Coverage Report

Created: 2025-06-13 06:56

/src/openssl/include/internal/constant_time.h
Line
Count
Source (jump to first uncovered line)
1
/*
2
 * Copyright 2014-2025 The OpenSSL Project Authors. All Rights Reserved.
3
 *
4
 * Licensed under the Apache License 2.0 (the "License").  You may not use
5
 * this file except in compliance with the License.  You can obtain a copy
6
 * in the file LICENSE in the source distribution or at
7
 * https://www.openssl.org/source/license.html
8
 */
9
10
#ifndef OSSL_INTERNAL_CONSTANT_TIME_H
11
# define OSSL_INTERNAL_CONSTANT_TIME_H
12
# pragma once
13
14
# include <stdlib.h>
15
# include <string.h>
16
# include <openssl/e_os2.h>              /* For 'ossl_inline' */
17
18
/*-
19
 * The boolean methods return a bitmask of all ones (0xff...f) for true
20
 * and 0 for false. This is useful for choosing a value based on the result
21
 * of a conditional in constant time. For example,
22
 *      if (a < b) {
23
 *        c = a;
24
 *      } else {
25
 *        c = b;
26
 *      }
27
 * can be written as
28
 *      unsigned int lt = constant_time_lt(a, b);
29
 *      c = constant_time_select(lt, a, b);
30
 */
31
32
/* Returns the given value with the MSB copied to all the other bits. */
33
static ossl_inline unsigned int constant_time_msb(unsigned int a);
34
/* Convenience method for uint32_t. */
35
static ossl_inline uint32_t constant_time_msb_32(uint32_t a);
36
/* Convenience method for uint64_t. */
37
static ossl_inline uint64_t constant_time_msb_64(uint64_t a);
38
39
/* Returns 0xff..f if a < b and 0 otherwise. */
40
static ossl_inline unsigned int constant_time_lt(unsigned int a,
41
                                                 unsigned int b);
42
/* Convenience method for getting an 8-bit mask. */
43
static ossl_inline unsigned char constant_time_lt_8(unsigned int a,
44
                                                    unsigned int b);
45
/* Convenience method for uint32_t. */
46
static ossl_inline uint32_t constant_time_lt_32(uint32_t a, uint32_t b);
47
48
/* Convenience method for uint64_t. */
49
static ossl_inline uint64_t constant_time_lt_64(uint64_t a, uint64_t b);
50
51
/* Returns 0xff..f if a >= b and 0 otherwise. */
52
static ossl_inline unsigned int constant_time_ge(unsigned int a,
53
                                                 unsigned int b);
54
/* Convenience method for getting an 8-bit mask. */
55
static ossl_inline unsigned char constant_time_ge_8(unsigned int a,
56
                                                    unsigned int b);
57
58
/* Returns 0xff..f if a == 0 and 0 otherwise. */
59
static ossl_inline unsigned int constant_time_is_zero(unsigned int a);
60
/* Convenience method for getting an 8-bit mask. */
61
static ossl_inline unsigned char constant_time_is_zero_8(unsigned int a);
62
/* Convenience method for getting a 32-bit mask. */
63
static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a);
64
65
/* Returns 0xff..f if a == b and 0 otherwise. */
66
static ossl_inline unsigned int constant_time_eq(unsigned int a,
67
                                                 unsigned int b);
68
/* Convenience method for getting an 8-bit mask. */
69
static ossl_inline unsigned char constant_time_eq_8(unsigned int a,
70
                                                    unsigned int b);
71
/* Signed integers. */
72
static ossl_inline unsigned int constant_time_eq_int(int a, int b);
73
/* Convenience method for getting an 8-bit mask. */
74
static ossl_inline unsigned char constant_time_eq_int_8(int a, int b);
75
76
/*-
77
 * Returns (mask & a) | (~mask & b).
78
 *
79
 * When |mask| is all 1s or all 0s (as returned by the methods above),
80
 * the select methods return either |a| (if |mask| is nonzero) or |b|
81
 * (if |mask| is zero).
82
 */
83
static ossl_inline unsigned int constant_time_select(unsigned int mask,
84
                                                     unsigned int a,
85
                                                     unsigned int b);
86
/* Convenience method for unsigned chars. */
87
static ossl_inline unsigned char constant_time_select_8(unsigned char mask,
88
                                                        unsigned char a,
89
                                                        unsigned char b);
90
91
/* Convenience method for uint32_t. */
92
static ossl_inline uint32_t constant_time_select_32(uint32_t mask, uint32_t a,
93
                                                    uint32_t b);
94
95
/* Convenience method for uint64_t. */
96
static ossl_inline uint64_t constant_time_select_64(uint64_t mask, uint64_t a,
97
                                                    uint64_t b);
98
/* Convenience method for signed integers. */
99
static ossl_inline int constant_time_select_int(unsigned int mask, int a,
100
                                                int b);
101
102
103
static ossl_inline unsigned int constant_time_msb(unsigned int a)
104
15.4M
{
105
15.4M
    return 0 - (a >> (sizeof(a) * 8 - 1));
106
15.4M
}
Unexecuted instantiation: statem_srvr.c:constant_time_msb
bn_lib.c:constant_time_msb
Line
Count
Source
104
3.27M
{
105
3.27M
    return 0 - (a >> (sizeof(a) * 8 - 1));
106
3.27M
}
err.c:constant_time_msb
Line
Count
Source
104
1.34k
{
105
1.34k
    return 0 - (a >> (sizeof(a) * 8 - 1));
106
1.34k
}
rsa_ossl.c:constant_time_msb
Line
Count
Source
104
1.34k
{
105
1.34k
    return 0 - (a >> (sizeof(a) * 8 - 1));
106
1.34k
}
rsa_pk1.c:constant_time_msb
Line
Count
Source
104
282k
{
105
282k
    return 0 - (a >> (sizeof(a) * 8 - 1));
106
282k
}
Unexecuted instantiation: rsa_pmeth.c:constant_time_msb
rsa_enc.c:constant_time_msb
Line
Count
Source
104
1.34k
{
105
1.34k
    return 0 - (a >> (sizeof(a) * 8 - 1));
106
1.34k
}
cipher_aes_cbc_hmac_sha1_hw.c:constant_time_msb
Line
Count
Source
104
11
{
105
11
    return 0 - (a >> (sizeof(a) * 8 - 1));
106
11
}
cipher_aes_cbc_hmac_sha256_hw.c:constant_time_msb
Line
Count
Source
104
14
{
105
14
    return 0 - (a >> (sizeof(a) * 8 - 1));
106
14
}
Unexecuted instantiation: ssl3_cbc.c:constant_time_msb
Unexecuted instantiation: ciphercommon_block.c:constant_time_msb
tls_pad.c:constant_time_msb
Line
Count
Source
104
2.70k
{
105
2.70k
    return 0 - (a >> (sizeof(a) * 8 - 1));
106
2.70k
}
bn_exp.c:constant_time_msb
Line
Count
Source
104
11.8M
{
105
11.8M
    return 0 - (a >> (sizeof(a) * 8 - 1));
106
11.8M
}
Unexecuted instantiation: bn_gcd.c:constant_time_msb
Unexecuted instantiation: rsaz_exp.c:constant_time_msb
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_msb
Unexecuted instantiation: set_key.c:constant_time_msb
Unexecuted instantiation: curve448.c:constant_time_msb
Unexecuted instantiation: curve448_tables.c:constant_time_msb
Unexecuted instantiation: eddsa.c:constant_time_msb
Unexecuted instantiation: f_generic.c:constant_time_msb
Unexecuted instantiation: scalar.c:constant_time_msb
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_msb
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_msb
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_msb
Unexecuted instantiation: ml_dsa_key.c:constant_time_msb
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_msb
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_msb
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_msb
Unexecuted instantiation: ml_dsa_params.c:constant_time_msb
Unexecuted instantiation: ml_dsa_sample.c:constant_time_msb
Unexecuted instantiation: ml_dsa_sign.c:constant_time_msb
Unexecuted instantiation: ml_kem.c:constant_time_msb
Unexecuted instantiation: rsa_oaep.c:constant_time_msb
Unexecuted instantiation: f_impl64.c:constant_time_msb
107
108
109
static ossl_inline uint32_t constant_time_msb_32(uint32_t a)
110
55.2k
{
111
55.2k
    return 0 - (a >> 31);
112
55.2k
}
Unexecuted instantiation: statem_srvr.c:constant_time_msb_32
Unexecuted instantiation: bn_lib.c:constant_time_msb_32
Unexecuted instantiation: err.c:constant_time_msb_32
Unexecuted instantiation: rsa_ossl.c:constant_time_msb_32
Unexecuted instantiation: rsa_pk1.c:constant_time_msb_32
Unexecuted instantiation: rsa_pmeth.c:constant_time_msb_32
Unexecuted instantiation: rsa_enc.c:constant_time_msb_32
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_msb_32
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_msb_32
Unexecuted instantiation: ssl3_cbc.c:constant_time_msb_32
Unexecuted instantiation: ciphercommon_block.c:constant_time_msb_32
Unexecuted instantiation: tls_pad.c:constant_time_msb_32
Unexecuted instantiation: bn_exp.c:constant_time_msb_32
Unexecuted instantiation: bn_gcd.c:constant_time_msb_32
Unexecuted instantiation: rsaz_exp.c:constant_time_msb_32
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_msb_32
Unexecuted instantiation: set_key.c:constant_time_msb_32
Unexecuted instantiation: curve448.c:constant_time_msb_32
Unexecuted instantiation: curve448_tables.c:constant_time_msb_32
Unexecuted instantiation: eddsa.c:constant_time_msb_32
Unexecuted instantiation: f_generic.c:constant_time_msb_32
Unexecuted instantiation: scalar.c:constant_time_msb_32
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_msb_32
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_msb_32
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_msb_32
Unexecuted instantiation: ml_dsa_key.c:constant_time_msb_32
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_msb_32
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_msb_32
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_msb_32
Unexecuted instantiation: ml_dsa_params.c:constant_time_msb_32
Unexecuted instantiation: ml_dsa_sample.c:constant_time_msb_32
Unexecuted instantiation: ml_dsa_sign.c:constant_time_msb_32
ml_kem.c:constant_time_msb_32
Line
Count
Source
110
55.2k
{
111
55.2k
    return 0 - (a >> 31);
112
55.2k
}
Unexecuted instantiation: rsa_oaep.c:constant_time_msb_32
Unexecuted instantiation: f_impl64.c:constant_time_msb_32
113
114
static ossl_inline uint64_t constant_time_msb_64(uint64_t a)
115
33
{
116
33
    return 0 - (a >> 63);
117
33
}
Unexecuted instantiation: statem_srvr.c:constant_time_msb_64
Unexecuted instantiation: bn_lib.c:constant_time_msb_64
Unexecuted instantiation: err.c:constant_time_msb_64
Unexecuted instantiation: rsa_ossl.c:constant_time_msb_64
Unexecuted instantiation: rsa_pk1.c:constant_time_msb_64
Unexecuted instantiation: rsa_pmeth.c:constant_time_msb_64
Unexecuted instantiation: rsa_enc.c:constant_time_msb_64
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_msb_64
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_msb_64
Unexecuted instantiation: ssl3_cbc.c:constant_time_msb_64
Unexecuted instantiation: ciphercommon_block.c:constant_time_msb_64
Unexecuted instantiation: tls_pad.c:constant_time_msb_64
Unexecuted instantiation: bn_exp.c:constant_time_msb_64
Unexecuted instantiation: bn_gcd.c:constant_time_msb_64
Unexecuted instantiation: rsaz_exp.c:constant_time_msb_64
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_msb_64
Unexecuted instantiation: set_key.c:constant_time_msb_64
Unexecuted instantiation: curve448.c:constant_time_msb_64
Unexecuted instantiation: curve448_tables.c:constant_time_msb_64
Unexecuted instantiation: eddsa.c:constant_time_msb_64
f_generic.c:constant_time_msb_64
Line
Count
Source
115
33
{
116
33
    return 0 - (a >> 63);
117
33
}
Unexecuted instantiation: scalar.c:constant_time_msb_64
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_msb_64
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_msb_64
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_msb_64
Unexecuted instantiation: ml_dsa_key.c:constant_time_msb_64
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_msb_64
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_msb_64
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_msb_64
Unexecuted instantiation: ml_dsa_params.c:constant_time_msb_64
Unexecuted instantiation: ml_dsa_sample.c:constant_time_msb_64
Unexecuted instantiation: ml_dsa_sign.c:constant_time_msb_64
Unexecuted instantiation: ml_kem.c:constant_time_msb_64
Unexecuted instantiation: rsa_oaep.c:constant_time_msb_64
Unexecuted instantiation: f_impl64.c:constant_time_msb_64
118
119
static ossl_inline size_t constant_time_msb_s(size_t a)
120
198k
{
121
198k
    return 0 - (a >> (sizeof(a) * 8 - 1));
122
198k
}
Unexecuted instantiation: statem_srvr.c:constant_time_msb_s
Unexecuted instantiation: bn_lib.c:constant_time_msb_s
Unexecuted instantiation: err.c:constant_time_msb_s
Unexecuted instantiation: rsa_ossl.c:constant_time_msb_s
Unexecuted instantiation: rsa_pk1.c:constant_time_msb_s
Unexecuted instantiation: rsa_pmeth.c:constant_time_msb_s
rsa_enc.c:constant_time_msb_s
Line
Count
Source
120
1.34k
{
121
1.34k
    return 0 - (a >> (sizeof(a) * 8 - 1));
122
1.34k
}
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_msb_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_msb_s
ssl3_cbc.c:constant_time_msb_s
Line
Count
Source
120
97.0k
{
121
97.0k
    return 0 - (a >> (sizeof(a) * 8 - 1));
122
97.0k
}
Unexecuted instantiation: ciphercommon_block.c:constant_time_msb_s
tls_pad.c:constant_time_msb_s
Line
Count
Source
120
81.2k
{
121
81.2k
    return 0 - (a >> (sizeof(a) * 8 - 1));
122
81.2k
}
Unexecuted instantiation: bn_exp.c:constant_time_msb_s
Unexecuted instantiation: bn_gcd.c:constant_time_msb_s
Unexecuted instantiation: rsaz_exp.c:constant_time_msb_s
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_msb_s
Unexecuted instantiation: set_key.c:constant_time_msb_s
curve448.c:constant_time_msb_s
Line
Count
Source
120
18.7k
{
121
18.7k
    return 0 - (a >> (sizeof(a) * 8 - 1));
122
18.7k
}
Unexecuted instantiation: curve448_tables.c:constant_time_msb_s
Unexecuted instantiation: eddsa.c:constant_time_msb_s
Unexecuted instantiation: f_generic.c:constant_time_msb_s
Unexecuted instantiation: scalar.c:constant_time_msb_s
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_msb_s
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_msb_s
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_msb_s
Unexecuted instantiation: ml_dsa_key.c:constant_time_msb_s
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_msb_s
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_msb_s
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_msb_s
