kernel-fxtec-pro1x/arch/arm64/crypto
Ard Biesheuvel 6dfab366a9 FROMLIST: crypto: arm64/poly1305-neon - reorder PAC authentication with SP update
PAC pointer authentication signs the return address against the value
of the stack pointer, to prevent stack overrun exploits from corrupting
the control flow. However, this requires that the AUTIASP is issued with
SP holding the same value as it held when the PAC value was generated.
The Poly1305 NEON code got this wrong, resulting in crashes on PAC
capable hardware.

Fixes: f569ca164751 ("crypto: arm64/poly1305 - incorporate OpenSSL/CRYPTOGAMS ...")
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Bug: 152722841
Link: https://lore.kernel.org/linux-crypto/20201026230027.25813-1-ardb@kernel.org/
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Change-Id: Ib5282ac56ba5158c7d97195c2460701006bf82f6
2020-10-31 15:56:35 +01:00
..
.gitignore UPSTREAM: crypto: arm[64]/poly1305 - add artifact to .gitignore files 2020-10-25 11:48:04 +01:00
aes-ce-ccm-core.S crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling 2019-03-23 20:09:56 +01:00
aes-ce-ccm-glue.c crypto: arm64/aes-ccm - fix bugs in non-NEON fallback routine 2019-03-23 20:09:56 +01:00
aes-ce-core.S crypto: arm64/aes-ce-cipher - move assembler code to .S file 2017-11-29 17:33:30 +11:00
aes-ce-glue.c crypto: arm64/aes-ce-cipher - move assembler code to .S file 2017-11-29 17:33:30 +11:00
aes-ce-setkey.h License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
aes-ce.S crypto: arm64/aes-blk - yield NEON after every block of input 2018-05-12 00:13:08 +08:00
aes-cipher-core.S crypto: arm64/aes-cipher - move S-box to .rodata section 2018-01-18 23:00:30 +11:00
aes-cipher-glue.c crypto: arm64/aes - add scalar implementation 2017-01-13 00:26:49 +08:00
aes-ctr-fallback.h crypto: arm64/aes-blk - add a non-SIMD fallback for synchronous CTR 2017-08-04 09:27:21 +08:00
aes-glue.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux 2018-08-03 17:55:12 +08:00
aes-modes.S crypto: arm64/aes-blk - yield NEON after every block of input 2018-05-12 00:13:08 +08:00
aes-neon.S crypto: arm64/aes-neon - move literal data to .rodata section 2018-01-18 23:00:30 +11:00
aes-neonbs-core.S crypto: arm64/aes-neonbs - fix returning final keystream block 2019-03-23 20:09:54 +01:00
aes-neonbs-glue.c crypto: arm64/aes-neonbs - don't access already-freed walk.iv 2019-05-22 07:37:37 +02:00
chacha-neon-core.S UPSTREAM: crypto: arm64/chacha - fix chacha_4block_xor_neon() for big endian 2020-10-31 15:40:57 +01:00
chacha-neon-glue.c UPSTREAM: crypto: arch/lib - limit simd usage to 4k chunks 2020-10-25 11:48:05 +01:00
crc32-ce-core.S crypto: arm64/crc32-ce - yield NEON after every block of input 2018-05-12 00:13:10 +08:00
crc32-ce-glue.c crypto: hash - annotate algorithms taking optional key 2018-01-12 23:03:35 +11:00
crct10dif-ce-core.S crypto: arm64/crct10dif-ce - yield NEON after every block of input 2018-05-12 00:13:11 +08:00
crct10dif-ce-glue.c crypto: arm64/crct10dif - revert to C code for short inputs 2019-03-23 20:09:54 +01:00
ghash-ce-core.S crypto: arm64/ghash-ce - implement 4-way aggregation 2018-08-07 17:51:40 +08:00
ghash-ce-glue.c This is the 4.19.45 stable release 2019-05-22 08:00:39 +02:00
Kconfig UPSTREAM: crypto: arm64/poly1305 - incorporate OpenSSL/CRYPTOGAMS NEON implementation 2020-10-24 17:02:15 +02:00
Makefile UPSTREAM: crypto: arm64/poly1305 - incorporate OpenSSL/CRYPTOGAMS NEON implementation 2020-10-24 17:02:15 +02:00
poly1305-armv8.pl FROMLIST: crypto: arm64/poly1305-neon - reorder PAC authentication with SP update 2020-10-31 15:56:35 +01:00
poly1305-core.S_shipped FROMLIST: crypto: arm64/poly1305-neon - reorder PAC authentication with SP update 2020-10-31 15:56:35 +01:00
poly1305-glue.c UPSTREAM: crypto: arch/lib - limit simd usage to 4k chunks 2020-10-25 11:48:05 +01:00
sha1-ce-core.S crypto: arm64/sha1-ce - yield NEON after every block of input 2018-05-12 00:13:05 +08:00
sha1-ce-glue.c This is the 4.19.61 stable release 2019-07-26 10:31:53 +02:00
sha2-ce-core.S crypto: arm64/sha2-ce - yield NEON after every block of input 2018-05-12 00:13:06 +08:00
sha2-ce-glue.c This is the 4.19.61 stable release 2019-07-26 10:31:53 +02:00
sha3-ce-core.S crypto: arm64/sha3-ce - yield NEON after every block of input 2018-05-12 00:13:11 +08:00
sha3-ce-glue.c crypto: shash - remove useless setting of type flags 2018-07-09 00:30:24 +08:00
sha256-core.S_shipped crypto: clarify licensing of OpenSSL asm code 2018-05-31 00:13:44 +08:00
sha256-glue.c crypto: arm64/sha256 - increase cra_priority of scalar implementations 2018-07-27 19:16:38 +08:00
sha512-armv8.pl crypto: clarify licensing of OpenSSL asm code 2018-05-31 00:13:44 +08:00
sha512-ce-core.S crypto: arm64/sha512-ce - yield NEON after every block of input 2018-05-12 00:13:12 +08:00
sha512-ce-glue.c crypto: shash - remove useless setting of type flags 2018-07-09 00:30:24 +08:00
sha512-core.S_shipped crypto: clarify licensing of OpenSSL asm code 2018-05-31 00:13:44 +08:00
sha512-glue.c crypto: shash - remove useless setting of type flags 2018-07-09 00:30:24 +08:00
sm3-ce-core.S crypto: arm64/sm3 - new v8.2 Crypto Extensions implementation 2018-01-26 01:10:35 +11:00
sm3-ce-glue.c crypto: shash - remove useless setting of type flags 2018-07-09 00:30:24 +08:00
sm4-ce-core.S crypto: arm64 - add support for SM4 encryption using special instructions 2018-05-05 14:52:53 +08:00
sm4-ce-glue.c crypto: arm64/sm4-ce - check for the right CPU feature bit 2018-08-25 19:50:41 +08:00