Skip to content

fix Octeon AES-GCM J0 derivation when ivSz is a non-12-byte non-zero …#10471

Open
JacobBarthelmeh wants to merge 1 commit into
wolfSSL:masterfrom
JacobBarthelmeh:cavium_octeon
Open

fix Octeon AES-GCM J0 derivation when ivSz is a non-12-byte non-zero …#10471
JacobBarthelmeh wants to merge 1 commit into
wolfSSL:masterfrom
JacobBarthelmeh:cavium_octeon

Conversation

@JacobBarthelmeh
Copy link
Copy Markdown
Contributor

Fenrir F-3336

@JacobBarthelmeh JacobBarthelmeh self-assigned this May 12, 2026
Copilot AI review requested due to automatic review settings May 12, 2026 20:18
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Fixes Octeon AES-GCM J0 derivation for non-12-byte IVs by avoiding an extra GHASH block when the IV length is an exact multiple of the AES block size (i.e., no remainder).

Changes:

  • Skip the final zero-padded GHASH update when remainder == 0 during IV hashing.
  • Preserve correct GHASH processing for partial final IV blocks (remainder > 0).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@github-actions
Copy link
Copy Markdown

MemBrowse Memory Report

No memory changes detected for:

@JacobBarthelmeh
Copy link
Copy Markdown
Contributor Author

Retest this please Jenkins. No page found.

@JacobBarthelmeh
Copy link
Copy Markdown
Contributor Author

Retest this please Jenkins. From what I can see it is :

unrecognized macros used:
__CHERI_PURE_CAPABILITY__

Which seems unrelated to these changes.

@dgarske
Copy link
Copy Markdown
Member

dgarske commented May 13, 2026

Retest this please Jenkins. From what I can see it is :

unrecognized macros used:
__CHERI_PURE_CAPABILITY__

Which seems unrelated to these changes.

That is correct. Fixed in #10480

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants