12842 Commits

Author SHA1 Message Date
Brian Smith
2221b84620 Ignore BoringSSL '85081c6'. 2023-09-29 17:42:34 -07:00
Brian Smith
d00b8af699 Take BoringSSL '11d943a': Fix RBP-based unwind in fiat assembly 2023-09-29 17:42:07 -07:00
Brian Smith
606923e041 Ignore BoringSSL through 'a1403cb'. 2023-09-29 17:41:54 -07:00
Brian Smith
0d8ff226ea Take BoringSSL '9f4cad2': Fix typo in .size directives for aesni_gcm_encrypt. 2023-09-29 17:39:19 -07:00
Brian Smith
61093da695 Ignore BoringSSl through '9f8f244'. 2023-09-29 17:38:51 -07:00
Brian Smith
219c2442d3 No-op merge of BoringSSL '5edba0b'. 2023-09-29 17:38:22 -07:00
Brian Smith
2f9969b9aa Merge BoringSSL '7ce5d41': Select SHA-256 vs SHA-512 explicitly in perlasm. 2023-09-29 17:27:53 -07:00
Brian Smith
caffc3ebea Ignore BoringSSL through '39a7507'. 2023-09-29 17:20:53 -07:00
Brian Smith
7a047c0d9a No-op merge of BoringSSL 'd95b03c'. 2023-09-29 17:17:55 -07:00
Brian Smith
bab79729e2 Ignore BoringSSL through '0152f73'. 2023-09-29 17:16:05 -07:00
Brian Smith
58758d3a0d Merge BoringSSL 'd43fef7': Fix aarch64 build with GCC 2023-09-29 17:12:06 -07:00
Brian Smith
91be2ddcc2 Ignore BoringSSL through 'b98ce18'. 2023-09-29 17:11:25 -07:00
Brian Smith
ac8e58c7aa Take BoringSSL '51ed32f'. 2023-09-29 17:09:36 -07:00
Brian Smith
4d437160a7 Ignore BoringSSL '0f222e6'. 2023-09-29 17:09:23 -07:00
Brian Smith
78c62f91df Merge BoringSSL '9fc1c33': Add Intel Indirect Branch Tracking support. 2023-09-29 17:08:34 -07:00
Brian Smith
b90418509f Ignore BoringSSL through '80dcb67'. 2023-09-29 17:00:29 -07:00
Brian Smith
02b01e03d2
Merge pull request #1663 from briansmith/b/merge-boringssl-17
Merge BoringSSL through a905bbb52a7bac5099f2cbee008c6f3eae96218c
2023-09-29 16:56:47 -07:00
Brian Smith
00da1cb1f7 Merge BoringSSL 'a905bbb': Consistently include BTI markers in every assembly file 2023-09-29 14:52:41 -07:00
Brian Smith
af86d636f6 Skip BoringSSL 'e79649b': Use ProcessPrng instead of RtlGenRandom on Windows. 2023-09-29 12:24:03 -07:00
Brian Smith
033c2a0704 Ignore BoringSSL 'ee194c7'..'bc97b7a'. 2023-09-29 12:23:39 -07:00
Brian Smith
c37853c60b Take BoringSSL '9c30e53': Credit CryptOpt in third_party/fiat/README.md 2023-09-29 12:22:49 -07:00
Brian Smith
35d45b4906 Ignore BoringSSL 'd28237e'..'9fcaec6'. 2023-09-29 12:22:22 -07:00
Brian Smith
351dd6977d Skip BoringSSL '6a7d8b5': Remove p > q normalization in RSA keys. 2023-09-29 12:21:04 -07:00
Brian Smith
159b62265c Skip BoringSSL '02d2715': Implement BN_MONT_CTX_new_consttime with Montgomery reduction. 2023-09-29 12:20:16 -07:00
Brian Smith
6f5800e713 Skip BoringSSL '98e1227': Make bn_mod_lshift_consttime faster. 2023-09-29 12:18:32 -07:00
Brian Smith
f8c13b0ee1 Take BoringSSL 'ae88f19': Fix fiat asm .private_extern declaration on Apple platforms 2023-09-29 12:17:04 -07:00
Brian Smith
47ddff521e Merge commit 'd4553e0'..'754bcf6' 2023-09-29 12:16:40 -07:00
Brian Smith
317c9e3553 Take BoringSSL '23ed9d3': Add target attributes to curve25519_64_adx.h. 2023-09-29 12:15:00 -07:00
David Benjamin
bd20800c22 Add a comment for what compiler_test.cc is about
It's probably worth explaining in a comment that this is about
implementation-defined behavior, and why we consider it okay to make
assumptions like uint8_t == unsigned char.

Change-Id: Ia35248aef7895b0998831b6bac06993e845e6297
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/63285
Auto-Submit: David Benjamin <davidben@google.com>
Commit-Queue: Adam Langley <agl@google.com>
Reviewed-by: Adam Langley <agl@google.com>
2023-09-29 19:14:27 +00:00
Brian Smith
4cd5b87a85 Ignore BoringSSL '8e16c04'..'761c3ed'. 2023-09-29 12:14:19 -07:00
Brian Smith
b78f7deffb Merge BoringSSL '3f680b0': Remove a layer of indirection from fiat curve25519 assembly 2023-09-29 12:13:26 -07:00
Brian Smith
9f45b930dc Ignore BoringSSL '99d3c22'..'aaf771e'. 2023-09-29 12:12:36 -07:00
Brian Smith
7ee3bb8289 Take BoringSSL 'd995d82': Add .type, .hidden, and .size to the new fiat ADX assembly. 2023-09-29 12:10:48 -07:00
Brian Smith
0a12e31e02 Partial merge of BoringSSL '9d4f833': Use ADX asm for Curve25519 base-point multiplication.
Add the code but don't plumb it in.
2023-09-29 12:10:32 -07:00
Brian Smith
787b7fdbcf Ignore BoringSSL 'f4a4e27'. 2023-09-29 12:04:38 -07:00
Brian Smith
e0948076a5 Partial merge of BoringSSL '43f8891': Add saturated X25519 for x86_64+ADX running Linux
Add the new code but don't plumb it in yet.
2023-09-29 12:04:04 -07:00
Brian Smith
8730214c8f Skip BoringSSL 'df9955b': Handle ChaCha20 counter overflow consistently.
*ring* doesn't (intentionally) overflow any counters.
2023-09-29 11:58:40 -07:00
Brian Smith
c274480f40 NFC: Remove more unused constant-time utilities. 2023-09-29 11:54:54 -07:00
Brian Smith
3a77fe16f8
Merge pull request #1659 from briansmith/b/merge-boringssl-16
Merge BoringSSL through d605df5b6f8462c1f3005da82d718ec067f46b70
2023-09-29 11:52:02 -07:00
Brian Smith
2e6d759e56 NFC: Remove dead code from syncing with BoringSSL.
*ring* doesn't use the BoringSSL code that uses these constant-time
utilities.
2023-09-29 10:30:01 -07:00
Brian Smith
fbd505fa80
Merge pull request #1661 from briansmith/revert-1657-unsafe-cleanup
Revert "Document or remove some uses of `unsafe`"
2023-09-29 10:15:01 -07:00
Brian Smith
de138ee2e7
Revert "Document or remove some uses of unsafe" 2023-09-29 10:14:25 -07:00
Brian Smith
238ff8b191
Merge pull request #1657 from joshlf/unsafe-cleanup
Document or remove some uses of `unsafe`
2023-09-29 10:14:19 -07:00
Brian Smith
7b59320e3e Merge BoringSSL 'd605df5': Use packed representation for large Curve25519 table 2023-09-28 19:58:53 -07:00
Brian Smith
2d8fbe09e9 Import currently-unused utilities in crypto/internal.h
Bring these in as they were in 4a0393fcf37d7dbd090a5bb2293601a9ec7605da.
The next merge will modify these.
2023-09-28 18:14:14 -07:00
Brian Smith
2270dc6943 Rename crypto_word back to crypto_word_t.
Originally I was trying to be pedantic and avoid any use of `_t`-
suffixed names. However, this hasn't really accomplished anything
except annoying me, so just do what BoringSSL does.
2023-09-28 18:11:05 -07:00
Brian Smith
8e3548f082 Ignore BoringSSL 'be0fdf7'..'4a0393f' 2023-09-28 17:54:49 -07:00
Brian Smith
03de1fa014 Merge BoringSSL '55b069d': Add a value barrier when checking for point doubling. 2023-09-28 17:43:49 -07:00
Brian Smith
12d7b067db Ignore BoringSSL 'e30750c'..'6cf9820'. 2023-09-28 17:32:52 -07:00
Brian Smith
30171c0829 Partial merge of BoringSSL 'da757e6': Add constant-time validation for curve25519.
Don't add the constant-time validation tests since we need to develop the
framework for it first.

Do add the public-from-private test.
2023-09-28 17:30:25 -07:00