Skip to content

aarch64: crypto-extension asm for the AES-XTS streaming path - #11386

Open
kaleb-himes wants to merge 2 commits into
wolfSSL:masterfrom
kaleb-himes:PQ-FS-2026-Part3-SecurityReview-nofallback-L
Open

aarch64: crypto-extension asm for the AES-XTS streaming path#11386
kaleb-himes wants to merge 2 commits into
wolfSSL:masterfrom
kaleb-himes:PQ-FS-2026-Part3-SecurityReview-nofallback-L

Conversation

@kaleb-himes

Copy link
Copy Markdown
Contributor

Description

Add the aarch64 streaming API's for user space

aarch64: AES-XTS streaming assembly and callers

Adds AES_XTS_encrypt_update_AARCH64 / AES_XTS_decrypt_update_AARCH64 as armv8-aes-asm.S and armv8-aes-asm_c.c, plus the aes.c callers and aes.h prototypes. The MASM twin is in https://github.com/wolfSSL/scripts/pull/670, which adds no callers, so this PR is what makes the routines reachable.

test.c gains a streaming case using multi-block chunks, checked against the one-shot result; the existing tests only ever pass one block, leaving the 4x path uncovered.

armv8-aes-asm_c.c also picks up 42 bcc/bcs → b.cc/b.cs at pre-existing sites: upstream's committed copy is stale against upstream's own generator. Same encodings, no behavior change.

Generator: wolfSSL/scripts#. Committed files reproduce byte-for-byte.

Note: the simultaneous-keys streaming test fails until J's key-schedule fix merges. Pre-existing, not from this PR.

Pairs with: https://github.com/wolfSSL/scripts/pull/674

Testing

emulated, baremetal and virtualized.

Checklist

  • added tests
  • updated/added doxygen
  • updated appropriate READMEs
  • Updated manual and documentation

wolfSSL-Fenrir-bot

This comment was marked as outdated.

Comment thread wolfcrypt/src/aes.c
Comment thread wolfcrypt/test/test.c Outdated
@kaleb-himes
kaleb-himes requested review from wolfSSL-Fenrir-bot and removed request for wolfSSL-Fenrir-bot September 7, 2026 14:01
@kaleb-himes
kaleb-himes force-pushed the PQ-FS-2026-Part3-SecurityReview-nofallback-L branch from ff675fa to 0a42f45 Compare September 7, 2026 14:03
wolfSSL-Fenrir-bot

This comment was marked as resolved.

wolfSSL-Fenrir-bot

This comment was marked as low quality.

@kaleb-himes
kaleb-himes force-pushed the PQ-FS-2026-Part3-SecurityReview-nofallback-L branch from 0a42f45 to cef58d6 Compare September 7, 2026 18:26
Comment thread wolfcrypt/test/test.c Outdated
static const word32 chunk_tail[] = { WC_AES_BLOCK_SIZE * 9,
WC_AES_BLOCK_SIZE * 4,
WC_AES_BLOCK_SIZE * 2,
WC_AES_BLOCK_SIZE + 5 };

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This was already fixed @wolfSSL-Fenrir-bot you appear to be spinning and not looking at the most recent commit.

@kaleb-himes
kaleb-himes force-pushed the PQ-FS-2026-Part3-SecurityReview-nofallback-L branch from cef58d6 to 61e0bc8 Compare September 7, 2026 18:30
@kaleb-himes
kaleb-himes requested review from wolfSSL-Fenrir-bot and removed request for wolfSSL-Fenrir-bot September 7, 2026 18:30

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #11386

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

Fenrir result: Approved ✅

No new issues found in the changed files.

Advisory only — this automated result does not count as a GitHub approval.

@wolfSSL-Fenrir-bot
wolfSSL-Fenrir-bot dismissed stale reviews from themself September 7, 2026 19:37

Fenrir's latest completed scan found no issues; clearing the prior automated change request.

@kaleb-himes
kaleb-himes force-pushed the PQ-FS-2026-Part3-SecurityReview-nofallback-L branch from 61e0bc8 to a940add Compare September 8, 2026 01:06

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #11386

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

Fenrir result: Approved ✅

No new issues found in the changed files.

Advisory only — this automated result does not count as a GitHub approval.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants