3 * Measure performance of various operations (Unix-specific)
5 * (c) 2004 Straylight/Edgeware
8 /*----- Licensing notice --------------------------------------------------*
10 * This file is part of Catacomb.
12 * Catacomb is free software; you can redistribute it and/or modify
13 * it under the terms of the GNU Library General Public License as
14 * published by the Free Software Foundation; either version 2 of the
15 * License, or (at your option) any later version.
17 * Catacomb is distributed in the hope that it will be useful,
18 * but WITHOUT ANY WARRANTY; without even the implied warranty of
19 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 * GNU Library General Public License for more details.
22 * You should have received a copy of the GNU Library General Public
23 * License along with Catacomb; if not, write to the Free
24 * Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
28 /*----- Header files ------------------------------------------------------*/
30 #define _FILE_OFFSET_BITS 64
42 #include <sys/types.h>
46 #include <mLib/alloc.h>
47 #include <mLib/dstr.h>
48 #include <mLib/mdwopt.h>
49 #include <mLib/quis.h>
50 #include <mLib/report.h>
60 #include "mpbarrett.h"
76 /*----- Options -----------------------------------------------------------*/
79 const char *name
; /* Pre-configured named thing */
80 unsigned fbits
; /* Field size bits */
81 unsigned gbits
; /* Group size bits */
82 unsigned n
; /* Number of factors */
83 unsigned i
; /* Number of intervals (or zero) */
84 double t
; /* Time for each interval (secs) */
85 unsigned f
; /* Flags */
86 #define OF_NOCHECK 1u /* Don't do group checking */
89 /*----- Job switch --------------------------------------------------------*/
91 /* --- Barrett exponentiation --- */
93 typedef struct bar_ctx
{
99 static void *bar_init(opts
*o
)
101 bar_ctx
*c
= CREATE(bar_ctx
);
108 if (dh_parse(&qd
, &gp
))
109 die(1, "bad prime group: %s", qd
.e
);
111 if (!o
->fbits
) o
->fbits
= 1024;
112 dh_gen(&gp
, o
->gbits
, o
->fbits
, 0, &rand_global
, pgen_evspin
, 0);
114 mpbarrett_create(&c
->b
, gp
.p
);
117 c
->e
= xmalloc(c
->n
* sizeof(group_expfactor
));
118 for (i
= 0; i
< c
->n
; i
++) {
119 c
->e
[i
].base
= mprand_range(MP_NEW
, gp
.p
, &rand_global
, 0);
120 c
->e
[i
].exp
= mprand_range(MP_NEW
, gp
.q
, &rand_global
, 0);
126 static void bar_run(void *cc
)
129 mp
*d
= mpbarrett_exp(&c
->b
, MP_NEW
, c
->e
[0].base
, c
->e
[0].exp
);
133 static void barsim_run(void *cc
)
136 mp
*d
= mpbarrett_mexp(&c
->b
, MP_NEW
, c
->e
, c
->n
);
140 /* --- Montgomery exponentiation --- */
142 typedef struct mont_ctx
{
148 static void *mont_init(opts
*o
)
150 mont_ctx
*c
