From 05e725174caad24fea6d9c8b93acaaf845ffe060 Mon Sep 17 00:00:00 2001 From: Dolu1990 Date: Mon, 2 Nov 2020 17:14:52 +0100 Subject: [PATCH] AesPlugin added, work with dropbear encryption, seem ok for decryption (barmetal) --- .../scala/vexriscv/plugin/AesPlugin.scala | 275 ++++++++++++++++++ 1 file changed, 275 insertions(+) create mode 100644 src/main/scala/vexriscv/plugin/AesPlugin.scala diff --git a/src/main/scala/vexriscv/plugin/AesPlugin.scala b/src/main/scala/vexriscv/plugin/AesPlugin.scala new file mode 100644 index 0000000..92617a8 --- /dev/null +++ b/src/main/scala/vexriscv/plugin/AesPlugin.scala @@ -0,0 +1,275 @@ +package vexriscv.plugin + +import spinal.core._ +import spinal.lib._ +import vexriscv.{DecoderService, Stageable, VexRiscv} + + +case class AesPlugin(encoding : MaskedLiteral = M"-----------------000-----0101011") extends Plugin[VexRiscv]{ + + object IS_AES extends Stageable(Bool) + object CALC extends Stageable(Bits(32 bits)) + + val mapping = new { + def DECRYPT = 25 // 0/1 => encrypt/decrypt + def LAST_ROUND = 26 + def ENDIAN = 27 //Not implemented yet + def BYTE_SEL = 28 //Which byte should be used in RS2 + } + + //Callback to setup the plugin and ask for different services + override def setup(pipeline: VexRiscv): Unit = { + import pipeline.config._ + + val decoderService = pipeline.service(classOf[DecoderService]) + + decoderService.addDefault(IS_AES, False) + decoderService.add( + key = encoding, + List( + IS_AES -> True, + REGFILE_WRITE_VALID -> True, + BYPASSABLE_EXECUTE_STAGE -> False, + BYPASSABLE_MEMORY_STAGE -> False, //Late result + RS1_USE -> True, + RS2_USE -> True + ) + ) + } + + override def build(pipeline: VexRiscv): Unit = { + import pipeline._ + import pipeline.config._ + + + + def BANK0 = (TE0, SBOX_INV).zipped.map((te0, inv) => (te0.toLong) | (inv.toLong << 24)) + def BANK1 = TD0 + + + + val onExecute = execute plug new Area{ + import execute._ + val byteSel = input(INSTRUCTION)(mapping.BYTE_SEL, 2 bits).asUInt + val bankSel = input(INSTRUCTION)(mapping.DECRYPT) && !input(INSTRUCTION)(mapping.LAST_ROUND) + val romAddress = U(bankSel ## input(RS2).subdivideIn(8 bits).read(byteSel)) + } + + memory plug new Area{ + import memory._ + + val rom = new Area { + val storage = Mem(Bits(32 bits), 512) initBigInt((BANK0 ++ BANK1).map(BigInt(_))) + + val data = storage.readSync(onExecute.romAddress, !arbitration.isStuck) + val bytes = data.subdivideIn(8 bits) + + def VecUInt(l: Int*) = Vec(l.map(U(_, 2 bits))) + // remap will be used to decode the rom + val remap = Vec( + VecUInt(0, 1, 1, 2), + VecUInt(1, 1, 1, 1), + VecUInt(0, 1, 2, 3), + VecUInt(3, 3, 3, 3) + ) + + val address = U(input(INSTRUCTION)(mapping.DECRYPT) ## input(INSTRUCTION)(mapping.LAST_ROUND)) + val output = remap(address) + } + + val wordDesuffle = new Area{ + val zero = B"0000" + val byteSel = input(INSTRUCTION)(mapping.BYTE_SEL, 2 bits).asUInt + val output = Vec(Bits(8 bits), 4) + + def remap(l : Int*) = Vec(l.map(rom.output(_))) + val