<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/bn/bn_gcd.c, branch OPENBSD_6_8_BASE</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2017-01-29T17:49:23+00:00</updated>
<entry>
<title>Send the function codes from the error functions to the bit bucket,</title>
<updated>2017-01-29T17:49:23+00:00</updated>
<author>
<name>beck</name>
<email></email>
</author>
<published>2017-01-29T17:49:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=d1f47bd292f36094480caa49ada36b99a69c59b0'/>
<id>urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0</id>
<content type='text'>
as was done earlier in libssl. Thanks inoguchi@ for noticing
libssl had more reacharounds into this.
ok jsing@ inoguchi@
</content>
</entry>
<entry>
<title>Construct a BN_gcd_nonct, based on BN_mod_inverse_no_branch, as suggested</title>
<updated>2017-01-25T06:15:44+00:00</updated>
<author>
<name>beck</name>
<email></email>
</author>
<published>2017-01-25T06:15:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=f741256ec38e0e3f1664f26f154e27323aa56472'/>
<id>urn:sha1:f741256ec38e0e3f1664f26f154e27323aa56472</id>
<content type='text'>
by Alejandro Cabrera &lt;aldaya@gmail.com&gt; to avoid the possibility of a
sidechannel timing attack during RSA private key generation.

Modify BN_gcd to become not visible under LIBRESSL_INTERNAL and force
the use of the _ct or _nonct versions of the function only within
the library.

ok jsing@
</content>
</entry>
<entry>
<title>use BN_div_nonct where it is safe to do so.</title>
<updated>2017-01-21T23:02:53+00:00</updated>
<author>
<name>beck</name>
<email></email>
</author>
<published>2017-01-21T23:02:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=9936e217a29ea9f6450025fa200ac9b8088071b0'/>
<id>urn:sha1:9936e217a29ea9f6450025fa200ac9b8088071b0</id>
<content type='text'>
ok guenther@
</content>
</entry>
<entry>
<title>Add ct and nonct versions of BN_mod_inverse for internal use</title>
<updated>2017-01-21T11:00:47+00:00</updated>
<author>
<name>beck</name>
<email></email>
</author>
<published>2017-01-21T11:00:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=48df727a3547375dae8622c34fb55bdf5ef2c44c'/>
<id>urn:sha1:48df727a3547375dae8622c34fb55bdf5ef2c44c</id>
<content type='text'>
ok jsing@
</content>
</entry>
<entry>
<title>Split out BN_div and BN_mod into ct and nonct versions for Internal use.</title>
<updated>2017-01-21T10:38:29+00:00</updated>
<author>
<name>beck</name>
<email></email>
</author>
<published>2017-01-21T10:38:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=55a172a1ed5b0cd8f7de3628fcc2e56df6716d59'/>
<id>urn:sha1:55a172a1ed5b0cd8f7de3628fcc2e56df6716d59</id>
<content type='text'>
ok jsing@
</content>
</entry>
<entry>
<title>BN_CTX_get() can fail - consistently check its return value.</title>
<updated>2015-02-09T15:49:22+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2015-02-09T15:49:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=15dc63f9715f4f10924a705d6a4cc564afe2129e'/>
<id>urn:sha1:15dc63f9715f4f10924a705d6a4cc564afe2129e</id>
<content type='text'>
There are currently cases where the return from each call is checked,
the return from only the last call is checked and cases where it is not
checked at all (including code in bn, ec and engine).

Checking the last return value is valid as once the function fails it will
continue to return NULL. However, in order to be consistent check each
call with the same idiom. This makes it easy to verify.

Note there are still a handful of cases that do not follow the idiom -
these will be handled separately.

ok beck@ doug@
</content>
</entry>
<entry>
<title>Only import cryptlib.h in the four source files that actually need it.</title>
<updated>2014-07-11T08:44:49+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2014-07-11T08:44:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=74e2c009c83ad374bd6acdcfc376a384e25ab007'/>
<id>urn:sha1:74e2c009c83ad374bd6acdcfc376a384e25ab007</id>
<content type='text'>
Remove the openssl public includes from cryptlib.h and add a small number
of includes into the source files that actually need them. While here,
also sort/group/tidy the includes.

ok beck@ miod@
</content>
</entry>
<entry>
<title>tags as requested by miod and tedu</title>
<updated>2014-06-12T15:49:31+00:00</updated>
<author>
<name>deraadt</name>
<email></email>
</author>
<published>2014-06-12T15:49:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=59f4f2c61d71e266d37dd2fc97615b3fd35b4721'/>
<id>urn:sha1:59f4f2c61d71e266d37dd2fc97615b3fd35b4721</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Emergency knfectomie requested by tedu@.</title>
<updated>2014-05-08T13:20:49+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2014-05-08T13:20:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=819648a77046c753ca0119b11b5d28f7a277dcf6'/>
<id>urn:sha1:819648a77046c753ca0119b11b5d28f7a277dcf6</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery.</title>
<updated>2014-04-13T15:25:35+00:00</updated>
<author>
<name>miod</name>
<email></email>
</author>
<published>2014-04-13T15:25:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=d2b3c9742a7df4ab87384039c99682d1944f66d7'/>
<id>urn:sha1:d2b3c9742a7df4ab87384039c99682d1944f66d7</id>
<content type='text'>
</content>
</entry>
</feed>
