Vendor Change:-

1. Added conditional compilation flags "MBEDTLS_FORCE_AESNI" and "MBEDTLS_FORCE_PADLOCK"
2. This allows us to supress cpuid based feature detection on sgx platforms.
3. "MBEDTLS_FORCE_AESNI" gets set if "force_aesni_support" flag is enabled.
4. Please refer to the previous commit for rust side changes.

mbedtls-sys/vendor/library/aesni.c

@@ -42,6 +42,7 @@
 
 #if defined(MBEDTLS_HAVE_X86_64)
 
+#if !defined(MBEDTLS_CUSTOM_HAS_AESNI)
 /*
  * AES-NI support detection routine
  */
@@ -62,6 +63,7 @@ int mbedtls_aesni_has_support( unsigned int what )
 
     return( ( c & what ) != 0 );
 }
+#endif
 
 /*
  * Binutils needs to be at least 2.19 to support AES-NI instructions.

mbedtls-sys/vendor/library/padlock.c

@@ -37,6 +37,7 @@
 
 #if defined(MBEDTLS_HAVE_X86)
 
+#if !defined(MBEDTLS_CUSTOM_HAS_PADLOCK)
 /*
  * PadLock detection routine
  */
@@ -67,6 +68,7 @@ int mbedtls_padlock_has_support( int feature )
 
     return( flags & feature );
 }
+#endif
 
 /*
  * PadLock AES-ECB block en(de)cryption