mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-04-09 21:44:28 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Strengthen fall-back for mbedtls_ct_compiler_opaque

Browse Source 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
This commit is contained in:
Dave Rodgman 2023-06-08 17:52:21 +01:00
parent ec85b85468
commit 2894d007d3
1 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
library/constant_time_impl.h
View File

@ -65,20 +65,29 @@
* Core const-time primitives
*/
/** Ensure that the compiler cannot know the value of x (i.e., cannot optimise
/* Ensure that the compiler cannot know the value of x (i.e., cannot optimise
* based on its value) after this function is called.
*
* If we are not using assembly, this will be fairly inefficient, so its use
* should be minimised.
*/
#if !defined(MBEDTLS_CT_ASM)
/*
* Define an object with the value zero, such that the compiler cannot prove that it
* has the value zero (because it is volatile, it "may be modified in ways unknown to
* the implementation").
*/
static volatile mbedtls_ct_uint_t mbedtls_ct_zero = 0;
#endif
static inline mbedtls_ct_uint_t mbedtls_ct_compiler_opaque(mbedtls_ct_uint_t x)
{
#if defined(MBEDTLS_CT_ASM)
asm volatile ("" : [x] "+r" (x) :);
return x;
#else
volatile mbedtls_ct_uint_t result = x;
return result;
return x ^ mbedtls_ct_zero;
#endif
}