Repository navigation
feat(ipsec): HMAC×17 流数参数化——两个既有缺陷修复 + VL=128 命题实证 (all-VL Phase 2 P4) #284
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -4,6 +4,11 @@ | |
| * must match OpenSSL bit-for-bit on a large vector set before being used | ||
| * as ipsec SVE test golden bases. | ||
| * | ||
| * All-VL Phase 2 P4: the stream count is the runtime lane count | ||
| * (svcntw()/svcntd(), one message per lane, 128..1024-bit VL), matching | ||
| * the parameterized kernels — the vector-set size per round scales with | ||
| * the host VL (5200 vectors at VL=256, more at wider VL). | ||
| * | ||
| * Build: g++ -O2 -march=armv8.2-a+sve -I<openssl install include> \ | ||
| * this_file.c -o verifier -L<lib> -l:libcrypto.a | ||
| */ | ||
|
|
@@ -44,25 +49,37 @@ static std::vector<uint8_t> pad_sha512(const uint8_t *msg, size_t len) { | |
| int main() { | ||
| int fails = 0, total = 0; | ||
|
|
||
| /* All-VL gate (adversarial review Important-1): arrays are sized to | ||
| the 1024-bit cap; a wider runtime VL would overflow them — mirror | ||
| the gem5 kernel's exit-3 guard. */ | ||
| if ((int)svcntw() < 4 || (int)svcntw() > SVE_SHA_STREAMS_MAX_32 || | ||
| (int)svcntd() < 2 || (int)svcntd() > SVE_SHA_STREAMS_MAX_64) { | ||
| fprintf(stderr, "unsupported VL (svcntw=%d svcntd=%d; arrays " | ||
| "sized for 128..1024-bit)\n", | ||
| (int)svcntw(), (int)svcntd()); | ||
| return 3; | ||
| } | ||
|
|
||
| /* ---------- SHA-256 (streams = svcntw()) ---------- */ | ||
| for (int round = 0; round < 200; ++round) { | ||
| const int n = (int)svcntw(); /* all-VL: runtime lane count */ | ||
| size_t len = lcg() % 512; /* 0..511 字节 */ | ||
| size_t nblocks = ((len + 9 + 63) / 64); | ||
| uint8_t msgs[SVE_SHA_STREAMS_MAX_32][512]; | ||
| for (int s = 0; s < n; ++s) | ||
| for (size_t i = 0; i < len; ++i) | ||
| msgs[s][i] = (uint8_t)lcg(); | ||
|
|
||
| const uint8_t *mp[SVE_SHA_STREAMS_MAX_32]; | ||
| std::vector<uint8_t> padded[SVE_SHA_STREAMS_MAX_32]; | ||
| for (int s = 0; s < n; ++s) { | ||
| padded[s] = pad_sha256(msgs[s], len); | ||
| mp[s] = padded[s].data(); | ||
| } | ||
| uint32_t st[8][SVE_SHA_STREAMS_MAX_32]; | ||
| sha256_compress_x8(st, mp, (uint32_t)nblocks, sha256_iv); | ||
|
|
||
| for (int s = 0; s < n; ++s) { | ||
| uint8_t digest[32]; | ||
| unsigned dlen = 0; | ||
| EVP_Digest(msgs[s], len, digest, &dlen, EVP_sha256(), nullptr); | ||
|
|
@@ -82,23 +99,24 @@ int main() { | |
| } | ||
| } | ||
|
|
||
| /* ---------- SHA-224 (IV 不同 + 截断 7 字; streams = svcntw()) ---------- */ | ||
| for (int round = 0; round < 100; ++round) { | ||
| const int n = (int)svcntw(); | ||
| size_t len = lcg() % 256; | ||
| size_t nblocks = ((len + 9 + 63) / 64); | ||
| uint8_t msgs[SVE_SHA_STREAMS_MAX_32][256]; | ||
| for (int s = 0; s < n; ++s) | ||
| for (size_t i = 0; i < len; ++i) | ||
| msgs[s][i] = (uint8_t)lcg(); | ||
| const uint8_t *mp[SVE_SHA_STREAMS_MAX_32]; | ||
| std::vector<uint8_t> padded[SVE_SHA_STREAMS_MAX_32]; | ||
| for (int s = 0; s < n; ++s) { | ||
| padded[s] = pad_sha256(msgs[s], len); | ||
| mp[s] = padded[s].data(); | ||
| } | ||
| uint32_t st[8][SVE_SHA_STREAMS_MAX_32]; | ||
| sha256_compress_x8(st, mp, (uint32_t)nblocks, sha224_iv); | ||
| for (int s = 0; s < n; ++s) { | ||
| uint8_t digest[28]; | ||
| unsigned dlen = 0; | ||
| EVP_Digest(msgs[s], len, digest, &dlen, EVP_sha224(), nullptr); | ||
|
|
@@ -115,23 +133,24 @@ int main() { | |
| } | ||
| } | ||
|
|
||
| /* ---------- SHA-512 (streams = svcntd()) ---------- */ | ||
| for (int round = 0; round < 200; ++round) { | ||
| const int n = (int)svcntd(); | ||
| size_t len = lcg() % 1024; | ||
| size_t nblocks = ((len + 17 + 127) / 128); | ||
