[openssl/openssl] e9351b: s390x: Fix AES-XTS hardware acceleration in IBM z17

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: e9351bcce65c642b130cdf875fd0e64e8637d737
      https://github.com/openssl/openssl/commit/e9351bcce65c642b130cdf875fd0e64e8637d737
  Author: Ingo Franzki <[email protected]>
  Date:   2026-07-01 (Wed, 01 Jul 2026)

  Changed paths:
    M providers/implementations/ciphers/cipher_aes_hw_s390x.c
    M providers/implementations/ciphers/cipher_aes_xts.c

  Log Message:
  -----------
  s390x: Fix AES-XTS hardware acceleration in IBM z17

For the re-init case where only the IV is specified, but no key, the 'nap'
field must also be initialized.

Instead of setting the s390 specific fields in a special case block, call
ctx->hw->init() also in this case. It performs the necessary setup already
(when the KM function code was once set already).

Adjust the cipher_hw_aes_xts_s390x_initkey() function so that it can also
be called with a NULL key. It then only performs the IV setup as well as
setting up the 'nap'.

Closes: https://github.com/openssl/openssl/issues/31766
Signed-off-by: Ingo Franzki <[email protected]>

Reviewed-by: Simo Sorce <[email protected]>
Reviewed-by: Milan Broz <[email protected]>
Reviewed-by: Shane Lontis <[email protected]>
MergeDate: Wed Jul  1 09:12:26 2026
(Merged from https://github.com/openssl/openssl/pull/31775)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/1be08a-e9351b%40github.com.