Skip to content

Xilinx Versal Gen2 ASU port: AES ciphers, CMAC, GMAC offload - #10994

Open
night1rider wants to merge 4 commits into
wolfSSL:masterfrom
night1rider:Xilinx-ASU-Ciphers-CMAC-GMAC
Open

Xilinx Versal Gen2 ASU port: AES ciphers, CMAC, GMAC offload#10994
night1rider wants to merge 4 commits into
wolfSSL:masterfrom
night1rider:Xilinx-ASU-Ciphers-CMAC-GMAC

Conversation

@night1rider

Copy link
Copy Markdown
Contributor

Add AES, CMAC, and GMAC offload for Xilinx ASU port

@night1rider night1rider self-assigned this Jul 27, 2026

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #10994

Scan targets checked: wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfssl-bugs, wolfssl-src

Findings: 3
3 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

@night1rider
night1rider force-pushed the Xilinx-ASU-Ciphers-CMAC-GMAC branch from d38f89a to c567687 Compare July 28, 2026 01:36

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #10994

Scan targets checked: wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfssl-bugs, wolfssl-src

Findings: 2
2 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

@night1rider
night1rider force-pushed the Xilinx-ASU-Ciphers-CMAC-GMAC branch from c567687 to a5db6b6 Compare July 28, 2026 03:01

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #10994

Scan targets checked: wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfssl-bugs, wolfssl-src

Findings: 3
3 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

Comment thread wolfcrypt/src/port/xilinx/versal_gen2_asu/asu_cmac.c
@night1rider
night1rider force-pushed the Xilinx-ASU-Ciphers-CMAC-GMAC branch from a5db6b6 to 5f59e8c Compare July 28, 2026 17:06
Comment thread wolfcrypt/src/port/xilinx/versal_gen2_asu/asu_cmac.c

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #10994

Scan targets checked: wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfssl-bugs, wolfssl-src

Findings: 3
3 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

Comment thread wolfcrypt/src/port/xilinx/versal_gen2_asu/asu_cipher.c
Comment thread wolfcrypt/src/port/xilinx/versal_gen2_asu/asu_cmac.c
Comment thread wolfcrypt/src/port/xilinx/versal_gen2_asu/asu_util.c Outdated
@night1rider
night1rider force-pushed the Xilinx-ASU-Ciphers-CMAC-GMAC branch 3 times, most recently from 00156d7 to 0205df1 Compare July 30, 2026 00:59

/* Single-call generate (key, message and output all supplied). A whole-block
* message goes to the ASU; anything else runs in wolfSSL software. */
if (info->cmac.key != NULL && info->cmac.out != NULL) {

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There is a case where "key" could be NULL but both "in" and "out" are set. Looking through the conditions here I think that edge case would cause an incorrect CMAC tag to be created with the last input block not accounted for. Try with:

wc_InitCmac_ex()
wc_AesCmacGenerate_ex() // where 'key == NULL'

@night1rider
night1rider force-pushed the Xilinx-ASU-Ciphers-CMAC-GMAC branch from 40a6ae4 to a08952b Compare August 8, 2026 20:38
@night1rider

Copy link
Copy Markdown
Contributor Author

rebased off master to fix some CI test issues

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants