393 lines
12 KiB
Coq
393 lines
12 KiB
Coq
|
//////////////////////////////////////////////////////////////////////
|
||
|
|
//// ////
|
||
|
|
//// S-Box calculation ////
|
||
|
|
//// ////
|
||
|
|
//// This file is part of the SystemC AES ////
|
||
|
|
//// ////
|
||
|
|
//// Description: ////
|
||
|
|
//// S-box calculation calculating inverse on gallois field ////
|
||
|
|
//// ////
|
||
|
|
//// Generated automatically using SystemC to Verilog translator ////
|
||
|
|
//// ////
|
||
|
|
//// To Do: ////
|
||
|
|
//// - done ////
|
||
|
|
//// ////
|
||
|
|
//// Author(s): ////
|
||
|
|
//// - Javier Castillo, jcastilo@opencores.org ////
|
||
|
|
//// ////
|
||
|
|
//////////////////////////////////////////////////////////////////////
|
||
|
|
//// ////
|
||
|
|
//// Copyright (C) 2000 Authors and OPENCORES.ORG ////
|
||
|
|
//// ////
|
||
|
|
//// This source file may be used and distributed without ////
|
||
|
|
//// restriction provided that this copyright statement is not ////
|
||
|
|
//// removed from the file and that any derivative work contains ////
|
||
|
|
//// the original copyright notice and the associated disclaimer. ////
|
||
|
|
//// ////
|
||
|
|
//// This source file is free software; you can redistribute it ////
|
||
|
|
//// and/or modify it under the terms of the GNU Lesser General ////
|
||
|
|
//// Public License as published by the Free Software Foundation; ////
|
||
|
|
//// either version 2.1 of the License, or (at your option) any ////
|
||
|
|
//// later version. ////
|
||
|
|
//// ////
|
||
|
|
//// This source is distributed in the hope that it will be ////
|
||
|
|
//// useful, but WITHOUT ANY WARRANTY; without even the implied ////
|
||
|
|
//// warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR ////
|
||
|
|
//// PURPOSE. See the GNU Lesser General Public License for more ////
|
||
|
|
//// details. ////
|
||
|
|
//// ////
|
||
|
|
//// You should have received a copy of the GNU Lesser General ////
|
||
|
|
//// Public License along with this source; if not, download it ////
|
||
|
|
//// from http://www.opencores.org/lgpl.shtml ////
|
||
|
|
//// ////
|
||
|
|
//////////////////////////////////////////////////////////////////////
|
||
|
|
//
|
||
|
|
// CVS Revision History
|
||
|
|
//
|
||
|
|
// $Log: sbox.v,v $
|
||
|
|
// Revision 1.1.1.1 2004/07/05 09:46:23 jcastillo
|
||
|
|
// First import
|
||
|
|
//
