]> git.ipfire.org Git - thirdparty/openssl.git/commit
poly1305-ppc.pl: Fix vector register clobbering
authorRohan McLure <rmclure@linux.ibm.com>
Thu, 4 Jan 2024 09:25:50 +0000 (10:25 +0100)
committerTomas Mraz <tomas@openssl.org>
Tue, 9 Jan 2024 14:45:32 +0000 (15:45 +0100)
commit8d847a3ffd4f0b17ee33962cf69c36224925b34f
tree5b50a8766139fc274c7a59e60c8961c465c7660f
parent5dc2b72df76cf21095bd6a34449feb8474d85368
poly1305-ppc.pl: Fix vector register clobbering

Fixes CVE-2023-6129

The POLY1305 MAC (message authentication code) implementation in OpenSSL for
PowerPC CPUs saves the the contents of vector registers in different order
than they are restored. Thus the contents of some of these vector registers
is corrupted when returning to the caller. The vulnerable code is used only
on newer PowerPC processors supporting the PowerISA 2.07 instructions.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23200)
crypto/poly1305/asm/poly1305-ppc.pl