Unexecuted instantiation: ml_dsa_params.c:constant_time_msb_s
Unexecuted instantiation: ml_dsa_sample.c:constant_time_msb_s
Unexecuted instantiation: ml_dsa_sign.c:constant_time_msb_s
Unexecuted instantiation: ml_kem.c:constant_time_msb_s
Unexecuted instantiation: rsa_oaep.c:constant_time_msb_s
Unexecuted instantiation: f_impl64.c:constant_time_msb_s
123
124
static ossl_inline unsigned int constant_time_lt(unsigned int a,
125
                                                 unsigned int b)
126
25
{
127
25
    return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));
128
25
}
Unexecuted instantiation: statem_srvr.c:constant_time_lt
Unexecuted instantiation: bn_lib.c:constant_time_lt
Unexecuted instantiation: err.c:constant_time_lt
Unexecuted instantiation: rsa_ossl.c:constant_time_lt
Unexecuted instantiation: rsa_pk1.c:constant_time_lt
Unexecuted instantiation: rsa_pmeth.c:constant_time_lt
Unexecuted instantiation: rsa_enc.c:constant_time_lt
cipher_aes_cbc_hmac_sha1_hw.c:constant_time_lt
Line
Count
Source
126
11
{
127
11
    return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));
128
11
}
cipher_aes_cbc_hmac_sha256_hw.c:constant_time_lt
Line
Count
Source
126
14
{
127
14
    return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));
128
14
}
Unexecuted instantiation: ssl3_cbc.c:constant_time_lt
Unexecuted instantiation: ciphercommon_block.c:constant_time_lt
Unexecuted instantiation: tls_pad.c:constant_time_lt
Unexecuted instantiation: bn_exp.c:constant_time_lt
Unexecuted instantiation: bn_gcd.c:constant_time_lt
Unexecuted instantiation: rsaz_exp.c:constant_time_lt
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_lt
Unexecuted instantiation: set_key.c:constant_time_lt
Unexecuted instantiation: curve448.c:constant_time_lt
Unexecuted instantiation: curve448_tables.c:constant_time_lt
Unexecuted instantiation: eddsa.c:constant_time_lt
Unexecuted instantiation: f_generic.c:constant_time_lt
Unexecuted instantiation: scalar.c:constant_time_lt
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_lt
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_lt
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_lt
Unexecuted instantiation: ml_dsa_key.c:constant_time_lt
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_lt
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_lt
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_lt
Unexecuted instantiation: ml_dsa_params.c:constant_time_lt
Unexecuted instantiation: ml_dsa_sample.c:constant_time_lt
Unexecuted instantiation: ml_dsa_sign.c:constant_time_lt
Unexecuted instantiation: ml_kem.c:constant_time_lt
Unexecuted instantiation: rsa_oaep.c:constant_time_lt
Unexecuted instantiation: f_impl64.c:constant_time_lt
129
130
static ossl_inline size_t constant_time_lt_s(size_t a, size_t b)
131
155k
{
132
155k
    return constant_time_msb_s(a ^ ((a ^ b) | ((a - b) ^ b)));
133
155k
}
Unexecuted instantiation: statem_srvr.c:constant_time_lt_s
Unexecuted instantiation: bn_lib.c:constant_time_lt_s
Unexecuted instantiation: err.c:constant_time_lt_s
Unexecuted instantiation: rsa_ossl.c:constant_time_lt_s
Unexecuted instantiation: rsa_pk1.c:constant_time_lt_s
Unexecuted instantiation: rsa_pmeth.c:constant_time_lt_s
Unexecuted instantiation: rsa_enc.c:constant_time_lt_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_lt_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_lt_s
ssl3_cbc.c:constant_time_lt_s
Line
Count
Source
131
95.6k
{
132
95.6k
    return constant_time_msb_s(a ^ ((a ^ b) | ((a - b) ^ b)));
133
95.6k
}
Unexecuted instantiation: ciphercommon_block.c:constant_time_lt_s
tls_pad.c:constant_time_lt_s
Line
Count
Source
131
60.1k
{
132
60.1k
    return constant_time_msb_s(a ^ ((a ^ b) | ((a - b) ^ b)));
133
60.1k
}
Unexecuted instantiation: bn_exp.c:constant_time_lt_s
Unexecuted instantiation: bn_gcd.c:constant_time_lt_s
Unexecuted instantiation: rsaz_exp.c:constant_time_lt_s
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_lt_s
Unexecuted instantiation: set_key.c:constant_time_lt_s
Unexecuted instantiation: curve448.c:constant_time_lt_s
Unexecuted instantiation: curve448_tables.c:constant_time_lt_s
Unexecuted instantiation: eddsa.c:constant_time_lt_s
Unexecuted instantiation: f_generic.c:constant_time_lt_s
Unexecuted instantiation: scalar.c:constant_time_lt_s
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_lt_s
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_lt_s
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_lt_s
Unexecuted instantiation: ml_dsa_key.c:constant_time_lt_s
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_lt_s
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_lt_s
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_lt_s
Unexecuted instantiation: ml_dsa_params.c:constant_time_lt_s
Unexecuted instantiation: ml_dsa_sample.c:constant_time_lt_s
Unexecuted instantiation: ml_dsa_sign.c:constant_time_lt_s
Unexecuted instantiation: ml_kem.c:constant_time_lt_s
Unexecuted instantiation: rsa_oaep.c:constant_time_lt_s
Unexecuted instantiation: f_impl64.c:constant_time_lt_s
134
135
static ossl_inline unsigned char constant_time_lt_8(unsigned int a,
136
                                                    unsigned int b)
137
0
{
138
0
    return (unsigned char)constant_time_lt(a, b);
139
0
}
Unexecuted instantiation: statem_srvr.c:constant_time_lt_8
Unexecuted instantiation: bn_lib.c:constant_time_lt_8
Unexecuted instantiation: err.c:constant_time_lt_8
Unexecuted instantiation: rsa_ossl.c:constant_time_lt_8
Unexecuted instantiation: rsa_pk1.c:constant_time_lt_8
Unexecuted instantiation: rsa_pmeth.c:constant_time_lt_8
Unexecuted instantiation: rsa_enc.c:constant_time_lt_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_lt_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_lt_8
Unexecuted instantiation: ssl3_cbc.c:constant_time_lt_8
Unexecuted instantiation: ciphercommon_block.c:constant_time_lt_8
Unexecuted instantiation: tls_pad.c:constant_time_lt_8
Unexecuted instantiation: bn_exp.c:constant_time_lt_8
Unexecuted instantiation: bn_gcd.c:constant_time_lt_8
Unexecuted instantiation: rsaz_exp.c:constant_time_lt_8
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_lt_8
Unexecuted instantiation: set_key.c:constant_time_lt_8
Unexecuted instantiation: curve448.c:constant_time_lt_8
Unexecuted instantiation: curve448_tables.c:constant_time_lt_8
Unexecuted instantiation: eddsa.c:constant_time_lt_8
Unexecuted instantiation: f_generic.c:constant_time_lt_8
Unexecuted instantiation: scalar.c:constant_time_lt_8
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_lt_8
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_lt_8
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_lt_8
Unexecuted instantiation: ml_dsa_key.c:constant_time_lt_8
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_lt_8
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_lt_8
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_lt_8
Unexecuted instantiation: ml_dsa_params.c:constant_time_lt_8
Unexecuted instantiation: ml_dsa_sample.c:constant_time_lt_8
Unexecuted instantiation: ml_dsa_sign.c:constant_time_lt_8
Unexecuted instantiation: ml_kem.c:constant_time_lt_8
Unexecuted instantiation: rsa_oaep.c:constant_time_lt_8
Unexecuted instantiation: f_impl64.c:constant_time_lt_8
140
141
static ossl_inline uint32_t constant_time_lt_32(uint32_t a, uint32_t b)
142
55.2k
{
143
55.2k
    return constant_time_msb_32(a ^ ((a ^ b) | ((a - b) ^ b)));
144
55.2k
}
Unexecuted instantiation: statem_srvr.c:constant_time_lt_32
Unexecuted instantiation: bn_lib.c:constant_time_lt_32
Unexecuted instantiation: err.c:constant_time_lt_32
Unexecuted instantiation: rsa_ossl.c:constant_time_lt_32
Unexecuted instantiation: rsa_pk1.c:constant_time_lt_32
Unexecuted instantiation: rsa_pmeth.c:constant_time_lt_32
Unexecuted instantiation: rsa_enc.c:constant_time_lt_32
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_lt_32
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_lt_32
Unexecuted instantiation: ssl3_cbc.c:constant_time_lt_32
Unexecuted instantiation: ciphercommon_block.c:constant_time_lt_32
Unexecuted instantiation: tls_pad.c:constant_time_lt_32
Unexecuted instantiation: bn_exp.c:constant_time_lt_32
Unexecuted instantiation: bn_gcd.c:constant_time_lt_32
Unexecuted instantiation: rsaz_exp.c:constant_time_lt_32
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_lt_32
Unexecuted instantiation: set_key.c:constant_time_lt_32
Unexecuted instantiation: curve448.c:constant_time_lt_32
Unexecuted instantiation: curve448_tables.c:constant_time_lt_32
Unexecuted instantiation: eddsa.c:constant_time_lt_32
Unexecuted instantiation: f_generic.c:constant_time_lt_32
Unexecuted instantiation: scalar.c:constant_time_lt_32
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_lt_32
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_lt_32
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_lt_32
Unexecuted instantiation: ml_dsa_key.c:constant_time_lt_32
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_lt_32
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_lt_32
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_lt_32
Unexecuted instantiation: ml_dsa_params.c:constant_time_lt_32
Unexecuted instantiation: ml_dsa_sample.c:constant_time_lt_32
Unexecuted instantiation: ml_dsa_sign.c:constant_time_lt_32
ml_kem.c:constant_time_lt_32
Line
Count
Source
142
55.2k
{
143
55.2k
    return constant_time_msb_32(a ^ ((a ^ b) | ((a - b) ^ b)));
144
55.2k
}
Unexecuted instantiation: rsa_oaep.c:constant_time_lt_32
Unexecuted instantiation: f_impl64.c:constant_time_lt_32
145
146
static ossl_inline uint64_t constant_time_lt_64(uint64_t a, uint64_t b)
147
0
{
148
0
    return constant_time_msb_64(a ^ ((a ^ b) | ((a - b) ^ b)));
149
0
}
Unexecuted instantiation: statem_srvr.c:constant_time_lt_64
Unexecuted instantiation: bn_lib.c:constant_time_lt_64
Unexecuted instantiation: err.c:constant_time_lt_64
Unexecuted instantiation: rsa_ossl.c:constant_time_lt_64
Unexecuted instantiation: rsa_pk1.c:constant_time_lt_64
Unexecuted instantiation: rsa_pmeth.c:constant_time_lt_64
Unexecuted instantiation: rsa_enc.c:constant_time_lt_64
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_lt_64
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_lt_64
Unexecuted instantiation: ssl3_cbc.c:constant_time_lt_64
Unexecuted instantiation: ciphercommon_block.c:constant_time_lt_64
Unexecuted instantiation: tls_pad.c:constant_time_lt_64
Unexecuted instantiation: bn_exp.c:constant_time_lt_64
Unexecuted instantiation: bn_gcd.c:constant_time_lt_64
Unexecuted instantiation: rsaz_exp.c:constant_time_lt_64
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_lt_64
Unexecuted instantiation: set_key.c:constant_time_lt_64
Unexecuted instantiation: curve448.c:constant_time_lt_64
Unexecuted instantiation: curve448_tables.c:constant_time_lt_64
Unexecuted instantiation: eddsa.c:constant_time_lt_64
Unexecuted instantiation: f_generic.c:constant_time_lt_64
Unexecuted instantiation: scalar.c:constant_time_lt_64
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_lt_64
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_lt_64
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_lt_64
Unexecuted instantiation: ml_dsa_key.c:constant_time_lt_64
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_lt_64
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_lt_64
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_lt_64
Unexecuted instantiation: ml_dsa_params.c:constant_time_lt_64
Unexecuted instantiation: ml_dsa_sample.c:constant_time_lt_64
Unexecuted instantiation: ml_dsa_sign.c:constant_time_lt_64
Unexecuted instantiation: ml_kem.c:constant_time_lt_64
Unexecuted instantiation: rsa_oaep.c:constant_time_lt_64
Unexecuted instantiation: f_impl64.c:constant_time_lt_64
150
151
#ifdef BN_ULONG
152
static ossl_inline BN_ULONG value_barrier_bn(BN_ULONG a)
153
0
{
154
0
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
155
0
    BN_ULONG r;
156
0
    __asm__("" : "=r"(r) : "0"(a));
157
#else
158
    volatile BN_ULONG r = a;
159
#endif
160
0
    return r;
161
0
}
Unexecuted instantiation: statem_srvr.c:value_barrier_bn
Unexecuted instantiation: bn_lib.c:value_barrier_bn
Unexecuted instantiation: err.c:value_barrier_bn
Unexecuted instantiation: rsa_ossl.c:value_barrier_bn
Unexecuted instantiation: rsa_enc.c:value_barrier_bn
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:value_barrier_bn
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:value_barrier_bn
Unexecuted instantiation: ssl3_cbc.c:value_barrier_bn
Unexecuted instantiation: ciphercommon_block.c:value_barrier_bn
Unexecuted instantiation: tls_pad.c:value_barrier_bn
Unexecuted instantiation: bn_exp.c:value_barrier_bn
Unexecuted instantiation: bn_gcd.c:value_barrier_bn
Unexecuted instantiation: rsaz_exp.c:value_barrier_bn
Unexecuted instantiation: rsaz_exp_x2.c:value_barrier_bn
Unexecuted instantiation: eddsa.c:value_barrier_bn
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:value_barrier_bn
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:value_barrier_bn
Unexecuted instantiation: ml_dsa_encoders.c:value_barrier_bn
Unexecuted instantiation: ml_dsa_key.c:value_barrier_bn
Unexecuted instantiation: ml_dsa_params.c:value_barrier_bn
Unexecuted instantiation: ml_dsa_sign.c:value_barrier_bn
Unexecuted instantiation: ml_kem.c:value_barrier_bn
162
163
static ossl_inline BN_ULONG constant_time_msb_bn(BN_ULONG a)
164
144k
{
165
144k
    return 0 - (a >> (sizeof(a) * 8 - 1));
166
144k
}
Unexecuted instantiation: statem_srvr.c:constant_time_msb_bn
bn_lib.c:constant_time_msb_bn
Line
Count
Source
164
144k
{
165
144k
    return 0 - (a >> (sizeof(a) * 8 - 1));
166
144k
}
Unexecuted instantiation: err.c:constant_time_msb_bn
Unexecuted instantiation: rsa_ossl.c:constant_time_msb_bn
Unexecuted instantiation: rsa_enc.c:constant_time_msb_bn
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_msb_bn
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_msb_bn
Unexecuted instantiation: ssl3_cbc.c:constant_time_msb_bn
Unexecuted instantiation: ciphercommon_block.c:constant_time_msb_bn
Unexecuted instantiation: tls_pad.c:constant_time_msb_bn
Unexecuted instantiation: bn_exp.c:constant_time_msb_bn
