timing.c 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565
  1. /*
  2. * Copyright (C) 2015-2018 Alibaba Group Holding Limited
  3. */
  4. #if !defined(MBEDTLS_CONFIG_FILE)
  5. #include "mbedtls/config.h"
  6. #else
  7. #include MBEDTLS_CONFIG_FILE
  8. #endif
  9. #if defined(MBEDTLS_SELF_TEST) && defined(MBEDTLS_PLATFORM_C)
  10. #include "mbedtls/platform.h"
  11. #else
  12. #include <stdio.h>
  13. #include "mbedtls/debug.h"
  14. #define mbedtls_printf tls_info
  15. #endif
  16. #if defined(MBEDTLS_TIMING_C)
  17. #include "mbedtls/timing.h"
  18. #if !defined(MBEDTLS_TIMING_ALT)
  19. #if !defined(unix) && !defined(__unix__) && !defined(__unix) && \
  20. !defined(__APPLE__) && !defined(_WIN32)
  21. #error "This module only works on Unix and Windows, see MBEDTLS_TIMING_C in config.h"
  22. #endif
  23. #ifndef asm
  24. #define asm __asm
  25. #endif
  26. #if defined(_WIN32) && !defined(EFIX64) && !defined(EFI32)
  27. #include <windows.h>
  28. #include <winbase.h>
  29. struct _hr_time
  30. {
  31. LARGE_INTEGER start;
  32. };
  33. #else
  34. #include <unistd.h>
  35. #include <sys/types.h>
  36. #include <sys/time.h>
  37. #include <signal.h>
  38. #include <time.h>
  39. struct _hr_time
  40. {
  41. struct timeval start;
  42. };
  43. #endif /* _WIN32 && !EFIX64 && !EFI32 */
  44. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  45. ( defined(_MSC_VER) && defined(_M_IX86) ) || defined(__WATCOMC__)
  46. #define HAVE_HARDCLOCK
  47. unsigned long mbedtls_timing_hardclock( void )
  48. {
  49. unsigned long tsc;
  50. __asm rdtsc
  51. __asm mov [tsc], eax
  52. return( tsc );
  53. }
  54. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  55. ( _MSC_VER && _M_IX86 ) || __WATCOMC__ */
  56. /* some versions of mingw-64 have 32-bit longs even on x84_64 */
  57. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  58. defined(__GNUC__) && ( defined(__i386__) || ( \
  59. ( defined(__amd64__) || defined( __x86_64__) ) && __SIZEOF_LONG__ == 4 ) )
  60. #define HAVE_HARDCLOCK
  61. unsigned long mbedtls_timing_hardclock( void )
  62. {
  63. unsigned long lo, hi;
  64. asm volatile( "rdtsc" : "=a" (lo), "=d" (hi) );
  65. return( lo );
  66. }
  67. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  68. __GNUC__ && __i386__ */
  69. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  70. defined(__GNUC__) && ( defined(__amd64__) || defined(__x86_64__) )
  71. #define HAVE_HARDCLOCK
  72. unsigned long mbedtls_timing_hardclock( void )
  73. {
  74. unsigned long lo, hi;
  75. asm volatile( "rdtsc" : "=a" (lo), "=d" (hi) );
  76. return( lo | ( hi << 32 ) );
  77. }
  78. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  79. __GNUC__ && ( __amd64__ || __x86_64__ ) */
  80. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  81. defined(__GNUC__) && ( defined(__powerpc__) || defined(__ppc__) )
  82. #define HAVE_HARDCLOCK
  83. unsigned long mbedtls_timing_hardclock( void )
  84. {
  85. unsigned long tbl, tbu0, tbu1;
  86. do
  87. {
  88. asm volatile( "mftbu %0" : "=r" (tbu0) );
  89. asm volatile( "mftb %0" : "=r" (tbl ) );
  90. asm volatile( "mftbu %0" : "=r" (tbu1) );
  91. }
  92. while( tbu0 != tbu1 );
  93. return( tbl );
  94. }
  95. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  96. __GNUC__ && ( __powerpc__ || __ppc__ ) */
  97. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  98. defined(__GNUC__) && defined(__sparc64__)
  99. #if defined(__OpenBSD__)
  100. #warning OpenBSD does not allow access to tick register using software version instead
  101. #else
  102. #define HAVE_HARDCLOCK
  103. unsigned long mbedtls_timing_hardclock( void )
  104. {
  105. unsigned long tick;
  106. asm volatile( "rdpr %%tick, %0;" : "=&r" (tick) );
  107. return( tick );
