Prepare aws-lc-sys v0.32.3 (#922)

* Bump version to v0.32.3

* Align w/ AWS-LC v1.62.0

* Handle ENABLE_SOURCE_MODIFICATION + DISABLE_CPU_JITTER_ENTROPY

* Tests for jitter-entropy

* Symbols from ubuntu-latest

* Symbols from macos-14

* Symbols from  aarch64-pc-windows-msvc

* Symbols from  x86_64-pc-windows-msvc

* Symbols from macos-13

* Symbols for arm-unknown-linux-gnueabi

* Symbols for aarch64-unknown-linux-gnu

* Symbols for aarch64-unknown-linux-musl

* Symbols for powerpc64le-unknown-linux-gnu

* Symbols for i686-unknown-linux-gnu

* Symbols for x86_64-unknown-linux-musl

* Symbols for armv7-unknown-linux-gnueabihf

* Symbols for powerpc-unknown-linux-gnu

* Symbols from  x86_64-pc-windows-gnu

* Symbols from  i686-pc-windows-msvc

* Generated headers

* Generated bindings from ubuntu-latest

* Generated bindings from macos-14

* Generated bindings for i686-pc-windows-msvc

* Generated bindings for x86_64-pc-windows-gnu

* Generated bindings for aarch64-unknown-linux-musl

* Generated bindings for x86_64-pc-windows-msvc

* Generated bindings for i686-unknown-linux-gnu

* Generated bindings for aarch64-linux-android

* Generated bindings for aarch64-pc-windows-msvc

* Generated bindings for aarch64-unknown-linux-gnu

* Generated bindings for x86_64-unknown-linux-musl

* Generated bindings for riscv64gc-unknown-linux-gnu

* Generated bindings from macos-13

* Collected source files from ubuntu-latest

* Collected source files from macos-14

* Collected source files for x86_64-unknown-linux-musl

* Collected source files for i686-unknown-linux-gnu

* Collected source files from macos-13

* Collected source files for aarch64-unknown-linux-musl

* Collected source files for aarch64-unknown-linux-gnu

* Collected NASM files

* Collected source files for riscv64gc-unknown-linux-gnu

* Add CI jobs for jitter-entropy

* Log the latency, but no sanity check on it

---------

Co-authored-by: aws-lc-sys-bindings-generator <[email protected]>

Author: justsmth

.github/workflows/analysis.yml

@@ -292,3 +292,67 @@ jobs:
           go-version: '>=1.18'
       - name: Run assert script
         run: ./scripts/tests/prefix_test.rs
+  jitter-entropy:
+    if: github.repository_owner == 'aws'
+    name: Verify jitter-entropy is enabled
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          submodules: 'recursive'
+      - uses: dtolnay/rust-toolchain@master
+        id: toolchain
+        with:
+          toolchain: nightly
+      - uses: actions/setup-go@v4
+        with:
+          go-version: '>=1.18'
+      - name: Assert jitter-entropy available
+        run: |
+          if ./scripts/tests/assert_cpu_jitter_entropy.rs; then
+            echo jitter-entropy enabled.
+            exit 0
+          else
+            echo jitter-entropy not enabled, but should be.
+            exit 1
+          fi
+      - name: Log the latency
+        run: |
+          LATENCY=$(./scripts/tests/first_random_byte_latency.rs)
+          echo LATENCY: ${LATENCY}
+  no-jitter-entropy:
+    if: github.repository_owner == 'aws'
+    name: Verify jitter-entropy is not enabled
+    runs-on: ubuntu-latest
+    env:
+      AWS_LC_SYS_NO_JITTER_ENTROPY: 1
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          submodules: 'recursive'
+      - uses: dtolnay/rust-toolchain@master
+        id: toolchain
+        with:
+          toolchain: nightly
+      - uses: actions/setup-go@v4
+        with:
+          go-version: '>=1.18'
+      - name: Assert jitter-entropy not available
+        run: |
+          if ./scripts/tests/assert_cpu_jitter_entropy.rs; then
+            echo jitter-entropy enabled, but should not be.
+            exit 1
+          else
+            echo jitter-entropy not enabled.
+            exit 0
+          fi
+      - name: Verify latency is not present
+        run: |
+          LATENCY=$(./scripts/tests/first_random_byte_latency.rs)
+          echo LATENCY: ${LATENCY}
+          if [ "$LATENCY" -gt 1 ]; then
+            echo LATENCY too high. Was jitter-entropy enabled?
+            exit 1
+          else
+            exit 0
+          fi

aws-lc-sys/Cargo.toml

@@ -1,8 +1,8 @@
 [package]
 name = "aws-lc-sys"
 description = "AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project."
-version = "0.32.2"
-links = "aws_lc_0_32_2"
+version = "0.32.3"
+links = "aws_lc_0_32_3"
 authors = ["AWS-LC"]
 edition = "2021"
 repository = "https://github.com/aws/aws-lc-rs"
@@ -77,4 +77,4 @@ bindgen = { workspace = true, optional = true }
 bindgen.workspace = true
 
