1 /**********************************************************************
2 * Copyright (c) 2014-2015 Pieter Wuille *
3 * Distributed under the MIT software license, see the accompanying *
4 * file COPYING or http://www.opensource.org/licenses/mit-license.php.*
5 **********************************************************************/
8 #include "include/secp256k1.h"
11 #include "hash_impl.h"
13 #include "field_impl.h"
14 #include "group_impl.h"
15 #include "scalar_impl.h"
16 #include "ecmult_const_impl.h"
17 #include "ecmult_impl.h"
19 #include "secp256k1.c"
22 secp256k1_scalar scalar_x, scalar_y;
23 secp256k1_fe fe_x, fe_y;
24 secp256k1_ge ge_x, ge_y;
25 secp256k1_gej gej_x, gej_y;
26 unsigned char data[64];
30 void bench_setup(void* arg) {
31 bench_inv *data = (bench_inv*)arg;
33 static const unsigned char init_x[32] = {
34 0x02, 0x03, 0x05, 0x07, 0x0b, 0x0d, 0x11, 0x13,
35 0x17, 0x1d, 0x1f, 0x25, 0x29, 0x2b, 0x2f, 0x35,
36 0x3b, 0x3d, 0x43, 0x47, 0x49, 0x4f, 0x53, 0x59,
37 0x61, 0x65, 0x67, 0x6b, 0x6d, 0x71, 0x7f, 0x83
40 static const unsigned char init_y[32] = {
41 0x82, 0x83, 0x85, 0x87, 0x8b, 0x8d, 0x81, 0x83,
42 0x97, 0xad, 0xaf, 0xb5, 0xb9, 0xbb, 0xbf, 0xc5,
43 0xdb, 0xdd, 0xe3, 0xe7, 0xe9, 0xef, 0xf3, 0xf9,
44 0x11, 0x15, 0x17, 0x1b, 0x1d, 0xb1, 0xbf, 0xd3
47 secp256k1_scalar_set_b32(&data->scalar_x, init_x, NULL);
48 secp256k1_scalar_set_b32(&data->scalar_y, init_y, NULL);
49 secp256k1_fe_set_b32(&data->fe_x, init_x);
50 secp256k1_fe_set_b32(&data->fe_y, init_y);
51 CHECK(secp256k1_ge_set_xo_var(&data->ge_x, &data->fe_x, 0));
52 CHECK(secp256k1_ge_set_xo_var(&data->ge_y, &data->fe_y, 1));
53 secp256k1_gej_set_ge(&data->gej_x, &data->ge_x);
54 secp256k1_gej_set_ge(&data->gej_y, &data->ge_y);
55 memcpy(data->data, init_x, 32);
56 memcpy(data->data + 32, init_y, 32);
59 void bench_scalar_add(void* arg) {
61 bench_inv *data = (bench_inv*)arg;
63 for (i = 0; i < 2000000; i++) {
64 j += secp256k1_scalar_add(&data->scalar_x, &data->scalar_x, &data->scalar_y);
69 void bench_scalar_negate(void* arg) {
71 bench_inv *data = (bench_inv*)arg;
73 for (i = 0; i < 2000000; i++) {
74 secp256k1_scalar_negate(&data->scalar_x, &data->scalar_x);
78 void bench_scalar_sqr(void* arg) {
80 bench_inv *data = (bench_inv*)arg;
82 for (i = 0; i < 200000; i++) {
83 secp256k1_scalar_sqr(&data->scalar_x, &data->scalar_x);
87 void bench_scalar_mul(void* arg) {
89 bench_inv *data = (bench_inv*)arg;
91 for (i = 0; i < 200000; i++) {
92 secp256k1_scalar_mul(&data->scalar_x, &data->scalar_x, &data->scalar_y);
96 #ifdef USE_ENDOMORPHISM
97 void bench_scalar_split(void* arg) {
99 bench_inv *data = (bench_inv*)arg;
101 for (i = 0; i < 20000; i++) {
102 secp256k1_scalar_split_lambda(&data->scalar_x, &data->scalar_y, &data->scalar_x);
103 j += secp256k1_scalar_add(&data->scalar_x, &data->scalar_x, &data->scalar_y);
109 void bench_scalar_inverse(void* arg) {
111 bench_inv *data = (bench_inv*)arg;
113 for (i = 0; i < 2000; i++) {
114 secp256k1_scalar_inverse(&data->scalar_x, &data->scalar_x);
115 j += secp256k1_scalar_add(&data->scalar_x, &data->scalar_x, &data->scalar_y);
