Skip to content

Force inline ASM for armv7 with FIPS#7637

Merged
kaleb-himes merged 1 commit intowolfSSL:masterfrom
lealem47:armasm_fips
Jun 12, 2024
Merged

Force inline ASM for armv7 with FIPS#7637
kaleb-himes merged 1 commit intowolfSSL:masterfrom
lealem47:armasm_fips

Conversation

@lealem47
Copy link
Copy Markdown
Contributor

@lealem47 lealem47 commented Jun 11, 2024

Description

  • Force inline ASM for armv7 with FIPS to fix unstable FIPS hash issue with --enable-armasm. (Sean suspects some assembly code, maybe AES, is using a fixed address, instead of relative, for a table that changes depending on where the code is loaded.)
  • Tweak configure.ac to treat armv7l as armv7a

Testing

Tested on armv7a hardware

Checklist

  • added tests
  • updated/added doxygen
  • updated appropriate READMEs
  • Updated manual and documentation

@lealem47 lealem47 self-assigned this Jun 11, 2024
Copy link
Copy Markdown
Contributor

@kaleb-himes kaleb-himes left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stemming from the ARMv7 unstable hash investigation, use only inline assembly with FIPS module as it is not subject to a run-time load change that can lead to an unstable integrity check. Inline ASM is stable and integrity check holds with the inline assembly on chips supporting Neon instructions.

Great changes @lealem47 thanks!

@lealem47 lealem47 assigned wolfSSL-Bot and unassigned lealem47 Jun 11, 2024
@kaleb-himes kaleb-himes requested a review from wolfSSL-Bot June 11, 2024 20:09
@kaleb-himes kaleb-himes merged commit 9f9a82e into wolfSSL:master Jun 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants