Expand on importance of not using fpu for crypto if there's no fpu.
This commit is contained in:
parent
e8d07af35a
commit
52c1c2aa09
@ -374,8 +374,11 @@ void OPENSSL_cpuid_setup(void)
|
||||
size_t len = sizeof(val);
|
||||
|
||||
/*
|
||||
* If machdep.fpu_present == 0, FPU is absent and emulated by software.
|
||||
* Avoid using it for better performance.
|
||||
* If machdep.fpu_present == 0, FPU is absent and emulated by
|
||||
* software. In that case, using FPU instructions hurts rather
|
||||
* than helps performance, and the software is unlikely to run in
|
||||
* constant time so it would expose us to timing side channel
|
||||
* attacks. So don't do it!
|
||||
*/
|
||||
error = sysctlbyname("machdep.fpu_present", &val, &len, NULL, 0);
|
||||
if (error != 0 || (error == 0 && val != 0))
|
||||
|
Loading…
Reference in New Issue
Block a user