= CREATE(mont_ctx
);
157 if (dh_parse(&qd
, &gp
))
158 die(1, "bad prime group: %s", qd
.e
);
160 if (!o
->fbits
) o
->fbits
= 1024;
161 dh_gen(&gp
, o
->gbits
, o
->fbits
, 0, &rand_global
, pgen_evspin
, 0);
163 mpmont_create(&c
->m
, gp
.p
);
166 c
->e
= xmalloc(c
->n
* sizeof(mp_expfactor
));
167 for (i
= 0; i
< c
->n
; i
++) {
168 c
->e
[i
].base
= mprand_range(MP_NEW
, gp
.p
, &rand_global
, 0);
169 c
->e
[i
].exp
= mprand_range(MP_NEW
, gp
.q
, &rand_global
, 0);
175 static void mont_run(void *cc
)
178 mp
*d
= mpmont_expr(&c
->m
, MP_NEW
, c
->e
[0].base
, c
->e
[0].exp
);
182 static void montsim_run(void *cc
)
185 mp
*d
= mpmont_mexpr(&c
->m
, MP_NEW
, c
->e
, c
->n
);
189 /* --- Group exponentiation --- */
191 typedef struct gr_ctx
{
197 static void *grp_init(opts
*o
)
199 gr_ctx
*c
= CREATE(gr_ctx
);
207 if (dh_parse(&qd
, &gp
))
208 die(1, "bad prime group: %s", qd
.e
);
210 if (!o
->fbits
) o
->fbits
= 1024;
211 dh_gen(&gp
, o
->gbits
, o
->fbits
, 0, &rand_global
, pgen_evspin
, 0);
213 c
->g
= group_prime(&gp
);
214 if (!(o
->f
& OF_NOCHECK
) && (e
= G_CHECK(c
->g
, &rand_global
)) != 0)
215 die(1, "bad group: %s", e
);
218 c
->e
= xmalloc(c
->n
* sizeof(group_expfactor
));
219 for (i
= 0; i
< c
->n
; i
++) {
220 c
->e
[i
].base
= G_CREATE(c
->g
);
221 G_FROMINT(c
->g
, c
->e
[i
].base
,
222 mprand_range(MP_NEW
, gp
.p
, &rand_global
, 0));
223 c
->e
[i
].exp
= mprand_range(MP_NEW
, gp
.q
, &rand_global
, 0);
229 static void *grec_init(opts
*o
)
231 gr_ctx
*c
= CREATE(gr_ctx
);
238 die(1, "can't generate elliptic curves");
239 if ((e
= ec_getinfo(&ei
, o
->name
)) != 0)
240 die(1, "bad curve: %s", e
);
241 c
->g
= group_ec(&ei
);
242 if (!(o
->f
& OF_NOCHECK
) && (e
= G_CHECK(c
->g
, &rand_global
)) != 0)
243 die(1, "bad group: %s", e
);
246 c
->e
= xmalloc(c
->n
* sizeof(group_expfactor
));
247 for (i
= 0; i
< c
->n
; i
++) {
248 c
->e
[i
].base
= G_CREATE(c
->g
);
249 ec_rand(ei
.c
, &p
, &rand_global
);
250 G_FROMEC(c
->g
, c
->e
[i
].base
, &p
);
251 c
->e
[i
].exp
= mprand_range(MP_NEW
, ei
.r
, &rand_global
, 0);
257 static void gr_run(void *cc
)
260 ge
*x
= G_CREATE(c
->g
);
261 G_EXP(c
->g
, x
, c
->e
[0].base
, c
->e
[0].exp
);
265 static void grsim_run(void *cc
)
268 ge
*x
= G_CREATE(c
->g
);
269 G_MEXP(c
->g
, x
, c
->e
, c
->n
);
275 typedef struct x25519_jobctx
{
276 octet k
[X25519_KEYSZ
];
277 octet p
[X25519_PUBSZ
];
280 static void *x25519_jobinit(opts
*o
)
282 x25519_jobctx
*c
= CREATE(x25519_jobctx
);
283 rand_get(RAND_GLOBAL
, c
->k
, sizeof(c
->k
));
284 rand_get(RAND_GLOBAL
, c
->p
, sizeof(c
->p
));
288 static void x25519_jobrun(void *cc
)
289 { x25519_jobctx
*c
= cc
; octet z
[X25519_OUTSZ
]; x25519(z
, c
->k
, c
->p
); }
293 typedef struct rsapriv_ctx
{
299 static void *rsapriv_init(opts
*o
)
301 rsapriv_ctx
*c
= CREATE(rsapriv_ctx
);
303 if (!o
->fbits
) o
->fbits
= 1024;
304 rsa_gen(&c
->rp
, o
->fbits
, &rand_global
, 0, pgen_evspin
, 0);
305 rsa_privcreate(&c
->rpc
, &c
->rp
, 0);
306 c
->m
= mprand_range(MP_NEW
, c
->rp
.n
, &rand_global
, 0);
310 static void *rsaprivblind_init(opts
*o
)
312 rsapriv_ctx
*c
= CREATE(rsapriv_ctx
);
314 if (!o
->fbits
) o
->fbits
= 1024;
315 rsa_gen(&c
->rp
, o
->fbits
, &rand_global
, 0, pgen_evspin
, 0);
316 rsa_privcreate(&c
->rpc
, &c
->rp
, fibrand_create(0));
317 c
->m
= mprand_range(MP_NEW
, c
->rp
.n
, &rand_global
, 0);
321 static void rsapriv_run(void *cc
)
324 mp
*d
= rsa_privop(&c
->rpc
, MP_NEW
, c
->m
);
328 typedef struct rsapub_ctx
{
334 static void *rsapub_init(opts
*o
)
336 rsapub_ctx
*c
= CREATE(rsapub_ctx
);
339 if (!o
->fbits
) o
->fbits
= 1024;
340 rsa_gen(&rp
, o
->fbits
, &rand_global
, 0, pgen_evspin
, 0);
341 c
->rp
.n
= MP_COPY(rp
.n
);
342 c
->rp
.e
= MP_COPY(rp
.e
);
344 rsa_pubcreate(&c
->rpc
, &c
->rp
);
345 c
->m
= mprand_range(MP_NEW
, c
->rp
.n
, &rand_global
, 0);
349 static void rsapub_run(void *cc
)
352 mp
*d
= rsa_pubop(&c
->rpc
, MP_NEW
, c
->m
);
356 /* --- Symmetric encryption --- */
358 typedef struct ksched_ctx
{
364 static void *ksched_init(opts
*o
)
366 ksched_ctx
*c
= CREATE(ksched_ctx
);
368 die(1, "must specify encryption scheme name");
369 if ((c
->c
= gcipher_byname(o
->name
)) == 0)
370 die(1, "encryption scheme `%s' not known", o
->name
);
371 c
->ksz
= keysz(o
->gbits
/8, c
->c
->keysz
);
372 c
->k
= xmalloc(c
->ksz
);
373 rand_get(RAND_GLOBAL
, c
->k
, c
->ksz
);
377 static void ksched_run(void *cc
)
380 gcipher
*gc
= GC_INIT(c
->c
, c
->k
, c
->ksz
);
384 typedef struct enc_ctx
{
391 static void *enc_init(opts
*o
)
393 enc_ctx
*c
= CREATE(enc_ctx
);
398 die(1, "must specify encryption scheme name");
399 if ((cc
= gcipher_byname(o
->name
)) == 0)
400 die(1, "encryption scheme `%s' not known", o
->name
);
401 ksz
= keysz(0, cc
->keysz
);
403 rand_get(RAND_GLOBAL
, k
, ksz
);
404 c
->c
= GC_INIT(cc
, k
, ksz
);
406 c
->sz
= o
->gbits ? o
->gbits
: 65536;
407 c
->n
= o
->n ? o
->n
: 16;
408 c
->m
= xmalloc(c
->sz
);
412 static void enc_run(void *cc
)
416 for (i
= 0; i
< c
->n
; i
++)
417 GC_ENCRYPT(c
->c
, c
->m
, c
->m
, c
->sz
);
420 /* --- Hashing --- */
422 typedef struct hash_ctx
{
429 static void *hash_init(opts
*o
)
431 hash_ctx
*c
= CREATE(hash_ctx
);
433 die(1, "must specify hash function name");
434 if ((c
->h
= ghash_byname(o
->name
)) == 0)
435 die(1, "hash function `%s' not known", o
->name
);
436 c
->sz
= o
->gbits ? o
->gbits