 [package.metadata.aws-lc-sys]
-commit-hash = "8ca0b29b141bb8c7eae06ef324e2091d5648d819"
+commit-hash = "5a9df2190d9ecab090a62030f94a6ada6789a436"

aws-lc-sys/aws-lc

@@ -15,9 +15,10 @@ mod x86_64_unknown_linux_gnu;
 mod x86_64_unknown_linux_musl;
 
 use crate::{
-    cargo_env, effective_target, emit_warning, env_var_to_bool, execute_command, get_crate_cflags,
-    is_no_asm, optional_env_optional_crate_target, optional_env_target, out_dir, requested_c_std,
-    set_env_for_target, target, target_arch, target_env, target_os, CStdRequested, OutputLibType,
+    cargo_env, disable_jitter_entropy, effective_target, emit_warning, env_var_to_bool,
+    execute_command, get_crate_cflags, is_no_asm, optional_env_optional_crate_target,
+    optional_env_target, out_dir, requested_c_std, set_env_for_target, target, target_arch,
+    target_env, target_os, CStdRequested, OutputLibType,
 };
 use std::cell::Cell;
 use std::collections::HashMap;
@@ -286,7 +287,9 @@ impl CcBuilder {
                 build_options.push(BuildOption::flag("-pthread"));
             }
         }
-
+        if Some(true) == disable_jitter_entropy() {
+            build_options.push(BuildOption::define("DISABLE_CPU_JITTER_ENTROPY", "1"));
+        }
         self.add_includes(&mut build_options);
 
         build_options
@@ -320,13 +323,16 @@ impl CcBuilder {
                 .join("s2n-bignum-imported")
                 .join("include"),
         ));
-        build_options.push(BuildOption::include(
-            self.manifest_dir
-                .join("aws-lc")
-                .join("third_party")
-                .join("jitterentropy")
-                .join("jitterentropy-library"),
-        ));
+
+        if Some(true) != disable_jitter_entropy() {
+            build_options.push(BuildOption::include(
+                self.manifest_dir
+                    .join("aws-lc")
+                    .join("third_party")
+                    .join("jitterentropy")
+                    .join("jitterentropy-library"),
+            ));
+        }
     }
 
     pub fn create_builder(&self) -> cc::Build {
@@ -478,7 +484,10 @@ impl CcBuilder {
                     s2n_bignum_builder.file(source_path);
                 }
             } else if is_jitter_entropy {
-                jitter_entropy_builder.file(source_path);
+                // Only compile if not disabled.
+                if Some(true) != disable_jitter_entropy() {
+                    jitter_entropy_builder.file(source_path);
+                }
             } else {
                 cc_build.file(source_path);
             }
@@ -488,9 +497,11 @@ impl CcBuilder {
         for object in s2n_bignum_object_files {
             cc_build.object(object);
         }
-        let jitter_entropy_object_files = jitter_entropy_builder.compile_intermediates();
-        for object in jitter_entropy_object_files {
-            cc_build.object(object);
+        if Some(true) != disable_jitter_entropy() {
+            let jitter_entropy_object_files = jitter_entropy_builder.compile_intermediates();
+            for object in jitter_entropy_object_files {
+                cc_build.object(object);
+            }
         }
         cc_build.file(PathBuf::from_str("rust_wrapper.c").unwrap());
     }

aws-lc-sys/builder/cc_builder.rs

@@ -1,6 +1,6 @@
 // Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0 OR ISC
-// Tue Sep 30 15:54:00 UTC 2025
+// Tue Oct 14 13:46:40 UTC 2025
 
 use crate::cc_builder::Library;
 

aws-lc-sys/builder/cc_builder/aarch64_apple_darwin.rs

@@ -1,6 +1,6 @@
 // Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0 OR ISC
-// Tue Sep 30 15:58:17 UTC 2025
+// Tue Oct 14 13:48:54 UTC 2025
 
 use crate::cc_builder::Library;
 

aws-lc-sys/builder/cc_builder/aarch64_unknown_linux_gnu.rs

@@ -1,6 +1,6 @@
 // Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0 OR ISC
-// Tue Sep 30 15:58:42 UTC 2025
+// Tue Oct 14 13:48:50 UTC 2025
 
 use crate::cc_builder::Library;
 

aws-lc-sys/builder/cc_builder/aarch64_unknown_linux_musl.rs

@@ -1,6 +1,6 @@
 // Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0 OR ISC
-// Tue Sep 30 15:58:42 UTC 2025
+// Tue Oct 14 13:48:36 UTC 2025
 
 use crate::cc_builder::Library;
 

aws-lc-sys/builder/cc_builder/i686_unknown_linux_gnu.rs

@@ -1,6 +1,6 @@
 // Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0 OR ISC
-// Tue Sep 30 15:57:59 UTC 2025
+// Tue Oct 14 13:48:50 UTC 2025
 
 use crate::cc_builder::Library;
 

aws-lc-sys/builder/cc_builder/riscv64gc_unknown_linux_gnu.rs

@@ -1,6 +1,6 @@
 // Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0 OR ISC
-// Tue Sep 30 15:55:28 UTC 2025
+// Tue Oct 14 13:48:14 UTC 2025
 
 use crate::cc_builder::Library;