| uint8_t msgs[SVE_SHA_STREAMS_MAX_64][1024]; | ||
| for (int s = 0; s < n; ++s) | ||
| for (size_t i = 0; i < len; ++i) | ||
| msgs[s][i] = (uint8_t)lcg(); | ||
| const uint8_t *mp[SVE_SHA_STREAMS_MAX_64]; | ||
| std::vector<uint8_t> padded[SVE_SHA_STREAMS_MAX_64]; | ||
| for (int s = 0; s < n; ++s) { | ||
| padded[s] = pad_sha512(msgs[s], len); | ||
| mp[s] = padded[s].data(); | ||
| } | ||
| uint64_t st[8][SVE_SHA_STREAMS_MAX_64]; | ||
| sha512_compress_x4(st, mp, (uint32_t)nblocks, sha512_iv); | ||
| for (int s = 0; s < n; ++s) { | ||
| uint8_t digest[64]; | ||
| unsigned dlen = 0; | ||
| EVP_Digest(msgs[s], len, digest, &dlen, EVP_sha512(), nullptr); | ||
|
|
@@ -145,23 +164,24 @@ int main() { | |
| } | ||
| } | ||
|
|
||
| /* ---------- SHA-384 (streams = svcntd()) ---------- */ | ||
| for (int round = 0; round < 100; ++round) { | ||
| const int n = (int)svcntd(); | ||
| size_t len = lcg() % 512; | ||
| size_t nblocks = ((len + 17 + 127) / 128); | ||
| uint8_t msgs[SVE_SHA_STREAMS_MAX_64][512]; | ||
| for (int s = 0; s < n; ++s) | ||
| for (size_t i = 0; i < len; ++i) | ||
| msgs[s][i] = (uint8_t)lcg(); | ||
| const uint8_t *mp[SVE_SHA_STREAMS_MAX_64]; | ||
| std::vector<uint8_t> padded[SVE_SHA_STREAMS_MAX_64]; | ||
| for (int s = 0; s < n; ++s) { | ||
| padded[s] = pad_sha512(msgs[s], len); | ||
| mp[s] = padded[s].data(); | ||
| } | ||
| uint64_t st[8][SVE_SHA_STREAMS_MAX_64]; | ||
| sha512_compress_x4(st, mp, (uint32_t)nblocks, sha384_iv); | ||
| for (int s = 0; s < n; ++s) { | ||
| uint8_t digest[48]; | ||
| unsigned dlen = 0; | ||
| EVP_Digest(msgs[s], len, digest, &dlen, EVP_sha384(), nullptr); | ||
|
|
@@ -175,23 +195,24 @@ int main() { | |
| } | ||
| } | ||
|
|
||
| /* ---------- SHA-1 (streams = svcntw()) ---------- */ | ||
| for (int round = 0; round < 200; ++round) { | ||
| const int n = (int)svcntw(); | ||
| size_t len = lcg() % 512; | ||
| size_t nblocks = ((len + 9 + 63) / 64); | ||
| uint8_t msgs[SVE_SHA_STREAMS_MAX_32][512]; | ||
| for (int s = 0; s < n; ++s) | ||
| for (size_t i = 0; i < len; ++i) | ||
| msgs[s][i] = (uint8_t)lcg(); | ||
| const uint8_t *mp[SVE_SHA_STREAMS_MAX_32]; | ||
| std::vector<uint8_t> padded[SVE_SHA_STREAMS_MAX_32]; | ||
| for (int s = 0; s < n; ++s) { | ||
| padded[s] = pad_sha256(msgs[s], len); | ||
| mp[s] = padded[s].data(); | ||
| } | ||
| uint32_t st[5][SVE_SHA_STREAMS_MAX_32]; | ||
| sha1_compress_x8(st, mp, (uint32_t)nblocks); | ||
| for (int s = 0; s < n; ++s) { | ||
| uint8_t digest[20]; | ||
| unsigned dlen = 0; | ||
| EVP_Digest(msgs[s], len, digest, &dlen, EVP_sha1(), nullptr); | ||
|
|
@@ -208,7 +229,8 @@ int main() { | |
| } | ||
| } | ||
|
|
||
| printf("total=%d fails=%d (svcntw=%zu svcntd=%zu) → %s\n", total, fails, | ||
| (size_t)svcntw(), (size_t)svcntd(), | ||
| fails == 0 ? "ALL MATCH ✓ (kernels verified against OpenSSL)" : "MISMATCH ✗"); | ||
| return fails != 0; | ||
| } | ||
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
[claude] [Important] 正确性: 17 个测试文件的新门控/布线胶水层（arm64_require_sve_vl 调用、nstreams=svl/4、[4,32] 检查、漂移守卫、容量守卫）在任何 VL 下零执行证据——PR 标题『VL=128 命题实证』的实证对象只是 gem5 sve_sha_dual 内核副本，而非这 17 个测试本身；本机只验证了编译与 SKIP 路径。
证据: progress-log:653-654 自述每文件验证仅为 'TU 零告警+skip 干净(框架编译特性门)+终态全量构建零告警+zstd19 pass'（=编译+宿主机 SKIP 路径，宿主机 0xd01 无 SVE）；:645-648 gem5 证据是 'sve_sha_dual' harness，首轮评审发现的 '&sw[0][s]'、'mini-HMAC' 表明它是 harness 本地精简副本（非同源测试文件）；:655 自认 'verify.cpp 的 5200 向量 OpenSSL 重验需 SVE 硬件(本机仅编译验证)'。即 ipsec_aes128_cbc_hmac_sha1_sve.cpp:121 的 require 调用、:125 的范围检查、:191-195 的漂移守卫、sve_hmac.h 的容量守卫（这些恰是本 PR 新增的安全机制本身）从未在任何硬件/仿真上执行过——而 8.2 缺陷（VL≥512 时想当然的 [8] 定维）正藏在同类的'显然正确'边界代码里。违反 CLAUDE.md 规则 2（宿主不可跑的功能变更须 gem5-fi 验证，禁止以 SKIP 路径顶替功能验证；PR #242 先例）。