mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-01-30 15:32:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Docs update

Browse Source 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
This commit is contained in:
Dave Rodgman 2023-05-13 12:12:02 +01:00
parent 1ab0b48ac3
commit f27727b22e
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
library/constant_time_internal.h
View File

@ -36,10 +36,10 @@
* *
* It has three main parts: * It has three main parts:
* *
* - boolean operations (and a few non-boolean operations) * - boolean operations
* These are all named mbedtls_ct_bool_<operation>, and operate over * These are all named mbedtls_ct_bool_<operation>, and operate over
* mbedtls_ct_condition_t. * mbedtls_ct_condition_t.
* All arguments to these operations are considered secret. * All arguments are considered secret.
* example: bool x = y | z => x = mbedtls_ct_bool_or(y, z) * example: bool x = y | z => x = mbedtls_ct_bool_or(y, z)
* *
* - conditional data selection * - conditional data selection
@ -62,10 +62,11 @@
* to/from "unsigned int", "size_t", and "mbedtls_mpi_uint" (and any other * to/from "unsigned int", "size_t", and "mbedtls_mpi_uint" (and any other
* not-larger integer types). * not-larger integer types).
* *
* For Arm (32-bit, 64-bit and Thumb), assembly implementations are used * For Arm (32-bit, 64-bit and Thumb), x86 and x86-64, assembly implementations
* to ensure that the generated code is constant time. For other architectures, * are used to ensure that the generated code is constant time. For other
* a plain C fallback designed to yield constant-time code (this has been * architectures, a plain C fallback designed to yield constant-time code (this
* observed to be constant-time on latest gcc, clang and MSVC as of May 2023). * has been observed to be constant-time on latest gcc, clang and MSVC as of
* May 2023).
*/ */
#if (SIZE_MAX > 0xffffffffffffffffULL) #if (SIZE_MAX > 0xffffffffffffffffULL)