  108. }
  109. #endif /* __OpenBSD__ */
  110. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  111. __GNUC__ && __sparc64__ */
  112. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  113. defined(__GNUC__) && defined(__sparc__) && !defined(__sparc64__)
  114. #define HAVE_HARDCLOCK
  115. unsigned long mbedtls_timing_hardclock( void )
  116. {
  117. unsigned long tick;
  118. asm volatile( ".byte 0x83, 0x41, 0x00, 0x00" );
  119. asm volatile( "mov %%g1, %0" : "=r" (tick) );
  120. return( tick );
  121. }
  122. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  123. __GNUC__ && __sparc__ && !__sparc64__ */
  124. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  125. defined(__GNUC__) && defined(__alpha__)
  126. #define HAVE_HARDCLOCK
  127. unsigned long mbedtls_timing_hardclock( void )
  128. {
  129. unsigned long cc;
  130. asm volatile( "rpcc %0" : "=r" (cc) );
  131. return( cc & 0xFFFFFFFF );
  132. }
  133. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  134. __GNUC__ && __alpha__ */
  135. #if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
  136. defined(__GNUC__) && defined(__ia64__)
  137. #define HAVE_HARDCLOCK
  138. unsigned long mbedtls_timing_hardclock( void )
  139. {
  140. unsigned long itc;
  141. asm volatile( "mov %0 = ar.itc" : "=r" (itc) );
  142. return( itc );
  143. }
  144. #endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
  145. __GNUC__ && __ia64__ */
  146. #if !defined(HAVE_HARDCLOCK) && defined(_MSC_VER) && \
  147. !defined(EFIX64) && !defined(EFI32)
  148. #define HAVE_HARDCLOCK
  149. unsigned long mbedtls_timing_hardclock( void )
  150. {
  151. LARGE_INTEGER offset;
  152. QueryPerformanceCounter( &offset );
  153. return( (unsigned long)( offset.QuadPart ) );
  154. }
  155. #endif /* !HAVE_HARDCLOCK && _MSC_VER && !EFIX64 && !EFI32 */
  156. #if !defined(HAVE_HARDCLOCK)
  157. #define HAVE_HARDCLOCK
  158. static int hardclock_init = 0;
  159. static struct timeval tv_init;
  160. #if defined(_WIN32)
  161. #include <time.h>
  162. #include <windows.h>
  163. #if defined(_MSC_VER) || defined(_MSC_EXTENSIONS)
  164. #define DELTA_EPOCH_IN_MICROSECS 11644473600000000Ui64
  165. #else
  166. #define DELTA_EPOCH_IN_MICROSECS 11644473600000000ULL
  167. #endif
  168. #ifndef _TIMEZONE_DEFINED
  169. struct timezone
  170. {
  171. int tz_minuteswest; /* minutes W of Greenwich */
  172. int tz_dsttime; /* type of dst correction */
  173. };
  174. #endif
  175. int mbedtls_gettimeofday(struct timeval *tv, struct timezone *tz)
  176. {
  177. unsigned __int64 tmpres = 0;
  178. FILETIME ft;
  179. static int tzflag;
  180. if (NULL != tv) {
  181. GetSystemTimeAsFileTime(&ft);
  182. tmpres |= ft.dwHighDateTime;
  183. tmpres <<= 32;
  184. tmpres |= ft.dwLowDateTime;
  185. tmpres -= DELTA_EPOCH_IN_MICROSECS;
  186. tmpres /= 10;
  187. tv->tv_sec = (long)(tmpres / 1000000UL);
  188. tv->tv_usec = (long)(tmpres % 1000000UL);
  189. }
  190. if (NULL != tz) {
  191. if (!tzflag) {
  192. _tzset();
  193. tzflag++;
  194. }
  195. tz->tz_minuteswest = _timezone / 60;
  196. tz->tz_dsttime = _daylight;
  197. }
  198. return 0;
  199. }
  200. #else
  201. #define mbedtls_gettimeofday gettimeofday
  202. #endif /* defined(_WIN32) */
  203. unsigned long mbedtls_timing_hardclock( void )
  204. {
  205. struct timeval tv_cur;
  206. if( hardclock_init == 0 )
  207. {
  208. mbedtls_gettimeofday( &tv_init, NULL );
  209. hardclock_init = 1;
  210. }
  211. mbedtls_gettimeofday( &tv_cur, NULL );
  212. return( ( tv_cur.tv_sec - tv_init.tv_sec ) * 1000000
  213. + ( tv_cur.tv_usec - tv_init.tv_usec ) );
  214. }
  215. #endif /* !HAVE_HARDCLOCK */
  216. volatile int mbedtls_timing_alarmed = 0;
  217. #if defined(_WIN32) && !defined(EFIX64) && !defined(EFI32)
