| // Copyright 2017 The Abseil Authors. | |
| // | |
| // Licensed under the Apache License, Version 2.0 (the "License"); | |
| // you may not use this file except in compliance with the License. | |
| // You may obtain a copy of the License at | |
| // | |
| // https://www.apache.org/licenses/LICENSE-2.0 | |
| // | |
| // Unless required by applicable law or agreed to in writing, software | |
| // distributed under the License is distributed on an "AS IS" BASIS, | |
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
| // See the License for the specific language governing permissions and | |
| // limitations under the License. | |
| // HERMETIC NOTE: The randen_hwaes target must not introduce duplicate | |
| // symbols from arbitrary system and other headers, since it may be built | |
| // with different flags from other targets, using different levels of | |
| // optimization, potentially introducing ODR violations. | |
| // MSVC-equivalent __cpuid intrinsic declaration for clang-like compilers | |
| // for non-Windows build environments. | |
| extern void __cpuid(int[4], int); | |
| // MSVC-equivalent __cpuid intrinsic function. | |
| static void __cpuid(int cpu_info[4], int info_type) { | |
| __asm__ volatile("cpuid \n\t" | |
| : "=a"(cpu_info[0]), "=b"(cpu_info[1]), "=c"(cpu_info[2]), | |
| "=d"(cpu_info[3]) | |
| : "a"(info_type), "c"(0)); | |
| } | |
| // On linux, just use the c-library getauxval call. | |
| extern "C" unsigned long getauxval(unsigned long type); // NOLINT(runtime/int) | |
| static uint32_t GetAuxval(uint32_t hwcap_type) { | |
| return static_cast<uint32_t>(getauxval(hwcap_type)); | |
| } | |
| // On android, probe the system's C library for getauxval(). | |
| // This is the same technique used by the android NDK cpu features library | |
| // as well as the google open-source cpu_features library. | |
| // | |
| // TODO(absl-team): Consider implementing a fallback of directly reading | |
| // /proc/self/auxval. | |
| static uint32_t GetAuxval(uint32_t hwcap_type) { | |
| // NOLINTNEXTLINE(runtime/int) | |
| typedef unsigned long (*getauxval_func_t)(unsigned long); | |
| dlerror(); // Cleaning error state before calling dlopen. | |
| void* libc_handle = dlopen("libc.so", RTLD_NOW); | |
| if (!libc_handle) { | |
| return 0; | |
| } | |
| uint32_t result = 0; | |
| void* sym = dlsym(libc_handle, "getauxval"); | |
| if (sym) { | |
| getauxval_func_t func; | |
| memcpy(&func, &sym, sizeof(func)); | |
| result = static_cast<uint32_t>((*func)(hwcap_type)); | |
| } | |
| dlclose(libc_handle); | |
| return result; | |
| } | |
| namespace absl { | |
| ABSL_NAMESPACE_BEGIN | |
| namespace random_internal { | |
| // The default return at the end of the function might be unreachable depending | |
| // on the configuration. Ignore that warning. | |
| // CPUSupportsRandenHwAes returns whether the CPU is a microarchitecture | |
| // which supports the crpyto/aes instructions or extensions necessary to use the | |
| // accelerated RandenHwAes implementation. | |
| // | |
| // 1. For x86 it is sufficient to use the CPUID instruction to detect whether | |
| // the cpu supports AES instructions. Done. | |
| // | |
| // Fon non-x86 it is much more complicated. | |
| // | |
| // 2. When ABSL_INTERNAL_USE_GETAUXVAL is defined, use getauxval() (either | |
| // the direct c-library version, or the android probing version which loads | |
| // libc), and read the hardware capability bits. | |
| // This is based on the technique used by boringssl uses to detect | |