120 void bench_scalar_inverse_var(void* arg) {
122 bench_inv *data = (bench_inv*)arg;
124 for (i = 0; i < 2000; i++) {
125 secp256k1_scalar_inverse_var(&data->scalar_x, &data->scalar_x);
126 j += secp256k1_scalar_add(&data->scalar_x, &data->scalar_x, &data->scalar_y);
131 void bench_field_normalize(void* arg) {
133 bench_inv *data = (bench_inv*)arg;
135 for (i = 0; i < 2000000; i++) {
136 secp256k1_fe_normalize(&data->fe_x);
140 void bench_field_normalize_weak(void* arg) {
142 bench_inv *data = (bench_inv*)arg;
144 for (i = 0; i < 2000000; i++) {
145 secp256k1_fe_normalize_weak(&data->fe_x);
149 void bench_field_mul(void* arg) {
151 bench_inv *data = (bench_inv*)arg;
153 for (i = 0; i < 200000; i++) {
154 secp256k1_fe_mul(&data->fe_x, &data->fe_x, &data->fe_y);
158 void bench_field_sqr(void* arg) {
160 bench_inv *data = (bench_inv*)arg;
162 for (i = 0; i < 200000; i++) {
163 secp256k1_fe_sqr(&data->fe_x, &data->fe_x);
167 void bench_field_inverse(void* arg) {
169 bench_inv *data = (bench_inv*)arg;
171 for (i = 0; i < 20000; i++) {
172 secp256k1_fe_inv(&data->fe_x, &data->fe_x);
173 secp256k1_fe_add(&data->fe_x, &data->fe_y);
177 void bench_field_inverse_var(void* arg) {
179 bench_inv *data = (bench_inv*)arg;
181 for (i = 0; i < 20000; i++) {
182 secp256k1_fe_inv_var(&data->fe_x, &data->fe_x);
183 secp256k1_fe_add(&data->fe_x, &data->fe_y);
187 void bench_field_sqrt(void* arg) {
189 bench_inv *data = (bench_inv*)arg;
192 for (i = 0; i < 20000; i++) {
194 j += secp256k1_fe_sqrt(&data->fe_x, &t);
195 secp256k1_fe_add(&data->fe_x, &data->fe_y);
200 void bench_group_double_var(void* arg) {
202 bench_inv *data = (bench_inv*)arg;
204 for (i = 0; i < 200000; i++) {
205 secp256k1_gej_double_var(&data->gej_x, &data->gej_x, NULL);
209 void bench_group_add_var(void* arg) {
211 bench_inv *data = (bench_inv*)arg;
213 for (i = 0; i < 200000; i++) {
214 secp256k1_gej_add_var(&data->gej_x, &data->gej_x, &data->gej_y, NULL);
218 void bench_group_add_affine(void* arg) {
220 bench_inv *data = (bench_inv*)arg;
222 for (i = 0; i < 200000; i++) {
223 secp256k1_gej_add_ge(&data->gej_x, &data->gej_x, &data->ge_y);
227 void bench_group_add_affine_var(void* arg) {
229 bench_inv *data = (bench_inv*)arg;
231 for (i = 0; i < 200000; i++) {
232 secp256k1_gej_add_ge_var(&data->gej_x, &data->gej_x, &data->ge_y, NULL);
236 void bench_group_jacobi_var(void* arg) {
238 bench_inv *data = (bench_inv*)arg;
240 for (i = 0; i < 20000; i++) {
241 j += secp256k1_gej_has_quad_y_var(&data->gej_x);
246 void bench_ecmult_wnaf(void* arg) {
247 int i, bits = 0, overflow = 0;
248 bench_inv *data = (bench_inv*)arg;
250 for (i = 0; i < 20000; i++) {
251 bits += secp256k1_ecmult_wnaf(data->wnaf, 256, &data->scalar_x, WINDOW_A);
252 overflow += secp256k1_scalar_add(&data->scalar_x, &data->scalar_x, &data->scalar_y);
254 CHECK(overflow >= 0);
255 CHECK(bits <= 256*20000);
258 void bench_wnaf_const(void* arg) {
259 int i, bits = 0, overflow = 0;
260 bench_inv *data = (bench_inv*)arg;
262 for (i = 0; i < 20000; i++) {
263 bits += secp256k1_wnaf_const(data->wnaf, &data->scalar_x, WINDOW_A, 256);
