1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
[]
= "ic-cipher"
= "AES, AES-GCM, ChaCha20-Poly1305, and block modes for IronCrypto"
= true
= true
= true
= true
= true
= true
= true
= true
= true
= true
[]
= ["std"]
= ["ic-core/std"]
# The ARMv8 AES backend. Off by default because it has never been executed:
# it was written on x86, and CI -- which would run it on an arm64 macOS runner
# with --all-features -- has been blocked at the account level and has not run
# at all. It compiles, which was unknown until it was tried.
#
# What argues it is correct meanwhile is aes/armv8_model.rs, a software model of
# the instructions checked against the AES vectors; that model is what caught
# the decryption key schedule being wrong. It becomes the default once the
# arm64 job has actually passed.
= []
# Exposes `ct_probes`: the x86-64 ChaCha20 and Poly1305 kernels, wrapped for
# scripts/ct-audit to compile and read. Not for use; see docs/CONSTANT_TIME.md.
= []
# `ic_approved_only` leaves out every algorithm FIPS approved mode does not
# permit; see docs/FIPS.md.
[]
= { = "warn", = ["cfg(ic_approved_only)"] }
[]
= { = true }