The branch OpenSSL_1_1_0-stable has been updated
via 09de9f0435790eefc082253609c8ef0ed66f8233 (commit)
from 28991705b71d47066997c0afe5060b470c5ac09f (commit)
- Log -----------------------------------------------------------------
commit 09de9f0435790eefc082253609c8ef0ed66f8233
Author: Andy Polyakov <[email protected]>
Date: Mon Mar 20 11:38:25 2017 +0100
aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
Initial IV was disregarded on SHAEXT-capable processors. Amazingly
enough bulk AES128-SHA* talk-to-yourself tests were passing.
Reviewed-by: Richard Levitte <[email protected]>
(Merged from https://github.com/openssl/openssl/pull/2992)
(cherry picked from commit 08d09628d2c9f3ef599399d8cad021a07ab98347)
-----------------------------------------------------------------------
Summary of changes:
crypto/aes/asm/aesni-sha1-x86_64.pl | 1 +
crypto/aes/asm/aesni-sha256-x86_64.pl | 1 +
2 files changed, 2 insertions(+)
diff --git a/crypto/aes/asm/aesni-sha1-x86_64.pl
b/crypto/aes/asm/aesni-sha1-x86_64.pl
index 4b979a7..7cc5a7f 100644
--- a/crypto/aes/asm/aesni-sha1-x86_64.pl
+++ b/crypto/aes/asm/aesni-sha1-x86_64.pl
@@ -1711,6 +1711,7 @@ $code.=<<___;
mov 240($key),$rounds
sub $in0,$out
movups ($key),$rndkey0 # $key[0]
+ movups ($ivp),$iv # load IV
movups 16($key),$rndkey[0] # forward reference
lea 112($key),$key # size optimization
diff --git a/crypto/aes/asm/aesni-sha256-x86_64.pl
b/crypto/aes/asm/aesni-sha256-x86_64.pl
index a5fde2e..3b03328 100644
--- a/crypto/aes/asm/aesni-sha256-x86_64.pl
+++ b/crypto/aes/asm/aesni-sha256-x86_64.pl
@@ -1307,6 +1307,7 @@ $code.=<<___;
mov 240($key),$rounds
sub $in0,$out
movups ($key),$rndkey0 # $key[0]
+ movups ($ivp),$iv # load IV
movups 16($key),$rndkey[0] # forward reference
lea 112($key),$key # size optimization
_____
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits
