diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2026-10-14 08:23:37 -0700 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2026-10-14 08:23:37 -0700 |
| commit | 0fcb05b72344f40806cbe810de8872f1698bf053 (patch) | |
| tree | 4c8d2f41787972a683a7bcceac460f4c4ff4d3a7 /lib/crypto/arm64 | |
| parent | 4056b3c9d3c92ea45955641dbafeb9b960e146ef (diff) | |
| parent | 7b817748bf083ad715a8d70de63f2184178cc372 (diff) | |
Merge tag 'libcrypto-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linuxHEADmaster
Pull crypto library fixes from Eric Biggers:
"Fix two Poly1305 bugs including a lost carry bit, and add a regression
test"
* tag 'libcrypto-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux:
lib/crypto: tests: Add Poly1305 split-update carry regression test
lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state
lib/crypto: poly1305: Use memzero_explicit() in poly1305_final()
Diffstat (limited to 'lib/crypto/arm64')
| -rw-r--r-- | lib/crypto/arm64/poly1305-armv8.pl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/crypto/arm64/poly1305-armv8.pl b/lib/crypto/arm64/poly1305-armv8.pl index f1930c6b55ce..234398ff6b60 100644 --- a/lib/crypto/arm64/poly1305-armv8.pl +++ b/lib/crypto/arm64/poly1305-armv8.pl @@ -375,7 +375,7 @@ poly1305_blocks_neon: adc $h1,$h1,xzr lsr $h2,x14,#24 adds $h1,$h1,x14,lsl#40 - adc $d2,$h2,xzr // can be partially reduced... + adc $h2,$h2,xzr // preserve carry into top limb ldp $d0,$d1,[$inp],#16 // load input sub $len,$len,#16 |