binius_hash/groestl/arch/portable/
compress512.rs

1// Copyright (c) 2020-2025 The RustCrypto Project Developers
2// Copyright 2025 Irreducible Inc.
3
4// Implementation is copied from <https://github.com/RustCrypto/hashes>, with only a few
5// modifications.
6
7#![allow(clippy::needless_range_loop)]
8use super::table::TABLE;
9
10pub const COLS: usize = 8;
11const ROUNDS: u64 = 10;
12
13#[inline(always)]
14fn column(x: &[u64; COLS], c: [usize; 8]) -> u64 {
15	let mut t = 0;
16	for i in 0..8 {
17		let sl = 8 * (7 - i);
18		let idx = ((x[c[i]] >> sl) & 0xFF) as usize;
19		t ^= TABLE[i][idx];
20	}
21	t
22}
23
24#[inline(always)]
25fn rndq(mut x: [u64; COLS], r: u64) -> [u64; COLS] {
26	for i in 0..COLS {
27		x[i] ^= u64::MAX.wrapping_sub((i as u64) << 4) ^ r;
28	}
29	[
30		column(&x, [1, 3, 5, 7, 0, 2, 4, 6]),
31		column(&x, [2, 4, 6, 0, 1, 3, 5, 7]),
32		column(&x, [3, 5, 7, 1, 2, 4, 6, 0]),
33		column(&x, [4, 6, 0, 2, 3, 5, 7, 1]),
34		column(&x, [5, 7, 1, 3, 4, 6, 0, 2]),
35		column(&x, [6, 0, 2, 4, 5, 7, 1, 3]),
36		column(&x, [7, 1, 3, 5, 6, 0, 2, 4]),
37		column(&x, [0, 2, 4, 6, 7, 1, 3, 5]),
38	]
39}
40
41#[inline(always)]
42fn rndp(mut x: [u64; COLS], r: u64) -> [u64; COLS] {
43	for i in 0..COLS {
44		x[i] ^= ((i as u64) << 60) ^ r;
45	}
46	[
47		column(&x, [0, 1, 2, 3, 4, 5, 6, 7]),
48		column(&x, [1, 2, 3, 4, 5, 6, 7, 0]),
49		column(&x, [2, 3, 4, 5, 6, 7, 0, 1]),
50		column(&x, [3, 4, 5, 6, 7, 0, 1, 2]),
51		column(&x, [4, 5, 6, 7, 0, 1, 2, 3]),
52		column(&x, [5, 6, 7, 0, 1, 2, 3, 4]),
53		column(&x, [6, 7, 0, 1, 2, 3, 4, 5]),
54		column(&x, [7, 0, 1, 2, 3, 4, 5, 6]),
55	]
56}
57
58pub fn compress(h: &mut [u64; COLS], block: &[u8; 64]) {
59	let mut q = [0u64; COLS];
60	for (chunk, v) in block.chunks_exact(8).zip(q.iter_mut()) {
61		*v = u64::from_be_bytes(chunk.try_into().unwrap());
62	}
63	let mut p = [0u64; COLS];
64	for i in 0..COLS {
65		p[i] = h[i] ^ q[i];
66	}
67	for i in 0..ROUNDS {
68		q = rndq(q, i);
69	}
70	for i in 0..ROUNDS {
71		p = rndp(p, i << 56);
72	}
73	for i in 0..COLS {
74		h[i] ^= q[i] ^ p[i];
75	}
76}
77
78pub fn p(h: &mut [u64; COLS]) {
79	for i in 0..ROUNDS {
80		*h = rndp(*h, i << 56);
81	}
82}
83
84pub fn q(h: &mut [u64; COLS]) {
85	for i in 0..ROUNDS {
86		*h = rndq(*h, i);
87	}
88}
binius_hash/groestl/arch/portable/compress512.rs

binius_hash/groestl/arch/portable/
compress512.rs