Unexecuted instantiation: bn_gcd.c:constant_time_msb_bn
Unexecuted instantiation: rsaz_exp.c:constant_time_msb_bn
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_msb_bn
Unexecuted instantiation: eddsa.c:constant_time_msb_bn
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_msb_bn
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_msb_bn
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_msb_bn
Unexecuted instantiation: ml_dsa_key.c:constant_time_msb_bn
Unexecuted instantiation: ml_dsa_params.c:constant_time_msb_bn
Unexecuted instantiation: ml_dsa_sign.c:constant_time_msb_bn
Unexecuted instantiation: ml_kem.c:constant_time_msb_bn
167
168
static ossl_inline BN_ULONG constant_time_lt_bn(BN_ULONG a, BN_ULONG b)
169
142k
{
170
142k
    return constant_time_msb_bn(a ^ ((a ^ b) | ((a - b) ^ b)));
171
142k
}
Unexecuted instantiation: statem_srvr.c:constant_time_lt_bn
bn_lib.c:constant_time_lt_bn
Line
Count
Source
169
142k
{
170
142k
    return constant_time_msb_bn(a ^ ((a ^ b) | ((a - b) ^ b)));
171
142k
}
Unexecuted instantiation: err.c:constant_time_lt_bn
Unexecuted instantiation: rsa_ossl.c:constant_time_lt_bn
Unexecuted instantiation: rsa_enc.c:constant_time_lt_bn
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_lt_bn
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_lt_bn
Unexecuted instantiation: ssl3_cbc.c:constant_time_lt_bn
Unexecuted instantiation: ciphercommon_block.c:constant_time_lt_bn
Unexecuted instantiation: tls_pad.c:constant_time_lt_bn
Unexecuted instantiation: bn_exp.c:constant_time_lt_bn
Unexecuted instantiation: bn_gcd.c:constant_time_lt_bn
Unexecuted instantiation: rsaz_exp.c:constant_time_lt_bn
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_lt_bn
Unexecuted instantiation: eddsa.c:constant_time_lt_bn
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_lt_bn
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_lt_bn
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_lt_bn
Unexecuted instantiation: ml_dsa_key.c:constant_time_lt_bn
Unexecuted instantiation: ml_dsa_params.c:constant_time_lt_bn
Unexecuted instantiation: ml_dsa_sign.c:constant_time_lt_bn
Unexecuted instantiation: ml_kem.c:constant_time_lt_bn
172
173
static ossl_inline BN_ULONG constant_time_is_zero_bn(BN_ULONG a)
174
1.90k
{
175
1.90k
    return constant_time_msb_bn(~a & (a - 1));
176
1.90k
}
Unexecuted instantiation: statem_srvr.c:constant_time_is_zero_bn
bn_lib.c:constant_time_is_zero_bn
Line
Count
Source
174
1.90k
{
175
1.90k
    return constant_time_msb_bn(~a & (a - 1));
176
1.90k
}
Unexecuted instantiation: err.c:constant_time_is_zero_bn
Unexecuted instantiation: rsa_ossl.c:constant_time_is_zero_bn
Unexecuted instantiation: rsa_enc.c:constant_time_is_zero_bn
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_is_zero_bn
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_is_zero_bn
Unexecuted instantiation: ssl3_cbc.c:constant_time_is_zero_bn
Unexecuted instantiation: ciphercommon_block.c:constant_time_is_zero_bn
Unexecuted instantiation: tls_pad.c:constant_time_is_zero_bn
Unexecuted instantiation: bn_exp.c:constant_time_is_zero_bn
Unexecuted instantiation: bn_gcd.c:constant_time_is_zero_bn
Unexecuted instantiation: rsaz_exp.c:constant_time_is_zero_bn
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_is_zero_bn
Unexecuted instantiation: eddsa.c:constant_time_is_zero_bn
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_is_zero_bn
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_is_zero_bn
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_is_zero_bn
Unexecuted instantiation: ml_dsa_key.c:constant_time_is_zero_bn
Unexecuted instantiation: ml_dsa_params.c:constant_time_is_zero_bn
Unexecuted instantiation: ml_dsa_sign.c:constant_time_is_zero_bn
Unexecuted instantiation: ml_kem.c:constant_time_is_zero_bn
177
178
static ossl_inline BN_ULONG constant_time_eq_bn(BN_ULONG a,
179
                                                BN_ULONG b)
180
477
{
181
477
    return constant_time_is_zero_bn(a ^ b);
182
477
}
Unexecuted instantiation: statem_srvr.c:constant_time_eq_bn
bn_lib.c:constant_time_eq_bn
Line
Count
Source
180
477
{
181
477
    return constant_time_is_zero_bn(a ^ b);
182
477
}
Unexecuted instantiation: err.c:constant_time_eq_bn
Unexecuted instantiation: rsa_ossl.c:constant_time_eq_bn
Unexecuted instantiation: rsa_enc.c:constant_time_eq_bn
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq_bn
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq_bn
Unexecuted instantiation: ssl3_cbc.c:constant_time_eq_bn
Unexecuted instantiation: ciphercommon_block.c:constant_time_eq_bn
Unexecuted instantiation: tls_pad.c:constant_time_eq_bn
Unexecuted instantiation: bn_exp.c:constant_time_eq_bn
Unexecuted instantiation: bn_gcd.c:constant_time_eq_bn
Unexecuted instantiation: rsaz_exp.c:constant_time_eq_bn
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq_bn
Unexecuted instantiation: eddsa.c:constant_time_eq_bn
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq_bn
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq_bn
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_eq_bn
Unexecuted instantiation: ml_dsa_key.c:constant_time_eq_bn
Unexecuted instantiation: ml_dsa_params.c:constant_time_eq_bn
Unexecuted instantiation: ml_dsa_sign.c:constant_time_eq_bn
Unexecuted instantiation: ml_kem.c:constant_time_eq_bn
183
184
static ossl_inline BN_ULONG constant_time_select_bn(BN_ULONG mask,
185
                                                    BN_ULONG a,
186
                                                    BN_ULONG b)
187
0
{
188
0
    return (value_barrier_bn(mask) & a) | (value_barrier_bn(~mask) & b);
189
0
}
Unexecuted instantiation: statem_srvr.c:constant_time_select_bn
Unexecuted instantiation: bn_lib.c:constant_time_select_bn
Unexecuted instantiation: err.c:constant_time_select_bn
Unexecuted instantiation: rsa_ossl.c:constant_time_select_bn
Unexecuted instantiation: rsa_enc.c:constant_time_select_bn
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_bn
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_bn
Unexecuted instantiation: ssl3_cbc.c:constant_time_select_bn
Unexecuted instantiation: ciphercommon_block.c:constant_time_select_bn
Unexecuted instantiation: tls_pad.c:constant_time_select_bn
Unexecuted instantiation: bn_exp.c:constant_time_select_bn
Unexecuted instantiation: bn_gcd.c:constant_time_select_bn
Unexecuted instantiation: rsaz_exp.c:constant_time_select_bn
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_bn
Unexecuted instantiation: eddsa.c:constant_time_select_bn
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_bn
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_bn
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_select_bn
Unexecuted instantiation: ml_dsa_key.c:constant_time_select_bn
Unexecuted instantiation: ml_dsa_params.c:constant_time_select_bn
Unexecuted instantiation: ml_dsa_sign.c:constant_time_select_bn
Unexecuted instantiation: ml_kem.c:constant_time_select_bn
190
#endif
191
192
static ossl_inline unsigned int constant_time_ge(unsigned int a,
193
                                                 unsigned int b)
194
25
{
195
25
    return ~constant_time_lt(a, b);
196
25
}
Unexecuted instantiation: statem_srvr.c:constant_time_ge
Unexecuted instantiation: bn_lib.c:constant_time_ge
Unexecuted instantiation: err.c:constant_time_ge
Unexecuted instantiation: rsa_ossl.c:constant_time_ge
Unexecuted instantiation: rsa_pk1.c:constant_time_ge
Unexecuted instantiation: rsa_pmeth.c:constant_time_ge
Unexecuted instantiation: rsa_enc.c:constant_time_ge
cipher_aes_cbc_hmac_sha1_hw.c:constant_time_ge
Line
Count
Source
194
11
{
195
11
    return ~constant_time_lt(a, b);
196
11
}
cipher_aes_cbc_hmac_sha256_hw.c:constant_time_ge
Line
Count
Source
194
14
{
195
14
    return ~constant_time_lt(a, b);
196
14
}
Unexecuted instantiation: ssl3_cbc.c:constant_time_ge
Unexecuted instantiation: ciphercommon_block.c:constant_time_ge
Unexecuted instantiation: tls_pad.c:constant_time_ge
Unexecuted instantiation: bn_exp.c:constant_time_ge
Unexecuted instantiation: bn_gcd.c:constant_time_ge
Unexecuted instantiation: rsaz_exp.c:constant_time_ge
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_ge
Unexecuted instantiation: set_key.c:constant_time_ge
Unexecuted instantiation: curve448.c:constant_time_ge
Unexecuted instantiation: curve448_tables.c:constant_time_ge
Unexecuted instantiation: eddsa.c:constant_time_ge
Unexecuted instantiation: f_generic.c:constant_time_ge
Unexecuted instantiation: scalar.c:constant_time_ge
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_ge
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_ge
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_ge
Unexecuted instantiation: ml_dsa_key.c:constant_time_ge
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_ge
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_ge
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_ge
Unexecuted instantiation: ml_dsa_params.c:constant_time_ge
Unexecuted instantiation: ml_dsa_sample.c:constant_time_ge
Unexecuted instantiation: ml_dsa_sign.c:constant_time_ge
Unexecuted instantiation: ml_kem.c:constant_time_ge
Unexecuted instantiation: rsa_oaep.c:constant_time_ge
Unexecuted instantiation: f_impl64.c:constant_time_ge
197
198
static ossl_inline size_t constant_time_ge_s(size_t a, size_t b)
199
110k
{
200
110k
    return ~constant_time_lt_s(a, b);
201
110k
}
Unexecuted instantiation: statem_srvr.c:constant_time_ge_s
Unexecuted instantiation: bn_lib.c:constant_time_ge_s
Unexecuted instantiation: err.c:constant_time_ge_s
Unexecuted instantiation: rsa_ossl.c:constant_time_ge_s
Unexecuted instantiation: rsa_pk1.c:constant_time_ge_s
Unexecuted instantiation: rsa_pmeth.c:constant_time_ge_s
Unexecuted instantiation: rsa_enc.c:constant_time_ge_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_ge_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_ge_s
ssl3_cbc.c:constant_time_ge_s
Line
Count
Source
199
95.6k
{
200
95.6k
    return ~constant_time_lt_s(a, b);
201
95.6k
}
Unexecuted instantiation: ciphercommon_block.c:constant_time_ge_s
tls_pad.c:constant_time_ge_s
Line
Count
Source
199
15.2k
{
200
15.2k
    return ~constant_time_lt_s(a, b);
201
15.2k
}
Unexecuted instantiation: bn_exp.c:constant_time_ge_s
Unexecuted instantiation: bn_gcd.c:constant_time_ge_s
Unexecuted instantiation: rsaz_exp.c:constant_time_ge_s
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_ge_s
Unexecuted instantiation: set_key.c:constant_time_ge_s
Unexecuted instantiation: curve448.c:constant_time_ge_s
Unexecuted instantiation: curve448_tables.c:constant_time_ge_s
Unexecuted instantiation: eddsa.c:constant_time_ge_s
Unexecuted instantiation: f_generic.c:constant_time_ge_s
Unexecuted instantiation: scalar.c:constant_time_ge_s
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_ge_s
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_ge_s
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_ge_s
Unexecuted instantiation: ml_dsa_key.c:constant_time_ge_s
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_ge_s
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_ge_s
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_ge_s
Unexecuted instantiation: ml_dsa_params.c:constant_time_ge_s
Unexecuted instantiation: ml_dsa_sample.c:constant_time_ge_s
Unexecuted instantiation: ml_dsa_sign.c:constant_time_ge_s
Unexecuted instantiation: ml_kem.c:constant_time_ge_s
Unexecuted instantiation: rsa_oaep.c:constant_time_ge_s
Unexecuted instantiation: f_impl64.c:constant_time_ge_s
202
203
static ossl_inline unsigned char constant_time_ge_8(unsigned int a,
204
                                                    unsigned int b)
205
0
{
206
0
    return (unsigned char)constant_time_ge(a, b);
207
0
}
Unexecuted instantiation: statem_srvr.c:constant_time_ge_8
Unexecuted instantiation: bn_lib.c:constant_time_ge_8
Unexecuted instantiation: err.c:constant_time_ge_8
Unexecuted instantiation: rsa_ossl.c:constant_time_ge_8
Unexecuted instantiation: rsa_pk1.c:constant_time_ge_8
Unexecuted instantiation: rsa_pmeth.c:constant_time_ge_8
Unexecuted instantiation: rsa_enc.c:constant_time_ge_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_ge_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_ge_8
Unexecuted instantiation: ssl3_cbc.c:constant_time_ge_8
Unexecuted instantiation: ciphercommon_block.c:constant_time_ge_8
Unexecuted instantiation: tls_pad.c:constant_time_ge_8
Unexecuted instantiation: bn_exp.c:constant_time_ge_8
Unexecuted instantiation: bn_gcd.c:constant_time_ge_8
Unexecuted instantiation: rsaz_exp.c:constant_time_ge_8
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_ge_8
Unexecuted instantiation: set_key.c:constant_time_ge_8
Unexecuted instantiation: curve448.c:constant_time_ge_8
Unexecuted instantiation: curve448_tables.c:constant_time_ge_8
Unexecuted instantiation: eddsa.c:constant_time_ge_8
Unexecuted instantiation: f_generic.c:constant_time_ge_8
Unexecuted instantiation: scalar.c:constant_time_ge_8
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_ge_8
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_ge_8
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_ge_8
Unexecuted instantiation: ml_dsa_key.c:constant_time_ge_8
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_ge_8
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_ge_8
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_ge_8
Unexecuted instantiation: ml_dsa_params.c:constant_time_ge_8
Unexecuted instantiation: ml_dsa_sample.c:constant_time_ge_8
Unexecuted instantiation: ml_dsa_sign.c:constant_time_ge_8
Unexecuted instantiation: ml_kem.c:constant_time_ge_8
Unexecuted instantiation: rsa_oaep.c:constant_time_ge_8
Unexecuted instantiation: f_impl64.c:constant_time_ge_8
208
209
static ossl_inline unsigned char constant_time_ge_8_s(size_t a, size_t b)
210
110k
{
211
110k
    return (unsigned char)constant_time_ge_s(a, b);
212
110k
}
Unexecuted instantiation: statem_srvr.c:constant_time_ge_8_s
Unexecuted instantiation: bn_lib.c:constant_time_ge_8_s
Unexecuted instantiation: err.c:constant_time_ge_8_s
Unexecuted instantiation: rsa_ossl.c:constant_time_ge_8_s
Unexecuted instantiation: rsa_pk1.c:constant_time_ge_8_s
Unexecuted instantiation: rsa_pmeth.c:constant_time_ge_8_s
Unexecuted instantiation: rsa_enc.c:constant_time_ge_8_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_ge_8_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_ge_8_s
ssl3_cbc.c:constant_time_ge_8_s
Line
Count
Source
210
95.6k
{
211
95.6k
    return (unsigned char)constant_time_ge_s(a, b);
212
95.6k
}
Unexecuted instantiation: ciphercommon_block.c:constant_time_ge_8_s
tls_pad.c:constant_time_ge_8_s
Line
Count
Source
210
15.1k
{
211
15.1k
    return (unsigned char)constant_time_ge_s(a, b);
212
15.1k
}
Unexecuted instantiation: bn_exp.c:constant_time_ge_8_s
Unexecuted instantiation: bn_gcd.c:constant_time_ge_8_s
Unexecuted instantiation: rsaz_exp.c:constant_time_ge_8_s
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_ge_8_s
Unexecuted instantiation: set_key.c:constant_time_ge_8_s
Unexecuted instantiation: curve448.c:constant_time_ge_8_s
Unexecuted instantiation: curve448_tables.c:constant_time_ge_8_s
Unexecuted instantiation: eddsa.c:constant_time_ge_8_s
Unexecuted instantiation: f_generic.c:constant_time_ge_8_s
Unexecuted instantiation: scalar.c:constant_time_ge_8_s
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_ge_8_s
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_ge_8_s
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_ge_8_s
Unexecuted instantiation: ml_dsa_key.c:constant_time_ge_8_s
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_ge_8_s
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_ge_8_s
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_ge_8_s
Unexecuted instantiation: ml_dsa_params.c:constant_time_ge_8_s
Unexecuted instantiation: ml_dsa_sample.c:constant_time_ge_8_s
Unexecuted instantiation: ml_dsa_sign.c:constant_time_ge_8_s
Unexecuted instantiation: ml_kem.c:constant_time_ge_8_s
Unexecuted instantiation: rsa_oaep.c:constant_time_ge_8_s
Unexecuted instantiation: f_impl64.c:constant_time_ge_8_s
213
214
static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
215
15.2M
{
216
15.2M
    return constant_time_msb(~a & (a - 1));
217
15.2M
}
Unexecuted instantiation: statem_srvr.c:constant_time_is_zero
bn_lib.c:constant_time_is_zero
Line
Count
Source
215
3.13M
{
216
3.13M
    return constant_time_msb(~a & (a - 1));
217
3.13M
}
err.c:constant_time_is_zero
Line
Count
Source
215
1.34k
{
216
1.34k
    return constant_time_msb(~a & (a - 1));
217
1.34k
}
Unexecuted instantiation: rsa_ossl.c:constant_time_is_zero
rsa_pk1.c:constant_time_is_zero
Line
Count
Source
215
282k
{
216
282k
    return constant_time_msb(~a & (a - 1));
217
282k
}
Unexecuted instantiation: rsa_pmeth.c:constant_time_is_zero
Unexecuted instantiation: rsa_enc.c:constant_time_is_zero
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_is_zero
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_is_zero
Unexecuted instantiation: ssl3_cbc.c:constant_time_is_zero
Unexecuted instantiation: ciphercommon_block.c:constant_time_is_zero
tls_pad.c:constant_time_is_zero
Line
Count
Source
215
2.70k
{
216
2.70k
    return constant_time_msb(~a & (a - 1));
217
2.70k
}
bn_exp.c:constant_time_is_zero
Line
Count
Source
215
11.8M
{
216
11.8M
    return constant_time_msb(~a & (a - 1));
217
11.8M
}
Unexecuted instantiation: bn_gcd.c:constant_time_is_zero
Unexecuted instantiation: rsaz_exp.c:constant_time_is_zero
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_is_zero
Unexecuted instantiation: set_key.c:constant_time_is_zero
Unexecuted instantiation: curve448.c:constant_time_is_zero
Unexecuted instantiation: curve448_tables.c:constant_time_is_zero
Unexecuted instantiation: eddsa.c:constant_time_is_zero
Unexecuted instantiation: f_generic.c:constant_time_is_zero
Unexecuted instantiation: scalar.c:constant_time_is_zero
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_is_zero
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_is_zero
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_is_zero
Unexecuted instantiation: ml_dsa_key.c:constant_time_is_zero
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_is_zero
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_is_zero
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_is_zero
Unexecuted instantiation: ml_dsa_params.c:constant_time_is_zero
Unexecuted instantiation: ml_dsa_sample.c:constant_time_is_zero
Unexecuted instantiation: ml_dsa_sign.c:constant_time_is_zero
Unexecuted instantiation: ml_kem.c:constant_time_is_zero
Unexecuted instantiation: rsa_oaep.c:constant_time_is_zero
Unexecuted instantiation: f_impl64.c:constant_time_is_zero
218
219
static ossl_inline size_t constant_time_is_zero_s(size_t a)
220
41.3k
{
221
41.3k
    return constant_time_msb_s(~a & (a - 1));
222
41.3k
}
Unexecuted instantiation: statem_srvr.c:constant_time_is_zero_s
Unexecuted instantiation: bn_lib.c:constant_time_is_zero_s
Unexecuted instantiation: err.c:constant_time_is_zero_s
Unexecuted instantiation: rsa_ossl.c:constant_time_is_zero_s
Unexecuted instantiation: rsa_pk1.c:constant_time_is_zero_s
Unexecuted instantiation: rsa_pmeth.c:constant_time_is_zero_s
Unexecuted instantiation: rsa_enc.c:constant_time_is_zero_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_is_zero_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_is_zero_s
ssl3_cbc.c:constant_time_is_zero_s
Line
Count
Source
220
1.42k
{
221
1.42k
    return constant_time_msb_s(~a & (a - 1));
222
1.42k
}
Unexecuted instantiation: ciphercommon_block.c:constant_time_is_zero_s
tls_pad.c:constant_time_is_zero_s
Line
Count
Source
220
21.1k
{
221
21.1k
    return constant_time_msb_s(~a & (a - 1));
222
21.1k
}
Unexecuted instantiation: bn_exp.c:constant_time_is_zero_s
Unexecuted instantiation: bn_gcd.c:constant_time_is_zero_s
Unexecuted instantiation: rsaz_exp.c:constant_time_is_zero_s
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_is_zero_s
Unexecuted instantiation: set_key.c:constant_time_is_zero_s
curve448.c:constant_time_is_zero_s
Line
Count
Source
220
18.7k
{
221
18.7k
    return constant_time_msb_s(~a & (a - 1));
222
18.7k
}
Unexecuted instantiation: curve448_tables.c:constant_time_is_zero_s
Unexecuted instantiation: eddsa.c:constant_time_is_zero_s
Unexecuted instantiation: f_generic.c:constant_time_is_zero_s
Unexecuted instantiation: scalar.c:constant_time_is_zero_s
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_is_zero_s
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_is_zero_s
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_is_zero_s
Unexecuted instantiation: ml_dsa_key.c:constant_time_is_zero_s
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_is_zero_s
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_is_zero_s
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_is_zero_s
Unexecuted instantiation: ml_dsa_params.c:constant_time_is_zero_s
Unexecuted instantiation: ml_dsa_sample.c:constant_time_is_zero_s
Unexecuted instantiation: ml_dsa_sign.c:constant_time_is_zero_s
Unexecuted instantiation: ml_kem.c:constant_time_is_zero_s
Unexecuted instantiation: rsa_oaep.c:constant_time_is_zero_s
Unexecuted instantiation: f_impl64.c:constant_time_is_zero_s
223
224
static ossl_inline unsigned char constant_time_is_zero_8(unsigned int a)
225
276k
{
226
276k
    return (unsigned char)constant_time_is_zero(a);
227
276k
}
Unexecuted instantiation: statem_srvr.c:constant_time_is_zero_8
Unexecuted instantiation: bn_lib.c:constant_time_is_zero_8
Unexecuted instantiation: err.c:constant_time_is_zero_8
Unexecuted instantiation: rsa_ossl.c:constant_time_is_zero_8
rsa_pk1.c:constant_time_is_zero_8
Line
Count
Source
225
276k
{
226
276k
    return (unsigned char)constant_time_is_zero(a);
227
276k
}
Unexecuted instantiation: rsa_pmeth.c:constant_time_is_zero_8
Unexecuted instantiation: rsa_enc.c:constant_time_is_zero_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_is_zero_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_is_zero_8
Unexecuted instantiation: ssl3_cbc.c:constant_time_is_zero_8
Unexecuted instantiation: ciphercommon_block.c:constant_time_is_zero_8
Unexecuted instantiation: tls_pad.c:constant_time_is_zero_8
Unexecuted instantiation: bn_exp.c:constant_time_is_zero_8
Unexecuted instantiation: bn_gcd.c:constant_time_is_zero_8
Unexecuted instantiation: rsaz_exp.c:constant_time_is_zero_8
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_is_zero_8
Unexecuted instantiation: set_key.c:constant_time_is_zero_8
Unexecuted instantiation: curve448.c:constant_time_is_zero_8
Unexecuted instantiation: curve448_tables.c:constant_time_is_zero_8
Unexecuted instantiation: eddsa.c:constant_time_is_zero_8
Unexecuted instantiation: f_generic.c:constant_time_is_zero_8
Unexecuted instantiation: scalar.c:constant_time_is_zero_8
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_is_zero_8
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_is_zero_8
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_is_zero_8
Unexecuted instantiation: ml_dsa_key.c:constant_time_is_zero_8
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_is_zero_8
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_is_zero_8
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_is_zero_8
Unexecuted instantiation: ml_dsa_params.c:constant_time_is_zero_8
Unexecuted instantiation: ml_dsa_sample.c:constant_time_is_zero_8
Unexecuted instantiation: ml_dsa_sign.c:constant_time_is_zero_8
Unexecuted instantiation: ml_kem.c:constant_time_is_zero_8
Unexecuted instantiation: rsa_oaep.c:constant_time_is_zero_8
Unexecuted instantiation: f_impl64.c:constant_time_is_zero_8
228
229
static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a)
230
0
{
231
0
    return constant_time_msb_32(~a & (a - 1));
232
0
}
Unexecuted instantiation: statem_srvr.c:constant_time_is_zero_32
Unexecuted instantiation: bn_lib.c:constant_time_is_zero_32
Unexecuted instantiation: err.c:constant_time_is_zero_32
Unexecuted instantiation: rsa_ossl.c:constant_time_is_zero_32
Unexecuted instantiation: rsa_pk1.c:constant_time_is_zero_32
Unexecuted instantiation: rsa_pmeth.c:constant_time_is_zero_32
Unexecuted instantiation: rsa_enc.c:constant_time_is_zero_32
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_is_zero_32
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_is_zero_32
Unexecuted instantiation: ssl3_cbc.c:constant_time_is_zero_32
Unexecuted instantiation: ciphercommon_block.c:constant_time_is_zero_32
Unexecuted instantiation: tls_pad.c:constant_time_is_zero_32
Unexecuted instantiation: bn_exp.c:constant_time_is_zero_32
Unexecuted instantiation: bn_gcd.c:constant_time_is_zero_32
Unexecuted instantiation: rsaz_exp.c:constant_time_is_zero_32
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_is_zero_32
Unexecuted instantiation: set_key.c:constant_time_is_zero_32
Unexecuted instantiation: curve448.c:constant_time_is_zero_32
Unexecuted instantiation: curve448_tables.c:constant_time_is_zero_32
Unexecuted instantiation: eddsa.c:constant_time_is_zero_32
Unexecuted instantiation: f_generic.c:constant_time_is_zero_32
Unexecuted instantiation: scalar.c:constant_time_is_zero_32
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_is_zero_32
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_is_zero_32
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_is_zero_32
Unexecuted instantiation: ml_dsa_key.c:constant_time_is_zero_32
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_is_zero_32
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_is_zero_32
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_is_zero_32
Unexecuted instantiation: ml_dsa_params.c:constant_time_is_zero_32
Unexecuted instantiation: ml_dsa_sample.c:constant_time_is_zero_32
Unexecuted instantiation: ml_dsa_sign.c:constant_time_is_zero_32
Unexecuted instantiation: ml_kem.c:constant_time_is_zero_32
Unexecuted instantiation: rsa_oaep.c:constant_time_is_zero_32
Unexecuted instantiation: f_impl64.c:constant_time_is_zero_32
233
234
static ossl_inline uint64_t constant_time_is_zero_64(uint64_t a)
235
33
{
236
33
    return constant_time_msb_64(~a & (a - 1));
237
33
}
Unexecuted instantiation: statem_srvr.c:constant_time_is_zero_64
Unexecuted instantiation: bn_lib.c:constant_time_is_zero_64
Unexecuted instantiation: err.c:constant_time_is_zero_64
Unexecuted instantiation: rsa_ossl.c:constant_time_is_zero_64
Unexecuted instantiation: rsa_pk1.c:constant_time_is_zero_64
Unexecuted instantiation: rsa_pmeth.c:constant_time_is_zero_64
Unexecuted instantiation: rsa_enc.c:constant_time_is_zero_64
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_is_zero_64
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_is_zero_64
Unexecuted instantiation: ssl3_cbc.c:constant_time_is_zero_64
Unexecuted instantiation: ciphercommon_block.c:constant_time_is_zero_64
Unexecuted instantiation: tls_pad.c:constant_time_is_zero_64
Unexecuted instantiation: bn_exp.c:constant_time_is_zero_64
Unexecuted instantiation: bn_gcd.c:constant_time_is_zero_64
Unexecuted instantiation: rsaz_exp.c:constant_time_is_zero_64
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_is_zero_64
Unexecuted instantiation: set_key.c:constant_time_is_zero_64
Unexecuted instantiation: curve448.c:constant_time_is_zero_64
Unexecuted instantiation: curve448_tables.c:constant_time_is_zero_64
Unexecuted instantiation: eddsa.c:constant_time_is_zero_64
f_generic.c:constant_time_is_zero_64
Line
Count
Source
235
33
{
236
33
    return constant_time_msb_64(~a & (a - 1));
237
33
}
Unexecuted instantiation: scalar.c:constant_time_is_zero_64
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_is_zero_64
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_is_zero_64
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_is_zero_64
Unexecuted instantiation: ml_dsa_key.c:constant_time_is_zero_64
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_is_zero_64
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_is_zero_64
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_is_zero_64
Unexecuted instantiation: ml_dsa_params.c:constant_time_is_zero_64
Unexecuted instantiation: ml_dsa_sample.c:constant_time_is_zero_64
Unexecuted instantiation: ml_dsa_sign.c:constant_time_is_zero_64
Unexecuted instantiation: ml_kem.c:constant_time_is_zero_64
Unexecuted instantiation: rsa_oaep.c:constant_time_is_zero_64
Unexecuted instantiation: f_impl64.c:constant_time_is_zero_64
