ossl: Expose more CPUID bits in OPENSSL_ia32cap_P

[markj]

Summary

This is needed to let OpenSSL 3.1 routines detect VAES and VPCLMULQDQ
extensions. The intent is to import ASM routines which implement
AES-GCM using VEX-prefixed AES-NI instructions.

No functional change intended.

Sponsored by: Stormshield
Sponsored by: Klara, Inc.

sys/crypto/openssl/ossl_x86.c

 #include <crypto/openssl/ossl_cipher.h>
 
 /*
  * See OPENSSL_ia32cap(3).
  *
  * [0] = cpu_feature but with a few custom bits
  * [1] = cpu_feature2 but with AMD XOP in bit 11
  * [2] = cpu_stdext_feature
- * [3] = 0
+ * [3] = cpu_stdext_feature2
  */
 unsigned int OPENSSL_ia32cap_P[4];
 #define AESNI_CAPABLE   (OPENSSL_ia32cap_P[1]&(1<<(57-32)))
 
 ossl_cipher_setkey_t aesni_set_encrypt_key;
 ossl_cipher_setkey_t aesni_set_decrypt_key;
 
 void
if ((xcr0 & (XFEATURE_AVX512 | XFEATURE_AVX)) !=
             (XFEATURE_AVX512 | XFEATURE_AVX))
                 OPENSSL_ia32cap_P[2] &= ~(CPUID_STDEXT_AVX512VL |
                     CPUID_STDEXT_AVX512BW | CPUID_STDEXT_AVX512IFMA |
                     CPUID_STDEXT_AVX512F);
         if ((xcr0 & XFEATURE_AVX) != XFEATURE_AVX) {
                 OPENSSL_ia32cap_P[1] &= ~(CPUID2_AVX | AMDID2_XOP | CPUID2_FMA);
                 OPENSSL_ia32cap_P[2] &= ~CPUID_STDEXT_AVX2;
         }
+        OPENSSL_ia32cap_P[3] = cpu_stdext_feature2;
 
         if (!AESNI_CAPABLE) {
                 sc->has_aes = false;
                 return;
         }
         sc->has_aes = true;
         ossl_cipher_aes_cbc.set_encrypt_key = aesni_set_encrypt_key;
         ossl_cipher_aes_cbc.set_decrypt_key = aesni_set_decrypt_key;
 }