- Jun 06, 2025
-
-
Paul Elliott authored
Rebase MR CY25Q1 4 See merge request !30 Notable changes from the base repository: * Several includes of intel-ipsec-mb.h have been renamed to ipsec-mb.h * mp test app has been excluded from aarch64 builds due to a segfault when running. mp gets removed from the Intel repo in the future so we do not need to include this.
-
Signed-off-by:
Pablo de Lara <pablo.de.lara.guarch@intel.com>
-
Signed-off-by:
Pablo de Lara <pablo.de.lara.guarch@intel.com>
-
Signed-off-by:
Pablo de Lara <pablo.de.lara.guarch@intel.com>
-
- fork() support on Windows is limited - split monolithic code into modules - move utility functions into separate header files (shared memory, shared memory allocations etc.) - split primary process application from the secondary one
-
-
-
-
This is to help multi-process scenarios i.e. active-passive or fail over.
-
At the moment, for certain data sizes, correct functionality relies on NOP (0x90) padding.
-
SHA256/224 one block function wasn't preserving xmm7 on Windows. This function is used of IPAD/OPAD calculations in the self test.
-
-
In some cases, original message text appeared again in the 2nd block of the message schedule.
-
Signed-off-by:
Marcel Cornu <marcel.d.cornu@intel.com>
-
Signed-off-by:
Marcel Cornu <marcel.d.cornu@intel.com>
-
SHA512 can now return a job just after submitting it, as a single-buffer implementation has been added (using SHA512-NI instructions). Therefore, the check after submitting a job is irrelevant.
-
Signed-off-by:
Pablo de Lara <pablo.de.lara.guarch@intel.com>
-
Signed-off-by:
Pablo de Lara <pablo.de.lara.guarch@intel.com>
-
Signed-off-by:
Pablo de Lara <pablo.de.lara.guarch@intel.com>
-
Signed-off-by:
Marcel Cornu <marcel.d.cornu@intel.com>
-
Signed-off-by:
Marcel Cornu <marcel.d.cornu@intel.com>
-
- Apr 04, 2025
-
-
Paul Elliott authored
Rebase MR CY25Q1 3 See merge request !29 Notable changes from base repository: * aarch64 guards added in ipsec_xvalid.c:search_patterns_ex * All instances of including "intel-ipsec-mb.h" were renamed to "ipsec-mb.h"
-
-
-
-
-
-
-
- avoid duplicating the data for sha384
-
New SM3 update function added and all major functions that depend on it: - sm3_msg_ni_avx2() and sm3_msg_submit_avx2() - sm3_hmac_submit_avx2() In the future sm3_one_block() can also be implemented. It is not on the critical path as it is used only for IPAD and OPAD calculations. Isolated SM3 tag store operation under sm3_tag_store_avx() API.
-
The implementation uses x86-64 and SSE4.2 instruction set only. It replaces previous C implementation due to numerous issues with safe-check tests. Internal API's added: - sm3_base_init() - sm3_base_update() - sm3_msg_sse() and sm3_msg_submit_sse() - sm3_one_block_sse() - sm3_hmac_submit_sse() SM3 submit and flush macros added to all MB managers and JOB API dispatching.
-
-
-
-
Fix build warning: ipsec_xvalid.c:2537:64: warning: ‘job_ctx_tab[1].buf_size’ may be used uninitialized [-Wmaybe-uninitialized] 2537 | p_safe_check->job_size = job_ctx_tab[i].buf_size; | ~~~~~~~~~~~~~~^~~~~~~~~ ipsec_xvalid.c:2277:24: note: ‘job_ctx_tab’ declared here 2277 | struct job_ctx job_ctx_tab[MAX_NUM_JOBS]; | ^~~~~~~~~~~ "i" could be out of bounds, if "i" == "num_jobs", which was possible if a pattern was found when expanding keys, for instance. Signed-off-by:
Pablo de Lara <pablo.de.lara.guarch@intel.com>
-
Signed-off-by:
Pablo de Lara <pablo.de.lara.guarch@intel.com>
-
- clear extra SIMD registers for AES-GCM small packets - fill AES-XCBC K2 and K3 patterns
-
Signed-off-by:
Pablo de Lara <pablo.de.lara.guarch@intel.com>
-
-
Small comment update with a return value.
-