jdk icon indicating copy to clipboard operation
jdk copied to clipboard

8292158: AES-CTR cipher state corruption with AVX-512

Open AJ-Ferguson opened this issue 2 years ago • 5 comments

Fix cipher state corruption when encrypting/decrypting less than 16 bytes at a time.


Progress

  • [ ] Change must be properly reviewed (1 review required, with at least 1 Reviewer)
  • [x] Change must not contain extraneous whitespace
  • [x] Commit message must refer to an issue

Issue

  • JDK-8292158: AES-CTR cipher state corruption with AVX-512

Reviewing

Using git

Checkout this PR locally:
$ git fetch https://git.openjdk.org/jdk pull/9635/head:pull/9635
$ git checkout pull/9635

Update a local copy of the PR:
$ git checkout pull/9635
$ git pull https://git.openjdk.org/jdk pull/9635/head

Using Skara CLI tools

Checkout this PR locally:
$ git pr checkout 9635

View PR using the GUI difftool:
$ git pr show -t 9635

Using diff file

Download this PR as a diff file:
https://git.openjdk.org/jdk/pull/9635.diff

AJ-Ferguson avatar Jul 26 '22 03:07 AJ-Ferguson

:wave: Welcome back AJ-Ferguson! A progress list of the required criteria for merging this PR into master will be added to the body of your pull request. There are additional pull request commands available for use with this pull request.

bridgekeeper[bot] avatar Jul 26 '22 03:07 bridgekeeper[bot]

@AJ-Ferguson The following label will be automatically applied to this pull request:

  • hotspot

When this pull request is ready to be reviewed, an "RFR" email will be sent to the corresponding mailing list. If you would like to change these labels, use the /label pull request command.

openjdk[bot] avatar Jul 26 '22 03:07 openjdk[bot]

Webrevs

mlbridge[bot] avatar Aug 10 '22 21:08 mlbridge[bot]

Hi @AJ-Ferguson, please note that the JBS issue is assigned to @smita-kamath, who wrote the original implementation. Please check with Smita or other regular Intel contributors (e.g. @jatin-bhateja, @sviswa7) before moving forward with this changeset.

robcasloz avatar Aug 11 '22 07:08 robcasloz

@AJ-Ferguson, will take a look at the PR. Thank you.

smita-kamath avatar Aug 15 '22 17:08 smita-kamath

@AJ-Ferguson This pull request has been inactive for more than 4 weeks and will be automatically closed if another 4 weeks passes without any activity. To avoid this, simply add a new comment to the pull request. Feel free to ask for assistance if you need help with progressing this pull request towards integration!

bridgekeeper[bot] avatar Sep 12 '22 18:09 bridgekeeper[bot]

Hi @AJ-Ferguson, I have modified the changes you recommended and added a suggestion. Please have a look at the diff file and let me know what you think. Thanks. diff.txt

smita-kamath avatar Sep 20 '22 07:09 smita-kamath

Hello @smita-kamath, thank you for taking the time to look at this PR. The changes you posted look good to me. I have added your improvements and updated the branch.

AJ-Ferguson avatar Sep 22 '22 10:09 AJ-Ferguson

@AJ-Ferguson Please do add a test for this case.

sviswa7 avatar Sep 22 '22 23:09 sviswa7

@sviswa7 @vnkozlov I have added the test. Please let me know if there are any issues.

AJ-Ferguson avatar Sep 27 '22 11:09 AJ-Ferguson

@AJ-Ferguson This change now passes all automated pre-integration checks.

ℹ️ This project also has non-automated pre-integration requirements. Please see the file CONTRIBUTING.md for details.

After integration, the commit message for the final commit will be:

8292158: AES-CTR cipher state corruption with AVX-512

Reviewed-by: kvn, svkamath, sviswanathan

You can use pull request commands such as /summary, /contributor and /issue to adjust it as needed.

