/src/openssl/include/internal/constant_time.h
Line | Count | Source (jump to first uncovered line) |
1 | | /* |
2 | | * Copyright 2014-2024 The OpenSSL Project Authors. All Rights Reserved. |
3 | | * |
4 | | * Licensed under the Apache License 2.0 (the "License"). You may not use |
5 | | * this file except in compliance with the License. You can obtain a copy |
6 | | * in the file LICENSE in the source distribution or at |
7 | | * https://www.openssl.org/source/license.html |
8 | | */ |
9 | | |
10 | | #ifndef OSSL_INTERNAL_CONSTANT_TIME_H |
11 | | # define OSSL_INTERNAL_CONSTANT_TIME_H |
12 | | # pragma once |
13 | | |
14 | | # include <stdlib.h> |
15 | | # include <string.h> |
16 | | # include <openssl/e_os2.h> /* For 'ossl_inline' */ |
17 | | |
18 | | /*- |
19 | | * The boolean methods return a bitmask of all ones (0xff...f) for true |
20 | | * and 0 for false. This is useful for choosing a value based on the result |
21 | | * of a conditional in constant time. For example, |
22 | | * if (a < b) { |
23 | | * c = a; |
24 | | * } else { |
25 | | * c = b; |
26 | | * } |
27 | | * can be written as |
28 | | * unsigned int lt = constant_time_lt(a, b); |
29 | | * c = constant_time_select(lt, a, b); |
30 | | */ |
31 | | |
32 | | /* Returns the given value with the MSB copied to all the other bits. */ |
33 | | static ossl_inline unsigned int constant_time_msb(unsigned int a); |
34 | | /* Convenience method for uint32_t. */ |
35 | | static ossl_inline uint32_t constant_time_msb_32(uint32_t a); |
36 | | /* Convenience method for uint64_t. */ |
37 | | static ossl_inline uint64_t constant_time_msb_64(uint64_t a); |
38 | | |
39 | | /* Returns 0xff..f if a < b and 0 otherwise. */ |
40 | | static ossl_inline unsigned int constant_time_lt(unsigned int a, |
41 | | unsigned int b); |
42 | | /* Convenience method for getting an 8-bit mask. */ |
43 | | static ossl_inline unsigned char constant_time_lt_8(unsigned int a, |
44 | | unsigned int b); |
45 | | /* Convenience method for uint64_t. */ |
46 | | static ossl_inline uint64_t constant_time_lt_64(uint64_t a, uint64_t b); |
47 | | |
48 | | /* Returns 0xff..f if a >= b and 0 otherwise. */ |
49 | | static ossl_inline unsigned int constant_time_ge(unsigned int a, |
50 | | unsigned int b); |
51 | | /* Convenience method for getting an 8-bit mask. */ |
52 | | static ossl_inline unsigned char constant_time_ge_8(unsigned int a, |
53 | | unsigned int b); |
54 | | |
55 | | /* Returns 0xff..f if a == 0 and 0 otherwise. */ |
56 | | static ossl_inline unsigned int constant_time_is_zero(unsigned int a); |
57 | | /* Convenience method for getting an 8-bit mask. */ |
58 | | static ossl_inline unsigned char constant_time_is_zero_8(unsigned int a); |
59 | | /* Convenience method for getting a 32-bit mask. */ |
60 | | static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a); |
61 | | |
62 | | /* Returns 0xff..f if a == b and 0 otherwise. */ |
63 | | static ossl_inline unsigned int constant_time_eq(unsigned int a, |
64 | | unsigned int b); |
65 | | /* Convenience method for getting an 8-bit mask. */ |
66 | | static ossl_inline unsigned char constant_time_eq_8(unsigned int a, |
67 | | unsigned int b); |
68 | | /* Signed integers. */ |
69 | | static ossl_inline unsigned int constant_time_eq_int(int a, int b); |
70 | | /* Convenience method for getting an 8-bit mask. */ |
71 | | static ossl_inline unsigned char constant_time_eq_int_8(int a, int b); |
72 | | |
73 | | /*- |
74 | | * Returns (mask & a) | (~mask & b). |
75 | | * |
76 | | * When |mask| is all 1s or all 0s (as returned by the methods above), |
77 | | * the select methods return either |a| (if |mask| is nonzero) or |b| |
78 | | * (if |mask| is zero). |
79 | | */ |
80 | | static ossl_inline unsigned int constant_time_select(unsigned int mask, |
81 | | unsigned int a, |
82 | | unsigned int b); |
83 | | /* Convenience method for unsigned chars. */ |
84 | | static ossl_inline unsigned char constant_time_select_8(unsigned char mask, |
85 | | unsigned char a, |
86 | | unsigned char b); |
87 | | |
88 | | /* Convenience method for uint32_t. */ |
89 | | static ossl_inline uint32_t constant_time_select_32(uint32_t mask, uint32_t a, |
90 | | uint32_t b); |
91 | | |
92 | | /* Convenience method for uint64_t. */ |
93 | | static ossl_inline uint64_t constant_time_select_64(uint64_t mask, uint64_t a, |
94 | | uint64_t b); |
95 | | /* Convenience method for signed integers. */ |
96 | | static ossl_inline int constant_time_select_int(unsigned int mask, int a, |
97 | | int b); |
98 | | |
99 | | |
100 | | static ossl_inline unsigned int constant_time_msb(unsigned int a) |
101 | 256M | { |
102 | 256M | return 0 - (a >> (sizeof(a) * 8 - 1)); |
103 | 256M | } bn_exp.c:constant_time_msb Line | Count | Source | 101 | 256M | { | 102 | 256M | return 0 - (a >> (sizeof(a) * 8 - 1)); | 103 | 256M | } |
Unexecuted instantiation: bn_gcd.c:constant_time_msb bn_lib.c:constant_time_msb Line | Count | Source | 101 | 95.2k | { | 102 | 95.2k | return 0 - (a >> (sizeof(a) * 8 - 1)); | 103 | 95.2k | } |
Unexecuted instantiation: curve448.c:constant_time_msb Unexecuted instantiation: curve448_tables.c:constant_time_msb Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_msb Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_msb Unexecuted instantiation: err.c:constant_time_msb Unexecuted instantiation: f_generic.c:constant_time_msb Unexecuted instantiation: f_impl64.c:constant_time_msb Unexecuted instantiation: rsa_ossl.c:constant_time_msb Unexecuted instantiation: rsa_pk1.c:constant_time_msb Unexecuted instantiation: rsa_pmeth.c:constant_time_msb Unexecuted instantiation: scalar.c:constant_time_msb Unexecuted instantiation: set_key.c:constant_time_msb Unexecuted instantiation: eddsa.c:constant_time_msb Unexecuted instantiation: rsa_oaep.c:constant_time_msb Unexecuted instantiation: rsa_enc.c:constant_time_msb Unexecuted instantiation: ssl3_cbc.c:constant_time_msb Unexecuted instantiation: ciphercommon_block.c:constant_time_msb Unexecuted instantiation: tls_pad.c:constant_time_msb Unexecuted instantiation: rsaz_exp.c:constant_time_msb Unexecuted instantiation: rsaz_exp_x2.c:constant_time_msb Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_msb Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_msb |
104 | | |
105 | | |
106 | | static ossl_inline uint32_t constant_time_msb_32(uint32_t a) |
107 | 0 | { |
108 | 0 | return 0 - (a >> 31); |
109 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_msb_32 Unexecuted instantiation: bn_gcd.c:constant_time_msb_32 Unexecuted instantiation: bn_lib.c:constant_time_msb_32 Unexecuted instantiation: curve448.c:constant_time_msb_32 Unexecuted instantiation: curve448_tables.c:constant_time_msb_32 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_msb_32 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_msb_32 Unexecuted instantiation: err.c:constant_time_msb_32 Unexecuted instantiation: f_generic.c:constant_time_msb_32 Unexecuted instantiation: f_impl64.c:constant_time_msb_32 Unexecuted instantiation: rsa_ossl.c:constant_time_msb_32 Unexecuted instantiation: rsa_pk1.c:constant_time_msb_32 Unexecuted instantiation: rsa_pmeth.c:constant_time_msb_32 Unexecuted instantiation: scalar.c:constant_time_msb_32 Unexecuted instantiation: set_key.c:constant_time_msb_32 Unexecuted instantiation: eddsa.c:constant_time_msb_32 Unexecuted instantiation: rsa_oaep.c:constant_time_msb_32 Unexecuted instantiation: rsa_enc.c:constant_time_msb_32 Unexecuted instantiation: ssl3_cbc.c:constant_time_msb_32 Unexecuted instantiation: ciphercommon_block.c:constant_time_msb_32 Unexecuted instantiation: tls_pad.c:constant_time_msb_32 Unexecuted instantiation: rsaz_exp.c:constant_time_msb_32 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_msb_32 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_msb_32 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_msb_32 |
110 | | |
111 | | static ossl_inline uint64_t constant_time_msb_64(uint64_t a) |
112 | 3 | { |
113 | 3 | return 0 - (a >> 63); |
114 | 3 | } Unexecuted instantiation: bn_exp.c:constant_time_msb_64 Unexecuted instantiation: bn_gcd.c:constant_time_msb_64 Unexecuted instantiation: bn_lib.c:constant_time_msb_64 Unexecuted instantiation: curve448.c:constant_time_msb_64 Unexecuted instantiation: curve448_tables.c:constant_time_msb_64 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_msb_64 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_msb_64 Unexecuted instantiation: err.c:constant_time_msb_64 f_generic.c:constant_time_msb_64 Line | Count | Source | 112 | 3 | { | 113 | 3 | return 0 - (a >> 63); | 114 | 3 | } |
Unexecuted instantiation: f_impl64.c:constant_time_msb_64 Unexecuted instantiation: rsa_ossl.c:constant_time_msb_64 Unexecuted instantiation: rsa_pk1.c:constant_time_msb_64 Unexecuted instantiation: rsa_pmeth.c:constant_time_msb_64 Unexecuted instantiation: scalar.c:constant_time_msb_64 Unexecuted instantiation: set_key.c:constant_time_msb_64 Unexecuted instantiation: eddsa.c:constant_time_msb_64 Unexecuted instantiation: rsa_oaep.c:constant_time_msb_64 Unexecuted instantiation: rsa_enc.c:constant_time_msb_64 Unexecuted instantiation: ssl3_cbc.c:constant_time_msb_64 Unexecuted instantiation: ciphercommon_block.c:constant_time_msb_64 Unexecuted instantiation: tls_pad.c:constant_time_msb_64 Unexecuted instantiation: rsaz_exp.c:constant_time_msb_64 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_msb_64 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_msb_64 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_msb_64 |
115 | | |
116 | | static ossl_inline size_t constant_time_msb_s(size_t a) |
117 | 4.32k | { |
118 | 4.32k | return 0 - (a >> (sizeof(a) * 8 - 1)); |
119 | 4.32k | } Unexecuted instantiation: bn_exp.c:constant_time_msb_s Unexecuted instantiation: bn_gcd.c:constant_time_msb_s Unexecuted instantiation: bn_lib.c:constant_time_msb_s curve448.c:constant_time_msb_s Line | Count | Source | 117 | 4.32k | { | 118 | 4.32k | return 0 - (a >> (sizeof(a) * 8 - 1)); | 119 | 4.32k | } |
