sp x86_64: separate lane selection from vector-register ownership - #11422

Open

kaleb-himes wants to merge 48 commits into

wolfSSL:masterfrom

kaleb-himes:PQ-FS-2026-Part3-SecurityReview-nofallback-M

Commits on Oct 2, 2026

sp x86_64: separate lane selection from vector-register ownership
kaleb-himes
committed
7710eb2
unit-mcdc: sp x86_64 whitebox comments follow the fail-closed dispatch
kaleb-himes
committed
1985139
cpuid: FIPS v7 reads CPU features once at power on, changes are ignored
kaleb-himes
committed
b57e9d3
unit-mcdc: fail the sp x86_64 whitebox if a refused save still runs
kaleb-himes
committed
784a10b
unit-mcdc: a build with no instrumented SP call is not a failed check
kaleb-himes
committed
3e3e2ca
slhdsa: separate lane selection from vector-register ownership
kaleb-himes
committed
bfa5106
mlkem: separate lane selection from vector-register ownership
kaleb-himes
committed
bf139e4
mldsa: separate lane selection from vector-register ownership
kaleb-himes
committed
b07e2eb
configure: allow WC_C_DYNAMIC_FALLBACK only in FIPS dev builds
kaleb-himes
committed
75818a7
settings: refuse WC_C_DYNAMIC_FALLBACK in validated FIPS builds
kaleb-himes
committed
1234dc9
settings: keep the save fuzzer out of files with no C fallback
kaleb-himes
committed
eaed9ab
mldsa: pass the small-mem W0 range check through the save contract
kaleb-himes
committed
8c5e07f
mlkem: treat a refused save as a ciphertext mismatch
kaleb-himes
committed
6d0d4fa
mldsa: say not valid on a refused save, gate the hint count
kaleb-himes
committed
51bd300
slhdsa: clear the seed state and partial signature on refusal
kaleb-himes
committed
9d22eff
settings: describe what pins the lane in these files
kaleb-himes
committed
e1ae5a8
configure: limit the fallback lockout to FIPS v7 builds
kaleb-himes
committed
5c933c6
unit-mcdc: check the add_points return in the whitebox sweep
kaleb-himes
committed
b458d37
slhdsa: wipe the slot the failing iteration may have written
kaleb-himes
committed
d4373e5
mlkem: correct the return docs for paths that can now fail
kaleb-himes
committed
820a862
mldsa: correct the NTT flavor note after the lane pinning
kaleb-himes
committed
88e8fa4
slhdsa: fail closed on the AVX512 lanes upstream added
kaleb-himes
committed
0440cba
lms: fail closed on the n-way batch lanes
kaleb-himes
committed
249944a
xmss: fail closed on the n-way batch lanes
kaleb-himes
committed
b85964d
settings: keep the save fuzzer out of the LMS and XMSS lanes
kaleb-himes
committed
3dda18e
mlkem: do not decapsulate after a refused save in decompression
kaleb-himes
committed
1013e9a
slhdsa: wipe the auth-path slot that holds a private key value
kaleb-himes
committed
aa34b9f
configure: gate the fallback on the same test settings.h uses
kaleb-himes
committed
dcabab3
tests: w1 encode test checks status instead of pinning a refusal
kaleb-himes
committed
764f041
mldsa: stop signing when the small-mem NTT reports an error
kaleb-himes
committed
4413a32
mldsa: keep the verify error instead of the next sampler status
kaleb-himes
committed
eaac244
linuxkm: pin AES-XTS to the C lane when there is no fallback
kaleb-himes
committed
8e32202
sp x86_64: base lane saves only when the ct table lookup runs
kaleb-himes
committed
a3537a6
unit-mcdc: check verify still runs when the base lane needs no save
kaleb-himes
committed
821e45e
linuxkm: stop re-running the CASTs with the registers disabled
kaleb-himes
committed
2a86201
linuxkm: correct the hardirq comment about falling back to C
kaleb-himes
committed
8f34ac2
linuxkm: no shim C fallback in validated FIPS v7 builds
kaleb-himes
committed
f0839ab
linuxkm: require the native vector save in FIPS v7 kernel builds
kaleb-himes
committed
6f54245
sp x86_64: define the ct save macros before the per-curve guards
kaleb-himes
committed
870fabd
unit-mcdc: mldsa whitebox follows the make_hint valid out-parameter
kaleb-himes
committed
8a5a955
mlkem: a failed public key decode leaves the key unusable
kaleb-himes
committed
b9a7e19
unit-mcdc: whitebox comments describe a refused save as an error
kaleb-himes
committed
70bee4a
mldsa: wrap four status lines to the 80-column convention
kaleb-himes
committed
2d39461
settings: say how to get WC_C_DYNAMIC_FALLBACK in the FIPS v7 error
kaleb-himes
committed
5bed7ee
tests: a refused ML-KEM public key decode leaves the key unusable
kaleb-himes
committed
6f08744
mlkem: a decoded key drops the matrix cached from the key it replaces
kaleb-himes
committed
66e1b58
tests: zero the ML-KEM reuse test keys so a failed init frees safely
kaleb-himes
committed
7bbfd5c

Commits on Oct 3, 2026

mlkem: refuse software decapsulation before decrypting without a public key
kaleb-himes
committed
a8d6d3d