Expand on importance of not using fpu for crypto if there's no fpu.
This commit is contained in:
parent
e8d07af35a
commit
52c1c2aa09
@ -374,8 +374,11 @@ void OPENSSL_cpuid_setup(void)
|
|||||||
size_t len = sizeof(val);
|
size_t len = sizeof(val);
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* If machdep.fpu_present == 0, FPU is absent and emulated by software.
|
* If machdep.fpu_present == 0, FPU is absent and emulated by
|
||||||
* Avoid using it for better performance.
|
* software. In that case, using FPU instructions hurts rather
|
||||||
|
* than helps performance, and the software is unlikely to run in
|
||||||
|
* constant time so it would expose us to timing side channel
|
||||||
|
* attacks. So don't do it!
|
||||||
*/
|
*/
|
||||||
error = sysctlbyname("machdep.fpu_present", &val, &len, NULL, 0);
|
error = sysctlbyname("machdep.fpu_present", &val, &len, NULL, 0);
|
||||||
if (error != 0 || (error == 0 && val != 0))
|
if (error != 0 || (error == 0 && val != 0))
|
||||||
|
Loading…
Reference in New Issue
Block a user