openbsd/src/lib/libcrypto/bn, branch OPENBSD_6_1_BASE

Send the function codes from the error functions to the bit bucket,

2017-01-29T17:49:23+00:00

as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@

Construct a BN_gcd_nonct, based on BN_mod_inverse_no_branch, as suggested

2017-01-25T06:15:44+00:00

by Alejandro Cabrera to avoid the possibility of a sidechannel timing attack during RSA private key generation. Modify BN_gcd to become not visible under LIBRESSL_INTERNAL and force the use of the _ct or _nonct versions of the function only within the library. ok jsing@

use BN_div_nonct where it is safe to do so.

2017-01-21T23:02:53+00:00

ok guenther@

Add ct and nonct versions of BN_mod_inverse for internal use

2017-01-21T11:00:47+00:00

ok jsing@

Split out BN_div and BN_mod into ct and nonct versions for Internal use.

2017-01-21T10:38:29+00:00

ok jsing@

Make explicit _ct and _nonct versions of bn_mod_exp funcitons that

2017-01-21T09:38:59+00:00

matter for constant time, and make the public interface only used external to the library. This moves us to a model where the important things are constant time versions unless you ask for them not to be, rather than the opposite. I'll continue with this method by method. Add regress tests for same. ok jsing@

/usr/bin/unifdef -D MONT_MUL_MOD -D MONT_EXP_WORD -D RECP_MUL_MOD -m bn_exp.c

2017-01-21T04:34:16+00:00

with some style cleanup after. no binary change ok jsing@

Remove superfluous datatype that is 32 by default. Clang complains

2017-01-04T16:52:26+00:00

about it and it's ok to remove it. This only came up as our clang is targeted at armv7 which enables the NEON instructions. ok kettenis@

Explicitly export a list of symbols from libcrypto.

2016-12-21T15:49:29+00:00

Move the "internal" BN functions from bn.h to bn_lcl.h and stop exporting the bn_* symbols. These are documented as only being intended for internal use, so why they were placed in a public header is beyond me... This hides 363 previously exported symbols, most of which exist in headers that are not installed and were never intended to be public. This also removes a few crusty old things that should have died long ago (like _ossl_old_des_read_pw). But don't worry... there are still 3451 symbols exported from the library. With input and testing from inoguchi@. ok beck@ inoguchi@

Reduce the ternary operator abuse

2016-11-08T01:40:22+00:00

ok miod@