Add `VBOOT_X86_RSA_ACCELERATION' Kconfig option to enable SSE2 instruction set implementation of modulus exponentiation which is part of the RSA signature verification process. This option is enabled on CHROMEOS. | modpow() function call | original on rex0 | SSE2 on rex0 | |------------------------+------------------+--------------| | depthcharge - step 1 | 0.547 | 0.288 | | depthcharge - step 2 | 0.152 | 0.081 | | depthcharge - step 3 | 0.164 | 0.079 | |------------------------+------------------+--------------| | Total (ms) | 0.863 | 0.448 | | modpow() function call | original on brya0 | SSE2 on rex0 | |------------------------+-------------------+--------------| | depthcharge - step 1 | 0.693 | 0.248 | | depthcharge - step 2 | 0.172 | 0.065 | | depthcharge - step 3 | 0.223 | 0.067 | |------------------------+-------------------+--------------| | Total (ms) | 1.088 | 0.38 | BUG=b:312709384 TEST=modular exponentiation is about twice faster on rex0 and brya0 Change-Id: I801ebd7839261c6bd07fb218e1e36a7108e219bf Signed-off-by: Jeremy Compostella <jeremy.compostella@intel.com> Reviewed-on: https://review.coreboot.org/c/coreboot/+/79290 Tested-by: build bot (Jenkins) <no-reply@coreboot.org> Reviewed-by: Yu-Ping Wu <yupingso@google.com>
		
			
				
	
	
		
			53 lines
		
	
	
		
			1.4 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
			
		
		
	
	
			53 lines
		
	
	
		
			1.4 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
| # SPDX-License-Identifier: BSD-3-Clause
 | |
| 
 | |
| config VBOOT_LIB
 | |
| 	bool "Compile verified boot (vboot) library"
 | |
| 	default y if CHROMEOS
 | |
| 	default n
 | |
| 	help
 | |
| 	  This option enables compiling and building vboot libraries vboot_fw and tlcl.
 | |
| 
 | |
| if VBOOT_LIB
 | |
| 
 | |
| config VBOOT_CBFS_INTEGRATION
 | |
| 	bool "Enable vboot and CBFS integration"
 | |
| 	default n
 | |
| 	depends on CBFS_VERIFICATION
 | |
| 	help
 | |
| 	  Say yes to request reboot on CBFS file hash mismatch in non-recovery mode.
 | |
| 
 | |
| config VBOOT_TPM2_MODE
 | |
| 	bool "TPM2 Mode"
 | |
| 	default y
 | |
| 	help
 | |
| 	  This option enables TPM 2.0 support in vboot. Disabling it allows using TPM 1.2.
 | |
| 
 | |
| config VBOOT_X86_SHA_EXT
 | |
| 	bool "x86 SHA Extension"
 | |
| 	default y if CHROMEOS
 | |
| 	default n
 | |
| 	depends on ARCH_X86
 | |
| 	help
 | |
| 	  This option enables SHA256 implementation using x86 SHA processor extension
 | |
| 	  instructions: sha256msg1, sha256msg2, sha256rnds2.
 | |
| 
 | |
| config VBOOT_X86_RSA_ACCELERATION
 | |
| 	bool "Use SSE2 instructions for RSA signature verification"
 | |
| 	default y if CHROMEOS
 | |
| 	default n
 | |
| 	depends on ARCH_X86
 | |
| 	help
 | |
| 	  Use paddq, pmuludq, psrlq, punpckldq and punpcklqdq SSE2
 | |
| 	  instructions to accelerate the modulus exponentiation which
 | |
| 	  is part of the RSA signature verification process.
 | |
| 
 | |
| config VBOOT_SHA_ARMV8_CE
 | |
| 	bool "SHA256 implementation using ARMv8 Crypto Extension"
 | |
| 	default y if CHROMEOS
 | |
| 	default n
 | |
| 	depends on ARCH_ARM64
 | |
| 	help
 | |
| 	  This option enables SHA256 implementation using ARMv8 Crypto Extension.
 | |
| 
 | |
| endif
 |