Bitcoin Core  21.99.0
P2P Digital Currency
chacha_poly_aead.cpp
Go to the documentation of this file.
1 // Copyright (c) 2019-2020 The Bitcoin Core developers
2 // Distributed under the MIT software license, see the accompanying
3 // file COPYING or http://www.opensource.org/licenses/mit-license.php.
4 
5 
6 #include <bench/bench.h>
8 #include <crypto/poly1305.h> // for the POLY1305_TAGLEN constant
9 #include <hash.h>
10 
11 #include <assert.h>
12 #include <limits>
13 
14 /* Number of bytes to process per iteration */
15 static constexpr uint64_t BUFFER_SIZE_TINY = 64;
16 static constexpr uint64_t BUFFER_SIZE_SMALL = 256;
17 static constexpr uint64_t BUFFER_SIZE_LARGE = 1024 * 1024;
18 
19 static const unsigned char k1[32] = {0};
20 static const unsigned char k2[32] = {0};
21 
22 static ChaCha20Poly1305AEAD aead(k1, 32, k2, 32);
23 
24 static void CHACHA20_POLY1305_AEAD(benchmark::Bench& bench, size_t buffersize, bool include_decryption)
25 {
26  std::vector<unsigned char> in(buffersize + CHACHA20_POLY1305_AEAD_AAD_LEN + POLY1305_TAGLEN, 0);
27  std::vector<unsigned char> out(buffersize + CHACHA20_POLY1305_AEAD_AAD_LEN + POLY1305_TAGLEN, 0);
28  uint64_t seqnr_payload = 0;
29  uint64_t seqnr_aad = 0;
30  int aad_pos = 0;
31  uint32_t len = 0;
32  bench.batch(buffersize).unit("byte").run([&] {
33  // encrypt or decrypt the buffer with a static key
34  const bool crypt_ok_1 = aead.Crypt(seqnr_payload, seqnr_aad, aad_pos, out.data(), out.size(), in.data(), buffersize, true);
35  assert(crypt_ok_1);
36 
37  if (include_decryption) {
38  // if we decrypt, include the GetLength
39  const bool get_length_ok = aead.GetLength(&len, seqnr_aad, aad_pos, in.data());
40  assert(get_length_ok);
41  const bool crypt_ok_2 = aead.Crypt(seqnr_payload, seqnr_aad, aad_pos, out.data(), out.size(), in.data(), buffersize, true);
42  assert(crypt_ok_2);
43  }
44 
45  // increase main sequence number
46  seqnr_payload++;
47  // increase aad position (position in AAD keystream)
50  aad_pos = 0;
51  seqnr_aad++;
52  }
53  if (seqnr_payload + 1 == std::numeric_limits<uint64_t>::max()) {
54  // reuse of nonce+key is okay while benchmarking.
55  seqnr_payload = 0;
56  seqnr_aad = 0;
57  aad_pos = 0;
58  }
59  });
60 }
61 
63 {
65 }
66 
68 {
70 }
71 
73 {
75 }
76 
78 {
80 }
81 
83 {
85 }
86 
88 {
90 }
91 
92 // Add Hash() (dbl-sha256) bench for comparison
93 
94 static void HASH(benchmark::Bench& bench, size_t buffersize)
95 {
96  uint8_t hash[CHash256::OUTPUT_SIZE];
97  std::vector<uint8_t> in(buffersize,0);
98  bench.batch(in.size()).unit("byte").run([&] {
99  CHash256().Write(in).Finalize(hash);
100  });
101 }
102 
103 static void HASH_64BYTES(benchmark::Bench& bench)
104 {
105  HASH(bench, BUFFER_SIZE_TINY);
106 }
107 
108 static void HASH_256BYTES(benchmark::Bench& bench)
109 {
110  HASH(bench, BUFFER_SIZE_SMALL);
111 }
112 
113 static void HASH_1MB(benchmark::Bench& bench)
114 {
115  HASH(bench, BUFFER_SIZE_LARGE);
116 }
117 
chacha_poly_aead.h
ankerl::nanobench::Bench::batch
ANKERL_NANOBENCH(NODISCARD) std Bench & batch(T b) noexcept
Sets the batch size.
CHash256::Write
CHash256 & Write(Span< const unsigned char > input)
Definition: hash.h:37
BENCHMARK
BENCHMARK(CHACHA20_POLY1305_AEAD_64BYTES_ONLY_ENCRYPT)
ankerl::nanobench::Bench
Main entry point to nanobench's benchmarking facility.
