A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.6.0 2017-06-16T10:25:54+00:00 2017-06-16T10:25:54+00:00 espie 2017-06-16T10:25:54+00:00 urn:sha1:8216c8f121c197a76840fb3260e5a44335efefd9 programs will build even without a make depend first. okay tb@ millert@ 2017-05-29T09:44:01+00:00 deraadt 2017-05-29T09:44:01+00:00 urn:sha1:b4ca6599527e8767077c39409965f099aa3d3769 has many small functions without significant local storage, therefore less tail protection from -fstack-protector-strong to prevent their use as ROP gadgets. It is used in security contexts. Also many functions dribble pointers onto the stack, allowing discovery of gadgets via the fixed relative addresses, so let's randomly bias those. ok tedu jsing The rc script will soon need a strategy for skipping this step on machines with poor IO performance. Or maybe do it less often? However, I don't see many more libraries we'll do this with, these are the two most important ones. 2017-05-06T20:42:57+00:00 beck 2017-05-06T20:42:57+00:00 urn:sha1:7f30b538d9c825a59a9a9028931e2f2094cf5a2a in C. Ride previous minor bump ok tom@ inoguchi@ jsing@ 2017-04-30T04:44:58+00:00 jsing 2017-04-30T04:44:58+00:00 urn:sha1:d6384322b936d181e80c1948d8ee20a647f0408e gcc4. This should avoid failed builds while transitioning compilers. While here also make the CFLAGS blocks consistent across makefiles. Discussed with deraadt@, ok beck@ 2017-02-28T14:15:37+00:00 jsing 2017-02-28T14:15:37+00:00 urn:sha1:f96f1c1c67ea18091fd9c2931b6544d268dc00c5 used in various parts of TLS 1.0/1.1. This will allow for code simplification in libssl. The same interface exists in OpenSSL 1.1. ok beck@ deraadt@ inoguchi@ millert@ 2017-01-21T09:38:59+00:00 beck 2017-01-21T09:38:59+00:00 urn:sha1:a0a595cda97de2b217b0582cfa601ee4c746bfce matter for constant time, and make the public interface only used external to the library. This moves us to a model where the important things are constant time versions unless you ask for them not to be, rather than the opposite. I'll continue with this method by method. Add regress tests for same. ok jsing@ 2016-12-21T15:49:29+00:00 jsing 2016-12-21T15:49:29+00:00 urn:sha1:18adabd97858ed28289c9dc31e8042c515840be4 Move the "internal" BN functions from bn.h to bn_lcl.h and stop exporting the bn_* symbols. These are documented as only being intended for internal use, so why they were placed in a public header is beyond me... This hides 363 previously exported symbols, most of which exist in headers that are not installed and were never intended to be public. This also removes a few crusty old things that should have died long ago (like _ossl_old_des_read_pw). But don't worry... there are still 3451 symbols exported from the library. With input and testing from inoguchi@. ok beck@ inoguchi@ 2016-11-05T15:01:54+00:00 schwarze 2016-11-05T15:01:54+00:00 urn:sha1:de1d9cac06346c16572b2afab0149c12543e5b2c 2016-11-05T14:57:29+00:00 jsing 2016-11-05T14:57:29+00:00 urn:sha1:48cb83237520da9f806c7eb78b6b85778a0b02bc This brings in code from BoringSSL, which is mostly taken from SUPERCOP. ok beck@ bcook@ 2016-11-04T18:12:49+00:00 jsing 2016-11-04T18:12:49+00:00 urn:sha1:4046fbafc8322b2a74040f29ec5eac58f249188b ok beck@