openbsd/src/lib/libcrypto/Makefile, branch OPENBSD_7_6A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_62024-08-31T15:56:09+00:00Combine DES code into a smaller set of files.2024-08-31T15:56:09+00:00jsing2024-08-31T15:56:09+00:00urn:sha1:8997a568f0d9f3fd7340dcdbf5104effe54942f0
Discussed with tb@
Merge fcrypt_b.c into fcrypt.c.2024-08-31T15:39:33+00:00jsing2024-08-31T15:39:33+00:00urn:sha1:c2fb263788ce042005f4a392da506ae172993e88
There is no need for these to be separate (presumably done due to assembly
implementations, even though there are #ifdef as well).
Discussed with tb@
Unexport OPENSSL_cpuid_setup and OPENSSL_ia32cap_P2024-08-31T10:44:39+00:00tb2024-08-31T10:44:39+00:00urn:sha1:a39f98b1710f75361198c026bd5f09593af1c1f5
This allows us in particular to get rid of the MD Symbols.list which
were needed on amd64 and i386 for llvm 16 a while back. OPENSSL_ia32cap_P
was never properly exported since the symbols were marked .hidden in the
asm.
ok beck jsing
Nuke the whrlpool (named after the galaxy) from orbit2024-08-31T10:38:49+00:00tb2024-08-31T10:38:49+00:00urn:sha1:74a335fca70cbc1c69a8939c41ad12d0a6414a99
It's just gross. Only used by a popular disk encryption utility on an
all-too-popular OS one or two decades back.
ok beck jsing
Remove DES_enc_{read,write} and DES_rw_mode2024-08-31T10:30:16+00:00tb2024-08-31T10:30:16+00:00urn:sha1:4b2577fba1553fdbc04543a632170338ee2fff7d
Unfortunately we'll probably never be able to get rid of DES entirely.
One part of it that is old enough to be a grandparent can go, though.
ok beck jsing
Garbage collec UI_UTIL remnants2024-08-31T10:28:03+00:00tb2024-08-31T10:28:03+00:00urn:sha1:a3d07755a8d0db401282e8062b34e00134369199
ok beck jsing
Retire conf_api.h and the API therein2024-08-31T09:29:03+00:00tb2024-08-31T09:29:03+00:00urn:sha1:51c678b741cbefcaed139a0d65b70d02ac25559d
This makes the _CONF_* layer of the conf module internal and gets rid
of the entirely unused conf_api.h.
ok beck jsing
Make CONF_METHOD opaque2024-08-31T09:21:44+00:00tb2024-08-31T09:21:44+00:00urn:sha1:99f92d1f135e09a99ace18755bc48e1f954b46cb
Much of conf is designed in such a way that you really have to reach into
its structs. This one piece can be hidden. It might even be removed soon.
ok beck jsing
Implement X509_get_signature_info()2024-08-28T07:15:04+00:00tb2024-08-28T07:15:04+00:00urn:sha1:f822543d6a7043acc1d14a3e0b44eddc1051b097
This is a slightly strange combination of OBJ_find_sigid_algs() and the
security level API necessary because OBJ_find_sigid_algs() on its own
isn't smart enough for the special needs of RSA-PSS and EdDSA.
The API extracts the hash's NID and the pubkey's NID from the certificate's
signatureAlgorithm and invokes special handlers for RSA-PSS and EdDSA
for retrieving the corresponding information. This isn't entirely free
for RSA-PSS, but for now we don't cache this information.
The security bits calculation is a bit hand-wavy, but that's something
that comes along with this sort of numerology.
ok jsing
Remove the empty ui_compat.h2024-08-10T06:41:49+00:00tb2024-08-10T06:41:49+00:00urn:sha1:00708c9d312880823361e1bd53af1d7aa9f14fda
unused in ports and on codesearch