[openssl-commits] [openssl] OpenSSL_1_1_0-stable update

[Andy Polyakov]

The branch OpenSSL_1_1_0-stable has been updated
       via  09de9f0435790eefc082253609c8ef0ed66f8233 (commit)
      from  28991705b71d47066997c0afe5060b470c5ac09f (commit)


- Log -----------------------------------------------------------------
commit 09de9f0435790eefc082253609c8ef0ed66f8233
Author: Andy Polyakov <appro at openssl.org>
Date:   Mon Mar 20 11:38:25 2017 +0100

    aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    
    Initial IV was disregarded on SHAEXT-capable processors. Amazingly
    enough bulk AES128-SHA* talk-to-yourself tests were passing.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2992)
    
    (cherry picked from commit 08d09628d2c9f3ef599399d8cad021a07ab98347)

-----------------------------------------------------------------------

Summary of changes:
 crypto/aes/asm/aesni-sha1-x86_64.pl   | 1 +
 crypto/aes/asm/aesni-sha256-x86_64.pl | 1 +
 2 files changed, 2 insertions(+)

diff --git a/crypto/aes/asm/aesni-sha1-x86_64.pl b/crypto/aes/asm/aesni-sha1-x86_64.pl
index 4b979a7..7cc5a7f 100644
--- a/crypto/aes/asm/aesni-sha1-x86_64.pl
+++ b/crypto/aes/asm/aesni-sha1-x86_64.pl
@@ -1711,6 +1711,7 @@ $code.=<<___;
 	mov	240($key),$rounds
 	sub	$in0,$out
 	movups	($key),$rndkey0			# $key[0]
+	movups	($ivp),$iv			# load IV
 	movups	16($key),$rndkey[0]		# forward reference
 	lea	112($key),$key			# size optimization
 
diff --git a/crypto/aes/asm/aesni-sha256-x86_64.pl b/crypto/aes/asm/aesni-sha256-x86_64.pl
index a5fde2e..3b03328 100644
--- a/crypto/aes/asm/aesni-sha256-x86_64.pl
+++ b/crypto/aes/asm/aesni-sha256-x86_64.pl
@@ -1307,6 +1307,7 @@ $code.=<<___;
 	mov		240($key),$rounds
 	sub		$in0,$out
 	movups		($key),$rndkey0		# $key[0]
+	movups		($ivp),$iv		# load IV
 	movups		16($key),$rndkey[0]	# forward reference
 	lea		112($key),$key		# size optimization