[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20150523112747.GA22121@openwall.com>
Date: Sat, 23 May 2015 14:27:47 +0300
From: Aleksey Cherepanov <lyosha@...nwall.com>
To: john-dev@...ts.openwall.com
Subject: Re: interleaving in SHA256 & SHA512
On Sat, May 23, 2015 at 10:55:38AM +0800, Lei Zhang wrote:
> I managed to add interleaving to SHA256 & SHA512, but the work is incomplete yet. When the interleaving factor is set other than 1, SHA256 works with a few formats, and SHA512 only works with sapH currently. Below are some statistics obtained from experimenting various interleaving factors:
I am trying interleave in john-devkit on raw-sha512 with sse.
x1 gives me
4852 asm instructions and
24424 bytes of code
Raw: 2244K c/s real, 2244K c/s virtual
x2:
11066 asm
54208 bytes of code
Raw: 1404K c/s real, 1407K c/s virtual
That's with fully unrolled main cycle and 16x unroll of setup W cycle
computing only one "int" (so the code ~5% smaller than usual). If I
don't unroll setup W cycle, then I get a bit better results:
9896 asm
45913 bytes of code
Raw: 1571K c/s real, 1571K c/s virtual
I count instructions and bytes of code with the following 2 commands:
objdump -d JohnTheRipper/src/rawSHA512_my_fmt_plug.o | sed -ne '/<crypt_all>/,/^$/ p' > asm && wc -l asm
perl -pe 's/[^\t]*\t//; s/\t.*//' asm | tail -n +2 | perl -pe 's/\s+//g' | perl -lne 'print(length($_) / 2, " bytes of code")'
It's on core i7 950, with 64kb L1 cache. So there should be only 32kb
of cache for code. So I guess I hit L1 code cache. It may be different
with sha256 that is smaller (64 rounds vs 80 rounds). I tried
different layouts of data. I may try to not unroll main cycle and use
higher interleave factor. So there may be a follow-up mail.
Thanks!
--
Regards,
Aleksey Cherepanov
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
