openbsd/src/lib/libcrypto/bn/bn_lib.c, branch OPENBSD_7_9A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_92025-12-15T12:09:46+00:00BN_get_word(): return (BN_ULONG)-1 on error rather than BN_MASK22025-12-15T12:09:46+00:00tb2025-12-15T12:09:46+00:00urn:sha1:341829195e0c845cf26339768f275f021b69fedc
While the latter is more general in that it also works on 1-complement
achitectures, we don't care about that. Adjust documentation and the
only error check for it in libcrypto.
ok deraadt
Use err_local.h rather than err.h in most places2025-05-10T05:54:39+00:00tb2025-05-10T05:54:39+00:00urn:sha1:41e8f99dd1625a9f0c80ce9d4383e95b18e85709
ok jsing
Provide bn_expand_bytes().2024-04-16T13:07:14+00:00jsing2024-04-16T13:07:14+00:00urn:sha1:83ae8eaecf53bc2febd138f92b30798eaea265a5
This will be used in an upcoming change.
ok tb@
Rename bn_expand() to bn_expand_bits().2024-04-16T13:04:05+00:00jsing2024-04-16T13:04:05+00:00urn:sha1:0cf1dfb91461e728170657af9f15ff5bbb00d2f9
Also change the bits type from int to size_t, since that's what the callers
are passing and we can avoid unnecessary input validation.
ok tb@
Prevent negative zero from being created via BN bit functions.2024-04-15T14:35:25+00:00jsing2024-04-15T14:35:25+00:00urn:sha1:8cf5100e6cbe503f43b30d286c72d8e015986786
Both BN_clear_bit() and BN_mask_bits() can create zero values - in both
cases ensure that the negative sign is correctly handled if the value
becomes zero.
Thanks to Guido Vranken for providing a reproducer.
Fixes oss-fuzz #67901
ok tb@
Remove various ${thing}_options2023-07-28T10:35:14+00:00tb2023-07-28T10:35:14+00:00urn:sha1:e91177528644d7ab4206592aac5a07f85a3ceec2
Various, ancient ciphers exposed some of their innards via an _options()
API. Apart from openssl version/speed, only some lua thingie in nmap ever
looked at these. Go figure.
hppa testing by miod, i386 testing by sthen. Thanks!
ok jsing
Hide symbols in bn2023-07-08T12:21:58+00:00beck2023-07-08T12:21:58+00:00urn:sha1:1dad5f352903aa46e83f0b1265298f7e1d4a9633
ok tb@
Provide and use bn_clzw() in place of bn_word_clz().2023-06-21T07:48:41+00:00jsing2023-06-21T07:48:41+00:00urn:sha1:b0edbf3f98eba4b1effd31584dae0af06eb2deff
On some architectures, we can provide an optimised (often single
instruction) count-leading-zero implementation. In order to do this
effectively, provide bn_clzw() as a static inline that can be replaced
by an architecture specific version. The default implementation defers
to the bn_word_clz() function (which may also be architecture specific).
ok tb@
Make BN_num_bits() independent of bn->top.2023-06-21T07:41:55+00:00jsing2023-06-21T07:41:55+00:00urn:sha1:88e97173c6cf4f4ec8c6138cff25d7b1c51a54e9
Provide bn_bitsize(), which performs a constant time scan of a BN in order
to determine the bit size of the BN value. Use this for BN_num_bits() such
that it is no longer dependent on the bn->top value.
ok tb@
Garbage collect BN_zero_ex()2023-04-30T19:15:48+00:00tb2023-04-30T19:15:48+00:00urn:sha1:f2f3a3e6551fa9a5a84a5e5d217b68f6440313eb