|
||
|
|
|
||
|
|
module sbox(clk,reset,data_i,decrypt_i,data_o);
|
||
|
|
input clk;
|
||
|
|
input reset;
|
||
|
|
input [7:0] data_i;
|
||
|
|
input decrypt_i;
|
||
|
|
output [7:0] data_o;
|
||
|
|
|
||
|
|
reg [7:0] data_o;
|
||
|
|
|
||
|
|
reg [7:0] inva;
|
||
|
|
reg [3:0] ah;
|
||
|
|
reg [3:0] al;
|
||
|
|
reg [3:0] ah2;
|
||
|
|
reg [3:0] al2;
|
||
|
|
reg [3:0] alxh;
|
||
|
|
reg [3:0] alph;
|
||
|
|
reg [3:0] d;
|
||
|
|
reg [3:0] ahp;
|
||
|
|
reg [3:0] alp;
|
||
|
|
reg [3:0] to_invert;
|
||
|
|
reg [3:0] next_to_invert;
|
||
|
|
reg [3:0] ah_reg;
|
||
|
|
reg [3:0] next_ah_reg;
|
||
|
|
reg [3:0] next_alph;
|
||
|
|
|
||
|
|
|
||
|
|
//registers:
|
||
|
|
always @(posedge clk or negedge reset)
|
||
|
|
|
||
|
|
begin
|
||
|
|
|
||
|
|
if(!reset)
|
||
|
|
begin
|
||
|
|
|
||
|
|
to_invert = (0);
|
||
|
|
ah_reg = (0);
|
||
|
|
alph = (0);
|
||
|
|
|
||
|
|
end
|
||
|
|
else
|
||
|
|
begin
|
||
|
|
|
||
|
|
to_invert = (next_to_invert);
|
||
|
|
ah_reg = (next_ah_reg);
|
||
|
|
alph = (next_alph);
|
||
|
|
|
||
|
|
end
|
||
|
|
|
||
|
|
|
||
|
|
end
|
||
|
|
//first_mux:
|
||
|
|
reg[7:0] first_mux_data_var;
|
||
|
|
reg[7:0] first_mux_InvInput;
|
||
|
|
reg[3:0] first_mux_ah_t,first_mux_al_t;
|
||
|
|
reg first_mux_aA,first_mux_aB,first_mux_aC,first_mux_aD;
|
||
|
|
|
||
|
|
always @( data_i or decrypt_i)
|
||
|
|
|
||
|
|
begin
|
||
|
|
|
||
|
|
|
||
|
|
first_mux_data_var=data_i;
|
||
|
|
first_mux_InvInput=first_mux_data_var;
|
||
|
|
|
||
|
|
case(decrypt_i)
|
||
|
|
1:
|
||
|
|
begin
|
||
|
|
//Applyinverseaffinetrasformation
|
||
|
|
first_mux_aA=first_mux_data_var[0]^first_mux_data_var[5];first_mux_aB=first_mux_data_var[1]^first_mux_data_var[4];
|
||
|
|
first_mux_aC=first_mux_data_var[2]^first_mux_data_var[7];first_mux_aD=first_mux_data_var[3]^first_mux_data_var[6];
|
||
|
|
first_mux_InvInput[0]=(!first_mux_data_var[5])^first_mux_aC;
|
||
|
|
first_mux_InvInput[1]=first_mux_data_var[0]^first_mux_aD;
|
||
|
|
first_mux_InvInput[2]=(!first_mux_data_var[7])^first_mux_aB;
|
||
|
|
first_mux_InvInput[3]=first_mux_data_var[2]^first_mux_aA;
|
||
|
|
first_mux_InvInput[4]=first_mux_data_var[1]^first_mux_aD;
|
||
|
|
first_mux_InvInput[5]=first_mux_data_var[4]^first_mux_aC;
|
||
|
|
first_mux_InvInput[6]=first_mux_data_var[3]^first_mux_aA;
|
||
|
|
first_mux_InvInput[7]=first_mux_data_var[6]^first_mux_aB;
|
||
|
|
end
|
||
|
|
default:
