diff options
author | Andy Polyakov <appro@openssl.org> | 2017-03-20 11:38:25 +0100 |
---|---|---|
committer | Andy Polyakov <appro@openssl.org> | 2017-03-22 11:02:56 +0100 |
commit | 08d09628d2c9f3ef599399d8cad021a07ab98347 (patch) | |
tree | 1ac3d48364eea7939311f0b1fc530513ffd63413 /crypto/aes/asm | |
parent | 0a5d1a38f2106e526081500e30ee11b785824f1f (diff) |
aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
Initial IV was disregarded on SHAEXT-capable processors. Amazingly
enough bulk AES128-SHA* talk-to-yourself tests were passing.
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2992)
Diffstat (limited to 'crypto/aes/asm')
-rw-r--r-- | crypto/aes/asm/aesni-sha1-x86_64.pl | 1 | ||||
-rw-r--r-- | crypto/aes/asm/aesni-sha256-x86_64.pl | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/crypto/aes/asm/aesni-sha1-x86_64.pl b/crypto/aes/asm/aesni-sha1-x86_64.pl index dcdf454861..6644d704d9 100644 --- a/crypto/aes/asm/aesni-sha1-x86_64.pl +++ b/crypto/aes/asm/aesni-sha1-x86_64.pl @@ -1779,6 +1779,7 @@ $code.=<<___; mov 240($key),$rounds sub $in0,$out movups ($key),$rndkey0 # $key[0] + movups ($ivp),$iv # load IV movups 16($key),$rndkey[0] # forward reference lea 112($key),$key # size optimization diff --git a/crypto/aes/asm/aesni-sha256-x86_64.pl b/crypto/aes/asm/aesni-sha256-x86_64.pl index ceec9a6e1e..74ec844952 100644 --- a/crypto/aes/asm/aesni-sha256-x86_64.pl +++ b/crypto/aes/asm/aesni-sha256-x86_64.pl @@ -1361,6 +1361,7 @@ $code.=<<___; mov 240($key),$rounds sub $in0,$out movups ($key),$rndkey0 # $key[0] + movups ($ivp),$iv # load IV movups 16($key),$rndkey[0] # forward reference lea 112($key),$key # size optimization |