| // cpu capabilities, and should allow us to enable crypto in the android | |
| // builds where it is supported. | |
| // | |
| // 3. Use the default for the compiler architecture. | |
| // | |
| bool CPUSupportsRandenHwAes() { | |
| // 1. For x86: Use CPUID to detect the required AES instruction set. | |
| int regs[4]; | |
| __cpuid(reinterpret_cast<int*>(regs), 1); | |
| return regs[2] & (1 << 25); // AES | |
| // 2. Use getauxval() to read the hardware bits and determine | |
| // cpu capabilities. | |
| // For Power / PPC: Expect that the cpu supports VCRYPTO | |
| // See https://members.openpowerfoundation.org/document/dl/576 | |
| // VCRYPTO should be present in POWER8 >= 2.07. | |
| // Uses Linux kernel constants from arch/powerpc/include/uapi/asm/cputable.h | |
| static const uint32_t kVCRYPTO = 0x02000000; | |
| const uint32_t hwcap = GetAuxval(AT_HWCAP2); | |
| return (hwcap & kVCRYPTO) != 0; | |
| // For ARM: Require crypto+neon | |
| // http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.ddi0500f/CIHBIBBA.html | |
| // Uses Linux kernel constants from arch/arm64/include/asm/hwcap.h | |
| static const uint32_t kNEON = 1 << 12; | |
| uint32_t hwcap = GetAuxval(AT_HWCAP); | |
| if ((hwcap & kNEON) == 0) { | |
| return false; | |
| } | |
| // And use it again to detect AES. | |
| static const uint32_t kAES = 1 << 0; | |
| const uint32_t hwcap2 = GetAuxval(AT_HWCAP2); | |
| return (hwcap2 & kAES) != 0; | |
| // For AARCH64: Require crypto+neon | |
| // http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.ddi0500f/CIHBIBBA.html | |
| static const uint32_t kNEON = 1 << 1; | |
| static const uint32_t kAES = 1 << 3; | |
| const uint32_t hwcap = GetAuxval(AT_HWCAP); | |
| return ((hwcap & kNEON) != 0) && ((hwcap & kAES) != 0); | |
| // 3. By default, assume that the compiler default. | |
| return ABSL_HAVE_ACCELERATED_AES ? true : false; | |
| // NOTE: There are some other techniques that may be worth trying: | |
| // | |
| // * Use an environment variable: ABSL_RANDOM_USE_HWAES | |
| // | |
| // * Rely on compiler-generated target-based dispatch. | |
| // Using x86/gcc it might look something like this: | |
| // | |
| // int __attribute__((target("aes"))) HasAes() { return 1; } | |
| // int __attribute__((target("default"))) HasAes() { return 0; } | |
| // | |
| // This does not work on all architecture/compiler combinations. | |
| // | |
| // * On Linux consider reading /proc/cpuinfo and/or /proc/self/auxv. | |
| // These files have lines which are easy to parse; for ARM/AARCH64 it is quite | |
| // easy to find the Features: line and extract aes / neon. Likewise for | |
| // PPC. | |
| // | |
| // * Fork a process and test for SIGILL: | |
| // | |
| // * Many architectures have instructions to read the ISA. Unfortunately | |
| // most of those require that the code is running in ring 0 / | |
| // protected-mode. | |
| // | |
| // There are several examples. e.g. Valgrind detects PPC ISA 2.07: | |
| // https://github.com/lu-zero/valgrind/blob/master/none/tests/ppc64/test_isa_2_07_part1.c | |
| // | |
| // MRS <Xt>, ID_AA64ISAR0_EL1 ; Read ID_AA64ISAR0_EL1 into Xt | |
| // | |
| // uint64_t val; | |
| // __asm __volatile("mrs %0, id_aa64isar0_el1" :"=&r" (val)); | |
| // | |
| // * Use a CPUID-style heuristic database. | |
| // | |
| // * On Apple (__APPLE__), AES is available on Arm v8. | |
| // https://stackoverflow.com/questions/45637888/how-to-determine-armv8-features-at-runtime-on-ios | |
| } | |
| } // namespace random_internal | |
| ABSL_NAMESPACE_END | |
| } // namespace absl | |