Sync to 81502beeddc5f116d44d0898c6c4a33057198db8
authorPete Bentley <prb@google.com>
Mon, 28 Feb 2022 19:23:25 +0000 (19:23 +0000)
committerRoger Shimizu <rosh@debian.org>
Mon, 27 Jun 2022 17:04:55 +0000 (18:04 +0100)
commitab8989e78afc22e811a9b4c49a21dabd8c8e409e
tree683cb00a440f1546764356b195762e8fd21c2362
parenteb6f2cba5844c1ba5ca0e9d01fe400eaff0f489e
Sync to 81502beeddc5f116d44d0898c6c4a33057198db8

This includes the following changes:

https://boringssl.googlesource.com/boringssl/+log/345c86b1cfcc478a71a9a71f0206893fd16ae912..81502beeddc5f116d44d0898c6c4a33057198db8

* Linkify RFCs in more places in the docs.
* Make FFDH self tests lazy.
* Make ECC self tests lazy.
* HPKE is now RFC 9180.
* Include the policy document for the most recent FIPS validation.
* Check static CPU capabilities on x86.
Update-Note: This CL may break build environments that incorrectly mark
some instruction as statically available. This is unlikely to happen
with vector instructions like AVX, where the compiler could freely emit
them anyway. However, instructions like AES-NI might be set incorrectly.
* Align rsaz_avx2_preferred with x86_64-mont5.pl.
* Enable SHA-NI optimizations for SHA-256.
* Update Intel SDE.
* Include the EKU extension in bssl server's self-signed certs.
* Don't call a non-test file *test.h.
* Make RSA self-test lazy.
* Add link to new Android FIPS certificate.
* delocate: handle a new output form in Clang 13.
* Drop, now unused, KAT value.
* Drop CAVP code.
* Break FIPS tests differently.
* Don't forget hmac.h in self_check.h.
* Perform SHA-$x and HMAC KAT before integrity check.
* Add a couple of spaces to `check_test`.
* Split FIPS KATs into fast and slow groups.
* Move DES out of the FIPS module.
* acvp: don't send the Authorization header when renewing tokens
* Support Bazel's test-sharding protocol.
* Simply CMake assembly source selection.
* Rename generated assembly from 'mac' or 'ios' to 'apple'
Update-Note: References to 'mac' or 'ios' source lists in downstream
builds should be renamed to 'apple'.
* Build aarch64 assembly for macOS in the bazel build.
* Fix OPENSSL_NO_ASM definition in bazel.
* Use @platforms in Bazel rules.
* Record ClientHelloInner values in msg_callback.
* Fold ssl_decode_client_hello_inner into ssl_client_hello_decrypt.
* Explicitly reject self-referential ech_outer_extensions.
* Simpler square-root computation for Ed25519
* Condition split handshake tests on Linux in CMake.
* Implement PEM_read_bio_DHparams with the macro.
* Limit _XOPEN_SOURCE to Linux.
Update-Note: It's possible this will break yet another obscure UNIX.
Hopefully we can eventually find a combination that works?