: 65536;
437 c
->n
= o
->n ? o
->n
: 16;
438 c
->m
= xmalloc(c
->sz
);
442 static void hash_run(void *cc
)
446 ghash
*h
= GH_INIT(c
->h
);
447 for (i
= 0; i
< c
->n
; i
++)
448 GH_HASH(h
, c
->m
, c
->sz
);
453 /* --- Poly1305 --- */
455 typedef struct poly1305_jobctx
{
457 octet s
[POLY1305_MASKSZ
];
463 static void *poly1305_jobinit(opts
*o
)
465 octet k
[POLY1305_KEYSZ
];
466 poly1305_jobctx
*c
= CREATE(poly1305_jobctx
);
467 rand_get(RAND_GLOBAL
, k
, sizeof(k
));
468 poly1305_keyinit(&c
->k
, k
, sizeof(k
));
469 rand_get(RAND_GLOBAL
, c
->s
, sizeof(c
->s
));
470 c
->sz
= o
->gbits ? o
->gbits
: 65536;
471 c
->n
= o
->n ? o
->n
: 16;
472 c
->m
= xmalloc(c
->sz
);
476 static void poly1305_jobrun(void *cc
)
478 poly1305_jobctx
*c
= cc
;
480 octet t
[POLY1305_TAGSZ
];
482 poly1305_macinit(&ctx
, &c
->k
, c
->s
);
483 for (i
= 0; i
< c
->n
; i
++) poly1305_hash(&ctx
, c
->m
, c
->sz
);
484 poly1305_done(&ctx
, t
);
487 /* --- Job table --- */
489 typedef struct jobops
{
491 void *(*init
)(opts
*);
495 static const jobops jobtab
[] = {
496 { "g-prime-exp", grp_init
, gr_run
},
497 { "g-ec-mul", grec_init
, gr_run
},
498 { "g-prime-exp-sim", grp_init
, grsim_run
},
499 { "g-ec-mul-sim", grec_init
, grsim_run
},
500 { "barrett-exp", bar_init
, bar_run
},
501 { "barrett-exp-sim", bar_init
, barsim_run
},
502 { "mont-exp", mont_init
, mont_run
},
503 { "mont-exp-sim", mont_init
, montsim_run
},
504 { "rsa-priv", rsapriv_init
, rsapriv_run
},
505 { "rsa-priv-blind", rsaprivblind_init
, rsapriv_run
},
506 { "rsa-pub", rsapub_init
, rsapub_run
},
507 { "x25519", x25519_jobinit
, x25519_jobrun
},
508 { "ksched", ksched_init
, ksched_run
},
509 { "enc", enc_init
, enc_run
},
510 { "hash", hash_init
, hash_run
},
511 { "poly1305", poly1305_jobinit
, poly1305_jobrun
},
515 /*----- Main code ---------------------------------------------------------*/
517 void version(FILE *fp
)
519 pquis(fp
, "$, Catacomb " VERSION
"\n");
522 static void usage(FILE *fp
)
524 pquis(fp
, "Usage: $ [-options] job\n");
527 static void help(FILE *fp
)
533 Various performance tests.\n\
537 -h, --help Show this help text.\n\
538 -v, --version Show program version number.\n\
539 -u, --usage Show terse usage message.\n\
540 -l, --list [ITEM...] List all the various names of things.\n\
542 -C, --name=NAME Select curve/DH-group/enc/hash name.\n\
543 -b, --field-bits Field size for g-prime and rsa.\n\
544 -q, --no-check Don't check field/group for validity.\n\
545 -B, --group-bits Group size for g-prime; key size for ksched;\n\
546 data size for enc and hash.\n\
547 -n, --factors=COUNT Number of factors for {exp,mul}-sim.\n\
548 -i, --intervals=COUNT Number of intervals to run for. [0; forever]\n\
