Received: by 2002:ab2:784b:0:b0:1fd:adc2:8405 with SMTP id m11csp489628lqp; Mon, 10 Jun 2024 09:55:51 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCU02oxmoqnvE1xgIx9kUmmlZpupzXhX8rtiqf709Kme4VnCk75WoM4NV3Stu+Dqp4hFNP0R3HGKaEuBiuPG5UMR6rNFzNLrZTeg6OF3Zg== X-Google-Smtp-Source: AGHT+IFQlkL79QDuuON2tcDnZAUhd/NHY1LYPPNhE/BpVV1NJUvmpmW/9Xk0qRZqMUGTg53XyTSH X-Received: by 2002:a05:620a:1a0d:b0:795:4dc9:4876 with SMTP id af79cd13be357-7954dc94d6amr1007380885a.43.1718038551308; Mon, 10 Jun 2024 09:55:51 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1718038551; cv=pass; d=google.com; s=arc-20160816; b=wKXaCpAqgkcrO8Ba3FnxPeyXfxR1Eb6vJ44YJwH27W7XW0XYXrigIPbFTOcdw1Qxgp 2h8dPBjr9pvNDK3VvacMpdKATnPAzjVdHPEnGmoIZ0qKRgRoyPoEnBHup4X+fQAj9M9x efKMaLY7Rxqh9mm1mrMg7jHmEFgeHXxx00Blo8n9xxrjNEHzmB7gSVVxoVS+DWBwko0N B++iYIeNZcsIs7XOISchNUhIvUi1oGpH2xe+BdScEyclkaVWJJKhpIhBiJiE/V0IkVjP lNdbG7zHSLHjLxU9j6meHJVE+tJ3bdsAR1fAD1uK+247nhPK4IGab4CNZX+komZZQLad 7nnQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=in-reply-to:content-disposition:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:references:message-id:subject:cc :to:from:date:dkim-signature; bh=/vwZAIdzrwPwxUXiKQPp9uhdyXbArt76lSEWlyll+gE=; fh=DZfw0wdEtQQ8wHkWf8nlA1YK6hGu3IUcYUUx4lVy7ZI=; b=dLurP78xCA1inwBNCEA5EWVvZtQ+Zg6nwEEhLNj/THAyXJlIMhy0V9dq6/FPVHoZg/ XuYr3KMKvJcspV9pjkrpkQlXIU/ZNR6szGryQshEUWFosV1wWlFpMEzKHclv+I16y4a3 QPxgYbNPzUwunu5npCPnUH/cvqpqsjRryZvH8SncSv2wuAer3onAQAp1AIMSFQAWvOdb LgoPxCXmN8sRRDYIGVmhSXGAp+QeaoU0NdtW1RAQFGtuwcxI4VwaN1Dt89z9P8syqtnG o0JQY48QJTe/x3wayLQG13UYr/chwTiH06+eL0zxeS6vvuDM/BXOkWcWNfjy6v876ozi vHog==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=YYi6b6B7; arc=pass (i=1 dkim=pass dkdomain=kernel.org); spf=pass (google.com: domain of linux-crypto+bounces-4865-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) smtp.mailfrom="linux-crypto+bounces-4865-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from ny.mirrors.kernel.org (ny.mirrors.kernel.org. [147.75.199.223]) by mx.google.com with ESMTPS id af79cd13be357-795504c6cfdsi691819785a.362.2024.06.10.09.55.51 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 10 Jun 2024 09:55:51 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-crypto+bounces-4865-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) client-ip=147.75.199.223; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=YYi6b6B7; arc=pass (i=1 dkim=pass dkdomain=kernel.org); spf=pass (google.com: domain of linux-crypto+bounces-4865-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) smtp.mailfrom="linux-crypto+bounces-4865-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ny.mirrors.kernel.org (Postfix) with ESMTPS id F3BF61C210A1 for ; Mon, 10 Jun 2024 16:55:50 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id C43C0139580; Mon, 10 Jun 2024 16:45:13 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="YYi6b6B7" X-Original-To: linux-crypto@vger.kernel.org Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 8016045BEF; Mon, 10 Jun 2024 16:45:13 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1718037913; cv=none; b=Ygzuv3NXprlh4GYo3SARXmywPzk2t9Jc5ohNxV0icddwBWKXga7xDHS1Fy1maVNosvVjEt/4lQZLLt1CxDbgufejz6UaLwWbelpZkR5OIr8Iur9UPJ6I1UpXCMyqtW+GDBPI81gLzRNRT/wbjOZUCYuzEAobXolHkZLf4lbvhp4= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1718037913; c=relaxed/simple; bh=YbTVYfWqHva2fHaRAJd5/DNFJYZQDoMyf688OiN6Rmw=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=LAdN+oOAvKvT8ra7TBNB0g67+BNvFOLAlYDXoySeFXYzanP0//tIBYL1HAD193xBYJM4gF/dMWKLYmG+vCDVfrTC3sG46474sI/mgWbCVcpyN8BA17dRyE0ddRExgor9WsB7MbkvBhfdP6F2EjyhYf/cn8kp6danEbeh8KBz9C0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=YYi6b6B7; arc=none smtp.client-ip=10.30.226.201 Received: by smtp.kernel.org (Postfix) with ESMTPSA id 18993C2BBFC; Mon, 10 Jun 2024 16:45:13 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1718037913; bh=YbTVYfWqHva2fHaRAJd5/DNFJYZQDoMyf688OiN6Rmw=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=YYi6b6B7CTzb1pvoPdhJyHYdV/3cmh6PZJZnWQMtfrnKCeMbFk3HbxvuTZ/KA5nHY p2oN33V969wdCO5XB26PtotyTDOkfDwgfRDk/cE5xjyWsBAFll07z7G4UfW9D9+8D3 Trad5oK+8Wa9rGKXITvM9psIYr+elLeBwOswKErJGc4UMO51zeiVBRJiVbJlzo48HT lc9Gh+x4k31U8zgLenwxIiBZGk0GFQq1PTMoqi8JnpeIXjWRm4Oxjkcj16ej9JIXeJ hwG/ul0ZbOOm2UbPSzxvO9HM8aoR2uWpdGF/rU/k/5S6UihHsxrFMKX5W8DlKXH7Ez /SFPPcY+zv0aw== Date: Mon, 10 Jun 2024 09:45:12 -0700 From: Kees Cook To: Ard Biesheuvel Cc: linux-crypto@vger.kernel.org, linux-hardening@vger.kernel.org, herbert@gondor.apana.org.au, Ard Biesheuvel , Linus Walleij Subject: Re: [PATCH] crypto: arm/crc32 - add kCFI annotations to asm routines Message-ID: <202406100945.599B5267@keescook> References: <20240610152638.2755370-2-ardb+git@google.com> Precedence: bulk X-Mailing-List: linux-crypto@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20240610152638.2755370-2-ardb+git@google.com> On Mon, Jun 10, 2024 at 05:26:39PM +0200, Ard Biesheuvel wrote: > From: Ard Biesheuvel > > The crc32/crc32c implementations using the scalar CRC32 instructions are > accessed via indirect calls, and so they must be annotated with type ids > in order to execute correctly when kCFI is enabled. > > Cc: Kees Cook > Cc: Linus Walleij > Signed-off-by: Ard Biesheuvel Reviewed-by: Kees Cook -- Kees Cook