* Fix Unicode strings for C++20

Test: atest CtsLibcoreTestCases CtsLibcoreOkHttpTestCases
Change-Id: I177c2a06d3d85ea4912e4f657caa370363966c33

Gbp-Pq: Name Sync-to-81502beeddc5f116d44d0898c.patch
202 files changed:
Android.bp
BORINGSSL_REVISION
BUILD.generated.bzl
BUILD.generated_tests.bzl
android-sources.cmake
apple-aarch64/crypto/chacha/chacha-armv8.S [new file with mode: 0644]
apple-aarch64/crypto/fipsmodule/aesv8-armx64.S [new file with mode: 0644]
apple-aarch64/crypto/fipsmodule/armv8-mont.S [new file with mode: 0644]
apple-aarch64/crypto/fipsmodule/ghash-neon-armv8.S [new file with mode: 0644]
apple-aarch64/crypto/fipsmodule/ghashv8-armx64.S [new file with mode: 0644]
apple-aarch64/crypto/fipsmodule/sha1-armv8.S [new file with mode: 0644]
apple-aarch64/crypto/fipsmodule/sha256-armv8.S [new file with mode: 0644]
apple-aarch64/crypto/fipsmodule/sha512-armv8.S [new file with mode: 0644]
apple-aarch64/crypto/fipsmodule/vpaes-armv8.S [new file with mode: 0644]
apple-aarch64/crypto/test/trampoline-armv8.S [new file with mode: 0644]
apple-arm/crypto/chacha/chacha-armv4.S [new file with mode: 0644]
apple-arm/crypto/fipsmodule/aesv8-armx32.S [new file with mode: 0644]
apple-arm/crypto/fipsmodule/armv4-mont.S [new file with mode: 0644]
apple-arm/crypto/fipsmodule/bsaes-armv7.S [new file with mode: 0644]
apple-arm/crypto/fipsmodule/ghash-armv4.S [new file with mode: 0644]
apple-arm/crypto/fipsmodule/ghashv8-armx32.S [new file with mode: 0644]
apple-arm/crypto/fipsmodule/sha1-armv4-large.S [new file with mode: 0644]
apple-arm/crypto/fipsmodule/sha256-armv4.S [new file with mode: 0644]
apple-arm/crypto/fipsmodule/sha512-armv4.S [new file with mode: 0644]
apple-arm/crypto/fipsmodule/vpaes-armv7.S [new file with mode: 0644]
apple-arm/crypto/test/trampoline-armv4.S [new file with mode: 0644]
apple-x86/crypto/chacha/chacha-x86.S [new file with mode: 0644]
apple-x86/crypto/fipsmodule/aesni-x86.S [new file with mode: 0644]
apple-x86/crypto/fipsmodule/bn-586.S [new file with mode: 0644]
apple-x86/crypto/fipsmodule/co-586.S [new file with mode: 0644]
apple-x86/crypto/fipsmodule/ghash-ssse3-x86.S [new file with mode: 0644]
apple-x86/crypto/fipsmodule/ghash-x86.S [new file with mode: 0644]
apple-x86/crypto/fipsmodule/md5-586.S [new file with mode: 0644]
apple-x86/crypto/fipsmodule/sha1-586.S [new file with mode: 0644]
apple-x86/crypto/fipsmodule/sha256-586.S [new file with mode: 0644]
apple-x86/crypto/fipsmodule/sha512-586.S [new file with mode: 0644]
apple-x86/crypto/fipsmodule/vpaes-x86.S [new file with mode: 0644]
apple-x86/crypto/fipsmodule/x86-mont.S [new file with mode: 0644]
apple-x86/crypto/test/trampoline-x86.S [new file with mode: 0644]
apple-x86_64/crypto/chacha/chacha-x86_64.S [new file with mode: 0644]
apple-x86_64/crypto/cipher_extra/aes128gcmsiv-x86_64.S [new file with mode: 0644]
apple-x86_64/crypto/cipher_extra/chacha20_poly1305_x86_64.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/aesni-gcm-x86_64.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/aesni-x86_64.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/ghash-ssse3-x86_64.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/ghash-x86_64.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/md5-x86_64.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/p256-x86_64-asm.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/p256_beeu-x86_64-asm.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/rdrand-x86_64.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/rsaz-avx2.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/sha1-x86_64.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/sha256-x86_64.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/sha512-x86_64.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/vpaes-x86_64.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/x86_64-mont.S [new file with mode: 0644]