264 overflow += secp256k1_scalar_add(&data->scalar_x, &data->scalar_x, &data->scalar_y);
266 CHECK(overflow >= 0);
267 CHECK(bits <= 256*20000);
271 void bench_sha256(void* arg) {
273 bench_inv *data = (bench_inv*)arg;
274 secp256k1_sha256 sha;
276 for (i = 0; i < 20000; i++) {
277 secp256k1_sha256_initialize(&sha);
278 secp256k1_sha256_write(&sha, data->data, 32);
279 secp256k1_sha256_finalize(&sha, data->data);
283 void bench_hmac_sha256(void* arg) {
285 bench_inv *data = (bench_inv*)arg;
286 secp256k1_hmac_sha256 hmac;
288 for (i = 0; i < 20000; i++) {
289 secp256k1_hmac_sha256_initialize(&hmac, data->data, 32);
290 secp256k1_hmac_sha256_write(&hmac, data->data, 32);
291 secp256k1_hmac_sha256_finalize(&hmac, data->data);
295 void bench_rfc6979_hmac_sha256(void* arg) {
297 bench_inv *data = (bench_inv*)arg;
298 secp256k1_rfc6979_hmac_sha256 rng;
300 for (i = 0; i < 20000; i++) {
301 secp256k1_rfc6979_hmac_sha256_initialize(&rng, data->data, 64);
302 secp256k1_rfc6979_hmac_sha256_generate(&rng, data->data, 32);
306 void bench_context_verify(void* arg) {
309 for (i = 0; i < 20; i++) {
310 secp256k1_context_destroy(secp256k1_context_create(SECP256K1_CONTEXT_VERIFY));
314 void bench_context_sign(void* arg) {
317 for (i = 0; i < 200; i++) {
318 secp256k1_context_destroy(secp256k1_context_create(SECP256K1_CONTEXT_SIGN));
323 void bench_num_jacobi(void* arg) {
325 bench_inv *data = (bench_inv*)arg;
326 secp256k1_num nx, norder;
328 secp256k1_scalar_get_num(&nx, &data->scalar_x);
329 secp256k1_scalar_order_get_num(&norder);
330 secp256k1_scalar_get_num(&norder, &data->scalar_y);
332 for (i = 0; i < 200000; i++) {
333 j += secp256k1_num_jacobi(&nx, &norder);
339 int main(int argc, char **argv) {
341 if (have_flag(argc, argv, "scalar") || have_flag(argc, argv, "add")) run_benchmark("scalar_add", bench_scalar_add, bench_setup, NULL, &data, 10, 2000000);
342 if (have_flag(argc, argv, "scalar") || have_flag(argc, argv, "negate")) run_benchmark("scalar_negate", bench_scalar_negate, bench_setup, NULL, &data, 10, 2000000);
343 if (have_flag(argc, argv, "scalar") || have_flag(argc, argv, "sqr")) run_benchmark("scalar_sqr", bench_scalar_sqr, bench_setup, NULL, &data, 10, 200000);
344 if (have_flag(argc, argv, "scalar") || have_flag(argc, argv, "mul")) run_benchmark("scalar_mul", bench_scalar_mul, bench_setup, NULL, &data, 10, 200000);
345 #ifdef USE_ENDOMORPHISM
346 if (have_flag(argc, argv, "scalar") || have_flag(argc, argv, "split")) run_benchmark("scalar_split", bench_scalar_split, bench_setup, NULL, &data, 10, 20000);
348 if (have_flag(argc, argv, "scalar") || have_flag(argc, argv, "inverse")) run_benchmark("scalar_inverse", bench_scalar_inverse, bench_setup, NULL, &data, 10, 2000);
349 if (have_flag(argc, argv, "scalar") || have_flag(argc, argv, "inverse")) run_benchmark("scalar_inverse_var", bench_scalar_inverse_var, bench_setup, NULL, &data, 10, 2000);
351 if (have_flag(argc, argv, "field") || have_flag(argc, argv, "normalize")) run_benchmark("field_normalize", bench_field_normalize, bench_setup, NULL, &data, 10, 2000000);
