openbsd/src/lib/libcrypto/aes, branch libressl-v3.9.2 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.9.2 2024-02-24T17:53:20+00:00 Add a few missing endbr64 to libcrypto 2024-02-24T17:53:20+00:00 tb 2024-02-24T17:53:20+00:00 urn:sha1:2c66b949eac93a66838f31bcbbd5e3c769038538 gcm_{gmult,ghash}_4bit(), aesni_ccm64_decrypt_blocks(), aes_cbc_encrypt(), and aesni_xts_{en,de}crypt() were overlooked in previous passes. Found with a diff for ld.lld by kettenis ok kettenis Replace uses of endbr64 with _CET_ENDBR from cet.h 2024-02-24T15:30:14+00:00 tb 2024-02-24T15:30:14+00:00 urn:sha1:c730c3b3b1845cc7c4a4aceff2031f1135faa6bb cet.h is needed for other platforms to emit the relevant .gnu.properties sections that are necessary for them to enable IBT. It also avoids issues with older toolchains on macOS that explode on encountering endbr64. based on a diff by kettenis ok beck kettenis aesni_ctr32_encrypt_blocks() is called indirectly from C code, so it 2023-09-18T22:38:16+00:00 deraadt 2023-09-18T22:38:16+00:00 urn:sha1:bc048d0b869312fac6a3582a4bdb402c5301283f needs endbr64 ok kettenis tb Remove more *_options() stuff 2023-07-31T05:04:06+00:00 tb 2023-07-31T05:04:06+00:00 urn:sha1:dc6989fcceeb8a299b2364670053a568ea83d2ff The public symbols were removed. Some prototypes and in the case of DES even the implementation remained. ok jsing Two files did not want to go away. Go! 2023-07-28T10:38:51+00:00 tb 2023-07-28T10:38:51+00:00 urn:sha1:cbb4ff06a62700b3c77007fc826d12e1b51b3687 Remove various ${thing}_options 2023-07-28T10:35:14+00:00 tb 2023-07-28T10:35:14+00:00 urn:sha1:e91177528644d7ab4206592aac5a07f85a3ceec2 Various, ancient ciphers exposed some of their innards via an _options() API. Apart from openssl version/speed, only some lua thingie in nmap ever looked at these. Go figure. hppa testing by miod, i386 testing by sthen. Thanks! ok jsing Add endbr64 where needed by inspection. Passes regresson tests. 2023-04-25T04:42:26+00:00 deraadt 2023-04-25T04:42:26+00:00 urn:sha1:f56bc15e44b93e564d434a7d0b5c8f837812aac3 ok jsing, and kind of tb an earlier version Drop two useless READMEs 2023-04-17T17:38:08+00:00 tb 2023-04-17T17:38:08+00:00 urn:sha1:3b69f975c19a73ff52a66ab145e9ba9eee2d3d91 "go ahead" jsing Use explicit .text instead of .previous to please Windows/MinGW on amd64 2023-02-23T08:55:44+00:00 tb 2023-02-23T08:55:44+00:00 urn:sha1:0dadd2bf46f37ca96a50e247649a11b3c5273234 ok miod Use .section .rodata instead of a plain .rodata 2023-02-09T19:57:00+00:00 tb 2023-02-09T19:57:00+00:00 urn:sha1:4355eb6aeababf0126972f85bdeed63048a99df1 At least gcc 12 on Fedora is very unhappy about a plain .rodata and throws Error: unknown pseudo-op: `.rodata'. So add a .section in front of it to make it happy. ok deraadt miod