Benchmark application

[onvej-sl]

This pull request implements an application that benchmarks various cryptographic primitives.

The application is hidden behind a compilation flag:
BENCHMARK=1 make -C core build_firmware

Using trezorctl, you can:

• List all benchmarks or only the benchmarks matching a given pattern:

$ trezorctl benchmark list-names
crypto/cipher/aes128-ecb/decrypt
crypto/cipher/aes128-ecb/encrypt
crypto/cipher/chacha20poly1305/decrypt
crypto/cipher/chacha20poly1305/encrypt
crypto/curve/curve25519/multiply
crypto/curve/curve25519/publickey
crypto/curve/ed25519/publickey
crypto/curve/ed25519/sign
crypto/curve/ed25519/verify
crypto/curve/nist256p1/multiply
crypto/curve/nist256p1/publickey
crypto/curve/nist256p1/sign
crypto/curve/nist256p1/verify
crypto/curve/secp256k1/multiply
crypto/curve/secp256k1/publickey
crypto/curve/secp256k1/sign
crypto/curve/secp256k1/verify
crypto/hash/blake256
crypto/hash/blake2b
crypto/hash/blake2s
crypto/hash/groestl512
crypto/hash/ripemd160
crypto/hash/sha1
crypto/hash/sha256
crypto/hash/sha3_256
crypto/hash/sha3_512
crypto/hash/sha512

$ trezorctl benchmark list-names "crypto/curve/*/sign"
crypto/curve/ed25519/sign
crypto/curve/nist256p1/sign
crypto/curve/secp256k1/sign

• Run all benchmarks or only the benchmarks matching a given pattern:

$ trezorctl benchmark run
crypto/cipher/aes128-ecb/decrypt: 0.96 MB/s
crypto/cipher/aes128-ecb/encrypt: 0.98 MB/s
crypto/cipher/aesgcm128/decrypt: 0.31 MB/s
crypto/cipher/aesgcm128/encrypt: 0.30 MB/s
crypto/cipher/aesgcm256/decrypt: 0.29 MB/s
crypto/cipher/aesgcm256/encrypt: 0.29 MB/s
crypto/cipher/chacha20poly1305/decrypt: 2.1 MB/s
crypto/cipher/chacha20poly1305/encrypt: 2.1 MB/s
crypto/curve/curve25519/multiply: 8.8 ms
crypto/curve/curve25519/publickey: 3.9 ms
crypto/curve/ed25519/publickey: 4.1 ms
crypto/curve/ed25519/sign: 8.3 ms
crypto/curve/ed25519/verify: 11 ms
crypto/curve/nist256p1/multiply: 110 ms
crypto/curve/nist256p1/publickey: 23 ms
crypto/curve/nist256p1/sign: 27 ms
crypto/curve/nist256p1/verify: 130 ms
crypto/curve/secp256k1/multiply: 110 ms
crypto/curve/secp256k1/publickey: 17 ms
crypto/curve/secp256k1/sign: 17 ms
crypto/curve/secp256k1/verify: 8.2 ms
crypto/hash/blake256: 1.5 MB/s
crypto/hash/blake2b: 2.3 MB/s
crypto/hash/blake2s: 3.1 MB/s
crypto/hash/groestl512: 0.16 MB/s
crypto/hash/ripemd160: 5.5 MB/s
crypto/hash/sha1: 2.7 MB/s
crypto/hash/sha256: 1.9 MB/s
crypto/hash/sha3_256: 0.63 MB/s
crypto/hash/sha3_512: 0.33 MB/s
crypto/hash/sha512: 1.1 MB/s

[matejcik]

note that there's now a common section SCONS_OPTS where this will go when you're rebasing oh it's not here yet, it's in #4234. not sure when that will land so you can either go ahead here or wait for it