Definition: nanobench.h:583
HASH_256BYTES
static void HASH_256BYTES(benchmark::Bench &bench)
Definition: chacha_poly_aead.cpp:108
CHACHA20_ROUND_OUTPUT
static constexpr int CHACHA20_ROUND_OUTPUT
Definition: chacha_poly_aead.h:14
CHACHA20_POLY1305_AEAD
static void CHACHA20_POLY1305_AEAD(benchmark::Bench &bench, size_t buffersize, bool include_decryption)
Definition: chacha_poly_aead.cpp:24
CHACHA20_POLY1305_AEAD_64BYTES_ONLY_ENCRYPT
static void CHACHA20_POLY1305_AEAD_64BYTES_ONLY_ENCRYPT(benchmark::Bench &bench)
Definition: chacha_poly_aead.cpp:62
poly1305.h
CHash256::OUTPUT_SIZE
static const size_t OUTPUT_SIZE
Definition: hash.h:28
BUFFER_SIZE_SMALL
static constexpr uint64_t BUFFER_SIZE_SMALL
Definition: chacha_poly_aead.cpp:16
ChaCha20Poly1305AEAD
Definition: chacha_poly_aead.h:117
k2
static const unsigned char k2[32]
Definition: chacha_poly_aead.cpp:20
ankerl::nanobench::Bench::run
Bench & run(char const *benchmarkName, Op &&op)
Repeatedly calls op() based on the configuration, and performs measurements.
Definition: nanobench.h:1134
ankerl::nanobench::Bench::unit
Bench & unit(char const *unit)
Sets the operation unit.
CHash256::Finalize
void Finalize(Span< unsigned char > output)
Definition: hash.h:30
CHACHA20_POLY1305_AEAD_1MB_ONLY_ENCRYPT
static void CHACHA20_POLY1305_AEAD_1MB_ONLY_ENCRYPT(benchmark::Bench &bench)
Definition: chacha_poly_aead.cpp:72
CHACHA20_POLY1305_AEAD_64BYTES_ENCRYPT_DECRYPT
static void CHACHA20_POLY1305_AEAD_64BYTES_ENCRYPT_DECRYPT(benchmark::Bench &bench)
Definition: chacha_poly_aead.cpp:77
aead
static ChaCha20Poly1305AEAD aead(k1, 32, k2, 32)
bench.h
POLY1305_TAGLEN
#define POLY1305_TAGLEN
Definition: poly1305.h:12
ChaCha20Poly1305AEAD::GetLength
bool GetLength(uint32_t *len24_out, uint64_t seqnr_aad, int aad_pos, const uint8_t *ciphertext)
decrypts the 3 bytes AAD data and decodes it into a uint32_t field
Definition: chacha_poly_aead.cpp:106
CHACHA20_POLY1305_AEAD_256BYTES_ONLY_ENCRYPT
static void CHACHA20_POLY1305_AEAD_256BYTES_ONLY_ENCRYPT(benchmark::Bench &bench)
Definition: chacha_poly_aead.cpp:67
HASH_64BYTES
static void HASH_64BYTES(benchmark::Bench &bench)
Definition: chacha_poly_aead.cpp:103
BUFFER_SIZE_TINY
static constexpr uint64_t BUFFER_SIZE_TINY
Definition: chacha_poly_aead.cpp:15
HASH_1MB
static void HASH_1MB(benchmark::Bench &bench)
Definition: chacha_poly_aead.cpp:113
HASH
static void HASH(benchmark::Bench &bench, size_t buffersize)
Definition: chacha_poly_aead.cpp:94
ChaCha20Poly1305AEAD::Crypt
bool Crypt(uint64_t seqnr_payload, uint64_t seqnr_aad, int aad_pos, unsigned char *dest, size_t dest_len, const unsigned char *src, size_t src_len, bool is_encrypt)
Encrypts/decrypts a packet seqnr_payload, the message sequence number seqnr_aad, the messages AAD seq...
Definition: chacha_poly_aead.cpp:42
CHash256
A hasher class for Bitcoin's 256-bit hash (double SHA-256).
Definition: hash.h:24
CHACHA20_POLY1305_AEAD_1MB_ENCRYPT_DECRYPT
static void CHACHA20_POLY1305_AEAD_1MB_ENCRYPT_DECRYPT(benchmark::Bench &bench)
Definition: chacha_poly_aead.cpp:87
CHACHA20_POLY1305_AEAD_256BYTES_ENCRYPT_DECRYPT
static void CHACHA20_POLY1305_AEAD_256BYTES_ENCRYPT_DECRYPT(benchmark::Bench &bench)
Definition: chacha_poly_aead.cpp:82
k1
static const unsigned char k1[32]
Definition: chacha_poly_aead.cpp:19
assert
assert(std::addressof(::ChainstateActive().CoinsTip())==std::addressof(coins_cache))
BUFFER_SIZE_LARGE
static constexpr uint64_t BUFFER_SIZE_LARGE
Definition: chacha_poly_aead.cpp:17
CHACHA20_POLY1305_AEAD_AAD_LEN
static constexpr int CHACHA20_POLY1305_AEAD_AAD_LEN
Definition: chacha_poly_aead.h:13