Skip to content

Regression testing fixes: TLS1.3 and Aarch64 AES-GCM guards - #11164

Open
SparkiDev wants to merge 1 commit into
wolfSSL:masterfrom
SparkiDev:regression_fixes_29
Open

Regression testing fixes: TLS1.3 and Aarch64 AES-GCM guards#11164
SparkiDev wants to merge 1 commit into
wolfSSL:masterfrom
SparkiDev:regression_fixes_29

Conversation

@SparkiDev

Copy link
Copy Markdown
Contributor

Description

tls1.3: fix guard
SendTls13CertificateVerify: ML-DSA sig size, and signing, only available when compiled when WOLFSSL_MLDSA_NO_SIGN is not defined.

AArch64 AES-GCM: fix decrypt guards
Have decrypt guards for AES-GCM assembly code for AArch64.

Testing

./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm --enable-aescbc --enable-aesofb --enable-aescfb --enable-aesgcm --enable-aesgcm-stream --enable-aesccm --enable-aesctr --enable-aesxts --enable-aeseax
./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm --enable-aescbc --enable-aesofb --enable-aescfb --enable-aesgcm --enable-aesgcm-stream --enable-aesccm --enable-aesctr --enable-aesxts --enable-aeseax CFLAGS=-DNO_AES_DECRYPT
./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm=inline --enable-aescbc --enable-aesofb --enable-aescfb --enable-aesgcm --enable-aesgcm-stream --enable-aesccm --enable-aesctr --enable-aesxts --enable-aeseax
./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm=inline --enable-aescbc --enable-aesofb --enable-aescfb --enable-aesgcm --enable-aesgcm-stream --enable-aesccm --enable-aesctr --enable-aesxts --enable-aeseax CFLAGS=-DNO_AES_DECRYPT
./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm=sha3-crypto --enable-aescbc --enable-aesofb --enable-aescfb --enable-aesgcm --enable-aesgcm-stream --enable-aesccm --enable-aesctr --enable-aesxts --enable-aeseax
./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm=sha3-crypto --enable-aescbc --enable-aesofb --enable-aescfb --enable-aesgcm --enable-aesgcm-stream --enable-aesccm --enable-aesctr --enable-aesxts --enable-aeseax CFLAGS=-DNO_AES_DECRYPT
./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm=inline,sha3-crypto --enable-aescbc --enable-aesofb --enable-aescfb --enable-aesgcm --enable-aesgcm-stream --enable-aesccm --enable-aesctr --enable-aesxts --enable-aeseax
./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm=inline,sha3-crypto --enable-aescbc --enable-aesofb --enable-aescfb --enable-aesgcm --enable-aesgcm-stream --enable-aesccm --enable-aesctr --enable-aesxts --enable-aeseax CFLAGS=-DNO_AES_DECRYPT

One-shot guard in isolation, plus the GCM-off negative control:

./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm --enable-aesgcm
./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm --enable-aesgcm CFLAGS=-DNO_AES_DECRYPT
./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm --disable-aesgcm CFLAGS=-DNO_AES_DECRYPT
./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm=inline --enable-aesgcm
./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm=inline --enable-aesgcm CFLAGS=-DNO_AES_DECRYPT
./configure --disable-shared --enable-cryptonly --host=aarch64 CC=aarch64-linux-gnu-gcc LDFLAGS=--static --enable-armasm=inline --disable-aesgcm CFLAGS=-DNO_AES_DECRYPT

./configure --disable-shared --disable-asm --disable-sp-asm --enable-mldsa=make,44,65,87
./configure --disable-shared --disable-asm --disable-sp-asm --enable-mldsa=make,44
./configure --disable-shared --disable-asm --disable-sp-asm --enable-mldsa=make,44,65
./configure --disable-shared --disable-asm --disable-sp-asm --enable-mldsa=make,44,87
./configure --disable-shared --disable-asm --disable-sp-asm --enable-mldsa=make,65
./configure --disable-shared --disable-asm --disable-sp-asm --enable-mldsa=make,65,87
./configure --disable-shared --disable-asm --disable-sp-asm --enable-mldsa=make,87
./configure --disable-shared --disable-asm --disable-sp-asm --enable-mldsa

tls1.3: fix guard
SendTls13CertificateVerify: ML-DSA sig size, and signing, only available when compiled when WOLFSSL_MLDSA_NO_SIGN is not defined.

AArch64 AES-GCM: fix decrypt guards
Have decrypt guards for AES-GCM assembly code for AArch64.
@SparkiDev SparkiDev self-assigned this Aug 13, 2026
@SparkiDev

Copy link
Copy Markdown
Contributor Author

Code generated with PR:
https://github.com/wolfSSL/scripts/pull/655

@SparkiDev

Copy link
Copy Markdown
Contributor Author

Jenkins: retest this please

@SparkiDev SparkiDev assigned wolfSSL-Bot and unassigned SparkiDev Aug 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants