<feed xmlns='http://www.w3.org/2005/Atom'>
<title>krb5.git/src/lib/crypto/builtin, branch kinit-c</title>
<subtitle>MIT Kerberos patches</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/'/>
<entry>
<title>Get rid of builtin AES uitypes.h</title>
<updated>2014-02-26T21:15:20+00:00</updated>
<author>
<name>Greg Hudson</name>
<email>ghudson@mit.edu</email>
</author>
<published>2014-02-01T20:23:58+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=42cc0d3cd2cfa02a6ba9b3e0b94000e73d83ff92'/>
<id>42cc0d3cd2cfa02a6ba9b3e0b94000e73d83ff92</id>
<content type='text'>
Remove uitypes.h and just include stdint.h; all we need from it is
uint{8,16,32}_t.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Remove uitypes.h and just include stdint.h; all we need from it is
uint{8,16,32}_t.
</pre>
</div>
</content>
</entry>
<entry>
<title>Clean up AES-NI code</title>
<updated>2014-01-10T21:01:16+00:00</updated>
<author>
<name>Tom Yu</name>
<email>tlyu@mit.edu</email>
</author>
<published>2014-01-10T20:45:45+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=d658d91bb16adb5410ee2b34437630ee43cbd939'/>
<id>d658d91bb16adb5410ee2b34437630ee43cbd939</id>
<content type='text'>
Items in .data other than shuffle_mask are unused; delete them.
Delete the unused macro load_and_inc4.  Move shuffle_mask to .rodata.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Items in .data other than shuffle_mask are unused; delete them.
Delete the unused macro load_and_inc4.  Move shuffle_mask to .rodata.
</pre>
</div>
</content>
</entry>
<entry>
<title>Avoid text relocations in iaesx86.s</title>
<updated>2014-01-10T20:04:32+00:00</updated>
<author>
<name>Tom Yu</name>
<email>tlyu@mit.edu</email>
</author>
<published>2014-01-10T20:04:32+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=3847aa109e8ff3f2781d53315f81e8d29ee35892'/>
<id>3847aa109e8ff3f2781d53315f81e8d29ee35892</id>
<content type='text'>
Use PC-relative addressing to avoid runtime text relocations on i386.

Adapted patch from Nalin Dahyabhai.

ticket: 7815
target_version: 1.12.1
tags: pullup
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Use PC-relative addressing to avoid runtime text relocations on i386.

Adapted patch from Nalin Dahyabhai.

ticket: 7815
target_version: 1.12.1
tags: pullup
</pre>
</div>
</content>
</entry>
<entry>
<title>Mark AESNI files as not needing executable stacks</title>
<updated>2014-01-03T18:50:48+00:00</updated>
<author>
<name>Greg Hudson</name>
<email>ghudson@mit.edu</email>
</author>
<published>2014-01-03T18:50:48+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=c64e39c69a9a7ee32c00b0cf7918f6274a565544'/>
<id>c64e39c69a9a7ee32c00b0cf7918f6274a565544</id>
<content type='text'>
Some Linux systems now come with facilities to mark the stack as
non-executable, making it more difficult to exploit buffer overrun
bugs.  For this to work, object files built from assembly need a
section added to note whether they require an executable stack.

Patch from Dhiru Kholia with comments added.  More information at:
https://bugzilla.redhat.com/show_bug.cgi?id=1045699
https://wiki.gentoo.org/wiki/Hardened/GNU_stack_quickstart

ticket: 7813
target_version: 1.12.1
tags: pullup
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Some Linux systems now come with facilities to mark the stack as
non-executable, making it more difficult to exploit buffer overrun
bugs.  For this to work, object files built from assembly need a
section added to note whether they require an executable stack.

