800 * secs || millisecs > 1200 * secs + 300 )
  329. {
  330. if( verbose != 0 )
  331. mbedtls_printf( "failed\n" );
  332. return( 1 );
  333. }
  334. }
  335. if( verbose != 0 )
  336. mbedtls_printf( "passed\n" );
  337. if( verbose != 0 )
  338. mbedtls_printf( " TIMING test #2 (set/get_delay ): " );
  339. for( a = 200; a <= 400; a += 200 )
  340. {
  341. for( b = 200; b <= 400; b += 200 )
  342. {
  343. mbedtls_timing_set_delay( &ctx, a, a + b );
  344. busy_msleep( a - a / 8 );
  345. if( mbedtls_timing_get_delay( &ctx ) != 0 )
  346. FAIL;
  347. busy_msleep( a / 4 );
  348. if( mbedtls_timing_get_delay( &ctx ) != 1 )
  349. FAIL;
  350. busy_msleep( b - a / 8 - b / 8 );
  351. if( mbedtls_timing_get_delay( &ctx ) != 1 )
  352. FAIL;
  353. busy_msleep( b / 4 );
  354. if( mbedtls_timing_get_delay( &ctx ) != 2 )
  355. FAIL;
  356. }
  357. }
  358. mbedtls_timing_set_delay( &ctx, 0, 0 );
  359. busy_msleep( 200 );
  360. if( mbedtls_timing_get_delay( &ctx ) != -1 )
  361. FAIL;
  362. if( verbose != 0 )
  363. mbedtls_printf( "passed\n" );
  364. if( verbose != 0 )
  365. mbedtls_printf( " TIMING test #3 (hardclock / get_timer): " );
  366. /*
  367. * Allow one failure for possible counter wrapping.
  368. * On a 4Ghz 32-bit machine the cycle counter wraps about once per second;
  369. * since the whole test is about 10ms, it shouldn't happen twice in a row.
  370. */
  371. hardfail = 0;
  372. hard_test:
  373. if( hardfail > 1 )
  374. {
  375. if( verbose != 0 )
  376. mbedtls_printf( "failed (ignored)\n" );
  377. goto hard_test_done;
  378. }
  379. /* Get a reference ratio cycles/ms */
  380. millisecs = 1;
  381. cycles = mbedtls_timing_hardclock();
  382. busy_msleep( millisecs );
  383. cycles = mbedtls_timing_hardclock() - cycles;
  384. ratio = cycles / millisecs;
  385. /* Check that the ratio is mostly constant */
  386. for( millisecs = 2; millisecs <= 4; millisecs++ )
  387. {
  388. cycles = mbedtls_timing_hardclock();
  389. busy_msleep( millisecs );
  390. cycles = mbedtls_timing_hardclock() - cycles;
  391. /* Allow variation up to 20% */
  392. if( cycles / millisecs < ratio - ratio / 5 ||
  393. cycles / millisecs > ratio + ratio / 5 )
  394. {
  395. hardfail++;
  396. goto hard_test;
  397. }
  398. }
  399. if( verbose != 0 )
  400. mbedtls_printf( "passed\n" );
  401. hard_test_done:
  402. if( verbose != 0 )
  403. mbedtls_printf( "\n" );
  404. return( 0 );
  405. }
  406. #endif /* MBEDTLS_SELF_TEST */
  407. #endif /* MBEDTLS_TIMING_C */