All headers

Runtime CPU feature support

  1. OPENSSL_ia32cap_get
  2. OPENSSL_ia32cap_get
  3. CRYPTO_is_NEON_capable_at_runtime
  4. CRYPTO_is_NEON_capable
  5. CRYPTO_has_broken_NEON
  6. CRYPTO_needs_hwcap2_workaround
  7. CRYPTO_is_ARMv8_AES_capable
  8. CRYPTO_is_ARMv8_PMULL_capable
  9. CRYPTO_is_NEON_capable
  10. CRYPTO_is_ARMv8_AES_capable
  11. CRYPTO_is_ARMv8_PMULL_capable
  12. CRYPTO_is_PPC64LE_vcrypto_capable
#if defined(OPENSSL_X86) || defined(OPENSSL_X86_64)

OPENSSL_ia32cap_P contains the Intel CPUID bits when running on an x86 or x86-64 system.

Index 0:
  EDX for CPUID where EAX = 1
  Bit 20 is always zero
  Bit 28 is adjusted to reflect whether the data cache is shared between
    multiple logical cores
  Bit 30 is used to indicate an Intel CPU
Index 1:
  ECX for CPUID where EAX = 1
  Bit 11 is used to indicate AMD XOP support, not SDBG
Index 2:
  EBX for CPUID where EAX = 7
Index 3:
  ECX for CPUID where EAX = 7

Note: the CPUID bits are pre-adjusted for the OSXSAVE bit and the YMM and XMM bits in XCR0, so it is not necessary to check those.

extern uint32_t OPENSSL_ia32cap_P[4];
const uint32_t *OPENSSL_ia32cap_get(void);
OPENSSL_INLINE const uint32_t *OPENSSL_ia32cap_get(void) {
  return OPENSSL_ia32cap_P;
#if defined(OPENSSL_ARM) || defined(OPENSSL_AARCH64)
#if defined(OPENSSL_APPLE)

iOS builds use the static ARM configuration.


CRYPTO_is_NEON_capable_at_runtime returns true if the current CPU has a NEON unit. Note that OPENSSL_armcap_P also exists and contains the same information in a form that's easier for assembly to use.

OPENSSL_EXPORT char CRYPTO_is_NEON_capable_at_runtime(void);

CRYPTO_is_NEON_capable returns true if the current CPU has a NEON unit. If this is known statically then it returns one immediately.

OPENSSL_INLINE int CRYPTO_is_NEON_capable(void) {
  // Only statically skip the runtime lookup on aarch64. On arm, one CPU is
  // known to have a broken NEON unit which is known to fail with on some
  // hand-written NEON assembly. For now, continue to apply the workaround even
  // when the compiler is instructed to freely emit NEON code. See
  // https://crbug.com/341598 and https://crbug.com/606629.
#if (defined(__ARM_NEON__) || defined(__ARM_NEON)) && !defined(OPENSSL_ARM)
  return 1;
  return CRYPTO_is_NEON_capable_at_runtime();
#if defined(OPENSSL_ARM)

CRYPTO_has_broken_NEON returns one if the current CPU is known to have a broken NEON unit. See https://crbug.com/341598.

OPENSSL_EXPORT int CRYPTO_has_broken_NEON(void);

CRYPTO_needs_hwcap2_workaround returns one if the ARMv8 AArch32 AT_HWCAP2 workaround was needed. See https://crbug.com/boringssl/46.

OPENSSL_EXPORT int CRYPTO_needs_hwcap2_workaround(void);

CRYPTO_is_ARMv8_AES_capable returns true if the current CPU supports the ARMv8 AES instruction.

int CRYPTO_is_ARMv8_AES_capable(void);

CRYPTO_is_ARMv8_PMULL_capable returns true if the current CPU supports the ARMv8 PMULL instruction.

int CRYPTO_is_ARMv8_PMULL_capable(void);
OPENSSL_INLINE int CRYPTO_is_NEON_capable(void) {
    (defined(__ARM_NEON__) || defined(__ARM_NEON))
  return 1;
  return 0;
OPENSSL_INLINE int CRYPTO_is_ARMv8_AES_capable(void) {
  return 1;
  return 0;
OPENSSL_INLINE int CRYPTO_is_ARMv8_PMULL_capable(void) {
  return 1;
  return 0;
#if defined(OPENSSL_PPC64LE)

CRYPTO_is_PPC64LE_vcrypto_capable returns true iff the current CPU supports the Vector.AES category of instructions.

int CRYPTO_is_PPC64LE_vcrypto_capable(void);
extern unsigned long OPENSSL_ppc64le_hwcap2;
#endif  // OPENSSL_PPC64LE
#if !defined(NDEBUG) && !defined(BORINGSSL_FIPS)

Runtime CPU dispatch testing support


BORINGSSL_function_hit is an array of flags. The following functions will set these flags in non-FIPS builds if NDEBUG is not defined.
0: aes_hw_ctr32_encrypt_blocks
1: aes_hw_encrypt
2: aesni_gcm_encrypt
3: aes_hw_set_encrypt_key
4: vpaes_encrypt
5: vpaes_set_encrypt_key
6: bsaes_ctr32_encrypt_blocks

extern uint8_t BORINGSSL_function_hit[7];
#endif  // !NDEBUG && !FIPS