238
239
static ossl_inline unsigned int constant_time_eq(unsigned int a,
240
                                                 unsigned int b)
241
15.0M
{
242
15.0M
    return constant_time_is_zero(a ^ b);
243
15.0M
}
Unexecuted instantiation: statem_srvr.c:constant_time_eq
bn_lib.c:constant_time_eq
Line
Count
Source
241
3.13M
{
242
3.13M
    return constant_time_is_zero(a ^ b);
243
3.13M
}
err.c:constant_time_eq
Line
Count
Source
241
1.34k
{
242
1.34k
    return constant_time_is_zero(a ^ b);
243
1.34k
}
Unexecuted instantiation: rsa_ossl.c:constant_time_eq
rsa_pk1.c:constant_time_eq
Line
Count
Source
241
4.03k
{
242
4.03k
    return constant_time_is_zero(a ^ b);
243
4.03k
}
Unexecuted instantiation: rsa_pmeth.c:constant_time_eq
Unexecuted instantiation: rsa_enc.c:constant_time_eq
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq
Unexecuted instantiation: ssl3_cbc.c:constant_time_eq
Unexecuted instantiation: ciphercommon_block.c:constant_time_eq
tls_pad.c:constant_time_eq
Line
Count
Source
241
2.70k
{
242
2.70k
    return constant_time_is_zero(a ^ b);
243
2.70k
}
bn_exp.c:constant_time_eq
Line
Count
Source
241
11.8M
{
242
11.8M
    return constant_time_is_zero(a ^ b);
243
11.8M
}
Unexecuted instantiation: bn_gcd.c:constant_time_eq
Unexecuted instantiation: rsaz_exp.c:constant_time_eq
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq
Unexecuted instantiation: set_key.c:constant_time_eq
Unexecuted instantiation: curve448.c:constant_time_eq
Unexecuted instantiation: curve448_tables.c:constant_time_eq
Unexecuted instantiation: eddsa.c:constant_time_eq
Unexecuted instantiation: f_generic.c:constant_time_eq
Unexecuted instantiation: scalar.c:constant_time_eq
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_eq
Unexecuted instantiation: ml_dsa_key.c:constant_time_eq
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_eq
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_eq
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_eq
Unexecuted instantiation: ml_dsa_params.c:constant_time_eq
Unexecuted instantiation: ml_dsa_sample.c:constant_time_eq
Unexecuted instantiation: ml_dsa_sign.c:constant_time_eq
Unexecuted instantiation: ml_kem.c:constant_time_eq
Unexecuted instantiation: rsa_oaep.c:constant_time_eq
Unexecuted instantiation: f_impl64.c:constant_time_eq
244
245
static ossl_inline size_t constant_time_eq_s(size_t a, size_t b)
246
22.5k
{
247
22.5k
    return constant_time_is_zero_s(a ^ b);
248
22.5k
}
Unexecuted instantiation: statem_srvr.c:constant_time_eq_s
Unexecuted instantiation: bn_lib.c:constant_time_eq_s
Unexecuted instantiation: err.c:constant_time_eq_s
Unexecuted instantiation: rsa_ossl.c:constant_time_eq_s
Unexecuted instantiation: rsa_pk1.c:constant_time_eq_s
Unexecuted instantiation: rsa_pmeth.c:constant_time_eq_s
Unexecuted instantiation: rsa_enc.c:constant_time_eq_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq_s
ssl3_cbc.c:constant_time_eq_s
Line
Count
Source
246
1.42k
{
247
1.42k
    return constant_time_is_zero_s(a ^ b);
248
1.42k
}
Unexecuted instantiation: ciphercommon_block.c:constant_time_eq_s
tls_pad.c:constant_time_eq_s
Line
Count
Source
246
21.1k
{
247
21.1k
    return constant_time_is_zero_s(a ^ b);
248
21.1k
}
Unexecuted instantiation: bn_exp.c:constant_time_eq_s
Unexecuted instantiation: bn_gcd.c:constant_time_eq_s
Unexecuted instantiation: rsaz_exp.c:constant_time_eq_s
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq_s
Unexecuted instantiation: set_key.c:constant_time_eq_s
Unexecuted instantiation: curve448.c:constant_time_eq_s
Unexecuted instantiation: curve448_tables.c:constant_time_eq_s
Unexecuted instantiation: eddsa.c:constant_time_eq_s
Unexecuted instantiation: f_generic.c:constant_time_eq_s
Unexecuted instantiation: scalar.c:constant_time_eq_s
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq_s
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq_s
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_eq_s
Unexecuted instantiation: ml_dsa_key.c:constant_time_eq_s
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_eq_s
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_eq_s
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_eq_s
Unexecuted instantiation: ml_dsa_params.c:constant_time_eq_s
Unexecuted instantiation: ml_dsa_sample.c:constant_time_eq_s
Unexecuted instantiation: ml_dsa_sign.c:constant_time_eq_s
Unexecuted instantiation: ml_kem.c:constant_time_eq_s
Unexecuted instantiation: rsa_oaep.c:constant_time_eq_s
Unexecuted instantiation: f_impl64.c:constant_time_eq_s
249
250
static ossl_inline unsigned char constant_time_eq_8(unsigned int a,
251
                                                    unsigned int b)
252
2.70k
{
253
2.70k
    return (unsigned char)constant_time_eq(a, b);
254
2.70k
}
Unexecuted instantiation: statem_srvr.c:constant_time_eq_8
Unexecuted instantiation: bn_lib.c:constant_time_eq_8
Unexecuted instantiation: err.c:constant_time_eq_8
Unexecuted instantiation: rsa_ossl.c:constant_time_eq_8
Unexecuted instantiation: rsa_pk1.c:constant_time_eq_8
Unexecuted instantiation: rsa_pmeth.c:constant_time_eq_8
Unexecuted instantiation: rsa_enc.c:constant_time_eq_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq_8
Unexecuted instantiation: ssl3_cbc.c:constant_time_eq_8
Unexecuted instantiation: ciphercommon_block.c:constant_time_eq_8
tls_pad.c:constant_time_eq_8
Line
Count
Source
252
2.70k
{
253
2.70k
    return (unsigned char)constant_time_eq(a, b);
254
2.70k
}
Unexecuted instantiation: bn_exp.c:constant_time_eq_8
Unexecuted instantiation: bn_gcd.c:constant_time_eq_8
Unexecuted instantiation: rsaz_exp.c:constant_time_eq_8
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq_8
Unexecuted instantiation: set_key.c:constant_time_eq_8
Unexecuted instantiation: curve448.c:constant_time_eq_8
Unexecuted instantiation: curve448_tables.c:constant_time_eq_8
Unexecuted instantiation: eddsa.c:constant_time_eq_8
Unexecuted instantiation: f_generic.c:constant_time_eq_8
Unexecuted instantiation: scalar.c:constant_time_eq_8
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq_8
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq_8
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_eq_8
Unexecuted instantiation: ml_dsa_key.c:constant_time_eq_8
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_eq_8
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_eq_8
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_eq_8
Unexecuted instantiation: ml_dsa_params.c:constant_time_eq_8
Unexecuted instantiation: ml_dsa_sample.c:constant_time_eq_8
Unexecuted instantiation: ml_dsa_sign.c:constant_time_eq_8
Unexecuted instantiation: ml_kem.c:constant_time_eq_8
Unexecuted instantiation: rsa_oaep.c:constant_time_eq_8
Unexecuted instantiation: f_impl64.c:constant_time_eq_8
255
256
static ossl_inline unsigned char constant_time_eq_8_s(size_t a, size_t b)
257
1.42k
{
258
1.42k
    return (unsigned char)constant_time_eq_s(a, b);
259
1.42k
}
Unexecuted instantiation: statem_srvr.c:constant_time_eq_8_s
Unexecuted instantiation: bn_lib.c:constant_time_eq_8_s
Unexecuted instantiation: err.c:constant_time_eq_8_s
Unexecuted instantiation: rsa_ossl.c:constant_time_eq_8_s
Unexecuted instantiation: rsa_pk1.c:constant_time_eq_8_s
Unexecuted instantiation: rsa_pmeth.c:constant_time_eq_8_s
Unexecuted instantiation: rsa_enc.c:constant_time_eq_8_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq_8_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq_8_s
ssl3_cbc.c:constant_time_eq_8_s
Line
Count
Source
257
1.42k
{
258
1.42k
    return (unsigned char)constant_time_eq_s(a, b);
259
1.42k
}
Unexecuted instantiation: ciphercommon_block.c:constant_time_eq_8_s
Unexecuted instantiation: tls_pad.c:constant_time_eq_8_s
Unexecuted instantiation: bn_exp.c:constant_time_eq_8_s
Unexecuted instantiation: bn_gcd.c:constant_time_eq_8_s
Unexecuted instantiation: rsaz_exp.c:constant_time_eq_8_s
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq_8_s
Unexecuted instantiation: set_key.c:constant_time_eq_8_s
Unexecuted instantiation: curve448.c:constant_time_eq_8_s
Unexecuted instantiation: curve448_tables.c:constant_time_eq_8_s
Unexecuted instantiation: eddsa.c:constant_time_eq_8_s
Unexecuted instantiation: f_generic.c:constant_time_eq_8_s
Unexecuted instantiation: scalar.c:constant_time_eq_8_s
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq_8_s
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq_8_s
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_eq_8_s
Unexecuted instantiation: ml_dsa_key.c:constant_time_eq_8_s
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_eq_8_s
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_eq_8_s
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_eq_8_s
Unexecuted instantiation: ml_dsa_params.c:constant_time_eq_8_s
Unexecuted instantiation: ml_dsa_sample.c:constant_time_eq_8_s
Unexecuted instantiation: ml_dsa_sign.c:constant_time_eq_8_s
Unexecuted instantiation: ml_kem.c:constant_time_eq_8_s
Unexecuted instantiation: rsa_oaep.c:constant_time_eq_8_s
Unexecuted instantiation: f_impl64.c:constant_time_eq_8_s
260
261
static ossl_inline unsigned int constant_time_eq_int(int a, int b)
262
15.0M
{
263
15.0M
    return constant_time_eq((unsigned)(a), (unsigned)(b));
264
15.0M
}
Unexecuted instantiation: statem_srvr.c:constant_time_eq_int
bn_lib.c:constant_time_eq_int
Line
Count
Source
262
3.13M
{
263
3.13M
    return constant_time_eq((unsigned)(a), (unsigned)(b));
264
3.13M
}
err.c:constant_time_eq_int
Line
Count
Source
262
1.34k
{
263
1.34k
    return constant_time_eq((unsigned)(a), (unsigned)(b));
264
1.34k
}
Unexecuted instantiation: rsa_ossl.c:constant_time_eq_int
Unexecuted instantiation: rsa_pk1.c:constant_time_eq_int
Unexecuted instantiation: rsa_pmeth.c:constant_time_eq_int
Unexecuted instantiation: rsa_enc.c:constant_time_eq_int
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq_int
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq_int
Unexecuted instantiation: ssl3_cbc.c:constant_time_eq_int
Unexecuted instantiation: ciphercommon_block.c:constant_time_eq_int
Unexecuted instantiation: tls_pad.c:constant_time_eq_int
bn_exp.c:constant_time_eq_int
Line
Count
Source
262
11.8M
{
263
11.8M
    return constant_time_eq((unsigned)(a), (unsigned)(b));
264
11.8M
}
Unexecuted instantiation: bn_gcd.c:constant_time_eq_int
Unexecuted instantiation: rsaz_exp.c:constant_time_eq_int
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq_int
Unexecuted instantiation: set_key.c:constant_time_eq_int
Unexecuted instantiation: curve448.c:constant_time_eq_int
Unexecuted instantiation: curve448_tables.c:constant_time_eq_int
Unexecuted instantiation: eddsa.c:constant_time_eq_int
Unexecuted instantiation: f_generic.c:constant_time_eq_int
Unexecuted instantiation: scalar.c:constant_time_eq_int
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq_int
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq_int
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_eq_int
Unexecuted instantiation: ml_dsa_key.c:constant_time_eq_int
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_eq_int
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_eq_int
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_eq_int
Unexecuted instantiation: ml_dsa_params.c:constant_time_eq_int
Unexecuted instantiation: ml_dsa_sample.c:constant_time_eq_int
Unexecuted instantiation: ml_dsa_sign.c:constant_time_eq_int
Unexecuted instantiation: ml_kem.c:constant_time_eq_int
Unexecuted instantiation: rsa_oaep.c:constant_time_eq_int
Unexecuted instantiation: f_impl64.c:constant_time_eq_int
265
266
static ossl_inline unsigned char constant_time_eq_int_8(int a, int b)
267
0
{
268
0
    return constant_time_eq_8((unsigned)(a), (unsigned)(b));
269
0
}
Unexecuted instantiation: statem_srvr.c:constant_time_eq_int_8
Unexecuted instantiation: bn_lib.c:constant_time_eq_int_8
Unexecuted instantiation: err.c:constant_time_eq_int_8
Unexecuted instantiation: rsa_ossl.c:constant_time_eq_int_8
Unexecuted instantiation: rsa_pk1.c:constant_time_eq_int_8
Unexecuted instantiation: rsa_pmeth.c:constant_time_eq_int_8
Unexecuted instantiation: rsa_enc.c:constant_time_eq_int_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_eq_int_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_eq_int_8
Unexecuted instantiation: ssl3_cbc.c:constant_time_eq_int_8
Unexecuted instantiation: ciphercommon_block.c:constant_time_eq_int_8
Unexecuted instantiation: tls_pad.c:constant_time_eq_int_8
Unexecuted instantiation: bn_exp.c:constant_time_eq_int_8
Unexecuted instantiation: bn_gcd.c:constant_time_eq_int_8
Unexecuted instantiation: rsaz_exp.c:constant_time_eq_int_8
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_eq_int_8
Unexecuted instantiation: set_key.c:constant_time_eq_int_8
Unexecuted instantiation: curve448.c:constant_time_eq_int_8
Unexecuted instantiation: curve448_tables.c:constant_time_eq_int_8
Unexecuted instantiation: eddsa.c:constant_time_eq_int_8
Unexecuted instantiation: f_generic.c:constant_time_eq_int_8
Unexecuted instantiation: scalar.c:constant_time_eq_int_8
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_eq_int_8
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_eq_int_8
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_eq_int_8
Unexecuted instantiation: ml_dsa_key.c:constant_time_eq_int_8
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_eq_int_8
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_eq_int_8
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_eq_int_8
Unexecuted instantiation: ml_dsa_params.c:constant_time_eq_int_8
Unexecuted instantiation: ml_dsa_sample.c:constant_time_eq_int_8
Unexecuted instantiation: ml_dsa_sign.c:constant_time_eq_int_8
Unexecuted instantiation: ml_kem.c:constant_time_eq_int_8
Unexecuted instantiation: rsa_oaep.c:constant_time_eq_int_8
Unexecuted instantiation: f_impl64.c:constant_time_eq_int_8
270
271
/*
272
 * Returns the value unmodified, but avoids optimizations.
273
 * The barriers prevent the compiler from narrowing down the
274
 * possible value range of the mask and ~mask in the select
275
 * statements, which avoids the recognition of the select
276
 * and turning it into a conditional load or branch.