Unexecuted instantiation: curve448_tables.c:constant_time_msb_s Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_msb_s Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_msb_s Unexecuted instantiation: err.c:constant_time_msb_s Unexecuted instantiation: f_generic.c:constant_time_msb_s Unexecuted instantiation: f_impl64.c:constant_time_msb_s Unexecuted instantiation: rsa_ossl.c:constant_time_msb_s Unexecuted instantiation: rsa_pk1.c:constant_time_msb_s Unexecuted instantiation: rsa_pmeth.c:constant_time_msb_s Unexecuted instantiation: scalar.c:constant_time_msb_s Unexecuted instantiation: set_key.c:constant_time_msb_s Unexecuted instantiation: eddsa.c:constant_time_msb_s Unexecuted instantiation: rsa_oaep.c:constant_time_msb_s Unexecuted instantiation: rsa_enc.c:constant_time_msb_s Unexecuted instantiation: ssl3_cbc.c:constant_time_msb_s Unexecuted instantiation: ciphercommon_block.c:constant_time_msb_s Unexecuted instantiation: tls_pad.c:constant_time_msb_s Unexecuted instantiation: rsaz_exp.c:constant_time_msb_s Unexecuted instantiation: rsaz_exp_x2.c:constant_time_msb_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_msb_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_msb_s |
120 | | |
121 | | static ossl_inline unsigned int constant_time_lt(unsigned int a, |
122 | | unsigned int b) |
123 | 0 | { |
124 | 0 | return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b))); |
125 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_lt Unexecuted instantiation: bn_gcd.c:constant_time_lt Unexecuted instantiation: bn_lib.c:constant_time_lt Unexecuted instantiation: curve448.c:constant_time_lt Unexecuted instantiation: curve448_tables.c:constant_time_lt Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_lt Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_lt Unexecuted instantiation: err.c:constant_time_lt Unexecuted instantiation: f_generic.c:constant_time_lt Unexecuted instantiation: f_impl64.c:constant_time_lt Unexecuted instantiation: rsa_ossl.c:constant_time_lt Unexecuted instantiation: rsa_pk1.c:constant_time_lt Unexecuted instantiation: rsa_pmeth.c:constant_time_lt Unexecuted instantiation: scalar.c:constant_time_lt Unexecuted instantiation: set_key.c:constant_time_lt Unexecuted instantiation: eddsa.c:constant_time_lt Unexecuted instantiation: rsa_oaep.c:constant_time_lt Unexecuted instantiation: rsa_enc.c:constant_time_lt Unexecuted instantiation: ssl3_cbc.c:constant_time_lt Unexecuted instantiation: ciphercommon_block.c:constant_time_lt Unexecuted instantiation: tls_pad.c:constant_time_lt Unexecuted instantiation: rsaz_exp.c:constant_time_lt Unexecuted instantiation: rsaz_exp_x2.c:constant_time_lt Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_lt Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_lt |
126 | | |
127 | | static ossl_inline size_t constant_time_lt_s(size_t a, size_t b) |
128 | 0 | { |
129 | 0 | return constant_time_msb_s(a ^ ((a ^ b) | ((a - b) ^ b))); |
130 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_lt_s Unexecuted instantiation: bn_gcd.c:constant_time_lt_s Unexecuted instantiation: bn_lib.c:constant_time_lt_s Unexecuted instantiation: curve448.c:constant_time_lt_s Unexecuted instantiation: curve448_tables.c:constant_time_lt_s Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_lt_s Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_lt_s Unexecuted instantiation: err.c:constant_time_lt_s Unexecuted instantiation: f_generic.c:constant_time_lt_s Unexecuted instantiation: f_impl64.c:constant_time_lt_s Unexecuted instantiation: rsa_ossl.c:constant_time_lt_s Unexecuted instantiation: rsa_pk1.c:constant_time_lt_s Unexecuted instantiation: rsa_pmeth.c:constant_time_lt_s Unexecuted instantiation: scalar.c:constant_time_lt_s Unexecuted instantiation: set_key.c:constant_time_lt_s Unexecuted instantiation: eddsa.c:constant_time_lt_s Unexecuted instantiation: rsa_oaep.c:constant_time_lt_s Unexecuted instantiation: rsa_enc.c:constant_time_lt_s Unexecuted instantiation: ssl3_cbc.c:constant_time_lt_s Unexecuted instantiation: ciphercommon_block.c:constant_time_lt_s Unexecuted instantiation: tls_pad.c:constant_time_lt_s Unexecuted instantiation: rsaz_exp.c:constant_time_lt_s Unexecuted instantiation: rsaz_exp_x2.c:constant_time_lt_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_lt_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_lt_s |
131 | | |
132 | | static ossl_inline unsigned char constant_time_lt_8(unsigned int a, |
133 | | unsigned int b) |
134 | 0 | { |
135 | 0 | return (unsigned char)constant_time_lt(a, b); |
136 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_lt_8 Unexecuted instantiation: bn_gcd.c:constant_time_lt_8 Unexecuted instantiation: bn_lib.c:constant_time_lt_8 Unexecuted instantiation: curve448.c:constant_time_lt_8 Unexecuted instantiation: curve448_tables.c:constant_time_lt_8 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_lt_8 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_lt_8 Unexecuted instantiation: err.c:constant_time_lt_8 Unexecuted instantiation: f_generic.c:constant_time_lt_8 Unexecuted instantiation: f_impl64.c:constant_time_lt_8 Unexecuted instantiation: rsa_ossl.c:constant_time_lt_8 Unexecuted instantiation: rsa_pk1.c:constant_time_lt_8 Unexecuted instantiation: rsa_pmeth.c:constant_time_lt_8 Unexecuted instantiation: scalar.c:constant_time_lt_8 Unexecuted instantiation: set_key.c:constant_time_lt_8 Unexecuted instantiation: eddsa.c:constant_time_lt_8 Unexecuted instantiation: rsa_oaep.c:constant_time_lt_8 Unexecuted instantiation: rsa_enc.c:constant_time_lt_8 Unexecuted instantiation: ssl3_cbc.c:constant_time_lt_8 Unexecuted instantiation: ciphercommon_block.c:constant_time_lt_8 Unexecuted instantiation: tls_pad.c:constant_time_lt_8 Unexecuted instantiation: rsaz_exp.c:constant_time_lt_8 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_lt_8 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_lt_8 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_lt_8 |
137 | | |
138 | | static ossl_inline uint64_t constant_time_lt_64(uint64_t a, uint64_t b) |
139 | 0 | { |
140 | 0 | return constant_time_msb_64(a ^ ((a ^ b) | ((a - b) ^ b))); |
141 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_lt_64 Unexecuted instantiation: bn_gcd.c:constant_time_lt_64 Unexecuted instantiation: bn_lib.c:constant_time_lt_64 Unexecuted instantiation: curve448.c:constant_time_lt_64 Unexecuted instantiation: curve448_tables.c:constant_time_lt_64 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_lt_64 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_lt_64 Unexecuted instantiation: err.c:constant_time_lt_64 Unexecuted instantiation: f_generic.c:constant_time_lt_64 Unexecuted instantiation: f_impl64.c:constant_time_lt_64 Unexecuted instantiation: rsa_ossl.c:constant_time_lt_64 Unexecuted instantiation: rsa_pk1.c:constant_time_lt_64 Unexecuted instantiation: rsa_pmeth.c:constant_time_lt_64 Unexecuted instantiation: scalar.c:constant_time_lt_64 Unexecuted instantiation: set_key.c:constant_time_lt_64 Unexecuted instantiation: eddsa.c:constant_time_lt_64 Unexecuted instantiation: rsa_oaep.c:constant_time_lt_64 Unexecuted instantiation: rsa_enc.c:constant_time_lt_64 Unexecuted instantiation: ssl3_cbc.c:constant_time_lt_64 Unexecuted instantiation: ciphercommon_block.c:constant_time_lt_64 Unexecuted instantiation: tls_pad.c:constant_time_lt_64 Unexecuted instantiation: rsaz_exp.c:constant_time_lt_64 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_lt_64 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_lt_64 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_lt_64 |
142 | | |
143 | | #ifdef BN_ULONG |
144 | | static ossl_inline BN_ULONG value_barrier_bn(BN_ULONG a) |
145 | 7.74k | { |
146 | | #if !defined(OPENSSL_NO_ASM) && defined(__GNUC__) |
147 | 3.87k | BN_ULONG r; |
148 | | __asm__("" : "=r"(r) : "0"(a)); |
149 | | #else |
150 | | volatile BN_ULONG r = a; |
151 | | #endif |
152 | 7.74k | return r; |
153 | 7.74k | } Unexecuted instantiation: bn_exp.c:value_barrier_bn bn_gcd.c:value_barrier_bn Line | Count | Source | 145 | 3.87k | { | 146 | | #if !defined(OPENSSL_NO_ASM) && defined(__GNUC__) | 147 | | BN_ULONG r; | 148 | | __asm__("" : "=r"(r) : "0"(a)); | 149 | | #else | 150 | 3.87k | volatile BN_ULONG r = a; | 151 | 3.87k | #endif | 152 | 3.87k | return r; | 153 | 3.87k | } |
Unexecuted instantiation: bn_lib.c:value_barrier_bn Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:value_barrier_bn Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:value_barrier_bn Unexecuted instantiation: err.c:value_barrier_bn Unexecuted instantiation: rsa_ossl.c:value_barrier_bn Unexecuted instantiation: eddsa.c:value_barrier_bn Unexecuted instantiation: rsa_enc.c:value_barrier_bn Unexecuted instantiation: ssl3_cbc.c:value_barrier_bn Unexecuted instantiation: ciphercommon_block.c:value_barrier_bn Unexecuted instantiation: tls_pad.c:value_barrier_bn bn_gcd.c:value_barrier_bn Line | Count | Source | 145 | 3.87k | { | 146 | 3.87k | #if !defined(OPENSSL_NO_ASM) && defined(__GNUC__) | 147 | 3.87k | BN_ULONG r; | 148 | 3.87k | __asm__("" : "=r"(r) : "0"(a)); | 149 | | #else | 150 | | volatile BN_ULONG r = a; | 151 | | #endif | 152 | 3.87k | return r; | 153 | 3.87k | } |
Unexecuted instantiation: rsaz_exp.c:value_barrier_bn Unexecuted instantiation: rsaz_exp_x2.c:value_barrier_bn Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:value_barrier_bn Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:value_barrier_bn |
154 | | |
155 | | static ossl_inline BN_ULONG constant_time_msb_bn(BN_ULONG a) |
156 | 7.44M | { |
157 | 7.44M | return 0 - (a >> (sizeof(a) * 8 - 1)); |
158 | 7.44M | } Unexecuted instantiation: bn_exp.c:constant_time_msb_bn bn_gcd.c:constant_time_msb_bn Line | Count | Source | 156 | 3.87k | { | 157 | 3.87k | return 0 - (a >> (sizeof(a) * 8 - 1)); | 158 | 3.87k | } |
bn_lib.c:constant_time_msb_bn Line | Count | Source | 156 | 7.44M | { | 157 | 7.44M | return 0 - (a >> (sizeof(a) * 8 - 1)); | 158 | 7.44M | } |
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_msb_bn Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_msb_bn Unexecuted instantiation: err.c:constant_time_msb_bn Unexecuted instantiation: rsa_ossl.c:constant_time_msb_bn Unexecuted instantiation: eddsa.c:constant_time_msb_bn Unexecuted instantiation: rsa_enc.c:constant_time_msb_bn Unexecuted instantiation: ssl3_cbc.c:constant_time_msb_bn Unexecuted instantiation: ciphercommon_block.c:constant_time_msb_bn Unexecuted instantiation: tls_pad.c:constant_time_msb_bn Unexecuted instantiation: rsaz_exp.c:constant_time_msb_bn Unexecuted instantiation: rsaz_exp_x2.c:constant_time_msb_bn Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_msb_bn Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_msb_bn |
159 | | |
160 | | static ossl_inline BN_ULONG constant_time_lt_bn(BN_ULONG a, BN_ULONG b) |
161 | 7.43M | { |
162 | 7.43M | return constant_time_msb_bn(a ^ ((a ^ b) | ((a - b) ^ b))); |
163 | 7.43M | } Unexecuted instantiation: bn_exp.c:constant_time_lt_bn Unexecuted instantiation: bn_gcd.c:constant_time_lt_bn bn_lib.c:constant_time_lt_bn Line | Count | Source | 161 | 7.43M | { | 162 | 7.43M | return constant_time_msb_bn(a ^ ((a ^ b) | ((a - b) ^ b))); | 163 | 7.43M | } |
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_lt_bn Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_lt_bn Unexecuted instantiation: err.c:constant_time_lt_bn Unexecuted instantiation: rsa_ossl.c:constant_time_lt_bn Unexecuted instantiation: eddsa.c:constant_time_lt_bn Unexecuted instantiation: rsa_enc.c:constant_time_lt_bn Unexecuted instantiation: ssl3_cbc.c:constant_time_lt_bn Unexecuted instantiation: ciphercommon_block.c:constant_time_lt_bn Unexecuted instantiation: tls_pad.c:constant_time_lt_bn Unexecuted instantiation: rsaz_exp.c:constant_time_lt_bn Unexecuted instantiation: rsaz_exp_x2.c:constant_time_lt_bn Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_lt_bn Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_lt_bn |
164 | | |
165 | | static ossl_inline BN_ULONG constant_time_is_zero_bn(BN_ULONG a) |
166 | 10.2k | { |
167 | 10.2k | return constant_time_msb_bn(~a & (a - 1)); |
168 | 10.2k | } Unexecuted instantiation: bn_exp.c:constant_time_is_zero_bn bn_gcd.c:constant_time_is_zero_bn Line | Count | Source | 166 | 3.87k | { | 167 | 3.87k | return constant_time_msb_bn(~a & (a - 1)); | 168 | 3.87k | } |
bn_lib.c:constant_time_is_zero_bn Line | Count | Source | 166 | 6.42k | { | 167 | 6.42k | return constant_time_msb_bn(~a & (a - 1)); | 168 | 6.42k | } |
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_is_zero_bn Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_is_zero_bn Unexecuted instantiation: err.c:constant_time_is_zero_bn Unexecuted instantiation: rsa_ossl.c:constant_time_is_zero_bn Unexecuted instantiation: eddsa.c:constant_time_is_zero_bn Unexecuted instantiation: rsa_enc.c:constant_time_is_zero_bn Unexecuted instantiation: ssl3_cbc.c:constant_time_is_zero_bn Unexecuted instantiation: ciphercommon_block.c:constant_time_is_zero_bn Unexecuted instantiation: tls_pad.c:constant_time_is_zero_bn Unexecuted instantiation: rsaz_exp.c:constant_time_is_zero_bn Unexecuted instantiation: rsaz_exp_x2.c:constant_time_is_zero_bn Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_is_zero_bn Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_is_zero_bn |
169 | | |
170 | | static ossl_inline BN_ULONG constant_time_eq_bn(BN_ULONG a, |
171 | | BN_ULONG b) |
172 | 462 | { |
173 | 462 | return constant_time_is_zero_bn(a ^ b); |
174 | 462 | } Unexecuted instantiation: bn_exp.c:constant_time_eq_bn Unexecuted instantiation: bn_gcd.c:constant_time_eq_bn bn_lib.c:constant_time_eq_bn Line | Count | Source | 172 | 462 | { | 173 | 462 | return constant_time_is_zero_bn(a ^ b); | 174 | 462 | } |
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq_bn Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq_bn Unexecuted instantiation: err.c:constant_time_eq_bn Unexecuted instantiation: rsa_ossl.c:constant_time_eq_bn Unexecuted instantiation: eddsa.c:constant_time_eq_bn Unexecuted instantiation: rsa_enc.c:constant_time_eq_bn Unexecuted instantiation: ssl3_cbc.c:constant_time_eq_bn Unexecuted instantiation: ciphercommon_block.c:constant_time_eq_bn Unexecuted instantiation: tls_pad.c:constant_time_eq_bn Unexecuted instantiation: rsaz_exp.c:constant_time_eq_bn Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq_bn Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq_bn Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq_bn |
175 | | |
176 | | static ossl_inline BN_ULONG constant_time_select_bn(BN_ULONG mask, |
177 | | BN_ULONG a, |
178 | | BN_ULONG b) |
179 | 1.93k | { |
180 | 1.93k | return (value_barrier_bn(mask) & a) | (value_barrier_bn(~mask) & b); |
181 | 1.93k | } Unexecuted instantiation: bn_exp.c:constant_time_select_bn bn_gcd.c:constant_time_select_bn Line | Count | Source | 179 | 1.93k | { | 180 | 1.93k | return (value_barrier_bn(mask) & a) | (value_barrier_bn(~mask) & b); | 181 | 1.93k | } |
Unexecuted instantiation: bn_lib.c:constant_time_select_bn Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_bn Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_bn Unexecuted instantiation: err.c:constant_time_select_bn Unexecuted instantiation: rsa_ossl.c:constant_time_select_bn Unexecuted instantiation: eddsa.c:constant_time_select_bn Unexecuted instantiation: rsa_enc.c:constant_time_select_bn Unexecuted instantiation: ssl3_cbc.c:constant_time_select_bn Unexecuted instantiation: ciphercommon_block.c:constant_time_select_bn Unexecuted instantiation: tls_pad.c:constant_time_select_bn Unexecuted instantiation: rsaz_exp.c:constant_time_select_bn Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_bn Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_bn Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_bn |
182 | | #endif |
183 | | |
184 | | static ossl_inline unsigned int constant_time_ge(unsigned int a, |
185 | | unsigned int b) |
186 | 0 | { |
187 | 0 | return ~constant_time_lt(a, b); |
188 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_ge Unexecuted instantiation: bn_gcd.c:constant_time_ge Unexecuted instantiation: bn_lib.c:constant_time_ge Unexecuted instantiation: curve448.c:constant_time_ge Unexecuted instantiation: curve448_tables.c:constant_time_ge Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_ge Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_ge Unexecuted instantiation: err.c:constant_time_ge Unexecuted instantiation: f_generic.c:constant_time_ge Unexecuted instantiation: f_impl64.c:constant_time_ge Unexecuted instantiation: rsa_ossl.c:constant_time_ge Unexecuted instantiation: rsa_pk1.c:constant_time_ge Unexecuted instantiation: rsa_pmeth.c:constant_time_ge Unexecuted instantiation: scalar.c:constant_time_ge Unexecuted instantiation: set_key.c:constant_time_ge Unexecuted instantiation: eddsa.c:constant_time_ge Unexecuted instantiation: rsa_oaep.c:constant_time_ge Unexecuted instantiation: rsa_enc.c:constant_time_ge Unexecuted instantiation: ssl3_cbc.c:constant_time_ge Unexecuted instantiation: ciphercommon_block.c:constant_time_ge Unexecuted instantiation: tls_pad.c:constant_time_ge Unexecuted instantiation: rsaz_exp.c:constant_time_ge Unexecuted instantiation: rsaz_exp_x2.c:constant_time_ge Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_ge Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_ge |
189 | | |
190 | | static ossl_inline size_t constant_time_ge_s(size_t a, size_t b) |
191 | 0 | { |
192 | 0 | return ~constant_time_lt_s(a, b); |
193 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_ge_s Unexecuted instantiation: bn_gcd.c:constant_time_ge_s Unexecuted instantiation: bn_lib.c:constant_time_ge_s Unexecuted instantiation: curve448.c:constant_time_ge_s Unexecuted instantiation: curve448_tables.c:constant_time_ge_s Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_ge_s Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_ge_s Unexecuted instantiation: err.c:constant_time_ge_s Unexecuted instantiation: f_generic.c:constant_time_ge_s Unexecuted instantiation: f_impl64.c:constant_time_ge_s Unexecuted instantiation: rsa_ossl.c:constant_time_ge_s Unexecuted instantiation: rsa_pk1.c:constant_time_ge_s Unexecuted instantiation: rsa_pmeth.c:constant_time_ge_s Unexecuted instantiation: scalar.c:constant_time_ge_s Unexecuted instantiation: set_key.c:constant_time_ge_s Unexecuted instantiation: eddsa.c:constant_time_ge_s Unexecuted instantiation: rsa_oaep.c:constant_time_ge_s Unexecuted instantiation: rsa_enc.c:constant_time_ge_s Unexecuted instantiation: ssl3_cbc.c:constant_time_ge_s Unexecuted instantiation: ciphercommon_block.c:constant_time_ge_s Unexecuted instantiation: tls_pad.c:constant_time_ge_s Unexecuted instantiation: rsaz_exp.c:constant_time_ge_s Unexecuted instantiation: rsaz_exp_x2.c:constant_time_ge_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_ge_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_ge_s |
194 | | |
195 | | static ossl_inline unsigned char constant_time_ge_8(unsigned int a, |
196 | | unsigned int b) |
197 | 0 | { |
198 | 0 | return (unsigned char)constant_time_ge(a, b); |
199 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_ge_8 Unexecuted instantiation: bn_gcd.c:constant_time_ge_8 Unexecuted instantiation: bn_lib.c:constant_time_ge_8 Unexecuted instantiation: curve448.c:constant_time_ge_8 Unexecuted instantiation: curve448_tables.c:constant_time_ge_8 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_ge_8 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_ge_8 Unexecuted instantiation: err.c:constant_time_ge_8 Unexecuted instantiation: f_generic.c:constant_time_ge_8 Unexecuted instantiation: f_impl64.c:constant_time_ge_8 Unexecuted instantiation: rsa_ossl.c:constant_time_ge_8 Unexecuted instantiation: rsa_pk1.c:constant_time_ge_8 Unexecuted instantiation: rsa_pmeth.c:constant_time_ge_8 Unexecuted instantiation: scalar.c:constant_time_ge_8 Unexecuted instantiation: set_key.c:constant_time_ge_8 Unexecuted instantiation: eddsa.c:constant_time_ge_8 Unexecuted instantiation: rsa_oaep.c:constant_time_ge_8 Unexecuted instantiation: rsa_enc.c:constant_time_ge_8 Unexecuted instantiation: ssl3_cbc.c:constant_time_ge_8 Unexecuted instantiation: ciphercommon_block.c:constant_time_ge_8 Unexecuted instantiation: tls_pad.c:constant_time_ge_8 Unexecuted instantiation: rsaz_exp.c:constant_time_ge_8 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_ge_8 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_ge_8 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_ge_8 |
200 | | |
201 | | static ossl_inline unsigned char constant_time_ge_8_s(size_t a, size_t b) |
202 | 0 | { |
203 | 0 | return (unsigned char)constant_time_ge_s(a, b); |
204 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_ge_8_s Unexecuted instantiation: bn_gcd.c:constant_time_ge_8_s Unexecuted instantiation: bn_lib.c:constant_time_ge_8_s Unexecuted instantiation: curve448.c:constant_time_ge_8_s Unexecuted instantiation: curve448_tables.c:constant_time_ge_8_s Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_ge_8_s Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_ge_8_s Unexecuted instantiation: err.c:constant_time_ge_8_s Unexecuted instantiation: f_generic.c:constant_time_ge_8_s Unexecuted instantiation: f_impl64.c:constant_time_ge_8_s Unexecuted instantiation: rsa_ossl.c:constant_time_ge_8_s Unexecuted instantiation: rsa_pk1.c:constant_time_ge_8_s Unexecuted instantiation: rsa_pmeth.c:constant_time_ge_8_s Unexecuted instantiation: scalar.c:constant_time_ge_8_s Unexecuted instantiation: set_key.c:constant_time_ge_8_s Unexecuted instantiation: eddsa.c:constant_time_ge_8_s Unexecuted instantiation: rsa_oaep.c:constant_time_ge_8_s Unexecuted instantiation: rsa_enc.c:constant_time_ge_8_s Unexecuted instantiation: ssl3_cbc.c:constant_time_ge_8_s Unexecuted instantiation: ciphercommon_block.c:constant_time_ge_8_s Unexecuted instantiation: tls_pad.c:constant_time_ge_8_s Unexecuted instantiation: rsaz_exp.c:constant_time_ge_8_s Unexecuted instantiation: rsaz_exp_x2.c:constant_time_ge_8_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_ge_8_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_ge_8_s |
205 | | |
206 | | static ossl_inline unsigned int constant_time_is_zero(unsigned int a) |
207 | 256M | { |
208 | 256M | return constant_time_msb(~a & (a - 1)); |
209 | 256M | } bn_exp.c:constant_time_is_zero Line | Count | Source | 207 | 256M | { | 208 | 256M | return constant_time_msb(~a & (a - 1)); | 209 | 256M | } |
Unexecuted instantiation: bn_gcd.c:constant_time_is_zero bn_lib.c:constant_time_is_zero Line | Count | Source | 207 | 95.2k | { | 208 | 95.2k | return constant_time_msb(~a & (a - 1)); | 209 | 95.2k | } |
Unexecuted instantiation: curve448.c:constant_time_is_zero Unexecuted instantiation: curve448_tables.c:constant_time_is_zero Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_is_zero Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_is_zero Unexecuted instantiation: err.c:constant_time_is_zero Unexecuted instantiation: f_generic.c:constant_time_is_zero Unexecuted instantiation: f_impl64.c:constant_time_is_zero Unexecuted instantiation: rsa_ossl.c:constant_time_is_zero Unexecuted instantiation: rsa_pk1.c:constant_time_is_zero Unexecuted instantiation: rsa_pmeth.c:constant_time_is_zero Unexecuted instantiation: scalar.c:constant_time_is_zero Unexecuted instantiation: set_key.c:constant_time_is_zero Unexecuted instantiation: eddsa.c:constant_time_is_zero Unexecuted instantiation: rsa_oaep.c:constant_time_is_zero Unexecuted instantiation: rsa_enc.c:constant_time_is_zero Unexecuted instantiation: ssl3_cbc.c:constant_time_is_zero Unexecuted instantiation: ciphercommon_block.c:constant_time_is_zero Unexecuted instantiation: tls_pad.c:constant_time_is_zero Unexecuted instantiation: rsaz_exp.c:constant_time_is_zero Unexecuted instantiation: rsaz_exp_x2.c:constant_time_is_zero Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_is_zero Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_is_zero |
210 | | |
211 | | static ossl_inline size_t constant_time_is_zero_s(size_t a) |
212 | 4.32k | { |
213 | 4.32k | return constant_time_msb_s(~a & (a - 1)); |
214 | 4.32k | } Unexecuted instantiation: bn_exp.c:constant_time_is_zero_s Unexecuted instantiation: bn_gcd.c:constant_time_is_zero_s Unexecuted instantiation: bn_lib.c:constant_time_is_zero_s curve448.c:constant_time_is_zero_s Line | Count | Source | 212 | 4.32k | { | 213 | 4.32k | return constant_time_msb_s(~a & (a - 1)); | 214 | 4.32k | } |
Unexecuted instantiation: curve448_tables.c:constant_time_is_zero_s Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_is_zero_s Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_is_zero_s Unexecuted instantiation: err.c:constant_time_is_zero_s Unexecuted instantiation: f_generic.c:constant_time_is_zero_s Unexecuted instantiation: f_impl64.c:constant_time_is_zero_s Unexecuted instantiation: rsa_ossl.c:constant_time_is_zero_s Unexecuted instantiation: rsa_pk1.c:constant_time_is_zero_s Unexecuted instantiation: rsa_pmeth.c:constant_time_is_zero_s Unexecuted instantiation: scalar.c:constant_time_is_zero_s Unexecuted instantiation: set_key.c:constant_time_is_zero_s Unexecuted instantiation: eddsa.c:constant_time_is_zero_s Unexecuted instantiation: rsa_oaep.c:constant_time_is_zero_s Unexecuted instantiation: rsa_enc.c:constant_time_is_zero_s Unexecuted instantiation: ssl3_cbc.c:constant_time_is_zero_s Unexecuted instantiation: ciphercommon_block.c:constant_time_is_zero_s Unexecuted instantiation: tls_pad.c:constant_time_is_zero_s Unexecuted instantiation: rsaz_exp.c:constant_time_is_zero_s Unexecuted instantiation: rsaz_exp_x2.c:constant_time_is_zero_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_is_zero_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_is_zero_s |
215 | | |
216 | | static ossl_inline unsigned char constant_time_is_zero_8(unsigned int a) |
217 | 0 | { |
218 | 0 | return (unsigned char)constant_time_is_zero(a); |
219 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_is_zero_8 Unexecuted instantiation: bn_gcd.c:constant_time_is_zero_8 Unexecuted instantiation: bn_lib.c:constant_time_is_zero_8 Unexecuted instantiation: curve448.c:constant_time_is_zero_8 Unexecuted instantiation: curve448_tables.c:constant_time_is_zero_8 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_is_zero_8 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_is_zero_8 Unexecuted instantiation: err.c:constant_time_is_zero_8 Unexecuted instantiation: f_generic.c:constant_time_is_zero_8 Unexecuted instantiation: f_impl64.c:constant_time_is_zero_8 Unexecuted instantiation: rsa_ossl.c:constant_time_is_zero_8 Unexecuted instantiation: rsa_pk1.c:constant_time_is_zero_8 Unexecuted instantiation: rsa_pmeth.c:constant_time_is_zero_8 Unexecuted instantiation: scalar.c:constant_time_is_zero_8 Unexecuted instantiation: set_key.c:constant_time_is_zero_8 Unexecuted instantiation: eddsa.c:constant_time_is_zero_8 Unexecuted instantiation: rsa_oaep.c:constant_time_is_zero_8 Unexecuted instantiation: rsa_enc.c:constant_time_is_zero_8 Unexecuted instantiation: ssl3_cbc.c:constant_time_is_zero_8 Unexecuted instantiation: ciphercommon_block.c:constant_time_is_zero_8 Unexecuted instantiation: tls_pad.c:constant_time_is_zero_8 Unexecuted instantiation: rsaz_exp.c:constant_time_is_zero_8 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_is_zero_8 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_is_zero_8 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_is_zero_8 |
220 | | |
221 | | static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a) |
222 | 0 | { |
223 | 0 | return constant_time_msb_32(~a & (a - 1)); |
224 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_is_zero_32 Unexecuted instantiation: bn_gcd.c:constant_time_is_zero_32 Unexecuted instantiation: bn_lib.c:constant_time_is_zero_32 Unexecuted instantiation: curve448.c:constant_time_is_zero_32 Unexecuted instantiation: curve448_tables.c:constant_time_is_zero_32 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_is_zero_32 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_is_zero_32 Unexecuted instantiation: err.c:constant_time_is_zero_32 Unexecuted instantiation: f_generic.c:constant_time_is_zero_32 Unexecuted instantiation: f_impl64.c:constant_time_is_zero_32 Unexecuted instantiation: rsa_ossl.c:constant_time_is_zero_32 Unexecuted instantiation: rsa_pk1.c:constant_time_is_zero_32 Unexecuted instantiation: rsa_pmeth.c:constant_time_is_zero_32 Unexecuted instantiation: scalar.c:constant_time_is_zero_32 Unexecuted instantiation: set_key.c:constant_time_is_zero_32 Unexecuted instantiation: eddsa.c:constant_time_is_zero_32 Unexecuted instantiation: rsa_oaep.c:constant_time_is_zero_32 Unexecuted instantiation: rsa_enc.c:constant_time_is_zero_32 Unexecuted instantiation: ssl3_cbc.c:constant_time_is_zero_32 Unexecuted instantiation: ciphercommon_block.c:constant_time_is_zero_32 Unexecuted instantiation: tls_pad.c:constant_time_is_zero_32 Unexecuted instantiation: rsaz_exp.c:constant_time_is_zero_32 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_is_zero_32 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_is_zero_32 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_is_zero_32 |
225 | | |
226 | | static ossl_inline uint64_t constant_time_is_zero_64(uint64_t a) |
227 | 3 | { |
228 | 3 | return constant_time_msb_64(~a & (a - 1)); |
229 | 3 | } Unexecuted instantiation: bn_exp.c:constant_time_is_zero_64 Unexecuted instantiation: bn_gcd.c:constant_time_is_zero_64 Unexecuted instantiation: bn_lib.c:constant_time_is_zero_64 Unexecuted instantiation: curve448.c:constant_time_is_zero_64 Unexecuted instantiation: curve448_tables.c:constant_time_is_zero_64 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_is_zero_64 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_is_zero_64 Unexecuted instantiation: err.c:constant_time_is_zero_64 f_generic.c:constant_time_is_zero_64 Line | Count | Source | 227 | 3 | { | 228 | 3 | return constant_time_msb_64(~a & (a - 1)); | 229 | 3 | } |
Unexecuted instantiation: f_impl64.c:constant_time_is_zero_64 Unexecuted instantiation: rsa_ossl.c:constant_time_is_zero_64 Unexecuted instantiation: rsa_pk1.c:constant_time_is_zero_64 Unexecuted instantiation: rsa_pmeth.c:constant_time_is_zero_64 Unexecuted instantiation: scalar.c:constant_time_is_zero_64 Unexecuted instantiation: set_key.c:constant_time_is_zero_64 Unexecuted instantiation: eddsa.c:constant_time_is_zero_64 Unexecuted instantiation: rsa_oaep.c:constant_time_is_zero_64 Unexecuted instantiation: rsa_enc.c:constant_time_is_zero_64 Unexecuted instantiation: ssl3_cbc.c:constant_time_is_zero_64 Unexecuted instantiation: ciphercommon_block.c:constant_time_is_zero_64 Unexecuted instantiation: tls_pad.c:constant_time_is_zero_64 Unexecuted instantiation: rsaz_exp.c:constant_time_is_zero_64 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_is_zero_64 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_is_zero_64 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_is_zero_64 |
230 | | |
231 | | static ossl_inline unsigned int constant_time_eq(unsigned int a, |
232 | | unsigned int b) |
233 | 256M | { |
234 | 256M | return constant_time_is_zero(a ^ b); |
235 | 256M | } bn_exp.c:constant_time_eq Line | Count | Source | 233 | 256M | { | 234 | 256M | return constant_time_is_zero(a ^ b); | 235 | 256M | } |
Unexecuted instantiation: bn_gcd.c:constant_time_eq bn_lib.c:constant_time_eq Line | Count | Source | 233 | 95.2k | { | 234 | 95.2k | return constant_time_is_zero(a ^ b); | 235 | 95.2k | } |
Unexecuted instantiation: curve448.c:constant_time_eq Unexecuted instantiation: curve448_tables.c:constant_time_eq Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq Unexecuted instantiation: err.c:constant_time_eq Unexecuted instantiation: f_generic.c:constant_time_eq Unexecuted instantiation: f_impl64.c:constant_time_eq Unexecuted instantiation: rsa_ossl.c:constant_time_eq Unexecuted instantiation: rsa_pk1.c:constant_time_eq Unexecuted instantiation: rsa_pmeth.c:constant_time_eq Unexecuted instantiation: scalar.c:constant_time_eq Unexecuted instantiation: set_key.c:constant_time_eq Unexecuted instantiation: eddsa.c:constant_time_eq Unexecuted instantiation: rsa_oaep.c:constant_time_eq Unexecuted instantiation: rsa_enc.c:constant_time_eq Unexecuted instantiation: ssl3_cbc.c:constant_time_eq Unexecuted instantiation: ciphercommon_block.c:constant_time_eq Unexecuted instantiation: tls_pad.c:constant_time_eq Unexecuted instantiation: rsaz_exp.c:constant_time_eq Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq |
236 | | |
237 | | static ossl_inline size_t constant_time_eq_s(size_t a, size_t b) |
238 | 0 | { |
239 | 0 | return constant_time_is_zero_s(a ^ b); |
240 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_eq_s Unexecuted instantiation: bn_gcd.c:constant_time_eq_s Unexecuted instantiation: bn_lib.c:constant_time_eq_s Unexecuted instantiation: curve448.c:constant_time_eq_s Unexecuted instantiation: curve448_tables.c:constant_time_eq_s Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq_s Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq_s Unexecuted instantiation: err.c:constant_time_eq_s Unexecuted instantiation: f_generic.c:constant_time_eq_s Unexecuted instantiation: f_impl64.c:constant_time_eq_s Unexecuted instantiation: rsa_ossl.c:constant_time_eq_s Unexecuted instantiation: rsa_pk1.c:constant_time_eq_s Unexecuted instantiation: rsa_pmeth.c:constant_time_eq_s Unexecuted instantiation: scalar.c:constant_time_eq_s Unexecuted instantiation: set_key.c:constant_time_eq_s Unexecuted instantiation: eddsa.c:constant_time_eq_s Unexecuted instantiation: rsa_oaep.c:constant_time_eq_s Unexecuted instantiation: rsa_enc.c:constant_time_eq_s Unexecuted instantiation: ssl3_cbc.c:constant_time_eq_s Unexecuted instantiation: ciphercommon_block.c:constant_time_eq_s Unexecuted instantiation: tls_pad.c:constant_time_eq_s Unexecuted instantiation: rsaz_exp.c:constant_time_eq_s Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq_s |
241 | | |
242 | | static ossl_inline unsigned char constant_time_eq_8(unsigned int a, |
243 | | unsigned int b) |
244 | 0 | { |
245 | 0 | return (unsigned char)constant_time_eq(a, b); |
246 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_eq_8 Unexecuted instantiation: bn_gcd.c:constant_time_eq_8 Unexecuted instantiation: bn_lib.c:constant_time_eq_8 Unexecuted instantiation: curve448.c:constant_time_eq_8 Unexecuted instantiation: curve448_tables.c:constant_time_eq_8 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq_8 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq_8 Unexecuted instantiation: err.c:constant_time_eq_8 Unexecuted instantiation: f_generic.c:constant_time_eq_8 Unexecuted instantiation: f_impl64.c:constant_time_eq_8 Unexecuted instantiation: rsa_ossl.c:constant_time_eq_8 Unexecuted instantiation: rsa_pk1.c:constant_time_eq_8 Unexecuted instantiation: rsa_pmeth.c:constant_time_eq_8 Unexecuted instantiation: scalar.c:constant_time_eq_8 Unexecuted instantiation: set_key.c:constant_time_eq_8 Unexecuted instantiation: eddsa.c:constant_time_eq_8 Unexecuted instantiation: rsa_oaep.c:constant_time_eq_8 Unexecuted instantiation: rsa_enc.c:constant_time_eq_8 Unexecuted instantiation: ssl3_cbc.c:constant_time_eq_8 Unexecuted instantiation: ciphercommon_block.c:constant_time_eq_8 Unexecuted instantiation: tls_pad.c:constant_time_eq_8 Unexecuted instantiation: rsaz_exp.c:constant_time_eq_8 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq_8 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq_8 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq_8 |
247 | | |
248 | | static ossl_inline unsigned char constant_time_eq_8_s(size_t a, size_t b) |
249 | 0 | { |
250 | 0 | return (unsigned char)constant_time_eq_s(a, b); |
251 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_eq_8_s Unexecuted instantiation: bn_gcd.c:constant_time_eq_8_s Unexecuted instantiation: bn_lib.c:constant_time_eq_8_s Unexecuted instantiation: curve448.c:constant_time_eq_8_s Unexecuted instantiation: curve448_tables.c:constant_time_eq_8_s Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq_8_s Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq_8_s Unexecuted instantiation: err.c:constant_time_eq_8_s Unexecuted instantiation: f_generic.c:constant_time_eq_8_s Unexecuted instantiation: f_impl64.c:constant_time_eq_8_s Unexecuted instantiation: rsa_ossl.c:constant_time_eq_8_s Unexecuted instantiation: rsa_pk1.c:constant_time_eq_8_s Unexecuted instantiation: rsa_pmeth.c:constant_time_eq_8_s Unexecuted instantiation: scalar.c:constant_time_eq_8_s Unexecuted instantiation: set_key.c:constant_time_eq_8_s Unexecuted instantiation: eddsa.c:constant_time_eq_8_s Unexecuted instantiation: rsa_oaep.c:constant_time_eq_8_s Unexecuted instantiation: rsa_enc.c:constant_time_eq_8_s Unexecuted instantiation: ssl3_cbc.c:constant_time_eq_8_s Unexecuted instantiation: ciphercommon_block.c:constant_time_eq_8_s Unexecuted instantiation: tls_pad.c:constant_time_eq_8_s Unexecuted instantiation: rsaz_exp.c:constant_time_eq_8_s Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq_8_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq_8_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq_8_s |
252 | | |
253 | | static ossl_inline unsigned int constant_time_eq_int(int a, int b) |
254 | 256M | { |
255 | 256M | return constant_time_eq((unsigned)(a), (unsigned)(b)); |
256 | 256M | } bn_exp.c:constant_time_eq_int Line | Count | Source | 254 | 256M | { | 255 | 256M | return constant_time_eq((unsigned)(a), (unsigned)(b)); | 256 | 256M | } |
Unexecuted instantiation: bn_gcd.c:constant_time_eq_int bn_lib.c:constant_time_eq_int Line | Count | Source | 254 | 95.2k | { | 255 | 95.2k | return constant_time_eq((unsigned)(a), (unsigned)(b)); | 256 | 95.2k | } |
Unexecuted instantiation: curve448.c:constant_time_eq_int Unexecuted instantiation: curve448_tables.c:constant_time_eq_int Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq_int Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq_int Unexecuted instantiation: err.c:constant_time_eq_int Unexecuted instantiation: f_generic.c:constant_time_eq_int Unexecuted instantiation: f_impl64.c:constant_time_eq_int Unexecuted instantiation: rsa_ossl.c:constant_time_eq_int Unexecuted instantiation: rsa_pk1.c:constant_time_eq_int Unexecuted instantiation: rsa_pmeth.c:constant_time_eq_int Unexecuted instantiation: scalar.c:constant_time_eq_int Unexecuted instantiation: set_key.c:constant_time_eq_int Unexecuted instantiation: eddsa.c:constant_time_eq_int Unexecuted instantiation: rsa_oaep.c:constant_time_eq_int Unexecuted instantiation: rsa_enc.c:constant_time_eq_int Unexecuted instantiation: ssl3_cbc.c:constant_time_eq_int Unexecuted instantiation: ciphercommon_block.c:constant_time_eq_int Unexecuted instantiation: tls_pad.c:constant_time_eq_int Unexecuted instantiation: rsaz_exp.c:constant_time_eq_int Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq_int Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq_int Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq_int |
257 | | |
258 | | static ossl_inline unsigned char constant_time_eq_int_8(int a, int b) |
259 | 0 | { |
260 | 0 | return constant_time_eq_8((unsigned)(a), (unsigned)(b)); |
261 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_eq_int_8 Unexecuted instantiation: bn_gcd.c:constant_time_eq_int_8 Unexecuted instantiation: bn_lib.c:constant_time_eq_int_8 Unexecuted instantiation: curve448.c:constant_time_eq_int_8 Unexecuted instantiation: curve448_tables.c:constant_time_eq_int_8 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq_int_8 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq_int_8 Unexecuted instantiation: err.c:constant_time_eq_int_8 Unexecuted instantiation: f_generic.c:constant_time_eq_int_8 Unexecuted instantiation: f_impl64.c:constant_time_eq_int_8 Unexecuted instantiation: rsa_ossl.c:constant_time_eq_int_8 Unexecuted instantiation: rsa_pk1.c:constant_time_eq_int_8 Unexecuted instantiation: rsa_pmeth.c:constant_time_eq_int_8 Unexecuted instantiation: scalar.c:constant_time_eq_int_8 Unexecuted instantiation: set_key.c:constant_time_eq_int_8 Unexecuted instantiation: eddsa.c:constant_time_eq_int_8 Unexecuted instantiation: rsa_oaep.c:constant_time_eq_int_8 Unexecuted instantiation: rsa_enc.c:constant_time_eq_int_8 Unexecuted instantiation: ssl3_cbc.c:constant_time_eq_int_8 Unexecuted instantiation: ciphercommon_block.c:constant_time_eq_int_8 Unexecuted instantiation: tls_pad.c:constant_time_eq_int_8 Unexecuted instantiation: rsaz_exp.c:constant_time_eq_int_8 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq_int_8 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq_int_8 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq_int_8 |
262 | | |
263 | | /* |
264 | | * Returns the value unmodified, but avoids optimizations. |
265 | | * The barriers prevent the compiler from narrowing down the |
266 | | * possible value range of the mask and ~mask in the select |
267 | | * statements, which avoids the recognition of the select |
268 | | * and turning it into a conditional load or branch. |
