diff options
| author | Jussi Kivilinna <jussi.kivilinna@iki.fi> | 2022-01-08 20:56:19 +0200 |
|---|---|---|
| committer | Jussi Kivilinna <jussi.kivilinna@iki.fi> | 2022-01-11 20:10:12 +0200 |
| commit | 11ade08efbfbc36dbf3571f1026946269950bc40 (patch) | |
| tree | 73c1739f302ca2cbac73c244b8dbd533ab516a8f /cipher/blowfish-amd64.S | |
| parent | ff2a647d36677f6ad9edbe992a6c0ab0f7cf9510 (diff) | |
| download | libgcrypt-11ade08efbfbc36dbf3571f1026946269950bc40.tar.gz | |
Add straight-line speculation hardening for amd64 and i386 assembly
* cipher/asm-common-amd64.h (ret_spec_stop): New.
* cipher/arcfour-amd64.S: Use 'ret_spec_stop' for 'ret' instruction.
* cipher/blake2b-amd64-avx2.S: Likewise.
* cipher/blake2s-amd64-avx.S: Likewise.
* cipher/blowfish-amd64.S: Likewise.
* cipher/camellia-aesni-avx-amd64.S: Likewise.
* cipher/camellia-aesni-avx2-amd64.h: Likewise.
* cipher/cast5-amd64.S: Likewise.
* cipher/chacha20-amd64-avx2.S: Likewise.
* cipher/chacha20-amd64-ssse3.S: Likewise.
* cipher/des-amd64.S: Likewise.
* cipher/rijndael-aarch64.S: Likewise.
* cipher/rijndael-amd64.S: Likewise.
* cipher/rijndael-ssse3-amd64-asm.S: Likewise.
* cipher/rijndael-vaes-avx2-amd64.S: Likewise.
* cipher/salsa20-amd64.S: Likewise.
* cipher/serpent-avx2-amd64.S: Likewise.
* cipher/serpent-sse2-amd64.S: Likewise.
* cipher/sha1-avx-amd64.S: Likewise.
* cipher/sha1-avx-bmi2-amd64.S: Likewise.
* cipher/sha1-avx2-bmi2-amd64.S: Likewise.
* cipher/sha1-ssse3-amd64.S: Likewise.
* cipher/sha256-avx-amd64.S: Likewise.
* cipher/sha256-avx2-bmi2-amd64.S: Likewise.
* cipher/sha256-ssse3-amd64.S: Likewise.
* cipher/sha512-avx-amd64.S: Likewise.
* cipher/sha512-avx2-bmi2-amd64.S: Likewise.
* cipher/sha512-ssse3-amd64.S: Likewise.
* cipher/sm3-avx-bmi2-amd64.S: Likewise.
* cipher/sm4-aesni-avx-amd64.S: Likewise.
* cipher/sm4-aesni-avx2-amd64.S: Likewise.
* cipher/twofish-amd64.S: Likewise.
* cipher/twofish-avx2-amd64.S: Likewise.
* cipher/whirlpool-sse2-amd64.S: Likewise.
* mpi/amd64/func_abi.h (CFI_*): Remove, include from "asm-common-amd64.h"
instead.
(FUNC_EXIT): Use 'ret_spec_stop' for 'ret' instruction.
* mpi/asm-common-amd64.h: New.
* mpi/i386/mpih-add1.S: Use 'ret_spec_stop' for 'ret' instruction.
* mpi/i386/mpih-lshift.S: Likewise.
* mpi/i386/mpih-mul1.S: Likewise.
* mpi/i386/mpih-mul2.S: Likewise.
* mpi/i386/mpih-mul3.S: Likewise.
* mpi/i386/mpih-rshift.S: Likewise.
* mpi/i386/mpih-sub1.S: Likewise.
* mpi/i386/syntax.h (ret_spec_stop): New.
--
Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>
Diffstat (limited to 'cipher/blowfish-amd64.S')
| -rw-r--r-- | cipher/blowfish-amd64.S | 18 |
1 files changed, 9 insertions, 9 deletions
diff --git a/cipher/blowfish-amd64.S b/cipher/blowfish-amd64.S index bdb361d7..2b4ffa1a 100644 --- a/cipher/blowfish-amd64.S +++ b/cipher/blowfish-amd64.S @@ -151,7 +151,7 @@ __blowfish_enc_blk1: movq %r11, %rbp; CFI_RESTORE(%rbp) - ret; + ret_spec_stop; CFI_ENDPROC(); ELF(.size __blowfish_enc_blk1,.-__blowfish_enc_blk1;) @@ -182,7 +182,7 @@ _gcry_blowfish_amd64_do_encrypt: movl RX0d, (RX2); EXIT_SYSV_FUNC - ret; + ret_spec_stop; CFI_ENDPROC(); ELF(.size _gcry_blowfish_amd64_do_encrypt,.-_gcry_blowfish_amd64_do_encrypt;) @@ -210,7 +210,7 @@ _gcry_blowfish_amd64_encrypt_block: write_block(); EXIT_SYSV_FUNC - ret; + ret_spec_stop; CFI_ENDPROC(); ELF(.size _gcry_blowfish_amd64_encrypt_block,.-_gcry_blowfish_amd64_encrypt_block;) @@ -253,7 +253,7 @@ _gcry_blowfish_amd64_decrypt_block: CFI_RESTORE(%rbp); EXIT_SYSV_FUNC - ret; + ret_spec_stop; CFI_ENDPROC(); ELF(.size _gcry_blowfish_amd64_decrypt_block,.-_gcry_blowfish_amd64_decrypt_block;) @@ -367,7 +367,7 @@ __blowfish_enc_blk4: outbswap_block4(); - ret; + ret_spec_stop; CFI_ENDPROC(); ELF(.size __blowfish_enc_blk4,.-__blowfish_enc_blk4;) @@ -398,7 +398,7 @@ __blowfish_dec_blk4: outbswap_block4(); - ret; + ret_spec_stop; CFI_ENDPROC(); ELF(.size __blowfish_dec_blk4,.-__blowfish_dec_blk4;) @@ -468,7 +468,7 @@ _gcry_blowfish_amd64_ctr_enc: CFI_POP(%rbp); EXIT_SYSV_FUNC - ret; + ret_spec_stop; CFI_ENDPROC(); ELF(.size _gcry_blowfish_amd64_ctr_enc,.-_gcry_blowfish_amd64_ctr_enc;) @@ -529,7 +529,7 @@ _gcry_blowfish_amd64_cbc_dec: CFI_POP(%rbp); EXIT_SYSV_FUNC - ret; + ret_spec_stop; CFI_ENDPROC(); ELF(.size _gcry_blowfish_amd64_cbc_dec,.-_gcry_blowfish_amd64_cbc_dec;) @@ -593,7 +593,7 @@ _gcry_blowfish_amd64_cfb_dec: CFI_POP(%rbp); EXIT_SYSV_FUNC - ret; + ret_spec_stop; CFI_ENDPROC(); ELF(.size _gcry_blowfish_amd64_cfb_dec,.-_gcry_blowfish_amd64_cfb_dec;) |