Re: [PATCH] crypto: arm64/poly1305-neon - reorder PAC authentication with SP update

2020-11-05 Thread Herbert Xu
On Tue, Oct 27, 2020 at 12:00:27AM +0100, Ard Biesheuvel wrote: > PAC pointer authentication signs the return address against the value > of the stack pointer, to prevent stack overrun exploits from corrupting > the control flow. However, this requires that the AUTIASP is issued with > SP holding t

Re: [PATCH] crypto: arm64/poly1305-neon - reorder PAC authentication with SP update

2020-10-29 Thread Andy Polyakov
> (+ Andy) Thanks! Applied to cryptogams, pinged openssl. Cheers.

Re: [PATCH] crypto: arm64/poly1305-neon - reorder PAC authentication with SP update

2020-10-26 Thread Ard Biesheuvel
(+ Andy) On Tue, 27 Oct 2020 at 00:04, Ard Biesheuvel wrote: > > On Tue, 27 Oct 2020 at 00:03, Eric Biggers wrote: > > > > On Tue, Oct 27, 2020 at 12:00:27AM +0100, Ard Biesheuvel wrote: > > > PAC pointer authentication signs the return address against the value > > > of the stack pointer, to pr

Re: [PATCH] crypto: arm64/poly1305-neon - reorder PAC authentication with SP update

2020-10-26 Thread Ard Biesheuvel
On Tue, 27 Oct 2020 at 00:03, Eric Biggers wrote: > > On Tue, Oct 27, 2020 at 12:00:27AM +0100, Ard Biesheuvel wrote: > > PAC pointer authentication signs the return address against the value > > of the stack pointer, to prevent stack overrun exploits from corrupting > > the control flow. However,

Re: [PATCH] crypto: arm64/poly1305-neon - reorder PAC authentication with SP update

2020-10-26 Thread Eric Biggers
On Tue, Oct 27, 2020 at 12:00:27AM +0100, Ard Biesheuvel wrote: > PAC pointer authentication signs the return address against the value > of the stack pointer, to prevent stack overrun exploits from corrupting > the control flow. However, this requires that the AUTIASP is issued with > SP holding t

[PATCH] crypto: arm64/poly1305-neon - reorder PAC authentication with SP update

2020-10-26 Thread Ard Biesheuvel
PAC pointer authentication signs the return address against the value of the stack pointer, to prevent stack overrun exploits from corrupting the control flow. However, this requires that the AUTIASP is issued with SP holding the same value as it held when the PAC value was generated. The Poly1305