XTS Streaming .S and _c.c implementations, streaming callers & SVR brackets for aarch64 - #11423

Merged

JacobBarthelmeh merged 23 commits into

wolfSSL:masterfrom

kaleb-himes:PQ-FS-2026-Part3-SecurityReview-nofallback-L

Sep 30, 2026

Commits on Sep 28, 2026

aarch64: regenerate XTS asm so .S and _c.c carry the streaming path
kaleb-himes
committed
910a83d
aes-xts: dispatch aarch64 streaming through the crypto-extension asm
kaleb-himes
committed
7fb6098
aarch64: vector-register claims around every NEON and crypto-extension lane
kaleb-himes
committed
518d18c
linuxkm: arm64 vector register glue on kernel_neon_begin, enable ARM SIMD
kaleb-himes
committed
9aaf0f3
sha3: claim the vector registers around the aarch64 crypto lane
kaleb-himes
committed
9cdefa6
benchmark: measure the AES-XTS streaming path, not just the one-shot
kaleb-himes
committed
c81f56f
aes-xts: cover the multi-block streaming paths in testwolfcrypt
kaleb-himes
committed
05b0ed1
aes-xts: apply the SP800-38E data unit limit to decrypt too
kaleb-himes
committed
86ad2e2
aarch64: fix CI findings in the vector claims and stream tests
kaleb-himes
committed
ab56548
sha3: claim the vector registers in the SHAKE squeeze lanes
kaleb-himes
committed
f0b0de2
mlkem: initialize w to NULL, it is set and read in separate blocks
kaleb-himes
committed
90a1336
aes-xts: count bytes against the tweak only after the update succeeds
kaleb-himes
committed
5f94c7b
test: check every byte of the refused one-shot XTS decrypt output
kaleb-himes
committed
8b11948
aes-gcm: clear gcmKeySet when the aarch64 vector claim fails
kaleb-himes
committed
6d845bf
test: assert the XTS overflow refusal changes neither count nor output
kaleb-himes
committed
2be5fb8
test: guard the XTS accounting decrypt cases on HAVE_AES_DECRYPT
kaleb-himes
committed
0529e39
test: pin the XTS FIPS cap boundary and its no-side-effect refusal
kaleb-himes
committed
079eb67
linuxkm: arm64 vector path needs may_use_simd(), require kernel 4.14
kaleb-himes
committed
946cfc8
comments: trim this branch's new comments to the house length limit
kaleb-himes
committed
2aa9ee9
arm64: regenerate XTS asm_c with the crypto arch_extension directives
kaleb-himes
committed
5529163
sha512: return the vector claim error from wc_Sha512Transform
kaleb-himes
committed
8cc19d9
benchmark: leave AES-XTS Final a whole block when chunking
kaleb-himes
committed
70a638e
comments: fix the stale sha3 guard, wrong bench option and width
kaleb-himes
committed
9ecb80d

Navigation Menu

XTS Streaming .S and _c.c implementations, streaming callers & SVR brackets for aarch64 - #11423

XTS Streaming .S and _c.c implementations, streaming callers & SVR brackets for aarch64#11423
JacobBarthelmeh merged 23 commits into
wolfSSL:masterfrom
kaleb-himes:PQ-FS-2026-Part3-SecurityReview-nofallback-L

Commits on Sep 28, 2026

aarch64: regenerate XTS asm so .S and _c.c carry the streaming path

aes-xts: dispatch aarch64 streaming through the crypto-extension asm

aarch64: vector-register claims around every NEON and crypto-extension lane

linuxkm: arm64 vector register glue on kernel_neon_begin, enable ARM SIMD

sha3: claim the vector registers around the aarch64 crypto lane

benchmark: measure the AES-XTS streaming path, not just the one-shot

aes-xts: cover the multi-block streaming paths in testwolfcrypt

aes-xts: apply the SP800-38E data unit limit to decrypt too

aarch64: fix CI findings in the vector claims and stream tests

sha3: claim the vector registers in the SHAKE squeeze lanes

mlkem: initialize w to NULL, it is set and read in separate blocks

aes-xts: count bytes against the tweak only after the update succeeds

test: check every byte of the refused one-shot XTS decrypt output

aes-gcm: clear gcmKeySet when the aarch64 vector claim fails

test: assert the XTS overflow refusal changes neither count nor output

test: guard the XTS accounting decrypt cases on HAVE_AES_DECRYPT

test: pin the XTS FIPS cap boundary and its no-side-effect refusal

linuxkm: arm64 vector path needs may_use_simd(), require kernel 4.14

comments: trim this branch's new comments to the house length limit

arm64: regenerate XTS asm_c with the crypto arch_extension directives

sha512: return the vector claim error from wc_Sha512Transform

benchmark: leave AES-XTS Final a whole block when chunking

comments: fix the stale sha3 guard, wrong bench option and width