XTS Streaming .S and _c.c implementations, streaming callers & SVR brackets for aarch64 - #11423

Open

kaleb-himes wants to merge 19 commits into

wolfSSL:masterfrom

kaleb-himes:PQ-FS-2026-Part3-SecurityReview-nofallback-L

Commits on Sep 11, 2026

aarch64: regenerate XTS asm so .S and _c.c carry the streaming path
kaleb-himes
committed
1a6f36e
aes-xts: dispatch aarch64 streaming through the crypto-extension asm
kaleb-himes
committed
be5ec8d
aarch64: vector-register claims around every NEON and crypto-extension lane
kaleb-himes
committed
db82adf
linuxkm: arm64 vector register glue on kernel_neon_begin, enable ARM SIMD
kaleb-himes
committed
302925c
sha3: claim the vector registers around the aarch64 crypto lane
kaleb-himes
committed
8eb9cb0
benchmark: measure the AES-XTS streaming path, not just the one-shot
kaleb-himes
committed
ef74df7
aes-xts: cover the multi-block streaming paths in testwolfcrypt
kaleb-himes
committed
1fff841
aes-xts: apply the SP800-38E data unit limit to decrypt too
kaleb-himes
committed
0a0c577
aarch64: fix CI findings in the vector claims and stream tests
kaleb-himes
committed
3be118d
sha3: claim the vector registers in the SHAKE squeeze lanes
kaleb-himes
committed
89cbd36
mlkem: initialize w to NULL, it is set and read in separate blocks
kaleb-himes
committed
651b67d
aes-xts: count bytes against the tweak only after the update succeeds
kaleb-himes
committed
4e4cb9a
test: check every byte of the refused one-shot XTS decrypt output
kaleb-himes
committed
762c3a3
aes-gcm: clear gcmKeySet when the aarch64 vector claim fails
kaleb-himes
committed
e0ca923
test: assert the XTS overflow refusal changes neither count nor output
kaleb-himes
committed
e1d2852
test: guard the XTS accounting decrypt cases on HAVE_AES_DECRYPT
kaleb-himes
committed
b5aef02
test: pin the XTS FIPS cap boundary and its no-side-effect refusal
kaleb-himes
committed
3672e6b
linuxkm: arm64 vector path needs may_use_simd(), require kernel 4.14
kaleb-himes
committed
747e457

Commits on Sep 13, 2026

comments: trim this branch's new comments to the house length limit
kaleb-himes
committed
deb9eb7

Navigation Menu

Uh oh!

XTS Streaming .S and _c.c implementations, streaming callers & SVR brackets for aarch64 - #11423

XTS Streaming .S and _c.c implementations, streaming callers & SVR brackets for aarch64#11423
kaleb-himes wants to merge 19 commits into
wolfSSL:masterfrom
kaleb-himes:PQ-FS-2026-Part3-SecurityReview-nofallback-L

Commits on Sep 11, 2026

aarch64: regenerate XTS asm so .S and _c.c carry the streaming path

aes-xts: dispatch aarch64 streaming through the crypto-extension asm

aarch64: vector-register claims around every NEON and crypto-extension lane

linuxkm: arm64 vector register glue on kernel_neon_begin, enable ARM SIMD

sha3: claim the vector registers around the aarch64 crypto lane

benchmark: measure the AES-XTS streaming path, not just the one-shot

aes-xts: cover the multi-block streaming paths in testwolfcrypt

aes-xts: apply the SP800-38E data unit limit to decrypt too

aarch64: fix CI findings in the vector claims and stream tests

sha3: claim the vector registers in the SHAKE squeeze lanes

mlkem: initialize w to NULL, it is set and read in separate blocks

aes-xts: count bytes against the tweak only after the update succeeds

test: check every byte of the refused one-shot XTS decrypt output

aes-gcm: clear gcmKeySet when the aarch64 vector claim fails

test: assert the XTS overflow refusal changes neither count nor output

test: guard the XTS accounting decrypt cases on HAVE_AES_DECRYPT

test: pin the XTS FIPS cap boundary and its no-side-effect refusal

linuxkm: arm64 vector path needs may_use_simd(), require kernel 4.14

Commits on Sep 13, 2026

comments: trim this branch's new comments to the house length limit