openbsd/src/lib/libcrypto/bn/bn.h, branch OPENBSD_6_8_BASE

Change generating and checking of primes so that the error rate of

2019-08-25T19:24:00+00:00

not being prime depends on the intended use based on the size of the input. For larger primes this will result in more rounds of Miller-Rabin. The maximal error rate for primes with more than 1080 bits is lowered to 2^-128. Patch from Kurt Roeckx and Annie Yousar via OpenSSL commit feac7a1c Jul 25 18:55:16 2018 +0200, still under a free license. OK tb@.

Provide BN_GENCB_new(), BN_GENCB_free() and BN_GENCB_get_arg()

2018-02-20T17:13:14+00:00

Provide BN_get_rfc2409_prime_() and BN_get_rfc3526_prime_().

2018-02-20T17:02:30+00:00

Construct a BN_gcd_nonct, based on BN_mod_inverse_no_branch, as suggested

2017-01-25T06:15:44+00:00

by Alejandro Cabrera to avoid the possibility of a sidechannel timing attack during RSA private key generation. Modify BN_gcd to become not visible under LIBRESSL_INTERNAL and force the use of the _ct or _nonct versions of the function only within the library. ok jsing@

Add ct and nonct versions of BN_mod_inverse for internal use

2017-01-21T11:00:47+00:00

ok jsing@

Split out BN_div and BN_mod into ct and nonct versions for Internal use.

2017-01-21T10:38:29+00:00

ok jsing@

Make explicit _ct and _nonct versions of bn_mod_exp funcitons that

2017-01-21T09:38:59+00:00

matter for constant time, and make the public interface only used external to the library. This moves us to a model where the important things are constant time versions unless you ask for them not to be, rather than the opposite. I'll continue with this method by method. Add regress tests for same. ok jsing@

Explicitly export a list of symbols from libcrypto.

2016-12-21T15:49:29+00:00

Move the "internal" BN functions from bn.h to bn_lcl.h and stop exporting the bn_* symbols. These are documented as only being intended for internal use, so why they were placed in a public header is beyond me... This hides 363 previously exported symbols, most of which exist in headers that are not installed and were never intended to be public. This also removes a few crusty old things that should have died long ago (like _ossl_old_des_read_pw). But don't worry... there are still 3451 symbols exported from the library. With input and testing from inoguchi@. ok beck@ inoguchi@

graduate bn_expand() to a real function. the openssl version of this

2016-03-04T16:23:30+00:00

uses a macro with multiple-evaluations of arguments (different amount than the previous version..), but doug/bcook's inline version makes BIGNUM not opaque [problem spotted by naddy] ok doug

Revert bn_expand until there's consensus on a fix.

2016-03-04T16:06:38+00:00