At the time when this comment was updated there had been 54 new commits pushed to the master branch:

  • 739fdec7ea44be7ab12fdf418793276d581e58fe: 8289162: runtime/NMT/ThreadedMallocTestType.java should print out memory allocations to help debug
  • a11477ce259d6d2a053117a2300ebb171145cfde: 8289797: tools/launcher/I18NArgTest.java fails on Japanese Windows environment
  • 71511283ce02f52aba855a84cc67ba579ab8b586: 8294317: Insufficient build rules for tzdb.dat
  • fb4979c05bca2feae8e2d86c99db5e089693606f: 8290401: Support dump all phases and print nodes in ascending order of index
  • 112ca2b863e3caf647645eebd87423925a271e3e: 8293964: Unused check_for_duplicates parameter in ClassLoaderExt::process_jar_manifest
  • 99017b06bff57b5f96912897038b9a769523b1f8: 8293064: Remove unused NET_xxx functions
  • 3419363e89eaeef61a44fa1ab12d6a355323eb68: 8294361: Cleanup usages of StringBuffer in SQLOutputImpl
  • 1abf971b93222f422c0026cee944a6db214f955a: 8249627: Degrade Thread.suspend and Thread.resume
  • bc12e9553d30fbf849b5a681137a231ff083d901: 8292969: Bad Thread Utilization in ForkJoinPool
  • dd51f7e0b75d3a16403608d89cd206ac0bedf882: 8293996: C2: fix and simplify IdealLoopTree::do_remove_empty_loop
  • ... and 44 more: https://git.openjdk.org/jdk/compare/800e68d6906734242119e4ea033422f037a79857...master

As there are no conflicts, your changes will automatically be rebased on top of these commits when integrating. If you prefer to avoid this automatic rebasing, please check the documentation for the /integrate command for further details.

As you do not have Committer status in this project an existing Committer must agree to sponsor your change. Possible candidates are the reviewers of this PR (@vnkozlov, @sviswa7) but any other Committer may sponsor as well.

➡️ To flag this PR as ready for integration with the above commit message, type /integrate in a new comment. (Afterwards, your sponsor types /sponsor in a new comment to perform the integration).

openjdk[bot] avatar Sep 27 '22 20:09 openjdk[bot]

Thank you for the reviews.

/integrate

AJ-Ferguson avatar Sep 27 '22 20:09 AJ-Ferguson

@AJ-Ferguson Your change (at version 8fc3e4299b2da3059a8a44ea798efe1653ae788a) is now ready to be sponsored by a Committer.

openjdk[bot] avatar Sep 27 '22 20:09 openjdk[bot]

/sponsor

sviswa7 avatar Sep 28 '22 00:09 sviswa7

Going to push as commit 9d76ac8a4453bc51d9dca2ad6c60259cfb2c4203. Since your change was applied there have been 59 commits pushed to the master branch:

  • e5b65c40ea032c6955311593e02ed44f14dfe80a: 8290482: Update JNI Specification of DestroyJavaVM for better alignment with JLS, JVMS, and Java SE API Specifications
  • f8d9fa88735d8451108a0664990b8fc7409338e9: 8294483: Remove vmTestbase/nsk/jvmti/GetThreadState tests.
  • 6ad151d09623217699d3d21c36d4e01f3bfd7d7b: 8293143: Workaround for JDK-8292217 when doing "step over" of bytecode with unresolved cp reference
  • 22b59b66d975845da778220d983a1693e7f7055f: 8294471: SpecTaglet is inconsistent with SpecTree for inline property
  • 763d4bf0749e54f74821e5155f672ed24d6f2fcd: 8293592: Remove JVM_StopThread, stillborn, and related cleanup
  • 739fdec7ea44be7ab12fdf418793276d581e58fe: 8289162: runtime/NMT/ThreadedMallocTestType.java should print out memory allocations to help debug
  • a11477ce259d6d2a053117a2300ebb171145cfde: 8289797: tools/launcher/I18NArgTest.java fails on Japanese Windows environment
  • 71511283ce02f52aba855a84cc67ba579ab8b586: 8294317: Insufficient build rules for tzdb.dat
  • fb4979c05bca2feae8e2d86c99db5e089693606f: 8290401: Support dump all phases and print nodes in ascending order of index
  • 112ca2b863e3caf647645eebd87423925a271e3e: 8293964: Unused check_for_duplicates parameter in ClassLoaderExt::process_jar_manifest
  • ... and 49 more: https://git.openjdk.org/jdk/compare/800e68d6906734242119e4ea033422f037a79857...master

Your commit was automatically rebased without conflicts.

openjdk[bot] avatar Sep 28 '22 00:09 openjdk[bot]

@sviswa7 @AJ-Ferguson Pushed as commit 9d76ac8a4453bc51d9dca2ad6c60259cfb2c4203.

:bulb: You may see a message that your pull request was closed with unmerged commits. This can be safely ignored.

openjdk[bot] avatar Sep 28 '22 00:09 openjdk[bot]