269 | | */ |
270 | | static ossl_inline unsigned int value_barrier(unsigned int a) |
271 | 16.5M | { |
272 | | #if !defined(OPENSSL_NO_ASM) && defined(__GNUC__) |
273 | | unsigned int r; |
274 | | __asm__("" : "=r"(r) : "0"(a)); |
275 | | #else |
276 | | volatile unsigned int r = a; |
277 | | #endif |
278 | 16.5M | return r; |
279 | 16.5M | } Unexecuted instantiation: bn_exp.c:value_barrier Unexecuted instantiation: bn_gcd.c:value_barrier Line | Count | Source | 271 | 14.8M | { | 272 | | #if !defined(OPENSSL_NO_ASM) && defined(__GNUC__) | 273 | | unsigned int r; | 274 | | __asm__("" : "=r"(r) : "0"(a)); | 275 | | #else | 276 | 14.8M | volatile unsigned int r = a; | 277 | 14.8M | #endif | 278 | 14.8M | return r; | 279 | 14.8M | } |
Line | Count | Source | 271 | 1.65M | { | 272 | | #if !defined(OPENSSL_NO_ASM) && defined(__GNUC__) | 273 | | unsigned int r; | 274 | | __asm__("" : "=r"(r) : "0"(a)); | 275 | | #else | 276 | 1.65M | volatile unsigned int r = a; | 277 | 1.65M | #endif | 278 | 1.65M | return r; | 279 | 1.65M | } |
Unexecuted instantiation: curve448_tables.c:value_barrier Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:value_barrier Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:value_barrier Unexecuted instantiation: err.c:value_barrier Unexecuted instantiation: f_generic.c:value_barrier Unexecuted instantiation: f_impl64.c:value_barrier Unexecuted instantiation: rsa_ossl.c:value_barrier Unexecuted instantiation: rsa_pk1.c:value_barrier Unexecuted instantiation: rsa_pmeth.c:value_barrier Unexecuted instantiation: scalar.c:value_barrier Unexecuted instantiation: set_key.c:value_barrier Unexecuted instantiation: eddsa.c:value_barrier Unexecuted instantiation: rsa_oaep.c:value_barrier Unexecuted instantiation: rsa_enc.c:value_barrier Unexecuted instantiation: ssl3_cbc.c:value_barrier Unexecuted instantiation: ciphercommon_block.c:value_barrier Unexecuted instantiation: tls_pad.c:value_barrier Unexecuted instantiation: rsaz_exp.c:value_barrier Unexecuted instantiation: rsaz_exp_x2.c:value_barrier Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:value_barrier Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:value_barrier |
280 | | |
281 | | /* Convenience method for uint32_t. */ |
282 | | static ossl_inline uint32_t value_barrier_32(uint32_t a) |
283 | 0 | { |
284 | 0 | #if !defined(OPENSSL_NO_ASM) && defined(__GNUC__) |
285 | 0 | uint32_t r; |
286 | 0 | __asm__("" : "=r"(r) : "0"(a)); |
287 | 0 | #else |
288 | 0 | volatile uint32_t r = a; |
289 | 0 | #endif |
290 | 0 | return r; |
291 | 0 | } Unexecuted instantiation: bn_exp.c:value_barrier_32 Unexecuted instantiation: bn_gcd.c:value_barrier_32 Unexecuted instantiation: bn_lib.c:value_barrier_32 Unexecuted instantiation: curve448.c:value_barrier_32 Unexecuted instantiation: curve448_tables.c:value_barrier_32 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:value_barrier_32 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:value_barrier_32 Unexecuted instantiation: err.c:value_barrier_32 Unexecuted instantiation: f_generic.c:value_barrier_32 Unexecuted instantiation: f_impl64.c:value_barrier_32 Unexecuted instantiation: rsa_ossl.c:value_barrier_32 Unexecuted instantiation: rsa_pk1.c:value_barrier_32 Unexecuted instantiation: rsa_pmeth.c:value_barrier_32 Unexecuted instantiation: scalar.c:value_barrier_32 Unexecuted instantiation: set_key.c:value_barrier_32 Unexecuted instantiation: eddsa.c:value_barrier_32 Unexecuted instantiation: rsa_oaep.c:value_barrier_32 Unexecuted instantiation: rsa_enc.c:value_barrier_32 Unexecuted instantiation: ssl3_cbc.c:value_barrier_32 Unexecuted instantiation: ciphercommon_block.c:value_barrier_32 Unexecuted instantiation: tls_pad.c:value_barrier_32 Unexecuted instantiation: rsaz_exp.c:value_barrier_32 Unexecuted instantiation: rsaz_exp_x2.c:value_barrier_32 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:value_barrier_32 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:value_barrier_32 |
292 | | |
293 | | /* Convenience method for uint64_t. */ |
294 | | static ossl_inline uint64_t value_barrier_64(uint64_t a) |
295 | 4.33k | { |
296 | | #if !defined(OPENSSL_NO_ASM) && defined(__GNUC__) |
297 | | uint64_t r; |
298 | | __asm__("" : "=r"(r) : "0"(a)); |
299 | | #else |
300 | | volatile uint64_t r = a; |
301 | | #endif |
302 | 4.33k | return r; |
303 | 4.33k | } Unexecuted instantiation: bn_exp.c:value_barrier_64 Unexecuted instantiation: bn_gcd.c:value_barrier_64 Unexecuted instantiation: bn_lib.c:value_barrier_64 curve448.c:value_barrier_64 Line | Count | Source | 295 | 4.32k | { | 296 | | #if !defined(OPENSSL_NO_ASM) && defined(__GNUC__) | 297 | | uint64_t r; | 298 | | __asm__("" : "=r"(r) : "0"(a)); | 299 | | #else | 300 | 4.32k | volatile uint64_t r = a; | 301 | 4.32k | #endif | 302 | 4.32k | return r; | 303 | 4.32k | } |
Unexecuted instantiation: curve448_tables.c:value_barrier_64 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:value_barrier_64 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:value_barrier_64 Unexecuted instantiation: err.c:value_barrier_64 Unexecuted instantiation: f_generic.c:value_barrier_64 Unexecuted instantiation: f_impl64.c:value_barrier_64 Unexecuted instantiation: rsa_ossl.c:value_barrier_64 Unexecuted instantiation: rsa_pk1.c:value_barrier_64 Unexecuted instantiation: rsa_pmeth.c:value_barrier_64 Unexecuted instantiation: scalar.c:value_barrier_64 Unexecuted instantiation: set_key.c:value_barrier_64 Unexecuted instantiation: eddsa.c:value_barrier_64 Unexecuted instantiation: rsa_oaep.c:value_barrier_64 Unexecuted instantiation: rsa_enc.c:value_barrier_64 Unexecuted instantiation: ssl3_cbc.c:value_barrier_64 Unexecuted instantiation: ciphercommon_block.c:value_barrier_64 Unexecuted instantiation: tls_pad.c:value_barrier_64 rsaz_exp.c:value_barrier_64 Line | Count | Source | 295 | 16 | { | 296 | 16 | #if !defined(OPENSSL_NO_ASM) && defined(__GNUC__) | 297 | 16 | uint64_t r; | 298 | 16 | __asm__("" : "=r"(r) : "0"(a)); | 299 | | #else | 300 | | volatile uint64_t r = a; | 301 | | #endif | 302 | 16 | return r; | 303 | 16 | } |
Unexecuted instantiation: rsaz_exp_x2.c:value_barrier_64 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:value_barrier_64 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:value_barrier_64 |
304 | | |
305 | | /* Convenience method for size_t. */ |
306 | | static ossl_inline size_t value_barrier_s(size_t a) |
307 | 0 | { |
308 | | #if !defined(OPENSSL_NO_ASM) && defined(__GNUC__) |
309 | | size_t r; |
310 | | __asm__("" : "=r"(r) : "0"(a)); |
311 | | #else |
312 | 0 | volatile size_t r = a; |
313 | 0 | #endif |
314 | 0 | return r; |
315 | 0 | } Unexecuted instantiation: bn_exp.c:value_barrier_s Unexecuted instantiation: bn_gcd.c:value_barrier_s Unexecuted instantiation: bn_lib.c:value_barrier_s Unexecuted instantiation: curve448.c:value_barrier_s Unexecuted instantiation: curve448_tables.c:value_barrier_s Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:value_barrier_s Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:value_barrier_s Unexecuted instantiation: err.c:value_barrier_s Unexecuted instantiation: f_generic.c:value_barrier_s Unexecuted instantiation: f_impl64.c:value_barrier_s Unexecuted instantiation: rsa_ossl.c:value_barrier_s Unexecuted instantiation: rsa_pk1.c:value_barrier_s Unexecuted instantiation: rsa_pmeth.c:value_barrier_s Unexecuted instantiation: scalar.c:value_barrier_s Unexecuted instantiation: set_key.c:value_barrier_s Unexecuted instantiation: eddsa.c:value_barrier_s Unexecuted instantiation: rsa_oaep.c:value_barrier_s Unexecuted instantiation: rsa_enc.c:value_barrier_s Unexecuted instantiation: ssl3_cbc.c:value_barrier_s Unexecuted instantiation: ciphercommon_block.c:value_barrier_s Unexecuted instantiation: tls_pad.c:value_barrier_s Unexecuted instantiation: rsaz_exp.c:value_barrier_s Unexecuted instantiation: rsaz_exp_x2.c:value_barrier_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:value_barrier_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:value_barrier_s |
316 | | |
317 | | static ossl_inline unsigned int constant_time_select(unsigned int mask, |
318 | | unsigned int a, |
319 | | unsigned int b) |
320 | 8.27M | { |
321 | 8.27M | return (value_barrier(mask) & a) | (value_barrier(~mask) & b); |
322 | 8.27M | } Unexecuted instantiation: bn_exp.c:constant_time_select Unexecuted instantiation: bn_gcd.c:constant_time_select bn_lib.c:constant_time_select Line | Count | Source | 320 | 7.44M | { | 321 | 7.44M | return (value_barrier(mask) & a) | (value_barrier(~mask) & b); | 322 | 7.44M | } |
curve448.c:constant_time_select Line | Count | Source | 320 | 829k | { | 321 | 829k | return (value_barrier(mask) & a) | (value_barrier(~mask) & b); | 322 | 829k | } |
Unexecuted instantiation: curve448_tables.c:constant_time_select Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select Unexecuted instantiation: err.c:constant_time_select Unexecuted instantiation: f_generic.c:constant_time_select Unexecuted instantiation: f_impl64.c:constant_time_select Unexecuted instantiation: rsa_ossl.c:constant_time_select Unexecuted instantiation: rsa_pk1.c:constant_time_select Unexecuted instantiation: rsa_pmeth.c:constant_time_select Unexecuted instantiation: scalar.c:constant_time_select Unexecuted instantiation: set_key.c:constant_time_select Unexecuted instantiation: eddsa.c:constant_time_select Unexecuted instantiation: rsa_oaep.c:constant_time_select Unexecuted instantiation: rsa_enc.c:constant_time_select Unexecuted instantiation: ssl3_cbc.c:constant_time_select Unexecuted instantiation: ciphercommon_block.c:constant_time_select Unexecuted instantiation: tls_pad.c:constant_time_select Unexecuted instantiation: rsaz_exp.c:constant_time_select Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select |
323 | | |
324 | | static ossl_inline size_t constant_time_select_s(size_t mask, |
325 | | size_t a, |
326 | | size_t b) |
327 | 0 | { |
328 | 0 | return (value_barrier_s(mask) & a) | (value_barrier_s(~mask) & b); |
