From ffe304643e83833ddb03c8ca5248882821b1b683 Mon Sep 17 00:00:00 2001
From: Sean Parkinson <sean@wolfssl.com>
Date: Tue, 13 Jan 2026 08:38:23 +1000
Subject: [PATCH] Curve25519 x64 ASM: nct invert needs vzeroupper

When ymm registers used, vzeroupper is required at end.
---
 wolfcrypt/src/fe_x25519_asm.S | 1 +
 1 file changed, 1 insertion(+)

diff --git a/wolfcrypt/src/fe_x25519_asm.S b/wolfcrypt/src/fe_x25519_asm.S
index 577aba183..427a1aadf 100644
--- a/wolfcrypt/src/fe_x25519_asm.S
+++ b/wolfcrypt/src/fe_x25519_asm.S
@@ -21779,6 +21779,7 @@ L__mod_inv_avx2__3_no_add_prime:
         movq	%r8, 8(%rdi)
         movq	%r10, 16(%rdi)
         movq	%r12, 24(%rdi)
+        vzeroupper
         popq	%rbx
         popq	%r15
         popq	%r14