William Beasley (The Capable Hub) 7cba06da8a cheri: Fix CHERI tag violation on constant time pointer selection ...

The branchless code in casts sp_int pointers to size_t for bitmask
arithmetic, then casts the result back to sp_int*.

On CHERI, pointer-to-integer casts strip the hardware capability tag.
The reconstructed pointer is tagless and cannot be dereferenced,
causing a tag-violation fault.

Add _sp_cond_copy that uses the bitmask on the digit data itself rather
than the addresses, this avoids needed to do pointer arithmetic.

On non-CHERI targets the behaviour is the same.

Signed-off-by: William Beasley (The Capable Hub) <wbeasley@thegoodpenguin.co.uk>

2026-05-12 10:11:54 +01:00

..

benchmark

Merge pull request #10072 from night1rider/extend-cmac-api-id-label

2026-04-13 08:15:46 -07:00

src

cheri: Fix CHERI tag violation on constant time pointer selection

2026-05-12 10:11:54 +01:00

test

wolfcrypt/test/test.c: add missing FIPS gating for backward-incompatible NULL arg tests in hkdf_test() and srtpkdf_test().

2026-04-20 10:17:31 -05:00