352 if (have_flag(argc, argv, "field") || have_flag(argc, argv, "normalize")) run_benchmark("field_normalize_weak", bench_field_normalize_weak, bench_setup, NULL, &data, 10, 2000000);
353 if (have_flag(argc, argv, "field") || have_flag(argc, argv, "sqr")) run_benchmark("field_sqr", bench_field_sqr, bench_setup, NULL, &data, 10, 200000);
354 if (have_flag(argc, argv, "field") || have_flag(argc, argv, "mul")) run_benchmark("field_mul", bench_field_mul, bench_setup, NULL, &data, 10, 200000);
355 if (have_flag(argc, argv, "field") || have_flag(argc, argv, "inverse")) run_benchmark("field_inverse", bench_field_inverse, bench_setup, NULL, &data, 10, 20000);
356 if (have_flag(argc, argv, "field") || have_flag(argc, argv, "inverse")) run_benchmark("field_inverse_var", bench_field_inverse_var, bench_setup, NULL, &data, 10, 20000);
357 if (have_flag(argc, argv, "field") || have_flag(argc, argv, "sqrt")) run_benchmark("field_sqrt", bench_field_sqrt, bench_setup, NULL, &data, 10, 20000);
359 if (have_flag(argc, argv, "group") || have_flag(argc, argv, "double")) run_benchmark("group_double_var", bench_group_double_var, bench_setup, NULL, &data, 10, 200000);
360 if (have_flag(argc, argv, "group") || have_flag(argc, argv, "add")) run_benchmark("group_add_var", bench_group_add_var, bench_setup, NULL, &data, 10, 200000);
361 if (have_flag(argc, argv, "group") || have_flag(argc, argv, "add")) run_benchmark("group_add_affine", bench_group_add_affine, bench_setup, NULL, &data, 10, 200000);
362 if (have_flag(argc, argv, "group") || have_flag(argc, argv, "add")) run_benchmark("group_add_affine_var", bench_group_add_affine_var, bench_setup, NULL, &data, 10, 200000);
363 if (have_flag(argc, argv, "group") || have_flag(argc, argv, "jacobi")) run_benchmark("group_jacobi_var", bench_group_jacobi_var, bench_setup, NULL, &data, 10, 20000);
365 if (have_flag(argc, argv, "ecmult") || have_flag(argc, argv, "wnaf")) run_benchmark("wnaf_const", bench_wnaf_const, bench_setup, NULL, &data, 10, 20000);
366 if (have_flag(argc, argv, "ecmult") || have_flag(argc, argv, "wnaf")) run_benchmark("ecmult_wnaf", bench_ecmult_wnaf, bench_setup, NULL, &data, 10, 20000);
368 if (have_flag(argc, argv, "hash") || have_flag(argc, argv, "sha256")) run_benchmark("hash_sha256", bench_sha256, bench_setup, NULL, &data, 10, 20000);
369 if (have_flag(argc, argv, "hash") || have_flag(argc, argv, "hmac")) run_benchmark("hash_hmac_sha256", bench_hmac_sha256, bench_setup, NULL, &data, 10, 20000);
370 if (have_flag(argc, argv, "hash") || have_flag(argc, argv, "rng6979")) run_benchmark("hash_rfc6979_hmac_sha256", bench_rfc6979_hmac_sha256, bench_setup, NULL, &data, 10, 20000);
372 if (have_flag(argc, argv, "context") || have_flag(argc, argv, "verify")) run_benchmark("context_verify", bench_context_verify, bench_setup, NULL, &data, 10, 20);
373 if (have_flag(argc, argv, "context") || have_flag(argc, argv, "sign")) run_benchmark("context_sign", bench_context_sign, bench_setup, NULL, &data, 10, 200);
376 if (have_flag(argc, argv, "num") || have_flag(argc, argv, "jacobi")) run_benchmark("num_jacobi", bench_num_jacobi, bench_setup, NULL, &data, 10, 200000);