277
 */
278
static ossl_inline unsigned int value_barrier(unsigned int a)
279
8.00M
{
280
8.00M
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
281
8.00M
    unsigned int r;
282
8.00M
    __asm__("" : "=r"(r) : "0"(a));
283
#else
284
    volatile unsigned int r = a;
285
#endif
286
8.00M
    return r;
287
8.00M
}
Unexecuted instantiation: statem_srvr.c:value_barrier
bn_lib.c:value_barrier
Line
Count
Source
279
563k
{
280
563k
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
281
563k
    unsigned int r;
282
563k
    __asm__("" : "=r"(r) : "0"(a));
283
#else
284
    volatile unsigned int r = a;
285
#endif
286
563k
    return r;
287
563k
}
err.c:value_barrier
Line
Count
Source
279
2.68k
{
280
2.68k
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
281
2.68k
    unsigned int r;
282
2.68k
    __asm__("" : "=r"(r) : "0"(a));
283
#else
284
    volatile unsigned int r = a;
285
#endif
286
2.68k
    return r;
287
2.68k
}
Unexecuted instantiation: rsa_ossl.c:value_barrier
rsa_pk1.c:value_barrier
Line
Count
Source
279
129k
{
280
129k
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
281
129k
    unsigned int r;
282
129k
    __asm__("" : "=r"(r) : "0"(a));
283
#else
284
    volatile unsigned int r = a;
285
#endif
286
129k
    return r;
287
129k
}
Unexecuted instantiation: rsa_pmeth.c:value_barrier
rsa_enc.c:value_barrier
Line
Count
Source
279
2.68k
{
280
2.68k
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
281
2.68k
    unsigned int r;
282
2.68k
    __asm__("" : "=r"(r) : "0"(a));
283
#else
284
    volatile unsigned int r = a;
285
#endif
286
2.68k
    return r;
287
2.68k
}
cipher_aes_cbc_hmac_sha1_hw.c:value_barrier
Line
Count
Source
279
22
{
280
22
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
281
22
    unsigned int r;
282
22
    __asm__("" : "=r"(r) : "0"(a));
283
#else
284
    volatile unsigned int r = a;
285
#endif
286
22
    return r;
287
22
}
cipher_aes_cbc_hmac_sha256_hw.c:value_barrier
Line
Count
Source
279
28
{
280
28
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
281
28
    unsigned int r;
282
28
    __asm__("" : "=r"(r) : "0"(a));
283
#else
284
    volatile unsigned int r = a;
285
#endif
286
28
    return r;
287
28
}
ssl3_cbc.c:value_barrier
Line
Count
Source
279
107k
{
280
107k
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
281
107k
    unsigned int r;
282
107k
    __asm__("" : "=r"(r) : "0"(a));
283
#else
284
    volatile unsigned int r = a;
285
#endif
286
107k
    return r;
287
107k
}
Unexecuted instantiation: ciphercommon_block.c:value_barrier
tls_pad.c:value_barrier
Line
Count
Source
279
10.8k
{
280
10.8k
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
281
10.8k
    unsigned int r;
282
10.8k
    __asm__("" : "=r"(r) : "0"(a));
283
#else
284
    volatile unsigned int r = a;
285
#endif
286
10.8k
    return r;
287
10.8k
}
Unexecuted instantiation: bn_exp.c:value_barrier
Unexecuted instantiation: bn_gcd.c:value_barrier
Unexecuted instantiation: rsaz_exp.c:value_barrier
Unexecuted instantiation: rsaz_exp_x2.c:value_barrier
Unexecuted instantiation: set_key.c:value_barrier
curve448.c:value_barrier
Line
Count
Source
279
7.18M
{
280
7.18M
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
281
7.18M
    unsigned int r;
282
7.18M
    __asm__("" : "=r"(r) : "0"(a));
283
#else
284
    volatile unsigned int r = a;
285
#endif
286
7.18M
    return r;
287
7.18M
}
Unexecuted instantiation: curve448_tables.c:value_barrier
Unexecuted instantiation: eddsa.c:value_barrier
Unexecuted instantiation: f_generic.c:value_barrier
Unexecuted instantiation: scalar.c:value_barrier
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:value_barrier
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:value_barrier
Unexecuted instantiation: ml_dsa_encoders.c:value_barrier
Unexecuted instantiation: ml_dsa_key.c:value_barrier
Unexecuted instantiation: ml_dsa_key_compress.c:value_barrier
Unexecuted instantiation: ml_dsa_matrix.c:value_barrier
Unexecuted instantiation: ml_dsa_ntt.c:value_barrier
Unexecuted instantiation: ml_dsa_params.c:value_barrier
Unexecuted instantiation: ml_dsa_sample.c:value_barrier
Unexecuted instantiation: ml_dsa_sign.c:value_barrier
Unexecuted instantiation: ml_kem.c:value_barrier
Unexecuted instantiation: rsa_oaep.c:value_barrier
Unexecuted instantiation: f_impl64.c:value_barrier
288
289
/* Convenience method for uint32_t. */
290
static ossl_inline uint32_t value_barrier_32(uint32_t a)
291
0
{
292
0
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
293
0
    uint32_t r;
294
0
    __asm__("" : "=r"(r) : "0"(a));
295
#else
296
    volatile uint32_t r = a;
297
#endif
298
0
    return r;
299
0
}
Unexecuted instantiation: statem_srvr.c:value_barrier_32
Unexecuted instantiation: bn_lib.c:value_barrier_32
Unexecuted instantiation: err.c:value_barrier_32
Unexecuted instantiation: rsa_ossl.c:value_barrier_32
Unexecuted instantiation: rsa_pk1.c:value_barrier_32
Unexecuted instantiation: rsa_pmeth.c:value_barrier_32
Unexecuted instantiation: rsa_enc.c:value_barrier_32
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:value_barrier_32
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:value_barrier_32
Unexecuted instantiation: ssl3_cbc.c:value_barrier_32
Unexecuted instantiation: ciphercommon_block.c:value_barrier_32
Unexecuted instantiation: tls_pad.c:value_barrier_32
Unexecuted instantiation: bn_exp.c:value_barrier_32
Unexecuted instantiation: bn_gcd.c:value_barrier_32
Unexecuted instantiation: rsaz_exp.c:value_barrier_32
Unexecuted instantiation: rsaz_exp_x2.c:value_barrier_32
Unexecuted instantiation: set_key.c:value_barrier_32
Unexecuted instantiation: curve448.c:value_barrier_32
Unexecuted instantiation: curve448_tables.c:value_barrier_32
Unexecuted instantiation: eddsa.c:value_barrier_32
Unexecuted instantiation: f_generic.c:value_barrier_32
Unexecuted instantiation: scalar.c:value_barrier_32
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:value_barrier_32
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:value_barrier_32
Unexecuted instantiation: ml_dsa_encoders.c:value_barrier_32
Unexecuted instantiation: ml_dsa_key.c:value_barrier_32
Unexecuted instantiation: ml_dsa_key_compress.c:value_barrier_32
Unexecuted instantiation: ml_dsa_matrix.c:value_barrier_32
Unexecuted instantiation: ml_dsa_ntt.c:value_barrier_32
Unexecuted instantiation: ml_dsa_params.c:value_barrier_32
Unexecuted instantiation: ml_dsa_sample.c:value_barrier_32
Unexecuted instantiation: ml_dsa_sign.c:value_barrier_32
Unexecuted instantiation: ml_kem.c:value_barrier_32
Unexecuted instantiation: rsa_oaep.c:value_barrier_32
Unexecuted instantiation: f_impl64.c:value_barrier_32
300
301
/* Convenience method for uint64_t. */
302
static ossl_inline uint64_t value_barrier_64(uint64_t a)
303
64.0k
{
304
64.0k
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
305
64.0k
    uint64_t r;
306
64.0k
    __asm__("" : "=r"(r) : "0"(a));
307
#else
308
    volatile uint64_t r = a;
309
#endif
310
64.0k
    return r;
311
64.0k
}
Unexecuted instantiation: statem_srvr.c:value_barrier_64
Unexecuted instantiation: bn_lib.c:value_barrier_64
Unexecuted instantiation: err.c:value_barrier_64
Unexecuted instantiation: rsa_ossl.c:value_barrier_64
Unexecuted instantiation: rsa_pk1.c:value_barrier_64
Unexecuted instantiation: rsa_pmeth.c:value_barrier_64
Unexecuted instantiation: rsa_enc.c:value_barrier_64
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:value_barrier_64
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:value_barrier_64
Unexecuted instantiation: ssl3_cbc.c:value_barrier_64
Unexecuted instantiation: ciphercommon_block.c:value_barrier_64
Unexecuted instantiation: tls_pad.c:value_barrier_64
Unexecuted instantiation: bn_exp.c:value_barrier_64
Unexecuted instantiation: bn_gcd.c:value_barrier_64
Unexecuted instantiation: rsaz_exp.c:value_barrier_64
Unexecuted instantiation: rsaz_exp_x2.c:value_barrier_64
Unexecuted instantiation: set_key.c:value_barrier_64
curve448.c:value_barrier_64
Line
Count
Source
303
64.0k
{
304
64.0k
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
305
64.0k
    uint64_t r;
306
64.0k
    __asm__("" : "=r"(r) : "0"(a));
307
#else
308
    volatile uint64_t r = a;
309
#endif
310
64.0k
    return r;
311
64.0k
}
Unexecuted instantiation: curve448_tables.c:value_barrier_64
Unexecuted instantiation: eddsa.c:value_barrier_64
Unexecuted instantiation: f_generic.c:value_barrier_64
Unexecuted instantiation: scalar.c:value_barrier_64
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:value_barrier_64
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:value_barrier_64
Unexecuted instantiation: ml_dsa_encoders.c:value_barrier_64
Unexecuted instantiation: ml_dsa_key.c:value_barrier_64
Unexecuted instantiation: ml_dsa_key_compress.c:value_barrier_64
Unexecuted instantiation: ml_dsa_matrix.c:value_barrier_64
Unexecuted instantiation: ml_dsa_ntt.c:value_barrier_64
Unexecuted instantiation: ml_dsa_params.c:value_barrier_64
Unexecuted instantiation: ml_dsa_sample.c:value_barrier_64
Unexecuted instantiation: ml_dsa_sign.c:value_barrier_64
Unexecuted instantiation: ml_kem.c:value_barrier_64
Unexecuted instantiation: rsa_oaep.c:value_barrier_64
Unexecuted instantiation: f_impl64.c:value_barrier_64
312
313
/* Convenience method for size_t. */
314
static ossl_inline size_t value_barrier_s(size_t a)
315
2.68k
{
316
2.68k
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
317
2.68k
    size_t r;
318
2.68k
    __asm__("" : "=r"(r) : "0"(a));
319
#else
320
    volatile size_t r = a;
321
#endif
322
2.68k
    return r;
323
2.68k
}
Unexecuted instantiation: statem_srvr.c:value_barrier_s
Unexecuted instantiation: bn_lib.c:value_barrier_s
Unexecuted instantiation: err.c:value_barrier_s
Unexecuted instantiation: rsa_ossl.c:value_barrier_s
Unexecuted instantiation: rsa_pk1.c:value_barrier_s
Unexecuted instantiation: rsa_pmeth.c:value_barrier_s
rsa_enc.c:value_barrier_s
Line
Count
Source
315
2.68k
{
316
2.68k
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
317
2.68k
    size_t r;
318
2.68k
    __asm__("" : "=r"(r) : "0"(a));
319
#else
320
    volatile size_t r = a;
321
#endif
322
2.68k
    return r;
323
2.68k
}
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:value_barrier_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:value_barrier_s
Unexecuted instantiation: ssl3_cbc.c:value_barrier_s
Unexecuted instantiation: ciphercommon_block.c:value_barrier_s
Unexecuted instantiation: tls_pad.c:value_barrier_s
Unexecuted instantiation: bn_exp.c:value_barrier_s
Unexecuted instantiation: bn_gcd.c:value_barrier_s
Unexecuted instantiation: rsaz_exp.c:value_barrier_s
Unexecuted instantiation: rsaz_exp_x2.c:value_barrier_s
Unexecuted instantiation: set_key.c:value_barrier_s
Unexecuted instantiation: curve448.c:value_barrier_s
Unexecuted instantiation: curve448_tables.c:value_barrier_s
Unexecuted instantiation: eddsa.c:value_barrier_s
Unexecuted instantiation: f_generic.c:value_barrier_s
Unexecuted instantiation: scalar.c:value_barrier_s
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:value_barrier_s
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:value_barrier_s
Unexecuted instantiation: ml_dsa_encoders.c:value_barrier_s
Unexecuted instantiation: ml_dsa_key.c:value_barrier_s
Unexecuted instantiation: ml_dsa_key_compress.c:value_barrier_s
Unexecuted instantiation: ml_dsa_matrix.c:value_barrier_s
Unexecuted instantiation: ml_dsa_ntt.c:value_barrier_s
Unexecuted instantiation: ml_dsa_params.c:value_barrier_s
Unexecuted instantiation: ml_dsa_sample.c:value_barrier_s
Unexecuted instantiation: ml_dsa_sign.c:value_barrier_s
Unexecuted instantiation: ml_kem.c:value_barrier_s
Unexecuted instantiation: rsa_oaep.c:value_barrier_s
Unexecuted instantiation: f_impl64.c:value_barrier_s
324
325
/* Convenience method for unsigned char. */
326
static ossl_inline unsigned char value_barrier_8(unsigned char a)
327
0
{
328
0
#if !defined(OPENSSL_NO_ASM) && defined(__GNUC__)
329
0
    unsigned char r;
330
0
    __asm__("" : "=r"(r) : "0"(a));
331
0
#else
332
0
    volatile unsigned char r = a;
333
0
#endif
334
0
    return r;
335
0
}
Unexecuted instantiation: statem_srvr.c:value_barrier_8
Unexecuted instantiation: bn_lib.c:value_barrier_8
Unexecuted instantiation: err.c:value_barrier_8
Unexecuted instantiation: rsa_ossl.c:value_barrier_8
Unexecuted instantiation: rsa_pk1.c:value_barrier_8
Unexecuted instantiation: rsa_pmeth.c:value_barrier_8
Unexecuted instantiation: rsa_enc.c:value_barrier_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:value_barrier_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:value_barrier_8
Unexecuted instantiation: ssl3_cbc.c:value_barrier_8
Unexecuted instantiation: ciphercommon_block.c:value_barrier_8
Unexecuted instantiation: tls_pad.c:value_barrier_8
Unexecuted instantiation: bn_exp.c:value_barrier_8
Unexecuted instantiation: bn_gcd.c:value_barrier_8
Unexecuted instantiation: rsaz_exp.c:value_barrier_8
Unexecuted instantiation: rsaz_exp_x2.c:value_barrier_8
Unexecuted instantiation: set_key.c:value_barrier_8
Unexecuted instantiation: curve448.c:value_barrier_8
Unexecuted instantiation: curve448_tables.c:value_barrier_8
Unexecuted instantiation: eddsa.c:value_barrier_8
Unexecuted instantiation: f_generic.c:value_barrier_8
Unexecuted instantiation: scalar.c:value_barrier_8
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:value_barrier_8
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:value_barrier_8
Unexecuted instantiation: ml_dsa_encoders.c:value_barrier_8
Unexecuted instantiation: ml_dsa_key.c:value_barrier_8
Unexecuted instantiation: ml_dsa_key_compress.c:value_barrier_8
Unexecuted instantiation: ml_dsa_matrix.c:value_barrier_8
Unexecuted instantiation: ml_dsa_ntt.c:value_barrier_8
Unexecuted instantiation: ml_dsa_params.c:value_barrier_8
Unexecuted instantiation: ml_dsa_sample.c:value_barrier_8
Unexecuted instantiation: ml_dsa_sign.c:value_barrier_8
Unexecuted instantiation: ml_kem.c:value_barrier_8
Unexecuted instantiation: rsa_oaep.c:value_barrier_8
Unexecuted instantiation: f_impl64.c:value_barrier_8
336
337
static ossl_inline unsigned int constant_time_select(unsigned int mask,
338
                                                     unsigned int a,
339
                                                     unsigned int b)
340
4.00M
{
341
4.00M
    return (value_barrier(mask) & a) | (value_barrier(~mask) & b);
342
4.00M
}
Unexecuted instantiation: statem_srvr.c:constant_time_select
bn_lib.c:constant_time_select
Line
Count
Source
340
281k
{
341
281k
    return (value_barrier(mask) & a) | (value_barrier(~mask) & b);
342
281k
}
err.c:constant_time_select
Line
Count
Source
340
1.34k
{
341
1.34k
    return (value_barrier(mask) & a) | (value_barrier(~mask) & b);
342
1.34k
}
Unexecuted instantiation: rsa_ossl.c:constant_time_select
rsa_pk1.c:constant_time_select
Line
Count
Source
340
64.5k
{
341
64.5k
    return (value_barrier(mask) & a) | (value_barrier(~mask) & b);
342
64.5k
}
Unexecuted instantiation: rsa_pmeth.c:constant_time_select
rsa_enc.c:constant_time_select
Line
Count
Source
340
1.34k
{
341
1.34k
    return (value_barrier(mask) & a) | (value_barrier(~mask) & b);
342
1.34k
}
cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select
Line
Count
Source
340
11
{
341
11
    return (value_barrier(mask) & a) | (value_barrier(~mask) & b);
342
11
}
cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select
Line
Count
Source
340
14
{
341
14
    return (value_barrier(mask) & a) | (value_barrier(~mask) & b);
342
14
}
ssl3_cbc.c:constant_time_select
Line
Count
Source
340
53.7k
{
341
53.7k
    return (value_barrier(mask) & a) | (value_barrier(~mask) & b);
342
53.7k
}
Unexecuted instantiation: ciphercommon_block.c:constant_time_select
tls_pad.c:constant_time_select
Line
Count
Source
340
5.40k
{
341
5.40k
    return (value_barrier(mask) & a) | (value_barrier(~mask) & b);
342
5.40k
}
Unexecuted instantiation: bn_exp.c:constant_time_select
Unexecuted instantiation: bn_gcd.c:constant_time_select
Unexecuted instantiation: rsaz_exp.c:constant_time_select
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select
Unexecuted instantiation: set_key.c:constant_time_select
curve448.c:constant_time_select
Line
Count
Source
340
3.59M
{
341
3.59M
    return (value_barrier(mask) & a) | (value_barrier(~mask) & b);
342
3.59M
}
Unexecuted instantiation: curve448_tables.c:constant_time_select
Unexecuted instantiation: eddsa.c:constant_time_select
Unexecuted instantiation: f_generic.c:constant_time_select
Unexecuted instantiation: scalar.c:constant_time_select
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_select
Unexecuted instantiation: ml_dsa_key.c:constant_time_select
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_select
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_select
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_select
Unexecuted instantiation: ml_dsa_params.c:constant_time_select
Unexecuted instantiation: ml_dsa_sample.c:constant_time_select
Unexecuted instantiation: ml_dsa_sign.c:constant_time_select
Unexecuted instantiation: ml_kem.c:constant_time_select
Unexecuted instantiation: rsa_oaep.c:constant_time_select
Unexecuted instantiation: f_impl64.c:constant_time_select
343
344
static ossl_inline size_t constant_time_select_s(size_t mask,
345
                                                 size_t a,
346
                                                 size_t b)
347
1.34k
{
348
1.34k
    return (value_barrier_s(mask) & a) | (value_barrier_s(~mask) & b);
349
1.34k
}
Unexecuted instantiation: statem_srvr.c:constant_time_select_s
Unexecuted instantiation: bn_lib.c:constant_time_select_s
Unexecuted instantiation: err.c:constant_time_select_s
Unexecuted instantiation: rsa_ossl.c:constant_time_select_s
Unexecuted instantiation: rsa_pk1.c:constant_time_select_s
Unexecuted instantiation: rsa_pmeth.c:constant_time_select_s
rsa_enc.c:constant_time_select_s
Line
Count
Source
347
1.34k
{
348
1.34k
    return (value_barrier_s(mask) & a) | (value_barrier_s(~mask) & b);
349
1.34k
}
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_s
Unexecuted instantiation: ssl3_cbc.c:constant_time_select_s
Unexecuted instantiation: ciphercommon_block.c:constant_time_select_s
Unexecuted instantiation: tls_pad.c:constant_time_select_s
Unexecuted instantiation: bn_exp.c:constant_time_select_s
Unexecuted instantiation: bn_gcd.c:constant_time_select_s
Unexecuted instantiation: rsaz_exp.c:constant_time_select_s
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_s
Unexecuted instantiation: set_key.c:constant_time_select_s
Unexecuted instantiation: curve448.c:constant_time_select_s
Unexecuted instantiation: curve448_tables.c:constant_time_select_s
Unexecuted instantiation: eddsa.c:constant_time_select_s
Unexecuted instantiation: f_generic.c:constant_time_select_s
Unexecuted instantiation: scalar.c:constant_time_select_s
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_s
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_s
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_select_s
Unexecuted instantiation: ml_dsa_key.c:constant_time_select_s
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_select_s
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_select_s
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_select_s
Unexecuted instantiation: ml_dsa_params.c:constant_time_select_s
Unexecuted instantiation: ml_dsa_sample.c:constant_time_select_s
Unexecuted instantiation: ml_dsa_sign.c:constant_time_select_s
Unexecuted instantiation: ml_kem.c:constant_time_select_s
Unexecuted instantiation: rsa_oaep.c:constant_time_select_s
Unexecuted instantiation: f_impl64.c:constant_time_select_s
350
351
static ossl_inline unsigned char constant_time_select_8(unsigned char mask,
352
                                                        unsigned char a,
353
                                                        unsigned char b)
354
3.71M
{
355
3.71M
    return (unsigned char)constant_time_select(mask, a, b);
356
3.71M
}
Unexecuted instantiation: statem_srvr.c:constant_time_select_8
Unexecuted instantiation: bn_lib.c:constant_time_select_8
Unexecuted instantiation: err.c:constant_time_select_8
Unexecuted instantiation: rsa_ossl.c:constant_time_select_8
rsa_pk1.c:constant_time_select_8
Line
Count
Source
354
64.5k
{
355
64.5k
    return (unsigned char)constant_time_select(mask, a, b);
356
64.5k
}
Unexecuted instantiation: rsa_pmeth.c:constant_time_select_8
Unexecuted instantiation: rsa_enc.c:constant_time_select_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_8
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_8
ssl3_cbc.c:constant_time_select_8
Line
Count
Source
354
53.7k
{
355
53.7k
    return (unsigned char)constant_time_select(mask, a, b);
356
53.7k
}
Unexecuted instantiation: ciphercommon_block.c:constant_time_select_8
tls_pad.c:constant_time_select_8
Line
Count
Source
354
5.40k
{
355
5.40k
    return (unsigned char)constant_time_select(mask, a, b);
356
5.40k
}
Unexecuted instantiation: bn_exp.c:constant_time_select_8
Unexecuted instantiation: bn_gcd.c:constant_time_select_8
Unexecuted instantiation: rsaz_exp.c:constant_time_select_8
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_8
Unexecuted instantiation: set_key.c:constant_time_select_8
curve448.c:constant_time_select_8
Line
Count
Source
354
3.59M
{
355
3.59M
    return (unsigned char)constant_time_select(mask, a, b);
356
3.59M
}
Unexecuted instantiation: curve448_tables.c:constant_time_select_8
Unexecuted instantiation: eddsa.c:constant_time_select_8
Unexecuted instantiation: f_generic.c:constant_time_select_8
Unexecuted instantiation: scalar.c:constant_time_select_8
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_8
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_8
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_select_8
Unexecuted instantiation: ml_dsa_key.c:constant_time_select_8
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_select_8
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_select_8
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_select_8
Unexecuted instantiation: ml_dsa_params.c:constant_time_select_8
Unexecuted instantiation: ml_dsa_sample.c:constant_time_select_8
Unexecuted instantiation: ml_dsa_sign.c:constant_time_select_8
Unexecuted instantiation: ml_kem.c:constant_time_select_8
Unexecuted instantiation: rsa_oaep.c:constant_time_select_8
Unexecuted instantiation: f_impl64.c:constant_time_select_8
357
358
static ossl_inline int constant_time_select_int(unsigned int mask, int a,
359
                                                int b)
360
284k
{
361
284k
    return (int)constant_time_select(mask, (unsigned)(a), (unsigned)(b));
362
284k
}
Unexecuted instantiation: statem_srvr.c:constant_time_select_int
bn_lib.c:constant_time_select_int
Line
Count
Source
360
281k
{
361
281k
    return (int)constant_time_select(mask, (unsigned)(a), (unsigned)(b));
362
281k
}
err.c:constant_time_select_int
Line
Count
Source
360
1.34k
{
361
1.34k
    return (int)constant_time_select(mask, (unsigned)(a), (unsigned)(b));
362
1.34k
}
Unexecuted instantiation: rsa_ossl.c:constant_time_select_int
Unexecuted instantiation: rsa_pk1.c:constant_time_select_int
Unexecuted instantiation: rsa_pmeth.c:constant_time_select_int
rsa_enc.c:constant_time_select_int
Line
Count
Source
360
1.34k
{
361
1.34k
    return (int)constant_time_select(mask, (unsigned)(a), (unsigned)(b));
362
1.34k
}
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_int
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_int
Unexecuted instantiation: ssl3_cbc.c:constant_time_select_int
Unexecuted instantiation: ciphercommon_block.c:constant_time_select_int
Unexecuted instantiation: tls_pad.c:constant_time_select_int
Unexecuted instantiation: bn_exp.c:constant_time_select_int
Unexecuted instantiation: bn_gcd.c:constant_time_select_int
Unexecuted instantiation: rsaz_exp.c:constant_time_select_int
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_int
Unexecuted instantiation: set_key.c:constant_time_select_int
Unexecuted instantiation: curve448.c:constant_time_select_int
Unexecuted instantiation: curve448_tables.c:constant_time_select_int
Unexecuted instantiation: eddsa.c:constant_time_select_int
Unexecuted instantiation: f_generic.c:constant_time_select_int
Unexecuted instantiation: scalar.c:constant_time_select_int
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_int
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_int
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_select_int
Unexecuted instantiation: ml_dsa_key.c:constant_time_select_int
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_select_int
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_select_int
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_select_int
Unexecuted instantiation: ml_dsa_params.c:constant_time_select_int
Unexecuted instantiation: ml_dsa_sample.c:constant_time_select_int
Unexecuted instantiation: ml_dsa_sign.c:constant_time_select_int
Unexecuted instantiation: ml_kem.c:constant_time_select_int
Unexecuted instantiation: rsa_oaep.c:constant_time_select_int
Unexecuted instantiation: f_impl64.c:constant_time_select_int
363
364
static ossl_inline int constant_time_select_int_s(size_t mask, int a, int b)
365
0
{
366
0
    return (int)constant_time_select((unsigned)mask, (unsigned)(a),
367
0
                                      (unsigned)(b));
368
0
}
Unexecuted instantiation: statem_srvr.c:constant_time_select_int_s
Unexecuted instantiation: bn_lib.c:constant_time_select_int_s
Unexecuted instantiation: err.c:constant_time_select_int_s
Unexecuted instantiation: rsa_ossl.c:constant_time_select_int_s
Unexecuted instantiation: rsa_pk1.c:constant_time_select_int_s
Unexecuted instantiation: rsa_pmeth.c:constant_time_select_int_s
Unexecuted instantiation: rsa_enc.c:constant_time_select_int_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_int_s
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_int_s
Unexecuted instantiation: ssl3_cbc.c:constant_time_select_int_s
Unexecuted instantiation: ciphercommon_block.c:constant_time_select_int_s
Unexecuted instantiation: tls_pad.c:constant_time_select_int_s
Unexecuted instantiation: bn_exp.c:constant_time_select_int_s
Unexecuted instantiation: bn_gcd.c:constant_time_select_int_s
Unexecuted instantiation: rsaz_exp.c:constant_time_select_int_s
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_int_s
Unexecuted instantiation: set_key.c:constant_time_select_int_s
Unexecuted instantiation: curve448.c:constant_time_select_int_s
Unexecuted instantiation: curve448_tables.c:constant_time_select_int_s
Unexecuted instantiation: eddsa.c:constant_time_select_int_s
Unexecuted instantiation: f_generic.c:constant_time_select_int_s
Unexecuted instantiation: scalar.c:constant_time_select_int_s
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_int_s
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_int_s
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_select_int_s
Unexecuted instantiation: ml_dsa_key.c:constant_time_select_int_s
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_select_int_s
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_select_int_s
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_select_int_s
Unexecuted instantiation: ml_dsa_params.c:constant_time_select_int_s
Unexecuted instantiation: ml_dsa_sample.c:constant_time_select_int_s
Unexecuted instantiation: ml_dsa_sign.c:constant_time_select_int_s
Unexecuted instantiation: ml_kem.c:constant_time_select_int_s
Unexecuted instantiation: rsa_oaep.c:constant_time_select_int_s
Unexecuted instantiation: f_impl64.c:constant_time_select_int_s
369
370
static ossl_inline uint32_t constant_time_select_32(uint32_t mask, uint32_t a,
371
                                                    uint32_t b)
372
0
{
373
0
    return (value_barrier_32(mask) & a) | (value_barrier_32(~mask) & b);
374
0
}
Unexecuted instantiation: statem_srvr.c:constant_time_select_32
Unexecuted instantiation: bn_lib.c:constant_time_select_32
Unexecuted instantiation: err.c:constant_time_select_32
Unexecuted instantiation: rsa_ossl.c:constant_time_select_32
Unexecuted instantiation: rsa_pk1.c:constant_time_select_32
Unexecuted instantiation: rsa_pmeth.c:constant_time_select_32
Unexecuted instantiation: rsa_enc.c:constant_time_select_32
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_32
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_32
Unexecuted instantiation: ssl3_cbc.c:constant_time_select_32
Unexecuted instantiation: ciphercommon_block.c:constant_time_select_32
Unexecuted instantiation: tls_pad.c:constant_time_select_32
Unexecuted instantiation: bn_exp.c:constant_time_select_32
Unexecuted instantiation: bn_gcd.c:constant_time_select_32
Unexecuted instantiation: rsaz_exp.c:constant_time_select_32
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_32
Unexecuted instantiation: set_key.c:constant_time_select_32
Unexecuted instantiation: curve448.c:constant_time_select_32
Unexecuted instantiation: curve448_tables.c:constant_time_select_32
Unexecuted instantiation: eddsa.c:constant_time_select_32
Unexecuted instantiation: f_generic.c:constant_time_select_32
Unexecuted instantiation: scalar.c:constant_time_select_32
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_32
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_32
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_select_32
Unexecuted instantiation: ml_dsa_key.c:constant_time_select_32
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_select_32
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_select_32
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_select_32
Unexecuted instantiation: ml_dsa_params.c:constant_time_select_32
Unexecuted instantiation: ml_dsa_sample.c:constant_time_select_32
Unexecuted instantiation: ml_dsa_sign.c:constant_time_select_32
Unexecuted instantiation: ml_kem.c:constant_time_select_32
Unexecuted instantiation: rsa_oaep.c:constant_time_select_32
Unexecuted instantiation: f_impl64.c:constant_time_select_32
375
376
static ossl_inline uint64_t constant_time_select_64(uint64_t mask, uint64_t a,
377
                                                    uint64_t b)
378
9.36k
{
379
9.36k
    return (value_barrier_64(mask) & a) | (value_barrier_64(~mask) & b);
380
9.36k
}
Unexecuted instantiation: statem_srvr.c:constant_time_select_64
Unexecuted instantiation: bn_lib.c:constant_time_select_64
Unexecuted instantiation: err.c:constant_time_select_64
Unexecuted instantiation: rsa_ossl.c:constant_time_select_64
Unexecuted instantiation: rsa_pk1.c:constant_time_select_64
Unexecuted instantiation: rsa_pmeth.c:constant_time_select_64
Unexecuted instantiation: rsa_enc.c:constant_time_select_64
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_select_64
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_select_64
Unexecuted instantiation: ssl3_cbc.c:constant_time_select_64
Unexecuted instantiation: ciphercommon_block.c:constant_time_select_64
Unexecuted instantiation: tls_pad.c:constant_time_select_64
Unexecuted instantiation: bn_exp.c:constant_time_select_64
Unexecuted instantiation: bn_gcd.c:constant_time_select_64
Unexecuted instantiation: rsaz_exp.c:constant_time_select_64
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_select_64
Unexecuted instantiation: set_key.c:constant_time_select_64
curve448.c:constant_time_select_64
Line
Count
Source
378
9.36k
{
379
9.36k
    return (value_barrier_64(mask) & a) | (value_barrier_64(~mask) & b);
380
9.36k
}
Unexecuted instantiation: curve448_tables.c:constant_time_select_64
Unexecuted instantiation: eddsa.c:constant_time_select_64
Unexecuted instantiation: f_generic.c:constant_time_select_64
Unexecuted instantiation: scalar.c:constant_time_select_64
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_select_64
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_select_64
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_select_64
Unexecuted instantiation: ml_dsa_key.c:constant_time_select_64
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_select_64
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_select_64
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_select_64
Unexecuted instantiation: ml_dsa_params.c:constant_time_select_64
Unexecuted instantiation: ml_dsa_sample.c:constant_time_select_64
Unexecuted instantiation: ml_dsa_sign.c:constant_time_select_64
Unexecuted instantiation: ml_kem.c:constant_time_select_64
Unexecuted instantiation: rsa_oaep.c:constant_time_select_64
Unexecuted instantiation: f_impl64.c:constant_time_select_64
381
382
/*
383
 * mask must be 0xFFFFFFFF or 0x00000000.
