openssl/crypto/poly1305/asm
Ard Biesheuvel fcf6e9d056 crypto/poly1305/asm: fix armv8 pointer authentication
PAC pointer authentication signs the return address against the value
of the stack pointer, to prevent stack overrun exploits from corrupting
the control flow. However, this requires that the AUTIASP is issued with
SP holding the same value as it held when the PAC value was generated.
The Poly1305 armv8 code got this wrong, resulting in crashes on PAC
capable hardware.

Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13256)
2020-10-29 17:17:21 +01:00
..
poly1305-armv4.pl Update copyright year 2020-04-23 13:55:52 +01:00
poly1305-armv8.pl crypto/poly1305/asm: fix armv8 pointer authentication 2020-10-29 17:17:21 +01:00
poly1305-c64xplus.pl Unify all assembler file generators 2019-09-16 16:29:57 +02:00
poly1305-ia64.S IA64 assembly pack: add {chacha|poly1305}-ia64 modules. 2019-03-29 07:33:15 +01:00
poly1305-mips.pl Update copyright year 2020-04-23 13:55:52 +01:00
poly1305-ppc.pl Update copyright year 2020-04-23 13:55:52 +01:00
poly1305-ppcfp.pl Update copyright year 2020-04-23 13:55:52 +01:00
poly1305-s390x.pl s390x assembly pack: perlasm module update 2019-11-05 10:05:27 +01:00
poly1305-sparcv9.pl Update copyright year 2020-04-23 13:55:52 +01:00
poly1305-x86_64.pl Ignore vendor name in Clang version number. 2020-08-27 20:27:26 -07:00
poly1305-x86.pl Ignore vendor name in Clang version number. 2020-08-27 20:27:26 -07:00