crypto/poly1305/asm: chase overflow bit on x86 and ARM platforms.
authorAndy Polyakov <appro@openssl.org>
Fri, 15 Apr 2016 14:30:29 +0000 (16:30 +0200)
committerAndy Polyakov <appro@openssl.org>
Mon, 25 Apr 2016 20:56:09 +0000 (22:56 +0200)
commitdc3c5067cd90f3f2159e5d53c57b92730c687d7e
treecddd32278a6b1674e8df98f3a26159343e11cf0b
parent5a6694e30340d36fcf0b1dd349a7373010fb2524
crypto/poly1305/asm: chase overflow bit on x86 and ARM platforms.

Even though no test could be found to trigger this, paper-n-pencil
estimate suggests that x86 and ARM inner loop lazy reductions can
loose a bit in H4>>*5+H0 step.

Reviewed-by: Emilia Käsper <emilia@openssl.org>
crypto/poly1305/asm/poly1305-armv4.pl
crypto/poly1305/asm/poly1305-armv8.pl
crypto/poly1305/asm/poly1305-x86.pl
crypto/poly1305/poly1305.c