384
 *
385
 * if (mask) {
386
 *     uint32_t tmp = *a;
387
 *
388
 *     *a = *b;
389
 *     *b = tmp;
390
 * }
391
 */
392
static ossl_inline void constant_time_cond_swap_32(uint32_t mask, uint32_t *a,
393
                                                   uint32_t *b)
394
0
{
395
0
    uint32_t xor = *a ^ *b;
396
0
397
0
    xor &= value_barrier_32(mask);
398
0
    *a ^= xor;
399
0
    *b ^= xor;
400
0
}
Unexecuted instantiation: statem_srvr.c:constant_time_cond_swap_32
Unexecuted instantiation: bn_lib.c:constant_time_cond_swap_32
Unexecuted instantiation: err.c:constant_time_cond_swap_32
Unexecuted instantiation: rsa_ossl.c:constant_time_cond_swap_32
Unexecuted instantiation: rsa_pk1.c:constant_time_cond_swap_32
Unexecuted instantiation: rsa_pmeth.c:constant_time_cond_swap_32
Unexecuted instantiation: rsa_enc.c:constant_time_cond_swap_32
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_cond_swap_32
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_cond_swap_32
Unexecuted instantiation: ssl3_cbc.c:constant_time_cond_swap_32
Unexecuted instantiation: ciphercommon_block.c:constant_time_cond_swap_32
Unexecuted instantiation: tls_pad.c:constant_time_cond_swap_32
Unexecuted instantiation: bn_exp.c:constant_time_cond_swap_32
Unexecuted instantiation: bn_gcd.c:constant_time_cond_swap_32
Unexecuted instantiation: rsaz_exp.c:constant_time_cond_swap_32
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_cond_swap_32
Unexecuted instantiation: set_key.c:constant_time_cond_swap_32
Unexecuted instantiation: curve448.c:constant_time_cond_swap_32
Unexecuted instantiation: curve448_tables.c:constant_time_cond_swap_32
Unexecuted instantiation: eddsa.c:constant_time_cond_swap_32
Unexecuted instantiation: f_generic.c:constant_time_cond_swap_32
Unexecuted instantiation: scalar.c:constant_time_cond_swap_32
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_cond_swap_32
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_cond_swap_32
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_cond_swap_32
Unexecuted instantiation: ml_dsa_key.c:constant_time_cond_swap_32
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_cond_swap_32
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_cond_swap_32
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_cond_swap_32
Unexecuted instantiation: ml_dsa_params.c:constant_time_cond_swap_32
Unexecuted instantiation: ml_dsa_sample.c:constant_time_cond_swap_32
Unexecuted instantiation: ml_dsa_sign.c:constant_time_cond_swap_32
Unexecuted instantiation: ml_kem.c:constant_time_cond_swap_32
Unexecuted instantiation: rsa_oaep.c:constant_time_cond_swap_32
Unexecuted instantiation: f_impl64.c:constant_time_cond_swap_32
401
402
/*
403
 * mask must be 0xFFFFFFFF or 0x00000000.
404
 *
405
 * if (mask) {
406
 *     uint64_t tmp = *a;
407
 *
408
 *     *a = *b;
409
 *     *b = tmp;
410
 * }
411
 */
412
static ossl_inline void constant_time_cond_swap_64(uint64_t mask, uint64_t *a,
413
                                                   uint64_t *b)
414
45.2k
{
415
45.2k
    uint64_t xor = *a ^ *b;
416
417
45.2k
    xor &= value_barrier_64(mask);
418
45.2k
    *a ^= xor;
419
45.2k
    *b ^= xor;
420
45.2k
}
Unexecuted instantiation: statem_srvr.c:constant_time_cond_swap_64
Unexecuted instantiation: bn_lib.c:constant_time_cond_swap_64
Unexecuted instantiation: err.c:constant_time_cond_swap_64
Unexecuted instantiation: rsa_ossl.c:constant_time_cond_swap_64
Unexecuted instantiation: rsa_pk1.c:constant_time_cond_swap_64
Unexecuted instantiation: rsa_pmeth.c:constant_time_cond_swap_64
Unexecuted instantiation: rsa_enc.c:constant_time_cond_swap_64
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_cond_swap_64
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_cond_swap_64
Unexecuted instantiation: ssl3_cbc.c:constant_time_cond_swap_64
Unexecuted instantiation: ciphercommon_block.c:constant_time_cond_swap_64
Unexecuted instantiation: tls_pad.c:constant_time_cond_swap_64
Unexecuted instantiation: bn_exp.c:constant_time_cond_swap_64
Unexecuted instantiation: bn_gcd.c:constant_time_cond_swap_64
Unexecuted instantiation: rsaz_exp.c:constant_time_cond_swap_64
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_cond_swap_64
Unexecuted instantiation: set_key.c:constant_time_cond_swap_64
curve448.c:constant_time_cond_swap_64
Line
Count
Source
414
45.2k
{
415
45.2k
    uint64_t xor = *a ^ *b;
416
417
45.2k
    xor &= value_barrier_64(mask);
418
45.2k
    *a ^= xor;
419
45.2k
    *b ^= xor;
420
45.2k
}
Unexecuted instantiation: curve448_tables.c:constant_time_cond_swap_64
Unexecuted instantiation: eddsa.c:constant_time_cond_swap_64
Unexecuted instantiation: f_generic.c:constant_time_cond_swap_64
Unexecuted instantiation: scalar.c:constant_time_cond_swap_64
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_cond_swap_64
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_cond_swap_64
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_cond_swap_64
Unexecuted instantiation: ml_dsa_key.c:constant_time_cond_swap_64
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_cond_swap_64
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_cond_swap_64
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_cond_swap_64
Unexecuted instantiation: ml_dsa_params.c:constant_time_cond_swap_64
Unexecuted instantiation: ml_dsa_sample.c:constant_time_cond_swap_64
Unexecuted instantiation: ml_dsa_sign.c:constant_time_cond_swap_64
Unexecuted instantiation: ml_kem.c:constant_time_cond_swap_64
Unexecuted instantiation: rsa_oaep.c:constant_time_cond_swap_64
Unexecuted instantiation: f_impl64.c:constant_time_cond_swap_64
421
422
/*
423
 * mask must be 0xFF or 0x00.
424
 * "constant time" is per len.
425
 *
426
 * if (mask) {
427
 *     unsigned char tmp[len];
428
 *
429
 *     memcpy(tmp, a, len);
430
 *     memcpy(a, b);
431
 *     memcpy(b, tmp);
432
 * }
433
 */
434
static ossl_inline void constant_time_cond_swap_buff(unsigned char mask,
435
                                                     unsigned char *a,
436
                                                     unsigned char *b,
437
                                                     size_t len)
438
0
{
439
0
    size_t i;
440
0
    unsigned char tmp;
441
0
442
0
    for (i = 0; i < len; i++) {
443
0
        tmp = a[i] ^ b[i];
444
0
        tmp &= value_barrier_8(mask);
445
0
        a[i] ^= tmp;
446
0
        b[i] ^= tmp;
447
0
    }
448
0
}
Unexecuted instantiation: statem_srvr.c:constant_time_cond_swap_buff
Unexecuted instantiation: bn_lib.c:constant_time_cond_swap_buff
Unexecuted instantiation: err.c:constant_time_cond_swap_buff
Unexecuted instantiation: rsa_ossl.c:constant_time_cond_swap_buff
Unexecuted instantiation: rsa_pk1.c:constant_time_cond_swap_buff
Unexecuted instantiation: rsa_pmeth.c:constant_time_cond_swap_buff
Unexecuted instantiation: rsa_enc.c:constant_time_cond_swap_buff
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_cond_swap_buff
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_cond_swap_buff
Unexecuted instantiation: ssl3_cbc.c:constant_time_cond_swap_buff
Unexecuted instantiation: ciphercommon_block.c:constant_time_cond_swap_buff
Unexecuted instantiation: tls_pad.c:constant_time_cond_swap_buff
Unexecuted instantiation: bn_exp.c:constant_time_cond_swap_buff
Unexecuted instantiation: bn_gcd.c:constant_time_cond_swap_buff
Unexecuted instantiation: rsaz_exp.c:constant_time_cond_swap_buff
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_cond_swap_buff
Unexecuted instantiation: set_key.c:constant_time_cond_swap_buff
Unexecuted instantiation: curve448.c:constant_time_cond_swap_buff
Unexecuted instantiation: curve448_tables.c:constant_time_cond_swap_buff
Unexecuted instantiation: eddsa.c:constant_time_cond_swap_buff
Unexecuted instantiation: f_generic.c:constant_time_cond_swap_buff
Unexecuted instantiation: scalar.c:constant_time_cond_swap_buff
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_cond_swap_buff
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_cond_swap_buff
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_cond_swap_buff
Unexecuted instantiation: ml_dsa_key.c:constant_time_cond_swap_buff
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_cond_swap_buff
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_cond_swap_buff
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_cond_swap_buff
Unexecuted instantiation: ml_dsa_params.c:constant_time_cond_swap_buff
Unexecuted instantiation: ml_dsa_sample.c:constant_time_cond_swap_buff
Unexecuted instantiation: ml_dsa_sign.c:constant_time_cond_swap_buff
Unexecuted instantiation: ml_kem.c:constant_time_cond_swap_buff
Unexecuted instantiation: rsa_oaep.c:constant_time_cond_swap_buff
Unexecuted instantiation: f_impl64.c:constant_time_cond_swap_buff
449
450
/*
451
 * table is a two dimensional array of bytes. Each row has rowsize elements.
452
 * Copies row number idx into out. rowsize and numrows are not considered
453
 * private.
454
 */
455
static ossl_inline void constant_time_lookup(void *out,
456
                                             const void *table,
457
                                             size_t rowsize,
458
                                             size_t numrows,
459
                                             size_t idx)
460
1.17k
{
461
1.17k
    size_t i, j;
462
1.17k
    const unsigned char *tablec = (const unsigned char *)table;
463
1.17k
    unsigned char *outc = (unsigned char *)out;
464
1.17k
    unsigned char mask;
465
466
1.17k
    memset(out, 0, rowsize);
467
468
    /* Note idx may underflow - but that is well defined */
469
19.8k
    for (i = 0; i < numrows; i++, idx--) {
470
18.7k
        mask = (unsigned char)constant_time_is_zero_s(idx);
471
3.61M
        for (j = 0; j < rowsize; j++)
472
3.59M
            *(outc + j) |= constant_time_select_8(mask, *(tablec++), 0);
473
18.7k
    }
474
1.17k
}
Unexecuted instantiation: statem_srvr.c:constant_time_lookup
Unexecuted instantiation: bn_lib.c:constant_time_lookup
Unexecuted instantiation: err.c:constant_time_lookup
Unexecuted instantiation: rsa_ossl.c:constant_time_lookup
Unexecuted instantiation: rsa_pk1.c:constant_time_lookup
Unexecuted instantiation: rsa_pmeth.c:constant_time_lookup
Unexecuted instantiation: rsa_enc.c:constant_time_lookup
Unexecuted instantiation: cipher_aes_cbc_hmac_sha1_hw.c:constant_time_lookup
Unexecuted instantiation: cipher_aes_cbc_hmac_sha256_hw.c:constant_time_lookup
Unexecuted instantiation: ssl3_cbc.c:constant_time_lookup
Unexecuted instantiation: ciphercommon_block.c:constant_time_lookup
Unexecuted instantiation: tls_pad.c:constant_time_lookup
Unexecuted instantiation: bn_exp.c:constant_time_lookup
Unexecuted instantiation: bn_gcd.c:constant_time_lookup
Unexecuted instantiation: rsaz_exp.c:constant_time_lookup
Unexecuted instantiation: rsaz_exp_x2.c:constant_time_lookup
Unexecuted instantiation: set_key.c:constant_time_lookup
curve448.c:constant_time_lookup
Line
Count
Source
460
1.17k
{
461
1.17k
    size_t i, j;
462
1.17k
    const unsigned char *tablec = (const unsigned char *)table;
463
1.17k
    unsigned char *outc = (unsigned char *)out;
464
1.17k
    unsigned char mask;
465
466
1.17k
    memset(out, 0, rowsize);
467
468
    /* Note idx may underflow - but that is well defined */
469
19.8k
    for (i = 0; i < numrows; i++, idx--) {
470
18.7k
        mask = (unsigned char)constant_time_is_zero_s(idx);
471
3.61M
        for (j = 0; j < rowsize; j++)
472
3.59M
            *(outc + j) |= constant_time_select_8(mask, *(tablec++), 0);
473
18.7k
    }
474
1.17k
}
Unexecuted instantiation: curve448_tables.c:constant_time_lookup
Unexecuted instantiation: eddsa.c:constant_time_lookup
Unexecuted instantiation: f_generic.c:constant_time_lookup
Unexecuted instantiation: scalar.c:constant_time_lookup
Unexecuted instantiation: e_aes_cbc_hmac_sha1.c:constant_time_lookup
Unexecuted instantiation: e_aes_cbc_hmac_sha256.c:constant_time_lookup
Unexecuted instantiation: ml_dsa_encoders.c:constant_time_lookup
Unexecuted instantiation: ml_dsa_key.c:constant_time_lookup
Unexecuted instantiation: ml_dsa_key_compress.c:constant_time_lookup
Unexecuted instantiation: ml_dsa_matrix.c:constant_time_lookup
Unexecuted instantiation: ml_dsa_ntt.c:constant_time_lookup
Unexecuted instantiation: ml_dsa_params.c:constant_time_lookup
Unexecuted instantiation: ml_dsa_sample.c:constant_time_lookup
Unexecuted instantiation: ml_dsa_sign.c:constant_time_lookup
Unexecuted instantiation: ml_kem.c:constant_time_lookup
Unexecuted instantiation: rsa_oaep.c:constant_time_lookup
Unexecuted instantiation: f_impl64.c:constant_time_lookup
475
476
/*
477
 * Expected usage pattern is to unconditionally set error and then
478
 * wipe it if there was no actual error. |clear| is 1 or 0.
479
 */
480
void err_clear_last_constant_time(int clear);
481
482
#endif                          /* OSSL_INTERNAL_CONSTANT_TIME_H */