For some reason arm64's Poly1305 code got changed to ignore the padbit
argument. As a result, the output is incorrect when the message length
is not a multiple of 16 (which is not reached with the standard
ChaCha20Poly1305, but bcachefs could reach this). Fix this.
Fixes:
|
||
|---|---|---|
| .. | ||
| .gitignore | ||
| Kconfig | ||
| Makefile | ||
| chacha-neon-core.S | ||
| chacha-neon-glue.c | ||
| poly1305-armv8.pl | ||
| poly1305-glue.c | ||
| sha2-armv8.pl | ||
| sha256-ce.S | ||
| sha256.c | ||