549 -t, --time=TIME Length of an interval in seconds. [1]\n\
555 listtab[i].name, listtab[i].name) \
557 jobtab[i].name, jobtab[i].name) \
558 LI("Elliptic curves", ec, \
559 ectab[i].name, ectab[i].name) \
560 LI("Diffie-Hellman groups", dh, \
561 ptab[i].name, ptab[i].name) \
562 LI("Encryption algorithms", cipher, \
563 gciphertab[i], gciphertab[i]->name) \
564 LI("Hash functions", hash, \
565 ghashtab[i], ghashtab[i]->name)
567 MAKELISTTAB(listtab
, LISTS
)
569 static unsigned uarg(const char *what
, const char *p
)
574 u
= strtoul(p
, &q
, 0);
575 if (*q
|| u
> UINT_MAX
|| q
== p
|| errno
)
576 die(1, "bad %s `%s'", what
, p
);
580 static double farg(const char *what
, const char *p
)
586 if (*q
|| q
== p
|| errno
)
587 die(1, "bad %s `%s'", what
, p
);
591 int main(int argc
, char *argv
[])
596 struct timeval tv_next
, tv_now
;
600 clock_t c_start
, c_stop
;
607 static const struct option opts
[] = {
608 { "help", 0, 0, 'h' },
609 { "version", 0, 0, 'v' },
610 { "usage", 0, 0, 'u' },
611 { "list", 0, 0, 'l' },
612 { "name", OPTF_ARGREQ
, 0, 'C' },
613 { "field-bits", OPTF_ARGREQ
, 0, 'b' },
614 { "group-bits", OPTF_ARGREQ
, 0, 'B' },
615 { "factors", OPTF_ARGREQ
, 0, 'n' },
616 { "intervals", OPTF_ARGREQ
, 0, 'i' },
617 { "time", OPTF_ARGREQ
, 0, 't' },
618 { "no-check", 0, 0, 'q' },
622 i
= mdwopt(argc
, argv
, "hvulC:b:B:n:i:t:q", opts
, 0, 0, 0);
625 case 'h': help(stdout
); exit(0);
626 case 'v': version(stdout
); exit(0);
627 case 'u': usage(stdout
); exit(0);
628 case 'l': exit(displaylists(listtab
, argv
+ optind
));
629 case 'C': o
.name
= optarg
; break;
630 case 'b': o
.fbits
= uarg("field bits", optarg
); break;
631 case 'B': o
.gbits
= uarg("subgroup bits", optarg
); break;
632 case 'n': o
.n
= uarg("factor count", optarg
); break;
633 case 'i': o
.i
= uarg("interval count", optarg
); break;
634 case 't': o
.t
= farg("interval length", optarg
); break;
635 case 'q': o
.f
|= OF_NOCHECK
; break;
636 default: usage(stderr
); exit(1);
639 if (optind
+ 1 != argc
) { usage(stderr
); exit(1); }
641 for (j
= jobtab
; j
->name
; j
++)
642 if (strcmp(j
->name
, argv
[optind
]) == 0) break;
643 if (!j
->name
) die(1, "unknown job type `%s'", argv
[optind
]);
648 gettimeofday(&tv_now
, 0);
650 tv_addl(&tv_next
, &tv_now
, o
.t
, fmod(o
.t
* MILLION
, MILLION
));
656 gettimeofday(&tv_now
, 0);
657 } while (TV_CMP(&tv_now
, <, &tv_next
));
659 t
= (double)(c_stop
- c_start
)/CLOCKS_PER_SEC
;
662 printf("%5u: did = %5lu; /sec = %5f; avg /sec = %5f\n",
663 n
, ii
, ii
/t
, itot
/ttot
);
666 } while (!o
.i
|| n
< o
.i
);
671 /*----- That's all, folks -------------------------------------------------*/