openbsd/src/lib/libcrypto/aes, branch OPENBSD_6_2A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_6_22016-12-21T15:49:29+00:00Explicitly export a list of symbols from libcrypto.2016-12-21T15:49:29+00:00jsing2016-12-21T15:49:29+00:00urn:sha1:18adabd97858ed28289c9dc31e8042c515840be4
Move the "internal" BN functions from bn.h to bn_lcl.h and stop exporting
the bn_* symbols. These are documented as only being intended for internal
use, so why they were placed in a public header is beyond me...
This hides 363 previously exported symbols, most of which exist in headers
that are not installed and were never intended to be public. This also
removes a few crusty old things that should have died long ago (like
_ossl_old_des_read_pw). But don't worry... there are still 3451 symbols
exported from the library.
With input and testing from inoguchi@.
ok beck@ inoguchi@
Replace all uses of magic numbers when operating on OPENSSL_ia32_P[] by2016-11-04T17:30:30+00:00miod2016-11-04T17:30:30+00:00urn:sha1:1a12fc8399638223feca8f853e2ac2cc22eeb471
meaningful constants in a private header file, so that reviewers can actually
get a chance to figure out what the code is attempting to do without knowing
all cpuid bits.
While there, turn it from an array of two 32-bit ints into a properly aligned
64-bit int.
Use of OPENSSL_ia32_P is now restricted to the assembler parts. C code will
now always use OPENSSL_cpu_caps() and check for the proper bits in the
whole 64-bit word it returns.
i386 tests and ok jsing@
Less S390.2016-09-04T14:31:29+00:00jsing2016-09-04T14:31:29+00:00urn:sha1:d613aa0d6ef93fa8587113d3e866da6c582bdd0d
ok deraadt@
Less IA64.2016-09-04T14:06:46+00:00jsing2016-09-04T14:06:46+00:00urn:sha1:08b60d422d5acc1a98c47af6c53680ea9cc45bc2
ok deraadt@
Cast Td4[] values (which are uint8_t) to uint32_t before shifting them left by2015-11-05T21:59:13+00:00miod2015-11-05T21:59:13+00:00urn:sha1:06241eadbc6296ead3b3ead7f6260bc292c81890
24 bits; if we don't, Td4[] gets cast to signed int, and according to C>=99
6.5.7, signed int shifted by enough bits to cause a the sign bit to be set
is an UB.
Reported by Pascal Cuoq on behalf of the trust-in-soft.com mafia I am
{partial,slightly related} to.
Correct spelling of OPENSSL_cleanse.2015-09-10T15:56:26+00:00jsing2015-09-10T15:56:26+00:00urn:sha1:647569a51c1530d10e75e272f0982682f696caa7
ok miod@
Remove the logic responsible for outputting most AES-NI instructions as2015-07-19T02:26:32+00:00miod2015-07-19T02:26:32+00:00urn:sha1:3a1c21ea05417cdafece6fcfc145ab3f83910695
raw byte sequences. The toolchains have had some time to update and assemble
the instructions correctly (except for p{ins,ext}rd which are not supported
yet by as(1) under OpenBSD, but will be fixed shortly).
Inspired by a discussion between tedu@ and John-Mark Gurney.
Verified to still work on Mac OS X and average Linux distros by bcook@
Replace `.byte 0x48,0x83,0xEC,0x08' with `sub \$8,%rsp' which is exactly the2015-07-19T02:21:41+00:00miod2015-07-19T02:21:41+00:00urn:sha1:fd6d9bfbcd2deccd5544fc90cd1f003d1653b2cd
same four bytes, unobfuscated.
extenstion -> extension2015-07-17T20:27:36+00:00miod2015-07-17T20:27:36+00:00urn:sha1:696727d83ea6699d5845e715c4db0142ff1bcda2Remove assert() or OPENSSL_assert() of pointers being non-NULL. The policy2015-02-10T09:46:30+00:00miod2015-02-10T09:46:30+00:00urn:sha1:03858c0228d8ccda7d170fe43e0be79cd0dc6e5b
for libraries in OpenBSD is to deliberately let NULL pointers cause a SIGSEGV.
ok doug@ jsing@