  218. unsigned long mbedtls_timing_get_timer( struct mbedtls_timing_hr_time *val, int reset )
  219. {
  220. unsigned long delta;
  221. LARGE_INTEGER offset, hfreq;
  222. struct _hr_time *t = (struct _hr_time *) val;
  223. QueryPerformanceCounter( &offset );
  224. QueryPerformanceFrequency( &hfreq );
  225. delta = (unsigned long)( ( 1000 *
  226. ( offset.QuadPart - t->start.QuadPart ) ) /
  227. hfreq.QuadPart );
  228. if( reset )
  229. QueryPerformanceCounter( &t->start );
  230. return( delta );
  231. }
  232. /* It's OK to use a global because alarm() is supposed to be global anyway */
  233. static DWORD alarmMs;
  234. static DWORD WINAPI TimerProc( LPVOID TimerContext )
  235. {
  236. ((void) TimerContext);
  237. Sleep( alarmMs );
  238. mbedtls_timing_alarmed = 1;
  239. return( TRUE );
  240. }
  241. void mbedtls_set_alarm( int seconds )
  242. {
  243. DWORD ThreadId;
  244. mbedtls_timing_alarmed = 0;
  245. alarmMs = seconds * 1000;
  246. CloseHandle( CreateThread( NULL, 0, TimerProc, NULL, 0, &ThreadId ) );
  247. }
  248. #else /* _WIN32 && !EFIX64 && !EFI32 */
  249. unsigned long mbedtls_timing_get_timer( struct mbedtls_timing_hr_time *val, int reset )
  250. {
  251. unsigned long delta;
  252. struct timeval offset;
  253. struct _hr_time *t = (struct _hr_time *) val;
  254. mbedtls_gettimeofday( &offset, NULL );
  255. if( reset )
  256. {
  257. t->start.tv_sec = offset.tv_sec;
  258. t->start.tv_usec = offset.tv_usec;
  259. return( 0 );
  260. }
  261. delta = ( offset.tv_sec - t->start.tv_sec ) * 1000
  262. + ( offset.tv_usec - t->start.tv_usec ) / 1000;
  263. return( delta );
  264. }
  265. static void sighandler( int signum )
  266. {
  267. mbedtls_timing_alarmed = 1;
  268. signal( signum, sighandler );
  269. }
  270. void mbedtls_set_alarm( int seconds )
  271. {
  272. mbedtls_timing_alarmed = 0;
  273. signal( SIGALRM, sighandler );
  274. alarm( seconds );
  275. }
  276. #endif /* _WIN32 && !EFIX64 && !EFI32 */
  277. /*
  278. * Set delays to watch
  279. */
  280. void mbedtls_timing_set_delay( void *data, uint32_t int_ms, uint32_t fin_ms )
  281. {
  282. mbedtls_timing_delay_context *ctx = (mbedtls_timing_delay_context *) data;
  283. ctx->int_ms = int_ms;
  284. ctx->fin_ms = fin_ms;
  285. if( fin_ms != 0 )
  286. (void) mbedtls_timing_get_timer( &ctx->timer, 1 );
  287. }
  288. /*
  289. * Get number of delays expired
  290. */
  291. int mbedtls_timing_get_delay( void *data )
  292. {
  293. mbedtls_timing_delay_context *ctx = (mbedtls_timing_delay_context *) data;
  294. unsigned long elapsed_ms;
  295. if( ctx->fin_ms == 0 )
  296. return( -1 );
  297. elapsed_ms = mbedtls_timing_get_timer( &ctx->timer, 0 );
  298. if( elapsed_ms >= ctx->fin_ms )
  299. return( 2 );
  300. if( elapsed_ms >= ctx->int_ms )
  301. return( 1 );
  302. return( 0 );
  303. }
  304. #endif /* !MBEDTLS_TIMING_ALT */
  305. #if defined(MBEDTLS_SELF_TEST)
  306. /*
  307. * Busy-waits for the given number of milliseconds.
  308. * Used for testing mbedtls_timing_hardclock.
  309. */
  310. static void busy_msleep( unsigned long msec )
  311. {
  312. struct mbedtls_timing_hr_time hires;
  313. unsigned long i = 0; /* for busy-waiting */
  314. volatile unsigned long j; /* to prevent optimisation */
  315. (void) mbedtls_timing_get_timer( &hires, 1 );
  316. while( mbedtls_timing_get_timer( &hires, 0 ) < msec )
  317. i++;
  318. j = i;
  319. (void) j;
  320. }
  321. #define FAIL do \
  322. { \
  323. if( verbose != 0 ) \
  324. mbedtls_printf( "failed\n" ); \
  325. \
  326. return( 1 ); \
  327. } while( 0 )
  328. /*
  329. * Checkup routine
  330. *
  331. * Warning: this is work in progress, some tests may not be reliable enough
  332. * yet! False positives may happen.