329 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_select_s Unexecuted instantiation: bn_gcd.c:constant_time_select_s Unexecuted instantiation: bn_lib.c:constant_time_select_s Unexecuted instantiation: curve448.c:constant_time_select_s Unexecuted instantiation: curve448_tables.c:constant_time_select_s Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_s Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_s Unexecuted instantiation: err.c:constant_time_select_s Unexecuted instantiation: f_generic.c:constant_time_select_s Unexecuted instantiation: f_impl64.c:constant_time_select_s Unexecuted instantiation: rsa_ossl.c:constant_time_select_s Unexecuted instantiation: rsa_pk1.c:constant_time_select_s Unexecuted instantiation: rsa_pmeth.c:constant_time_select_s Unexecuted instantiation: scalar.c:constant_time_select_s Unexecuted instantiation: set_key.c:constant_time_select_s Unexecuted instantiation: eddsa.c:constant_time_select_s Unexecuted instantiation: rsa_oaep.c:constant_time_select_s Unexecuted instantiation: rsa_enc.c:constant_time_select_s Unexecuted instantiation: ssl3_cbc.c:constant_time_select_s Unexecuted instantiation: ciphercommon_block.c:constant_time_select_s Unexecuted instantiation: tls_pad.c:constant_time_select_s Unexecuted instantiation: rsaz_exp.c:constant_time_select_s Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_s |
330 | | |
331 | | static ossl_inline unsigned char constant_time_select_8(unsigned char mask, |
332 | | unsigned char a, |
333 | | unsigned char b) |
334 | 829k | { |
335 | 829k | return (unsigned char)constant_time_select(mask, a, b); |
336 | 829k | } Unexecuted instantiation: bn_exp.c:constant_time_select_8 Unexecuted instantiation: bn_gcd.c:constant_time_select_8 Unexecuted instantiation: bn_lib.c:constant_time_select_8 curve448.c:constant_time_select_8 Line | Count | Source | 334 | 829k | { | 335 | 829k | return (unsigned char)constant_time_select(mask, a, b); | 336 | 829k | } |
Unexecuted instantiation: curve448_tables.c:constant_time_select_8 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_8 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_8 Unexecuted instantiation: err.c:constant_time_select_8 Unexecuted instantiation: f_generic.c:constant_time_select_8 Unexecuted instantiation: f_impl64.c:constant_time_select_8 Unexecuted instantiation: rsa_ossl.c:constant_time_select_8 Unexecuted instantiation: rsa_pk1.c:constant_time_select_8 Unexecuted instantiation: rsa_pmeth.c:constant_time_select_8 Unexecuted instantiation: scalar.c:constant_time_select_8 Unexecuted instantiation: set_key.c:constant_time_select_8 Unexecuted instantiation: eddsa.c:constant_time_select_8 Unexecuted instantiation: rsa_oaep.c:constant_time_select_8 Unexecuted instantiation: rsa_enc.c:constant_time_select_8 Unexecuted instantiation: ssl3_cbc.c:constant_time_select_8 Unexecuted instantiation: ciphercommon_block.c:constant_time_select_8 Unexecuted instantiation: tls_pad.c:constant_time_select_8 Unexecuted instantiation: rsaz_exp.c:constant_time_select_8 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_8 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_8 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_8 |
337 | | |
338 | | static ossl_inline int constant_time_select_int(unsigned int mask, int a, |
339 | | int b) |
340 | 7.44M | { |
341 | 7.44M | return (int)constant_time_select(mask, (unsigned)(a), (unsigned)(b)); |
342 | 7.44M | } Unexecuted instantiation: bn_exp.c:constant_time_select_int Unexecuted instantiation: bn_gcd.c:constant_time_select_int bn_lib.c:constant_time_select_int Line | Count | Source | 340 | 7.44M | { | 341 | 7.44M | return (int)constant_time_select(mask, (unsigned)(a), (unsigned)(b)); | 342 | 7.44M | } |
Unexecuted instantiation: curve448.c:constant_time_select_int Unexecuted instantiation: curve448_tables.c:constant_time_select_int Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_int Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_int Unexecuted instantiation: err.c:constant_time_select_int Unexecuted instantiation: f_generic.c:constant_time_select_int Unexecuted instantiation: f_impl64.c:constant_time_select_int Unexecuted instantiation: rsa_ossl.c:constant_time_select_int Unexecuted instantiation: rsa_pk1.c:constant_time_select_int Unexecuted instantiation: rsa_pmeth.c:constant_time_select_int Unexecuted instantiation: scalar.c:constant_time_select_int Unexecuted instantiation: set_key.c:constant_time_select_int Unexecuted instantiation: eddsa.c:constant_time_select_int Unexecuted instantiation: rsa_oaep.c:constant_time_select_int Unexecuted instantiation: rsa_enc.c:constant_time_select_int Unexecuted instantiation: ssl3_cbc.c:constant_time_select_int Unexecuted instantiation: ciphercommon_block.c:constant_time_select_int Unexecuted instantiation: tls_pad.c:constant_time_select_int Unexecuted instantiation: rsaz_exp.c:constant_time_select_int Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_int Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_int Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_int |
343 | | |
344 | | static ossl_inline int constant_time_select_int_s(size_t mask, int a, int b) |
345 | 0 | { |
346 | 0 | return (int)constant_time_select((unsigned)mask, (unsigned)(a), |
347 | 0 | (unsigned)(b)); |
348 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_select_int_s Unexecuted instantiation: bn_gcd.c:constant_time_select_int_s Unexecuted instantiation: bn_lib.c:constant_time_select_int_s Unexecuted instantiation: curve448.c:constant_time_select_int_s Unexecuted instantiation: curve448_tables.c:constant_time_select_int_s Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_int_s Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_int_s Unexecuted instantiation: err.c:constant_time_select_int_s Unexecuted instantiation: f_generic.c:constant_time_select_int_s Unexecuted instantiation: f_impl64.c:constant_time_select_int_s Unexecuted instantiation: rsa_ossl.c:constant_time_select_int_s Unexecuted instantiation: rsa_pk1.c:constant_time_select_int_s Unexecuted instantiation: rsa_pmeth.c:constant_time_select_int_s Unexecuted instantiation: scalar.c:constant_time_select_int_s Unexecuted instantiation: set_key.c:constant_time_select_int_s Unexecuted instantiation: eddsa.c:constant_time_select_int_s Unexecuted instantiation: rsa_oaep.c:constant_time_select_int_s Unexecuted instantiation: rsa_enc.c:constant_time_select_int_s Unexecuted instantiation: ssl3_cbc.c:constant_time_select_int_s Unexecuted instantiation: ciphercommon_block.c:constant_time_select_int_s Unexecuted instantiation: tls_pad.c:constant_time_select_int_s Unexecuted instantiation: rsaz_exp.c:constant_time_select_int_s Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_int_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_int_s Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_int_s |
349 | | |
350 | | static ossl_inline uint32_t constant_time_select_32(uint32_t mask, uint32_t a, |
351 | | uint32_t b) |
352 | 0 | { |
353 | 0 | return (value_barrier_32(mask) & a) | (value_barrier_32(~mask) & b); |
354 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_select_32 Unexecuted instantiation: bn_gcd.c:constant_time_select_32 Unexecuted instantiation: bn_lib.c:constant_time_select_32 Unexecuted instantiation: curve448.c:constant_time_select_32 Unexecuted instantiation: curve448_tables.c:constant_time_select_32 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_32 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_32 Unexecuted instantiation: err.c:constant_time_select_32 Unexecuted instantiation: f_generic.c:constant_time_select_32 Unexecuted instantiation: f_impl64.c:constant_time_select_32 Unexecuted instantiation: rsa_ossl.c:constant_time_select_32 Unexecuted instantiation: rsa_pk1.c:constant_time_select_32 Unexecuted instantiation: rsa_pmeth.c:constant_time_select_32 Unexecuted instantiation: scalar.c:constant_time_select_32 Unexecuted instantiation: set_key.c:constant_time_select_32 Unexecuted instantiation: eddsa.c:constant_time_select_32 Unexecuted instantiation: rsa_oaep.c:constant_time_select_32 Unexecuted instantiation: rsa_enc.c:constant_time_select_32 Unexecuted instantiation: ssl3_cbc.c:constant_time_select_32 Unexecuted instantiation: ciphercommon_block.c:constant_time_select_32 Unexecuted instantiation: tls_pad.c:constant_time_select_32 Unexecuted instantiation: rsaz_exp.c:constant_time_select_32 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_32 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_32 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_32 |
355 | | |
356 | | static ossl_inline uint64_t constant_time_select_64(uint64_t mask, uint64_t a, |
357 | | uint64_t b) |
358 | 2.16k | { |
359 | 2.16k | return (value_barrier_64(mask) & a) | (value_barrier_64(~mask) & b); |
360 | 2.16k | } Unexecuted instantiation: bn_exp.c:constant_time_select_64 Unexecuted instantiation: bn_gcd.c:constant_time_select_64 Unexecuted instantiation: bn_lib.c:constant_time_select_64 curve448.c:constant_time_select_64 Line | Count | Source | 358 | 2.16k | { | 359 | 2.16k | return (value_barrier_64(mask) & a) | (value_barrier_64(~mask) & b); | 360 | 2.16k | } |
Unexecuted instantiation: curve448_tables.c:constant_time_select_64 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_64 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_64 Unexecuted instantiation: err.c:constant_time_select_64 Unexecuted instantiation: f_generic.c:constant_time_select_64 Unexecuted instantiation: f_impl64.c:constant_time_select_64 Unexecuted instantiation: rsa_ossl.c:constant_time_select_64 Unexecuted instantiation: rsa_pk1.c:constant_time_select_64 Unexecuted instantiation: rsa_pmeth.c:constant_time_select_64 Unexecuted instantiation: scalar.c:constant_time_select_64 Unexecuted instantiation: set_key.c:constant_time_select_64 Unexecuted instantiation: eddsa.c:constant_time_select_64 Unexecuted instantiation: rsa_oaep.c:constant_time_select_64 Unexecuted instantiation: rsa_enc.c:constant_time_select_64 Unexecuted instantiation: ssl3_cbc.c:constant_time_select_64 Unexecuted instantiation: ciphercommon_block.c:constant_time_select_64 Unexecuted instantiation: tls_pad.c:constant_time_select_64 rsaz_exp.c:constant_time_select_64 Line | Count | Source | 358 | 8 | { | 359 | 8 | return (value_barrier_64(mask) & a) | (value_barrier_64(~mask) & b); | 360 | 8 | } |