|
||
|
|
begin
|
||
|
|
first_mux_InvInput=first_mux_data_var;
|
||
|
|
end
|
||
|
|
endcase
|
||
|
|
|
||
|
|
|
||
|
|
//ConvertelementsfromGF(2^8)intotwoelementsofGF(2^4^2)
|
||
|
|
|
||
|
|
first_mux_aA=first_mux_InvInput[1]^first_mux_InvInput[7];
|
||
|
|
first_mux_aB=first_mux_InvInput[5]^first_mux_InvInput[7];
|
||
|
|
first_mux_aC=first_mux_InvInput[4]^first_mux_InvInput[6];
|
||
|
|
|
||
|
|
|
||
|
|
first_mux_al_t[0]=first_mux_aC^first_mux_InvInput[0]^first_mux_InvInput[5];
|
||
|
|
first_mux_al_t[1]=first_mux_InvInput[1]^first_mux_InvInput[2];
|
||
|
|
first_mux_al_t[2]=first_mux_aA;
|
||
|
|
first_mux_al_t[3]=first_mux_InvInput[2]^first_mux_InvInput[4];
|
||
|
|
|
||
|
|
first_mux_ah_t[0]=first_mux_aC^first_mux_InvInput[5];
|
||
|
|
first_mux_ah_t[1]=first_mux_aA^first_mux_aC;
|
||
|
|
first_mux_ah_t[2]=first_mux_aB^first_mux_InvInput[2]^first_mux_InvInput[3];
|
||
|
|
first_mux_ah_t[3]=first_mux_aB;
|
||
|
|
|
||
|
|
al = (first_mux_al_t);
|
||
|
|
ah = (first_mux_ah_t);
|
||
|
|
next_ah_reg = (first_mux_ah_t);
|
||
|
|
|
||
|
|
end
|
||
|
|
//end_mux:
|
||
|
|
reg[7:0] end_mux_data_var,end_mux_data_o_var;
|
||
|
|
reg end_mux_aA,end_mux_aB,end_mux_aC,end_mux_aD;
|
||
|
|
|
||
|
|
always @( decrypt_i or inva)
|
||
|
|
|
||
|
|
begin
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
//Taketheoutputoftheinverter
|
||
|
|
end_mux_data_var=inva;
|
||
|
|
|
||
|
|
case(decrypt_i)
|
||
|
|
0:
|
||
|
|
begin
|
||
|
|
//Applyaffinetrasformation
|
||
|
|
end_mux_aA=end_mux_data_var[0]^end_mux_data_var[1];end_mux_aB=end_mux_data_var[2]^end_mux_data_var[3];
|
||
|
|
end_mux_aC=end_mux_data_var[4]^end_mux_data_var[5];end_mux_aD=end_mux_data_var[6]^end_mux_data_var[7];
|
||
|
|
end_mux_data_o_var[0]=(!end_mux_data_var[0])^end_mux_aC^end_mux_aD;
|
||
|
|
end_mux_data_o_var[1]=(!end_mux_data_var[5])^end_mux_aA^end_mux_aD;
|
||
|
|
end_mux_data_o_var[2]=end_mux_data_var[2]^end_mux_aA^end_mux_aD;
|
||
|
|
end_mux_data_o_var[3]=end_mux_data_var[7]^end_mux_aA^end_mux_aB;
|
||
|
|
end_mux_data_o_var[4]=end_mux_data_var[4]^end_mux_aA^end_mux_aB;
|
||
|
|
end_mux_data_o_var[5]=(!end_mux_data_var[1])^end_mux_aB^end_mux_aC;
|
||
|
|
end_mux_data_o_var[6]=(!end_mux_data_var[6])^end_mux_aB^end_mux_aC;
|
||
|
|
end_mux_data_o_var[7]=end_mux_data_var[3]^end_mux_aC^end_mux_aD;
|
||
|
|
data_o = (end_mux_data_o_var);
|
||
|
|
end
|
||
|
|
default:
|
||
|
|
begin
|
||