  333. */
  334. int mbedtls_timing_self_test( int verbose )
  335. {
  336. unsigned long cycles, ratio;
  337. unsigned long millisecs, secs;
  338. int hardfail;
  339. struct mbedtls_timing_hr_time hires;
  340. uint32_t a, b;
  341. mbedtls_timing_delay_context ctx;
  342. if( verbose != 0 )
  343. mbedtls_printf( " TIMING tests note: will take some time!\n" );
  344. if( verbose != 0 )
  345. mbedtls_printf( " TIMING test #1 (set_alarm / get_timer): " );
  346. for( secs = 1; secs <= 3; secs++ )
  347. {
  348. (void) mbedtls_timing_get_timer( &hires, 1 );
  349. mbedtls_set_alarm( (int) secs );
  350. while( !mbedtls_timing_alarmed )
  351. ;
  352. millisecs = mbedtls_timing_get_timer( &hires, 0 );
  353. /* For some reason on Windows it looks like alarm has an extra delay
  354. * (maybe related to creating a new thread). Allow some room here. */
  355. if( millisecs < 800 * secs || millisecs > 1200 * secs + 300 )
  356. {
  357. if( verbose != 0 )
  358. mbedtls_printf( "failed\n" );
  359. return( 1 );
  360. }
  361. }
  362. if( verbose != 0 )
  363. mbedtls_printf( "passed\n" );
  364. if( verbose != 0 )
  365. mbedtls_printf( " TIMING test #2 (set/get_delay ): " );
  366. for( a = 200; a <= 400; a += 200 )
  367. {
  368. for( b = 200; b <= 400; b += 200 )
  369. {
  370. mbedtls_timing_set_delay( &ctx, a, a + b );
  371. busy_msleep( a - a / 8 );
  372. if( mbedtls_timing_get_delay( &ctx ) != 0 )
  373. FAIL;
  374. busy_msleep( a / 4 );
  375. if( mbedtls_timing_get_delay( &ctx ) != 1 )
  376. FAIL;
  377. busy_msleep( b - a / 8 - b / 8 );
  378. if( mbedtls_timing_get_delay( &ctx ) != 1 )
  379. FAIL;
  380. busy_msleep( b / 4 );
  381. if( mbedtls_timing_get_delay( &ctx ) != 2 )
  382. FAIL;
  383. }
  384. }
  385. mbedtls_timing_set_delay( &ctx, 0, 0 );
  386. busy_msleep( 200 );
  387. if( mbedtls_timing_get_delay( &ctx ) != -1 )
  388. FAIL;
  389. if( verbose != 0 )
  390. mbedtls_printf( "passed\n" );
  391. if( verbose != 0 )
  392. mbedtls_printf( " TIMING test #3 (hardclock / get_timer): " );
  393. /*
  394. * Allow one failure for possible counter wrapping.
  395. * On a 4Ghz 32-bit machine the cycle counter wraps about once per second;
  396. * since the whole test is about 10ms, it shouldn't happen twice in a row.
  397. */
  398. hardfail = 0;
  399. hard_test:
  400. if( hardfail > 1 )
  401. {
  402. if( verbose != 0 )
  403. mbedtls_printf( "failed (ignored)\n" );
  404. goto hard_test_done;
  405. }
  406. /* Get a reference ratio cycles/ms */
  407. millisecs = 1;
  408. cycles = mbedtls_timing_hardclock();
  409. busy_msleep( millisecs );
  410. cycles = mbedtls_timing_hardclock() - cycles;
  411. ratio = cycles / millisecs;
  412. /* Check that the ratio is mostly constant */
  413. for( millisecs = 2; millisecs <= 4; millisecs++ )
  414. {
  415. cycles = mbedtls_timing_hardclock();
  416. busy_msleep( millisecs );
  417. cycles = mbedtls_timing_hardclock() - cycles;
  418. /* Allow variation up to 20% */
  419. if( cycles / millisecs < ratio - ratio / 5 ||
  420. cycles / millisecs > ratio + ratio / 5 )
  421. {
  422. hardfail++;
  423. goto hard_test;
  424. }
  425. }
  426. if( verbose != 0 )
  427. mbedtls_printf( "passed\n" );
  428. hard_test_done:
  429. if( verbose != 0 )
  430. mbedtls_printf( "\n" );
  431. return( 0 );
  432. }
  433. #endif /* MBEDTLS_SELF_TEST */
  434. #endif /* MBEDTLS_TIMING_C */