Patch from Dhiru Kholia with comments added.  More information at:
https://bugzilla.redhat.com/show_bug.cgi?id=1045699
https://wiki.gentoo.org/wiki/Hardened/GNU_stack_quickstart

ticket: 7813
target_version: 1.12.1
tags: pullup
</pre>
</div>
</content>
</entry>
<entry>
<title>Use k5calloc instead of k5alloc where appropriate</title>
<updated>2013-07-12T00:39:51+00:00</updated>
<author>
<name>Greg Hudson</name>
<email>ghudson@mit.edu</email>
</author>
<published>2013-07-12T00:39:51+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=443ce5fef316e3dc324fe84557a06b069dbe33f9'/>
<id>443ce5fef316e3dc324fe84557a06b069dbe33f9</id>
<content type='text'>
Wherever we use k5alloc with a multiplication in the size parameter,,
use the new k5calloc helper function instead.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Wherever we use k5alloc with a multiplication in the size parameter,,
use the new k5calloc helper function instead.
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix various warnings</title>
<updated>2013-06-07T19:19:37+00:00</updated>
<author>
<name>Greg Hudson</name>
<email>ghudson@mit.edu</email>
</author>
<published>2013-06-07T19:17:31+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=e51c089b745161dd6e1d64998e99d065fc22377e'/>
<id>e51c089b745161dd6e1d64998e99d065fc22377e</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Add AES-NI support on Linux</title>
<updated>2013-05-24T18:20:36+00:00</updated>
<author>
<name>Greg Hudson</name>
<email>ghudson@mit.edu</email>
</author>
<published>2013-05-05T01:52:21+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=898c0f677d573a7882bb02459082501939fac435'/>
<id>898c0f677d573a7882bb02459082501939fac435</id>
<content type='text'>
If yasm and cpuid.h are present on a Linux i686 or x64 system, compile
the modified Intel AES-NI assembly sources.  In the builtin AES enc
provider, check at runtime whether the CPU supports AES-NI
instructions and use the assembly functions if so.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
If yasm and cpuid.h are present on a Linux i686 or x64 system, compile
the modified Intel AES-NI assembly sources.  In the builtin AES enc
provider, check at runtime whether the CPU supports AES-NI
instructions and use the assembly functions if so.
</pre>
</div>
</content>
</entry>
<entry>
<title>Adjust AESNI sources for krb5 tree</title>
<updated>2013-05-24T18:20:32+00:00</updated>
<author>
<name>Greg Hudson</name>
<email>ghudson@mit.edu</email>
</author>
<published>2013-05-04T23:09:38+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=0231309631acb59cc8b22227ca461005f38cc668'/>
<id>0231309631acb59cc8b22227ca461005f38cc668</id>
<content type='text'>
Remove functions we don't need.  Add macros to redefine functions with
an appropriate namespace prefix.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Remove functions we don't need.  Add macros to redefine functions with
an appropriate namespace prefix.
</pre>
</div>
</content>
</entry>
<entry>
<title>Add Intel AESNI assembly files</title>
<updated>2013-05-24T18:17:06+00:00</updated>
<author>
<name>Greg Hudson</name>
<email>ghudson@mit.edu</email>
</author>
<published>2013-04-24T17:04:19+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=7809ae6c7d9d737e1a7becc0851148c73c095c4b'/>
<id>7809ae6c7d9d737e1a7becc0851148c73c095c4b</id>
<content type='text'>
Add assembly files from the Intel AESNI Sample Library, version 1.2,
which implement AES encryption using AES-NI instructions.  Trailing
whitespace was removed.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Add assembly files from the Intel AESNI Sample Library, version 1.2,
which implement AES encryption using AES-NI instructions.  Trailing
whitespace was removed.
</pre>
</div>
</content>
</entry>
<entry>
<title>Refactor AES, Camellia builtin enc providers</title>
<updated>2013-05-24T18:15:05+00:00</updated>
<author>
<name>Greg Hudson</name>
<email>ghudson@mit.edu</email>
</author>
<published>2013-05-07T00:23:09+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=94d2162dcf1eec509ac376955615ab38309035be'/>
<id>94d2162dcf1eec509ac376955615ab38309035be</id>
<content type='text'>
In preparation for AES-NI support, adjust the block encryption helpers
in the AES enc provider so that the cache is only touched by helpers,
and reframe the CTS operations in terms of CBC operations.  Change the
Camellia enc provider as well for consistency.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
In preparation for AES-NI support, adjust the block encryption helpers
in the AES enc provider so that the cache is only touched by helpers,
and reframe the CTS operations in terms of CBC operations.  Change the
Camellia enc provider as well for consistency.
</pre>
</div>
</content>
</entry>
</feed>