apple-x86_64/crypto/fipsmodule/x86_64-mont5.S [new file with mode: 0644]
apple-x86_64/crypto/test/trampoline-x86_64.S [new file with mode: 0644]
err_data.c
eureka.mk
linux-x86_64/crypto/fipsmodule/sha256-x86_64.S
mac-x86/crypto/chacha/chacha-x86.S [deleted file]
mac-x86/crypto/fipsmodule/aesni-x86.S [deleted file]
mac-x86/crypto/fipsmodule/bn-586.S [deleted file]
mac-x86/crypto/fipsmodule/co-586.S [deleted file]
mac-x86/crypto/fipsmodule/ghash-ssse3-x86.S [deleted file]
mac-x86/crypto/fipsmodule/ghash-x86.S [deleted file]
mac-x86/crypto/fipsmodule/md5-586.S [deleted file]
mac-x86/crypto/fipsmodule/sha1-586.S [deleted file]
mac-x86/crypto/fipsmodule/sha256-586.S [deleted file]
mac-x86/crypto/fipsmodule/sha512-586.S [deleted file]
mac-x86/crypto/fipsmodule/vpaes-x86.S [deleted file]
mac-x86/crypto/fipsmodule/x86-mont.S [deleted file]
mac-x86/crypto/test/trampoline-x86.S [deleted file]
mac-x86_64/crypto/chacha/chacha-x86_64.S [deleted file]
mac-x86_64/crypto/cipher_extra/aes128gcmsiv-x86_64.S [deleted file]
mac-x86_64/crypto/cipher_extra/chacha20_poly1305_x86_64.S [deleted file]
mac-x86_64/crypto/fipsmodule/aesni-gcm-x86_64.S [deleted file]
mac-x86_64/crypto/fipsmodule/aesni-x86_64.S [deleted file]
mac-x86_64/crypto/fipsmodule/ghash-ssse3-x86_64.S [deleted file]
mac-x86_64/crypto/fipsmodule/ghash-x86_64.S [deleted file]
mac-x86_64/crypto/fipsmodule/md5-x86_64.S [deleted file]
mac-x86_64/crypto/fipsmodule/p256-x86_64-asm.S [deleted file]
mac-x86_64/crypto/fipsmodule/p256_beeu-x86_64-asm.S [deleted file]
mac-x86_64/crypto/fipsmodule/rdrand-x86_64.S [deleted file]
mac-x86_64/crypto/fipsmodule/rsaz-avx2.S [deleted file]
mac-x86_64/crypto/fipsmodule/sha1-x86_64.S [deleted file]
mac-x86_64/crypto/fipsmodule/sha256-x86_64.S [deleted file]
mac-x86_64/crypto/fipsmodule/sha512-x86_64.S [deleted file]
mac-x86_64/crypto/fipsmodule/vpaes-x86_64.S [deleted file]
mac-x86_64/crypto/fipsmodule/x86_64-mont.S [deleted file]
mac-x86_64/crypto/fipsmodule/x86_64-mont5.S [deleted file]
mac-x86_64/crypto/test/trampoline-x86_64.S [deleted file]
sources.bp
sources.mk
src/.gitignore
src/CMakeLists.txt
src/crypto/CMakeLists.txt
src/crypto/cipher_extra/e_aesgcmsiv.c
src/crypto/cipher_extra/e_des.c [new file with mode: 0644]
src/crypto/cipher_extra/internal.h
src/crypto/curve25519/curve25519.c
src/crypto/des/des.c [new file with mode: 0644]
src/crypto/des/internal.h [new file with mode: 0644]
src/crypto/err/ssl.errordata
src/crypto/fipsmodule/FIPS.md
src/crypto/fipsmodule/aes/internal.h
src/crypto/fipsmodule/bcm.c
src/crypto/fipsmodule/bn/rsaz_exp.h
src/crypto/fipsmodule/cipher/e_des.c [deleted file]
src/crypto/fipsmodule/des/des.c [deleted file]
src/crypto/fipsmodule/des/internal.h [deleted file]
src/crypto/fipsmodule/dh/dh.c
src/crypto/fipsmodule/dh/internal.h [new file with mode: 0644]
src/crypto/fipsmodule/ec/ec.c
src/crypto/fipsmodule/ec/ec_key.c
src/crypto/fipsmodule/ec/internal.h
src/crypto/fipsmodule/ec/p256-x86_64.c
src/crypto/fipsmodule/ec/p256-x86_64_test.cc
src/crypto/fipsmodule/ecdh/ecdh.c
src/crypto/fipsmodule/ecdsa/ecdsa.c
src/crypto/fipsmodule/ecdsa/internal.h
src/crypto/fipsmodule/modes/gcm.c
