Page History

...

• Latest Draft Scalar Crypto Specification (v0.9.3)
  • This version is being sent out for wider review from Horizontal Committees, and will be subject to a closer architectural review
  • Has been submitted for architectural review (30/June/2021).
  • It includes descriptions for all of the Bitmanip instructions we use.

...

Architecture & Opcode consistency review

• Opcodes will be subject to architecture and consistency review in the coming weeks (starting 1330/June/21)
• The Bit-Manipulation shared subsets are being reviewed first as part of Bit-Manipulation specification review
  • Proposed as Zbkc (clmul) Zbkx (xperm) and Zbkb (other specific crypto-required bit-manipulation commands)
• The Proposed Scalar Crypto-unique subsets are next in line for review:
  
• K (Krypto): 
  • Zkn (full NIST Suite):  ZKne (NIST encrypt suite), ZKnd (NIST decrypt suite), ZKnh (NIST hash suite), Zbkc, Zbkx, Zbkb (see above)
  • Zkr (random entropy source)
Zks (full ShangMi Suite):  Zksed (SM4 encrypt/decrypt suite), Zksh (SM3 hash suite), Zbkc, Zbkx, Zbkb (see above)See the status of the review here.

Architecture Tests

• Test plan for the scalar-crypto specific instructions is available.
• Imperas have a complete set of tests, written to the existing test plan, for the scalar crypto instructions and the bitmanip instructions we borrow.
  • These have been merged into the main test suite as of PR#177, with many thanks to Imperas for the contribution.
    • Spike, OVPSim and Sail all agree on the test signatures.
  • They form a base we can use to develop prototype implementations / Spike / SAIL / QEMU very easily and quickly.
• Upstream Spike support for enabling it to work with the K test suite is being added in PR#687.
• IIT Madras are also looking at writing the scalar crypto tests for integration into the official architectural tests repo as well.
  • Agreed SoW for IITM
  • They are re-implementing the tests as part of the blessed coverage and test generation tooling.
    • Making good progress with the simple test patterns for scalar-crypto specific instructions A/O April 7'th '21
  • We then switch over to using the IIT tests when they are finished, since they will be easier to maintain/extend going forward than the Imperas tests.
• YAML config changes for K have been merged in. See here.
• Status from IIT Madras as on 17-Jun:
  • All test cases and coverage reports has been generated and presented.
  • If there are any changes in future on these that is required in future, IIT Madras will enhance the scripts as per requirements.
• Status from IIT Madras as on 20-May:
  • Real world test cases as per the test plan has been generated.
  • Currently waiting for the fixed toolchain with K extension from PLCT to test the generated test cases. All the test cases are working fine when we run against the patched toolchain
  • A PR has been raised with a pull request for this suite to be reviewed and merged in the riscv-arch tests github repo.
• Status from IIT Madras as on 12-May:
  • Coverage report for all developed cases in CTG/ISAC has been generated and it is reported as 100%
  • Currently real world test cases are being developed as per test plan and will be completed and send for review by beginning of next week
• Status from IIT Madras as on 05-May:
  • Resolved issues in running the rv64ik toolchain after interacting with PLCT and compile the relevant tests generated from CTG and run them on spike
  • Currently resolving issues in the running the rv64ibk toolchain. Once this is done, will generate the coverage report of the test cases built till now and share with team.
• Status from IIT Madras as on 26-Apr:
  • Completed the coverage points specification for all 32-bit and 64-bit instructions
  • Generated test cases from the coverage points
  • Currently working on trying to install the scalar crypto enabled toolchain.

...