projects
/
openwrt
/
staging
/
ansuel.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
wolfssl: disable AES-NI by default for x86_64
[openwrt/staging/ansuel.git]
/
package
/
libs
/
wolfssl
/
Config.in
diff --git
a/package/libs/wolfssl/Config.in
b/package/libs/wolfssl/Config.in
index 3d264e77430cd590890263bc49aa0894e80d9b06..eca9572c490a1693e76208411c4df104726603af 100644
(file)
--- a/
package/libs/wolfssl/Config.in
+++ b/
package/libs/wolfssl/Config.in
@@
-68,7
+68,7
@@
config WOLFSSL_ASM_CAPABLE
choice
prompt "Hardware Acceleration"
choice
prompt "Hardware Acceleration"
- default WOLFSSL_HAS_CPU_CRYPTO if WOLFSSL_ASM_CAPABLE
+ default WOLFSSL_HAS_CPU_CRYPTO if WOLFSSL_ASM_CAPABLE
&& !x86_64
default WOLFSSL_HAS_NO_HW
config WOLFSSL_HAS_NO_HW
default WOLFSSL_HAS_NO_HW
config WOLFSSL_HAS_NO_HW
@@
-80,6
+80,7
@@
choice
help
This will use Intel AESNI insturctions or armv8 Crypto Extensions.
Either of them should easily outperform hardware crypto in WolfSSL.
help
This will use Intel AESNI insturctions or armv8 Crypto Extensions.
Either of them should easily outperform hardware crypto in WolfSSL.
+ Beware that for Intel, the CPU has to support SSE4 instructions.
config WOLFSSL_HAS_AFALG
bool "AF_ALG"
config WOLFSSL_HAS_AFALG
bool "AF_ALG"
@@
-96,5
+97,9
@@
choice
bool "/dev/crypto - full"
select WOLFSSL_HAS_DEVCRYPTO
endchoice
bool "/dev/crypto - full"
select WOLFSSL_HAS_DEVCRYPTO
endchoice
+if x86_64 && WOLFSSL_HAS_CPU_CRYPTO
+ comment "WARNING: make sure your CPU supports SSE4 instructions"
+ comment "WolfSSL may crash with an invalid opcode exception"
+endif
endif
endif