9c30e5389c
Change-Id: I824560a5bddb9183e61c663ca4cbdc4530177e66 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/60945 Reviewed-by: Adam Langley <agl@google.com> Auto-Submit: Andres Erbsen <andreser@google.com> Commit-Queue: Adam Langley <agl@google.com> Reviewed-by: Bob Beck <bbe@google.com>
24 lines
1.2 KiB
Markdown
24 lines
1.2 KiB
Markdown
# Fiat Cryptography
|
|
|
|
The files in this directory are generated using [Fiat
|
|
Cryptography](https://github.com/mit-plv/fiat-crypto) from the associated
|
|
library of arithmetic-implementation templates. These files are included under
|
|
the MIT license. (See LICENSE file.)
|
|
|
|
Some files are included directly from the `fiat-c/src` directory of the Fiat
|
|
Cryptography repository. Their contents are `#include`d into source files, so
|
|
we rename them to `.h`. Implementations that use saturated arithmetic on 64-bit
|
|
words are further manually edited to use platform-appropriate incantations for
|
|
operations such as addition with carry; these changes are marked with "`NOTE:
|
|
edited after generation`".
|
|
|
|
# CryptOpt
|
|
|
|
Files in the `asm` directory are compiled from Fiat-Cryptography templates
|
|
using [CryptOpt](https://github.com/0xADE1A1DE/CryptOpt). These generated
|
|
assembly files have been edited to support call-stack unwinding. The modified
|
|
files have been checked for functional correctness using the CryptOpt
|
|
translation validator that is included in the Fiat-Cryptography repository.
|
|
Correct unwinding and manual assembler-directive changes related to object-file
|
|
conventions are validated using unit tests.
|