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_64 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_64 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_64 |
361 | | |
362 | | /* |
363 | | * mask must be 0xFFFFFFFF or 0x00000000. |
364 | | * |
365 | | * if (mask) { |
366 | | * uint32_t tmp = *a; |
367 | | * |
368 | | * *a = *b; |
369 | | * *b = tmp; |
370 | | * } |
371 | | */ |
372 | | static ossl_inline void constant_time_cond_swap_32(uint32_t mask, uint32_t *a, |
373 | | uint32_t *b) |
374 | 0 | { |
375 | 0 | uint32_t xor = *a ^ *b; |
376 | 0 |
|
377 | 0 | xor &= mask; |
378 | 0 | *a ^= xor; |
379 | 0 | *b ^= xor; |
380 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_cond_swap_32 Unexecuted instantiation: bn_gcd.c:constant_time_cond_swap_32 Unexecuted instantiation: bn_lib.c:constant_time_cond_swap_32 Unexecuted instantiation: curve448.c:constant_time_cond_swap_32 Unexecuted instantiation: curve448_tables.c:constant_time_cond_swap_32 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_cond_swap_32 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_cond_swap_32 Unexecuted instantiation: err.c:constant_time_cond_swap_32 Unexecuted instantiation: f_generic.c:constant_time_cond_swap_32 Unexecuted instantiation: f_impl64.c:constant_time_cond_swap_32 Unexecuted instantiation: rsa_ossl.c:constant_time_cond_swap_32 Unexecuted instantiation: rsa_pk1.c:constant_time_cond_swap_32 Unexecuted instantiation: rsa_pmeth.c:constant_time_cond_swap_32 Unexecuted instantiation: scalar.c:constant_time_cond_swap_32 Unexecuted instantiation: set_key.c:constant_time_cond_swap_32 Unexecuted instantiation: eddsa.c:constant_time_cond_swap_32 Unexecuted instantiation: rsa_oaep.c:constant_time_cond_swap_32 Unexecuted instantiation: rsa_enc.c:constant_time_cond_swap_32 Unexecuted instantiation: ssl3_cbc.c:constant_time_cond_swap_32 Unexecuted instantiation: ciphercommon_block.c:constant_time_cond_swap_32 Unexecuted instantiation: tls_pad.c:constant_time_cond_swap_32 Unexecuted instantiation: rsaz_exp.c:constant_time_cond_swap_32 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_cond_swap_32 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_cond_swap_32 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_cond_swap_32 |
381 | | |
382 | | /* |
383 | | * mask must be 0xFFFFFFFF or 0x00000000. |
384 | | * |
385 | | * if (mask) { |
386 | | * uint64_t tmp = *a; |
387 | | * |
388 | | * *a = *b; |
389 | | * *b = tmp; |
390 | | * } |
391 | | */ |
392 | | static ossl_inline void constant_time_cond_swap_64(uint64_t mask, uint64_t *a, |
393 | | uint64_t *b) |
394 | 2.16k | { |
395 | 2.16k | uint64_t xor = *a ^ *b; |
396 | | |
397 | 2.16k | xor &= mask; |
398 | 2.16k | *a ^= xor; |
399 | 2.16k | *b ^= xor; |
400 | 2.16k | } Unexecuted instantiation: bn_exp.c:constant_time_cond_swap_64 Unexecuted instantiation: bn_gcd.c:constant_time_cond_swap_64 Unexecuted instantiation: bn_lib.c:constant_time_cond_swap_64 curve448.c:constant_time_cond_swap_64 Line | Count | Source | 394 | 2.16k | { | 395 | 2.16k | uint64_t xor = *a ^ *b; | 396 | | | 397 | 2.16k | xor &= mask; | 398 | 2.16k | *a ^= xor; | 399 | 2.16k | *b ^= xor; | 400 | 2.16k | } |
Unexecuted instantiation: curve448_tables.c:constant_time_cond_swap_64 Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_cond_swap_64 Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_cond_swap_64 Unexecuted instantiation: err.c:constant_time_cond_swap_64 Unexecuted instantiation: f_generic.c:constant_time_cond_swap_64 Unexecuted instantiation: f_impl64.c:constant_time_cond_swap_64 Unexecuted instantiation: rsa_ossl.c:constant_time_cond_swap_64 Unexecuted instantiation: rsa_pk1.c:constant_time_cond_swap_64 Unexecuted instantiation: rsa_pmeth.c:constant_time_cond_swap_64 Unexecuted instantiation: scalar.c:constant_time_cond_swap_64 Unexecuted instantiation: set_key.c:constant_time_cond_swap_64 Unexecuted instantiation: eddsa.c:constant_time_cond_swap_64 Unexecuted instantiation: rsa_oaep.c:constant_time_cond_swap_64 Unexecuted instantiation: rsa_enc.c:constant_time_cond_swap_64 Unexecuted instantiation: ssl3_cbc.c:constant_time_cond_swap_64 Unexecuted instantiation: ciphercommon_block.c:constant_time_cond_swap_64 Unexecuted instantiation: tls_pad.c:constant_time_cond_swap_64 Unexecuted instantiation: rsaz_exp.c:constant_time_cond_swap_64 Unexecuted instantiation: rsaz_exp_x2.c:constant_time_cond_swap_64 Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_cond_swap_64 Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_cond_swap_64 |
401 | | |
402 | | /* |
403 | | * mask must be 0xFF or 0x00. |
404 | | * "constant time" is per len. |
405 | | * |
406 | | * if (mask) { |
407 | | * unsigned char tmp[len]; |
408 | | * |
409 | | * memcpy(tmp, a, len); |
410 | | * memcpy(a, b); |
411 | | * memcpy(b, tmp); |
412 | | * } |
413 | | */ |
414 | | static ossl_inline void constant_time_cond_swap_buff(unsigned char mask, |
415 | | unsigned char *a, |
416 | | unsigned char *b, |
417 | | size_t len) |
418 | 0 | { |
419 | 0 | size_t i; |
420 | 0 | unsigned char tmp; |
421 | 0 |
|
422 | 0 | for (i = 0; i < len; i++) { |
423 | 0 | tmp = a[i] ^ b[i]; |
424 | 0 | tmp &= mask; |
425 | 0 | a[i] ^= tmp; |
426 | 0 | b[i] ^= tmp; |
427 | 0 | } |
428 | 0 | } Unexecuted instantiation: bn_exp.c:constant_time_cond_swap_buff Unexecuted instantiation: bn_gcd.c:constant_time_cond_swap_buff Unexecuted instantiation: bn_lib.c:constant_time_cond_swap_buff Unexecuted instantiation: curve448.c:constant_time_cond_swap_buff Unexecuted instantiation: curve448_tables.c:constant_time_cond_swap_buff Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_cond_swap_buff Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_cond_swap_buff Unexecuted instantiation: err.c:constant_time_cond_swap_buff Unexecuted instantiation: f_generic.c:constant_time_cond_swap_buff Unexecuted instantiation: f_impl64.c:constant_time_cond_swap_buff Unexecuted instantiation: rsa_ossl.c:constant_time_cond_swap_buff Unexecuted instantiation: rsa_pk1.c:constant_time_cond_swap_buff Unexecuted instantiation: rsa_pmeth.c:constant_time_cond_swap_buff Unexecuted instantiation: scalar.c:constant_time_cond_swap_buff Unexecuted instantiation: set_key.c:constant_time_cond_swap_buff Unexecuted instantiation: eddsa.c:constant_time_cond_swap_buff Unexecuted instantiation: rsa_oaep.c:constant_time_cond_swap_buff Unexecuted instantiation: rsa_enc.c:constant_time_cond_swap_buff Unexecuted instantiation: ssl3_cbc.c:constant_time_cond_swap_buff Unexecuted instantiation: ciphercommon_block.c:constant_time_cond_swap_buff Unexecuted instantiation: tls_pad.c:constant_time_cond_swap_buff Unexecuted instantiation: rsaz_exp.c:constant_time_cond_swap_buff Unexecuted instantiation: rsaz_exp_x2.c:constant_time_cond_swap_buff Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_cond_swap_buff Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_cond_swap_buff |
429 | | |
430 | | /* |
431 | | * table is a two dimensional array of bytes. Each row has rowsize elements. |
432 | | * Copies row number idx into out. rowsize and numrows are not considered |
433 | | * private. |
434 | | */ |
435 | | static ossl_inline void constant_time_lookup(void *out, |
436 | | const void *table, |
437 | | size_t rowsize, |
438 | | size_t numrows, |
439 | | size_t idx) |
440 | 270 | { |
441 | 270 | size_t i, j; |
442 | 270 | const unsigned char *tablec = (const unsigned char *)table; |
443 | 270 | unsigned char *outc = (unsigned char *)out; |
444 | 270 | unsigned char mask; |
445 | | |
446 | 270 | memset(out, 0, rowsize); |
447 | | |
448 | | /* Note idx may underflow - but that is well defined */ |
449 | 4.59k | for (i = 0; i < numrows; i++, idx--) { |
450 | 4.32k | mask = (unsigned char)constant_time_is_zero_s(idx); |
451 | 833k | for (j = 0; j < rowsize; j++) |
452 | 829k | *(outc + j) |= constant_time_select_8(mask, *(tablec++), 0); |
453 | 4.32k | } |
454 | 270 | } Unexecuted instantiation: bn_exp.c:constant_time_lookup Unexecuted instantiation: bn_gcd.c:constant_time_lookup Unexecuted instantiation: bn_lib.c:constant_time_lookup curve448.c:constant_time_lookup Line | Count | Source | 440 | 270 | { | 441 | 270 | size_t i, j; | 442 | 270 | const unsigned char *tablec = (const unsigned char *)table; | 443 | 270 | unsigned char *outc = (unsigned char *)out; | 444 | 270 | unsigned char mask; | 445 | | | 446 | 270 | memset(out, 0, rowsize); | 447 | | | 448 | | /* Note idx may underflow - but that is well defined */ | 449 | 4.59k | for (i = 0; i < numrows; i++, idx--) { | 450 | 4.32k | mask = (unsigned char)constant_time_is_zero_s(idx); | 451 | 833k | for (j = 0; j < rowsize; j++) | 452 | 829k | *(outc + j) |= constant_time_select_8(mask, *(tablec++), 0); | 453 | 4.32k | } | 454 | 270 | } |
Unexecuted instantiation: curve448_tables.c:constant_time_lookup Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_lookup Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_lookup Unexecuted instantiation: err.c:constant_time_lookup Unexecuted instantiation: f_generic.c:constant_time_lookup Unexecuted instantiation: f_impl64.c:constant_time_lookup Unexecuted instantiation: rsa_ossl.c:constant_time_lookup Unexecuted instantiation: rsa_pk1.c:constant_time_lookup Unexecuted instantiation: rsa_pmeth.c:constant_time_lookup Unexecuted instantiation: scalar.c:constant_time_lookup Unexecuted instantiation: set_key.c:constant_time_lookup Unexecuted instantiation: eddsa.c:constant_time_lookup Unexecuted instantiation: rsa_oaep.c:constant_time_lookup Unexecuted instantiation: rsa_enc.c:constant_time_lookup Unexecuted instantiation: ssl3_cbc.c:constant_time_lookup Unexecuted instantiation: ciphercommon_block.c:constant_time_lookup Unexecuted instantiation: tls_pad.c:constant_time_lookup Unexecuted instantiation: rsaz_exp.c:constant_time_lookup Unexecuted instantiation: rsaz_exp_x2.c:constant_time_lookup Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_lookup Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_lookup |
455 | | |
456 | | /* |
457 | | * Expected usage pattern is to unconditionally set error and then |
458 | | * wipe it if there was no actual error. |clear| is 1 or 0. |
459 | | */ |
460 | | void err_clear_last_constant_time(int clear); |
461 | | |
462 | | #endif /* OSSL_INTERNAL_CONSTANT_TIME_H */ |