sel = byteSel.mux( + 3 -> remap(0, 1, 2, 3), + 2 -> remap(1, 2, 3, 0), + 1 -> remap(2, 3, 0, 1), + 0 -> remap(3, 0, 1, 2) + ) + when(input(INSTRUCTION)(mapping.LAST_ROUND)){ + zero := B"1111" + zero(byteSel) := False + } + + //Finaly, mux the rom data + for(byteId <- 0 to 3){ + output(byteId) := rom.bytes(sel(byteId)) + when(zero(byteId)){ + output(byteId) := 0 + } + } + } + + val xored = wordDesuffle.output.asBits ^ input(RS1) + insert(CALC) := xored + } + + writeBack plug new Area { + import writeBack._ + + when(input(IS_AES)) { + output(REGFILE_WRITE_DATA) := input(CALC) + } + } + } + + // Encryption table which solve a single byte sbox + column mix. Used for all rounds + def TE0 = List( + 0xc663a5, 0xf87c84, 0xee7799, 0xf67b8d, + 0xfff20d, 0xd66bbd, 0xde6fb1, 0x91c554, + 0x603050, 0x020103, 0xce67a9, 0x562b7d, + 0xe7fe19, 0xb5d762, 0x4dabe6, 0xec769a, + 0x8fca45, 0x1f829d, 0x89c940, 0xfa7d87, + 0xeffa15, 0xb259eb, 0x8e47c9, 0xfbf00b, + 0x41adec, 0xb3d467, 0x5fa2fd, 0x45afea, + 0x239cbf, 0x53a4f7, 0xe47296, 0x9bc05b, + 0x75b7c2, 0xe1fd1c, 0x3d93ae, 0x4c266a, + 0x6c365a, 0x7e3f41, 0xf5f702, 0x83cc4f, + 0x68345c, 0x51a5f4, 0xd1e534, 0xf9f108, + 0xe27193, 0xabd873, 0x623153, 0x2a153f, + 0x08040c, 0x95c752, 0x462365, 0x9dc35e, + 0x301828, 0x3796a1, 0x0a050f, 0x2f9ab5, + 0x0e0709, 0x241236, 0x1b809b, 0xdfe23d, + 0xcdeb26, 0x4e2769, 0x7fb2cd, 0xea759f, + 0x12091b, 0x1d839e, 0x582c74, 0x341a2e, + 0x361b2d, 0xdc6eb2, 0xb45aee, 0x5ba0fb, + 0xa452f6, 0x763b4d, 0xb7d661, 0x7db3ce, + 0x52297b, 0xdde33e, 0x5e2f71, 0x138497, + 0xa653f5, 0xb9d168, 0x000000, 0xc1ed2c, + 0x402060, 0xe3fc1f, 0x79b1c8, 0xb65bed, + 0xd46abe, 0x8dcb46, 0x67bed9, 0x72394b, + 0x944ade, 0x984cd4, 0xb058e8, 0x85cf4a, + 0xbbd06b, 0xc5ef2a, 0x4faae5, 0xedfb16, + 0x8643c5, 0x9a4dd7, 0x663355, 0x118594, + 0x8a45cf, 0xe9f910, 0x040206, 0xfe7f81, + 0xa050f0, 0x783c44, 0x259fba, 0x4ba8e3, + 0xa251f3, 0x5da3fe, 0x8040c0, 0x058f8a, + 0x3f92ad, 0x219dbc, 0x703848, 0xf1f504, + 0x63bcdf, 0x77b6c1, 0xafda75, 0x422163, + 0x201030, 0xe5ff1a, 0xfdf30e, 0xbfd26d, + 0x81cd4c, 0x180c14, 0x261335, 0xc3ec2f, + 0xbe5fe1, 0x3597a2, 0x8844cc, 0x2e1739, + 0x93c457, 0x55a7f2, 0xfc7e82, 0x7a3d47, + 0xc864ac, 0xba5de7, 0x32192b, 0xe67395, + 0xc060a0, 0x198198, 0x9e4fd1, 0xa3dc7f, + 0x442266, 0x542a7e, 0x3b90ab, 0x0b8883, + 0x8c46ca, 0xc7ee29, 0x6bb8d3, 0x28143c, + 0xa7de79, 0xbc5ee2, 0x160b1d, 0xaddb76, + 0xdbe03b, 0x643256, 0x743a4e, 0x140a1e, + 0x9249db, 0x0c060a, 0x48246c, 0xb85ce4, + 0x9fc25d, 0xbdd36e, 0x43acef, 0xc462a6, + 0x3991a8, 0x3195a4, 0xd3e437, 0xf2798b, + 0xd5e732, 0x8bc843, 0x6e3759, 0xda6db7, + 0x018d8c, 0xb1d564, 0x9c4ed2, 0x49a9e0, + 0xd86cb4, 0xac56fa, 0xf3f407, 0xcfea25, + 0xca65af, 0xf47a8e, 0x47aee9, 0x100818, + 0x6fbad5, 0xf07888, 0x4a256f, 0x5c2e72, + 0x381c24, 0x57a6f1, 0x73b4c7, 0x97c651, + 0xcbe823, 0xa1dd7c, 0xe8749c, 0x3e1f21, + 0x964bdd, 0x61bddc, 0x0d8b86, 0x0f8a85, + 0xe07090, 0x7c3e42, 0x71b5c4, 0xcc66aa, + 0x9048d8, 0x060305, 0xf7f601, 0x1c0e12, + 0xc261a3, 0x6a355f, 0xae57f9, 0x69b9d0, + 0x178691, 0x99c158, 0x3a1d27, 0x279eb9, + 0xd9e138, 0xebf813, 0x2b98b3, 0x221133, + 0xd269bb, 0xa9d970, 0x078e89, 0x3394a7, + 0x2d9bb6, 0x3c1e22, 0x158792, 0xc9e920, + 0x87ce49, 0xaa55ff, 0x502878, 0xa5df7a, + 0x038c8f, 0x59a1f8, 0x098980, 0x1a0d17, + 0x65bfda, 0xd7e631, 0x8442c6, 0xd068b8, + 0x8241c3, 0x2999b0, 0x5a2d77, 0x1e0f11, + 0x7bb0cb, 0xa854fc, 0x6dbbd6, 0x2c163a + ) + + + // Decryption table which solve a single byte sbox + column mix. Not used in the last round + def TD0 = List( + 0x51f4a750l, 0x7e416553l, 0x1a17a4c3l, 0x3a275e96l, + 0x3bab6bcbl, 0x1f9d45f1l, 0xacfa58abl, 0x4be30393l, + 0x2030fa55l, 0xad766df6l, 0x88cc7691l, 0xf5024c25l, + 0x4fe5d7fcl, 0xc52acbd7l, 0x26354480l, 0xb562a38fl, + 0xdeb15a49l, 0x25ba1b67l, 0x45ea0e98l, 0x5dfec0e1l, + 0xc32f7502l, 0x814cf012l, 0x8d4697a3l, 0x6bd3f9c6l, + 0x038f5fe7l, 0x15929c95l, 0xbf6d7aebl, 0x955259dal, + 0xd4be832dl, 0x587421d3l, 0x49e06929l, 0x8ec9c844l, + 0x75c2896al, 0xf48e7978l, 0x99583e6bl, 0x27b971ddl, + 0xbee14fb6l, 0xf088ad17l, 0xc920ac66l, 0x7dce3ab4l, + 0x63df4a18l, 0xe51a3182l, 0x97513360l, 0x62537f45l, + 0xb16477e0l, 0xbb6bae84l, 0xfe81a01cl, 0xf9082b94l, + 0x70486858l, 0x8f45fd19l, 0x94de6c87l, 0x527bf8b7l, + 0xab73d323l, 0x724b02e2l, 0xe31f8f57l, 0x6655ab2al, + 0xb2eb2807l, 0x2fb5c203l, 0x86c57b9al, 0xd33708a5l, + 0x302887f2l, 0x23bfa5b2l, 0x02036abal, 0xed16825cl, + 0x8acf1c2bl, 0xa779b492l, 0xf307f2f0l, 0x4e69e2a1l, + 0x65daf4cdl, 0x0605bed5l, 0xd134621fl, 0xc4a6fe8al, + 0x342e539dl, 0xa2f355a0l, 0x058ae132l, 0xa4f6eb75l, + 0x0b83ec39l, 0x4060efaal, 0x5e719f06l, 0xbd6e1051l, + 0x3e218af9l, 0x96dd063dl, 0xdd3e05ael, 0x4de6bd46l, + 0x91548db5l, 0x71c45d05l, 0x0406d46fl, 0x605015ffl, + 0x1998fb24l, 0xd6bde997l, 0x894043ccl, 0x67d99e77l, + 0xb0e842bdl, 0x07898b88l, 0xe7195b38l, 0x79c8eedbl, + 0xa17c0a47l, 0x7c420fe9l, 0xf8841ec9l, 0x00000000l, + 0x09808683l, 0x322bed48l, 0x1e1170acl, 0x6c5a724el, + 0xfd0efffbl, 0x0f853856l, 0x3daed51el, 0x362d3927l, + 0x0a0fd964l, 0x685ca621l, 0x9b5b54d1l, 0x24362e3al, + 0x0c0a67b1l, 0x9357e70fl, 0xb4ee96d2l, 0x1b9b919el, + 0x80c0c54fl, 0x61dc20a2l, 0x5a774b69l, 0x1c121a16l, + 0xe293ba0al, 0xc0a02ae5l, 0x3c22e043l, 0x121b171dl, + 0x0e090d0bl, 0xf28bc7adl, 0x2db6a8b9l, 0x141ea9c8l, + 0x57f11985l, 0xaf75074cl, 0xee99ddbbl, 0xa37f60fdl, + 0xf701269fl, 0x5c72f5bcl, 0x44663bc5l, 0x5bfb7e34l, + 0x8b432976l, 0xcb23c6dcl, 0xb6edfc68l, 0xb8e4f163l, + 0xd731dccal, 0x42638510l, 0x13972240l, 0x84c61120l, + 0x854a247dl, 0xd2bb3df8l, 0xaef93211l, 0xc729a16dl, + 0x1d9e2f4bl, 0xdcb230f3l, 0x0d8652ecl, 0x77c1e3d0l, + 0x2bb3166cl, 0xa970b999l, 0x119448fal, 0x47e96422l, + 0xa8fc8cc4l, 0xa0f03f1al, 0x567d2cd8l, 0x223390efl, + 0x87494ec7l, 0xd938d1c1l, 0x8ccaa2fel, 0x98d40b36l, + 0xa6f581cfl, 0xa57ade28l, 0xdab78e26l, 0x3fadbfa4l, + 0x2c3a9de4l, 0x5078920dl, 0x6a5fcc9bl, 0x547e4662l, + 0xf68d13c2l, 0x90d8b8e8l, 0x2e39f75el, 0x82c3aff5l, + 0x9f5d80bel, 0x69d0937cl, 0x6fd52da9l, 0xcf2512b3l, + 0xc8ac993bl, 0x10187da7l, 0xe89c636el, 0xdb3bbb7bl, + 0xcd267809l, 0x6e5918f4l, 0xec9ab701l, 0x834f9aa8l, + 0xe6956e65l, 0xaaffe67el, 0x21bccf08l, 0xef15e8e6l, + 0xbae79bd9l, 0x4a6f36cel, 0xea9f09d4l, 0x29b07cd6l, + 0x31a4b2afl, 0x2a3f2331l, 0xc6a59430l, 0x35a266c0l, + 0x744ebc37l, 0xfc82caa6l, 0xe090d0b0l, 0x33a7d815l, + 0xf104984al, 0x41ecdaf7l, 0x7fcd500el, 0x1791f62fl, + 0x764dd68dl, 0x43efb04dl, 0xccaa4d54l, 0xe49604dfl, + 0x9ed1b5e3l, 0x4c6a881bl, 0xc12c1fb8l, 0x4665517fl, + 0x9d5eea04l, 0x018c355dl, 0xfa877473l, 0xfb0b412el, + 0xb3671d5al, 0x92dbd252l, 0xe9105633l, 0x6dd64713l, + 0x9ad7618cl, 0x37a10c7al, 0x59f8148el, 0xeb133c89l, + 0xcea927eel, 0xb761c935l, 0xe11ce5edl, 0x7a47b13cl, + 0x9cd2df59l, 0x55f2733fl, 0x1814ce79l, 0x73c737bfl, + 0x53f7cdeal, 0x5ffdaa5bl, 0xdf3d6f14l, 0x7844db86l, + 0xcaaff381l, 0xb968c43el, 0x3824342cl, 0xc2a3405fl, + 0x161dc372l, 0xbce2250cl, 0x283c498bl, 0xff0d9541l, + 0x39a80171l, 0x080cb3del, 0xd8b4e49cl, 0x6456c190l, + 0x7bcb8461l, 0xd532b670l, 0x486c5c74l, 0xd0b85742l + ) + + // Last round decryption sbox + def SBOX_INV = List( + 0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38, 0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb, + 0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87, 0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb, + 0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d, 0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e, + 0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2, 0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25, + 0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16, 0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92, + 0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda, 0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84, + 0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a, 0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06, + 0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02, 0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b, + 0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea, 0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73, + 0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85, 0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e, + 0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89, 0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b, + 0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20, 0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4, + 0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31, 0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f, + 0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d, 0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef, + 0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0, 0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61, + 0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26, 0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d + ) +}