|
|
data_o = (end_mux_data_var);
|
||
|
|
end
|
||
|
|
endcase
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
end
|
||
|
|
//inversemap:
|
||
|
|
reg[3:0] aA,aB;
|
||
|
|
reg[3:0] inversemap_alp_t,inversemap_ahp_t;
|
||
|
|
reg[7:0] inversemap_inva_t;
|
||
|
|
|
||
|
|
always @( alp or ahp)
|
||
|
|
begin
|
||
|
|
|
||
|
|
|
||
|
|
inversemap_alp_t=alp;
|
||
|
|
inversemap_ahp_t=ahp;
|
||
|
|
|
||
|
|
aA=inversemap_alp_t[1]^inversemap_ahp_t[3];
|
||
|
|
aB=inversemap_ahp_t[0]^inversemap_ahp_t[1];
|
||
|
|
|
||
|
|
inversemap_inva_t[0]=inversemap_alp_t[0]^inversemap_ahp_t[0];
|
||
|
|
inversemap_inva_t[1]=aB^inversemap_ahp_t[3];
|
||
|
|
inversemap_inva_t[2]=aA^aB;
|
||
|
|
inversemap_inva_t[3]=aB^inversemap_alp_t[1]^inversemap_ahp_t[2];
|
||
|
|
inversemap_inva_t[4]=aA^aB^inversemap_alp_t[3];
|
||
|
|
inversemap_inva_t[5]=aB^inversemap_alp_t[2];
|
||
|
|
inversemap_inva_t[6]=aA^inversemap_alp_t[2]^inversemap_alp_t[3]^inversemap_ahp_t[0];
|
||
|
|
inversemap_inva_t[7]=aB^inversemap_alp_t[2]^inversemap_ahp_t[3];
|
||
|
|
|
||
|
|
inva = (inversemap_inva_t);
|
||
|
|
|
||
|
|
end
|
||
|
|
//mul1:
|
||
|
|
reg[3:0] mul1_alxh_t;
|
||
|
|
reg[3:0] mul1_aA,mul1_a;
|
||
|
|
|
||
|
|
always @( ah or al)
|
||
|
|
|
||
|
|
begin
|
||
|
|
|
||
|
|
//alxah
|
||
|
|
|
||
|
|
mul1_aA=al[0]^al[3];
|
||
|
|
mul1_a=al[2]^al[3];
|
||
|
|
|
||
|
|
mul1_alxh_t[0]=(al[0]&ah[0])^(al[3]&ah[1])^(al[2]&ah[2])^(al[1]&ah[3]);
|
||
|
|
mul1_alxh_t[1]=(al[1]&ah[0])^(mul1_aA&ah[1])^(mul1_a&ah[2])^((al[1]^al[2])&ah[3]);
|
||
|
|
mul1_alxh_t[2]=(al[2]&ah[0])^(al[1]&ah[1])^(mul1_aA&ah[2])^(mul1_a&ah[3]);
|
||
|
|
mul1_alxh_t[3]=(al[3]&ah[0])^(al[2]&ah[1])^(al[1]&ah[2])^(mul1_aA&ah[3]);
|
||
|
|
|
||
|
|
alxh = (mul1_alxh_t);
|
||
|
|
|
||
|
|
end
|
||
|
|
//mul2:
|
||
|
|
reg[3:0] mul2_ahp_t;
|
||
|
|
reg[3:0] mul2_aA,mul2_aB;
|
||
|
|
|
||
|
|
always @( d or ah_reg)
|
||
|
|
|
||
|
|
begin
|
||
|
|
|
||
|
|
//ahxd
|
||
|
|
|
||
|
|
mul2_aA=ah_reg[0]^ah_reg[3];
|
||
|
|
mul2_aB=ah_reg[2]^ah_reg[3];
|
||
|
|
|
||
|
|
mul2_ahp_t[0]=(ah_reg[0]&d[0])^(ah_reg[3]&d[1])^(ah_reg[2]&d[2])^(ah_reg[1]&d[3]);
|
||
|
|
mul2_ahp_t[1]=(ah_reg[1]&d[0])^(mul2_aA&d[1])^(mul2_aB&d[2])^((ah_reg[1]^ah_reg[2])&d[3]);
|
||
|
|
mul2_ahp_t[2]=(ah_reg[2]&d[0])^(ah_reg[1]&d[1])^(mul2_aA&d[2])^(mul2_aB&d[3]);
|
||
|
|
mul2_ahp_t[3]=(ah_reg[3]&d[0])^(ah_reg[2]&d[1])^(ah_reg[1]&d[2])^(mul2_aA&d[3]);
|
||
|
|
|
||
|
|
ahp = (mul2_ahp_t);
|
||
|
|
|
||
|
|
end
|
||
|
|
//mul3:
|
||
|
|
reg[3:0] mul3_alp_t;
|
||
|
|
reg[3:0] mul3_aA,mul3_aB;
|
||
|
|
|
||
|
|
always @( d or alph)
|
||
|
|
|
||
|
|
begin
|
||
|
|
|
||
|
|
//dxal
|
||
|
|
|
||
|
|
mul3_aA=d[0]^d[3];
|
||
|
|
mul3_aB=d[2]^d[3];
|
||
|
|
|
||
|
|
mul3_alp_t[0]=(d[0]&alph[0])^(d[3]&alph[1])^(d[2]&alph[2])^(d[1]&alph[3]);
|
||
|
|
mul3_alp_t[1]=(d[1]&alph[0])^(mul3_aA&alph[1])^(mul3_aB&alph[2])^((d[1]^d[2])&alph[3]);
|
||
|
|
mul3_alp_t[2]=(d[2]&alph[0])^(d[1]&alph[1])^(mul3_aA&alph[2])^(mul3_aB&alph[3]);
|
||
|
|
mul3_alp_t[3]=(d[3]&alph[0])^(d[2]&alph[1])^(d[1]&alph[2])^(mul3_aA&alph[3]);
|
||
|
|
|
||
|
|
alp = (mul3_alp_t);
|
||
|
|
|
||
|
|
end
|
||
|
|
//intermediate:
|
||
|
|
reg[3:0] intermediate_aA,intermediate_aB;
|
||
|
|
reg[3:0] intermediate_ah2e,intermediate_ah2epl2,intermediate_to_invert_var;
|
||
|
|
|
||
|
|
always @( ah2 or al2 or alxh)
|
||
|
|
|
||
|
|
begin
|
||
|
|
|
||
|
|
|
||
|
|
//ahsquareismultipliedwithe
|
||
|
|
intermediate_aA=ah2[0]^ah2[1];
|
||
|
|
intermediate_aB=ah2[2]^ah2[3];
|
||
|
|
intermediate_ah2e[0]=ah2[1]^intermediate_aB;
|
||
|
|
intermediate_ah2e[1]=intermediate_aA;
|
||
|
|
intermediate_ah2e[2]=intermediate_aA^ah2[2];
|
||
|
|
intermediate_ah2e[3]=intermediate_aA^intermediate_aB;
|
||
|
|
|
||
|
|
//Additionofintermediate_ah2eplusal2
|
||
|
|
intermediate_ah2epl2[0]=intermediate_ah2e[0]^al2[0];
|
||
|
|
intermediate_ah2epl2[1]=intermediate_ah2e[1]^al2[1];
|
||
|
|
intermediate_ah2epl2[2]=intermediate_ah2e[2]^al2[2];
|
||
|
|
intermediate_ah2epl2[3]=intermediate_ah2e[3]^al2[3];
|
||
|
|
|
||
|
|
//Additionoflastresultwiththeresultof(alxah)
|
||
|
|
intermediate_to_invert_var[0]=intermediate_ah2epl2[0]^alxh[0];
|
||
|
|
intermediate_to_invert_var[1]=intermediate_ah2epl2[1]^alxh[1];
|
||
|
|
intermediate_to_invert_var[2]=intermediate_ah2epl2[2]^alxh[2];
|
||
|
|
intermediate_to_invert_var[3]=intermediate_ah2epl2[3]^alxh[3];
|
||
|
|
|
||
|
|
//Registers
|
||
|
|
next_to_invert = (intermediate_to_invert_var);
|
||
|
|
|
||
|
|
end
|
||
|
|
//inversion:
|
||
|
|
reg[3:0] inversion_to_invert_var;
|
||
|
|
reg[3:0] inversion_aA,inversion_d_t;
|
||
|
|
|
||
|
|
always @( to_invert)
|
||
|
|
|
||
|
|
begin
|
||
|
|
|
||
|
|
|
||
|
|
inversion_to_invert_var=to_invert;
|
||
|
|
|
||
|
|
//InverttheresultinGF(2^4)
|
||
|
|
inversion_aA=inversion_to_invert_var[1]^inversion_to_invert_var[2]^inversion_to_invert_var[3]^(inversion_to_invert_var[1]&inversion_to_invert_var[2]&inversion_to_invert_var[3]);
|
||
|
|
inversion_d_t[0]=inversion_aA^inversion_to_invert_var[0]^(inversion_to_invert_var[0]&inversion_to_invert_var[2])^(inversion_to_invert_var[1]&inversion_to_invert_var[2])^(inversion_to_invert_var[0]&inversion_to_invert_var[1]&inversion_to_invert_var[2]);
|
||
|
|
inversion_d_t[1]=(inversion_to_invert_var[0]&inversion_to_invert_var[1])^(inversion_to_invert_var[0]&inversion_to_invert_var[2])^(inversion_to_invert_var[1]&inversion_to_invert_var[2])^inversion_to_invert_var[3]^(inversion_to_invert_var[1]&inversion_to_invert_var[3])^(inversion_to_invert_var[0]&inversion_to_invert_var[1]&inversion_to_invert_var[3]);
|
||
|
|
inversion_d_t[2]=(inversion_to_invert_var[0]&inversion_to_invert_var[1])^inversion_to_invert_var[2]^(inversion_to_invert_var[0]&inversion_to_invert_var[2])^inversion_to_invert_var[3]^(inversion_to_invert_var[0]&inversion_to_invert_var[3])^(inversion_to_invert_var[0]&inversion_to_invert_var[2]&inversion_to_invert_var[3]);
|
||
|
|
inversion_d_t[3]=inversion_aA^(inversion_to_invert_var[0]&inversion_to_invert_var[3])^(inversion_to_invert_var[1]&inversion_to_invert_var[3])^(inversion_to_invert_var[2]&inversion_to_invert_var[3]);
|
||
|
|
|
||
|
|
d = (inversion_d_t);
|
||
|
|
|
||
|
|
|
||
|
|
end
|
||
|
|
//sum1:
|
||
|
|
reg[3:0] sum1_alph_t;
|
||
|
|
|
||
|
|
always @( ah or al)
|
||
|
|
|
||
|
|
begin
|
||
|
|
|
||
|
|
|
||
|
|
sum1_alph_t[0]=al[0]^ah[0];
|
||
|
|
sum1_alph_t[1]=al[1]^ah[1];
|
||
|
|
sum1_alph_t[2]=al[2]^ah[2];
|
||
|
|
sum1_alph_t[3]=al[3]^ah[3];
|
||
|
|
|
||
|
|
next_alph = (sum1_alph_t);
|
||
|
|
|
||
|
|
end
|
||
|
|
//square1:
|
||
|
|
reg[3:0] square1_ah_t;
|
||
|
|
|
||
|
|
always @( ah)
|
||
|
|
|
||
|
|
begin
|
||
|
|
|
||
|
|
|
||
|
|
square1_ah_t[0]=ah[0]^ah[2];
|
||
|
|
square1_ah_t[1]=ah[2];
|
||
|
|
square1_ah_t[2]=ah[1]^ah[3];
|
||
|
|
square1_ah_t[3]=ah[3];
|
||
|
|
|
||
|
|
ah2 = (square1_ah_t);
|
||
|
|
|
||
|
|
end
|
||
|
|
//square2:
|
||
|
|
reg[3:0] square2_al_t;
|
||
|
|
|
||
|
|
always @( al)
|
||
|
|
|
||
|
|
begin
|
||
|
|
|
||
|
|
|
||
|
|
square2_al_t[0]=al[0]^al[2];
|
||
|
|
square2_al_t[1]=al[2];
|
||
|
|
square2_al_t[2]=al[1]^al[3];
|
||
|
|
square2_al_t[3]=al[3];
|
||
|
|
|
||
|
|
al2 = (square2_al_t);
|
||
|
|
|
||
|
|
end
|
||
|
|
|
||
|
|
endmodule
|