build: Bump revision to 2.25

Signed-off-by: Pablo de Lara <pablo.de.lara.guarch@intel.com>

Bump minimum NASM version

Signed-off-by: Pablo de Lara <pablo.de.lara.guarch@intel.com>

Remove YASM support

Signed-off-by: Pablo de Lara <pablo.de.lara.guarch@intel.com>

sha1_mb: add ISAL_ prefix to SHA1 structure and macro definitions

Signed-off-by: Pablo de Lara <pablo.de.lara.guarch@intel.com>

lib: add FIPS_MODE compilation flag

Add FIPS_MODE compilation flag to enable self tests
and further checks required for FIPS.

It can be enable on Linux either with:
- ./autogen.sh && ./configure --

lib: add FIPS_MODE compilation flag

Add FIPS_MODE compilation flag to enable self tests
and further checks required for FIPS.

It can be enable on Linux either with:
- ./autogen.sh && ./configure --enable-fips-mode && make
- make -f Makefile.unx D=FIPS_MODE

or on Windows with:
- nmake -f Makefile.nmake FIPS_MODE=y

Signed-off-by: Pablo de Lara <pablo.de.lara.guarch@intel.com>

show more ...

lib: add self tests API

Add common isal_self_tests() function that runs all the self tests
available.

This function is called at the start of every single NIST-approved
crypto function.

Signed-off

lib: add self tests API

Add common isal_self_tests() function that runs all the self tests
available.

This function is called at the start of every single NIST-approved
crypto function.

Signed-off-by: Pablo de Lara <pablo.de.lara.guarch@intel.com>

show more ...

add build option to disable parameter checking

Enabled by default

Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>

build: enable full read-only relocation and control flow integrity for hardening check

Signed-off-by: Pablo de Lara <pablo.de.lara.guarch@intel.com>

build: detect availability of -z now, relro and noexecstack linker options

Signed-off-by: Pablo de Lara <pablo.de.lara.guarch@intel.com>

build: disable SAFE_DATA for non x86

This option is only applicable for x86.

Signed-off-by: Pablo de Lara <pablo.de.lara.guarch@intel.com>

Makefile: add SAFE_DATA parameter to clear sensitive data

This parameter will be enabled by default, which might impact
performance, but it will enhance the security of the crypto
implementations in

Makefile: add SAFE_DATA parameter to clear sensitive data

This parameter will be enabled by default, which might impact
performance, but it will enhance the security of the crypto
implementations in certain conditions.

Signed-off-by: Pablo de Lara <pablo.de.lara.guarch@intel.com>

show more ...

Ignore obsolete warnings when using autoreconf

A few macros are declared obsolete from autoconf 2.70.
In order to avoid breaking compatibility with 2.69 removing them,
these warnings are ignored.

S

Ignore obsolete warnings when using autoreconf

A few macros are declared obsolete from autoconf 2.70.
In order to avoid breaking compatibility with 2.69 removing them,
these warnings are ignored.

Signed-off-by: Pablo de Lara <pablo.de.lara.guarch@intel.com>

show more ...

optimization for md5_mb for aarch64 by SVE2

SVE2-128 shows about 5% uplift over SVE-128, which
is about 70% above Neon.

Change-Id: I200c2056734d6cb7725b82e5c52c432c20efa053
Signed-off-by: Daniel Hu

optimization for md5_mb for aarch64 by SVE2

SVE2-128 shows about 5% uplift over SVE-128, which
is about 70% above Neon.

Change-Id: I200c2056734d6cb7725b82e5c52c432c20efa053
Signed-off-by: Daniel Hu <Daniel.Hu@arm.com>

show more ...

Properly add .note.gnu.property section to assembly codes

1. Partially revert

commit 7f8ce0f8177a2d76dfa7fc57f3f9af08eaf259e2
Author: John Kariuki <John.K.Kariuki@intel.com>
Date: Wed Jun 3 12:22

Properly add .note.gnu.property section to assembly codes

1. Partially revert

commit 7f8ce0f8177a2d76dfa7fc57f3f9af08eaf259e2
Author: John Kariuki <John.K.Kariuki@intel.com>
Date: Wed Jun 3 12:22:52 2020 -0700

x86: add support for Intel CET

which includes a hack to work around the old nasm which doesn't support

section .note.gnu.property note alloc noexec align=8

This hack doesn't work for downstream which doesn't use the hack.