src/crypto/fipsmodule/modes/gcm_test.cc
src/crypto/fipsmodule/modes/internal.h
src/crypto/fipsmodule/policydocs/BoringCrypto-Android-Security-Policy-20210319.docx [new file with mode: 0644]
src/crypto/fipsmodule/rand/internal.h
src/crypto/fipsmodule/rand/rand.c
src/crypto/fipsmodule/rsa/internal.h
src/crypto/fipsmodule/rsa/rsa.c
src/crypto/fipsmodule/rsa/rsa_impl.c
src/crypto/fipsmodule/self_check/self_check.c
src/crypto/fipsmodule/sha/asm/sha512-x86_64.pl
src/crypto/hpke/hpke.c
src/crypto/hpke/translate_test_vectors.py
src/crypto/hrss/hrss.c
src/crypto/hrss/hrss_test.cc
src/crypto/impl_dispatch_test.cc
src/crypto/internal.h
src/crypto/pem/pem_all.c
src/crypto/pem/pem_pkey.c
src/crypto/pkcs8/pkcs12_test.cc
src/decrepit/des/cfb64ede.c
src/include/openssl/hpke.h
src/include/openssl/ssl.h
src/include/openssl/ssl3.h
src/ssl/encrypted_client_hello.cc
src/ssl/handshake_client.cc
src/ssl/handshake_server.cc
src/ssl/internal.h
src/ssl/test/CMakeLists.txt
src/ssl/test/runner/hpke/hpke.go
src/ssl/test/runner/runner.go
src/ssl/test/runner/sharding.go [new file with mode: 0644]
src/ssl/test/test_config.cc
src/ssl/tls13_server.cc
src/tool/server.cc
src/util/BUILD.toplevel
src/util/bot/DEPS
src/util/bot/UPDATING
src/util/bot/extract.py
src/util/bot/sde-linux64.tar.bz2.sha1 [deleted file]
src/util/bot/sde-linux64.tar.xz.sha1 [new file with mode: 0644]
src/util/bot/sde-win32.tar.bz2.sha1 [deleted file]
src/util/bot/sde-win32.tar.xz.sha1 [new file with mode: 0644]
src/util/doc.go
src/util/fipstools/CMakeLists.txt [new file with mode: 0644]
src/util/fipstools/acvp/acvptool/acvp/acvp.go
src/util/fipstools/break-kat.go [new file with mode: 0644]
src/util/fipstools/break-tests-android.sh [deleted file]
src/util/fipstools/break-tests.sh [deleted file]
src/util/fipstools/cavp/CMakeLists.txt [deleted file]
src/util/fipstools/cavp/cavp_aes_gcm_test.cc [deleted file]
src/util/fipstools/cavp/cavp_aes_test.cc [deleted file]
src/util/fipstools/cavp/cavp_ctr_drbg_test.cc [deleted file]
src/util/fipstools/cavp/cavp_ecdsa2_keypair_test.cc [deleted file]
src/util/fipstools/cavp/cavp_ecdsa2_pkv_test.cc [deleted file]
src/util/fipstools/cavp/cavp_ecdsa2_siggen_test.cc [deleted file]
src/util/fipstools/cavp/cavp_ecdsa2_sigver_test.cc [deleted file]
src/util/fipstools/cavp/cavp_hmac_test.cc [deleted file]
src/util/fipstools/cavp/cavp_kas_test.cc [deleted file]
src/util/fipstools/cavp/cavp_keywrap_test.cc [deleted file]
src/util/fipstools/cavp/cavp_main.cc [deleted file]
src/util/fipstools/cavp/cavp_rsa2_keygen_test.cc [deleted file]
src/util/fipstools/cavp/cavp_rsa2_siggen_test.cc [deleted file]
src/util/fipstools/cavp/cavp_rsa2_sigver_test.cc [deleted file]
src/util/fipstools/cavp/cavp_sha_monte_test.cc [deleted file]
src/util/fipstools/cavp/cavp_sha_test.cc [deleted file]
src/util/fipstools/cavp/cavp_tdes_test.cc [deleted file]
src/util/fipstools/cavp/cavp_test_util.cc [deleted file]
src/util/fipstools/cavp/cavp_test_util.h [deleted file]
src/util/fipstools/cavp/cavp_tlskdf_test.cc [deleted file]
src/util/fipstools/cavp/run_cavp.go [deleted file]
src/util/fipstools/cavp/test_fips.c [deleted file]
src/util/fipstools/delocate/delocate.peg
src/util/fipstools/delocate/delocate.peg.go
src/util/fipstools/delocate/testdata/x86_64-Basic/in.s
src/util/fipstools/delocate/testdata/x86_64-Basic/out.s
src/util/fipstools/test-break-kat.sh [new file with mode: 0644]
src/util/fipstools/test_fips.c [new file with mode: 0644]
src/util/generate_build_files.py
win-x86_64/crypto/fipsmodule/sha256-x86_64.asm