openssl/crypto/modes, branch openssl-3.5.6

Copyright year updates

2026-04-07T12:24:29Z

Reviewed-by: Neil Horman Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Apr 7 12:24:30 2026 Release: yes

Updated broken documentation links in various files

2026-04-03T15:19:09Z

Reviewed-by: Saša Nedvědický Reviewed-by: Eugene Syromiatnikov MergeDate: Fri Apr 3 15:18:46 2026 (Merged from https://github.com/openssl/openssl/pull/30516) (cherry picked from commit 6f5b5acd65050d7a5a5534f27911b7b1fddcf754)

don't include the asm code for ppc aes-gcm on big endian

2026-02-17T14:15:39Z

Its dead code on that platform since we don't use it Reviewed-by: Tomas Mraz Reviewed-by: Tom Cosgrove MergeDate: Tue Feb 17 14:11:49 2026 (Merged from https://github.com/openssl/openssl/pull/29968) (cherry picked from commit 20c86e271bbe5561f3dd9e5856a86702dc980727)

aes-gcm-ppc.pl: Removed .localentry directive

2026-02-03T08:40:13Z

Otherwise there is mixing of ELFv1 ABI and ELFv2 ABI directives and PPC64 big endian builds fail. Fixes #29815 Signed-off-by: Danny Tsen Reviewed-by: Paul Dale Reviewed-by: Shane Lontis Reviewed-by: Tomas Mraz MergeDate: Tue Feb 3 08:39:50 2026 (Merged from https://github.com/openssl/openssl/pull/29827) (cherry picked from commit 5aaa7e5fdc59e88a13d2911cb86d814d4e2669da)

Copyright year updates

2026-01-27T13:40:51Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman MergeDate: Tue Jan 27 13:40:52 2026 Release: yes

Fix OCB AES-NI/HW stream path unauthenticated/unencrypted trailing bytes

2026-01-26T19:49:07Z

When ctx->stream (e.g., AES‑NI or ARMv8 CE) is available, the fast path encrypts/decrypts full blocks but does not advance in/out pointers. The tail-handling code then operates on the base pointers, effectively reprocessing the beginning of the buffer while leaving the actual trailing bytes unencrypted (encryption) or using the wrong plaintext (decryption). The authentication checksum excludes the true tail. CVE-2025-69418 Fixes: https://github.com/openssl/srt/issues/58 Signed-off-by: Norbert Pocs Reviewed-by: Saša Nedvědický Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz MergeDate: Mon Jan 26 19:48:35 2026 (cherry picked from commit be9375d5d45dfaf897b56ef148a0b58402491fcb)

Fix register save/restore issue in ppc

2026-01-02T14:44:09Z

Recently, the addition of some vector register save restore logic from: https://github.com/openssl/openssl/pull/28990 Triggered an issue in our quic_multistream_test, notably causing a connection shutdown with error code 1, rather than successful completion. The problem has been root caused to an error in how the ppc aes code saves and restores vector registers. The aes gcm code uses VSR instructions (vsldoi, etc), to maniuplate vector registers, which only operate on the upper half of the vector register file (VS32-63), and operands are implicitly offset to do this. (i.e. v31 actually operates on register vs63). However, the SAVE/RESTORE macros which save and restore those values use stxv/lxv instructions to do the save and restore, which are VSX instructions that have access to the full vector register file, and so by restoring V1, rather than V33, etc, we actuall restore values to the wrong registers, causing various issues (most notably the above misconfiguration of the quic SSL shutdown event, which sets the error code erroneously to 1 instead of the expected 0 value). Fix it by offsetting the SAVE_REGS and RESTORE_REGS macros to reference the proper registers when doing save and restore. Fixes #29516 Reviewed-by: Saša Nedvědický Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/29528) (cherry picked from commit 441a2c105c7074502b0dc4ccd4aa2ed11d305556)

Fix legitimate spelling errors

2025-12-21T08:18:02Z

Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29461)

ppc64le: Restore VSX registers in AES/GCM ppc64le encrypt/decrypt

2025-12-19T14:08:54Z

The implementation failed to restore VSX vector registers from vs14-vs22. Re-implemented based on Linux kernel version. Fixes #28961 Signed-off-by: Danny Tsen Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28990) (cherry picked from commit ebd690b1eb0d95c6784e2f36dd86d72670b82794)

3.5-POST-CLANG-FORMAT-WEBKIT

2025-12-09T09:40:50Z

Reviewed-by: Neil Horman Reviewed-by: Saša Nedvědický Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29262)