2. If Intel CET is enabled, require nasm with note section support to
add

section .note.gnu.property note alloc noexec align=N

to assembly codes.

Verified with

$ CC="gcc -Wl,-z,cet-report=error -fcf-protection" CXX="g++ -Wl,-z,cet-report=error -fcf-protection" .../configure x86_64-linux
$ make -j8

on Tiger Lake.

Change-Id: I2f7930798aab9fe084919432b59799bb34884b3e
Signed-off-by: H.J. Lu <hjl.tools@gmail.com>

show more ...

build: Bump revision to 2.24

Change-Id: Idd781828bab120bcdc346bde1dc466a9f2619575
Signed-off-by: Greg Tucker <greg.b.tucker@intel.com>

build: Bump revision to 2.23

Change-Id: Ifb25c6073c505d12e82e9fc3112f94bb80158ca2
Signed-off-by: Greg Tucker <greg.b.tucker@intel.com>

x86: add support for Intel CET

This patch generates .note.gnu.property section for ELF output
and adds endbranch to all indirect branch targets.

Signed-off-by: John Kariuki <John.K.Kariuki@intel.co

x86: add support for Intel CET

This patch generates .note.gnu.property section for ELF output
and adds endbranch to all indirect branch targets.

Signed-off-by: John Kariuki <John.K.Kariuki@intel.com>
Change-Id: I622a546bf9b9590e11d4b4eda3d6828ea0a4e53f

show more ...

build: Fix autoconf build for mingw target

Change-Id: I5803fd72fdf7b739b4cce00fddc18ee8e6bd1327
Signed-off-by: Greg Tucker <greg.b.tucker@intel.com>

build: Setup as_feature_level

Change-Id: I63a62c6b1382c26576d89632a31d0e30133ef3ec
Signed-off-by: Roy Oursler <roy.j.oursler@intel.com>
Signed-off-by: Greg Tucker <greg.b.tucker@intel.com>

build: Bump revision to 2.22

Change-Id: I2aa7413930600ae33b9d6df9f7c2b3c951c94977
Signed-off-by: Greg Tucker <greg.b.tucker@intel.com>

build: Add multi-arch support

The patch is to add multi-arch support and it is verified
on aarch64 platform .
- build pass for arm64(host is aarch64)
- remove multibinary support for aarch64
- add m

build: Add multi-arch support

The patch is to add multi-arch support and it is verified
on aarch64 platform .
- build pass for arm64(host is aarch64)
- remove multibinary support for aarch64
- add multi arch support
- verified below make commands
- ./autogen.sh && ./configure && make && make check \
&& make perf
- make -f Makefile.unx check perf

Change-Id: Ic3cd3d2b554e2ea472896ced2c01c95e16fb6efc
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>

show more ...

build: Bump revision to 2.21

Change-Id: I4676913fde00c42950e3b1c7f6c9f85d2ea54d3b
Signed-off-by: Greg Tucker <greg.b.tucker@intel.com>

build: Change to canonical system type in autoconf

This should help with osx detection now and others in the future.

Change-Id: Icfc8c144f9d6a2b758ef3b6ea7472a3b81025acb
Signed-off-by: Greg Tucker

build: Change to canonical system type in autoconf

This should help with osx detection now and others in the future.

Change-Id: Icfc8c144f9d6a2b758ef3b6ea7472a3b81025acb
Signed-off-by: Greg Tucker <greg.b.tucker@intel.com>

show more ...

build: Bump revision to 2.20

Signed-off-by: Greg Tucker <greg.b.tucker@intel.com>

build: Bump revision to 2.19

Signed-off-by: Xiaodong Liu <xiaodong.liu@intel.com>