<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/aes/aes_wrap.c, branch OPENBSD_6_8_BASE</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2018-11-07T18:31:16+00:00</updated>
<entry>
<title>Use memmove() instead of memcpy() to get rid of the need for</title>
<updated>2018-11-07T18:31:16+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-11-07T18:31:16+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=1ccfdc4633eea23918743a87973b287510d77c28'/>
<id>urn:sha1:1ccfdc4633eea23918743a87973b287510d77c28</id>
<content type='text'>
non-overlapping *in and *out buffers as we're already implementing
the "in place (un)wrapping" algorithms as given in RFC 3394.  This
removes a gratuitous API difference to OpenSSLin these undocumented
functions. Found while working on wycheproof regress tests.

ok beck jsing
</content>
</entry>
<entry>
<title>RFC 3394 section 2 states that we need at least two 64 bit blocks</title>
<updated>2018-10-20T15:53:09+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-10-20T15:53:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=030940374172037385e4db118b4bec57b798f314'/>
<id>urn:sha1:030940374172037385e4db118b4bec57b798f314</id>
<content type='text'>
for wrapping and, accordingly, three 64 bit blocks for unwrapping.
That is: we need at least 16 bytes for wrapping and 24 bytes for
unwrapping.  This also matches the lower bounds that OpenSSL have
in their CRYPTO_128_{un,}wrap() functions.

In fact, if we pass an input with 'inlen &lt; 8' to AES_unwrap_key(),
this results in a segfault since then inlen -= 8 underflows.

Found while playing with the Wycheproof keywrap test vectors.

ok bcook
</content>
</entry>
<entry>
<title>Correct spelling of OPENSSL_cleanse.</title>
<updated>2015-09-10T15:56:26+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2015-09-10T15:56:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=647569a51c1530d10e75e272f0982682f696caa7'/>
<id>urn:sha1:647569a51c1530d10e75e272f0982682f696caa7</id>
<content type='text'>
ok miod@
</content>
</entry>
<entry>
<title>Only import cryptlib.h in the four source files that actually need it.</title>
<updated>2014-07-11T08:44:49+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2014-07-11T08:44:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=74e2c009c83ad374bd6acdcfc376a384e25ab007'/>
<id>urn:sha1:74e2c009c83ad374bd6acdcfc376a384e25ab007</id>
<content type='text'>
Remove the openssl public includes from cryptlib.h and add a small number
of includes into the source files that actually need them. While here,
also sort/group/tidy the includes.

ok beck@ miod@
</content>
</entry>
<entry>
<title>Stop including standard headers via cryptlib.h - pull in the headers that</title>
<updated>2014-07-10T13:58:23+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2014-07-10T13:58:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=c917c683bc93c68fbf4310ac181f7906e76b3c94'/>
<id>urn:sha1:c917c683bc93c68fbf4310ac181f7906e76b3c94</id>
<content type='text'>
are needed in the source files that actually require them.

ok beck@ miod@
</content>
</entry>
<entry>
<title>tags as requested by miod and tedu</title>
<updated>2014-06-12T15:49:31+00:00</updated>
<author>
<name>deraadt</name>
<email></email>
</author>
<published>2014-06-12T15:49:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=59f4f2c61d71e266d37dd2fc97615b3fd35b4721'/>
<id>urn:sha1:59f4f2c61d71e266d37dd2fc97615b3fd35b4721</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Move the AES wrap test code into regress.</title>
<updated>2014-05-30T15:17:43+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2014-05-30T15:17:43+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=c8674b1fa62a637c10b758b3d9f60d66e158ec44'/>
<id>urn:sha1:c8674b1fa62a637c10b758b3d9f60d66e158ec44</id>
<content type='text'>
</content>
</entry>
<entry>
<title>if (x) free(x) -&gt; free(x); semantic patch generated with coccinelle, carefully</title>
<updated>2014-05-22T21:12:16+00:00</updated>
<author>
<name>miod</name>
<email></email>
</author>
<published>2014-05-22T21:12:16+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=31181df3ca3b68e1419bc9a97e4aee92a5f91f73'/>
<id>urn:sha1:31181df3ca3b68e1419bc9a97e4aee92a5f91f73</id>
<content type='text'>
eyeballed before applying. Contributed by Cyril Roelandt on tech@
</content>
</entry>
<entry>
<title>When compiling with AES_WRAP_TEST, make main() return a meaningful value</title>
<updated>2014-04-22T21:27:15+00:00</updated>
<author>
<name>miod</name>
<email></email>
</author>
<published>2014-04-22T21:27:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=4e5c7a92843baa574477161a6a1b2df108ba3cde'/>
<id>urn:sha1:4e5c7a92843baa574477161a6a1b2df108ba3cde</id>
<content type='text'>
instead of garbage, and add this to the libcrypto regress. Note these tests
are incomplete, as they always use the default IV.
</content>
</entry>
<entry>
<title>Change library to use intrinsic memory allocation functions instead of</title>
<updated>2014-04-17T13:37:50+00:00</updated>
<author>
<name>beck</name>
<email></email>
</author>
<published>2014-04-17T13:37:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=6aa5f85bab6ba5f9189fbc3d53a12e0f6dae48dd'/>
<id>urn:sha1:6aa5f85bab6ba5f9189fbc3d53a12e0f6dae48dd</id>
<content type='text'>
OPENSSL_foo wrappers. This changes:
OPENSSL_malloc-&gt;malloc
OPENSSL_free-&gt;free
OPENSSL_relloc-&gt;realloc
OPENSSL_freeFunc-&gt;free
</content>
</entry>
</feed>
