openbsd/src/lib/libcrypto/bn, branch OPENBSD_6_4_BASEA mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_6_4_BASE2018-07-23T18:14:32+00:00Use a size_t instead of an int for the byte count in BN_swap_ct().2018-07-23T18:14:32+00:00tb2018-07-23T18:14:32+00:00urn:sha1:1b961cfb65c1f00f26f20454324577edec589a1b
Since bignums use ints for the same purpose, this still uses an int
internally after an overflow check.
Suggested by and discussed with jsing.
ok inoguchi, jsing
Clean up our disgusting implementations of BN_{,u}{add,sub}(), following2018-07-23T18:07:21+00:00tb2018-07-23T18:07:21+00:00urn:sha1:49a35ed3e279b1c1d03fa757a539851339945e90
changes made in OpenSSL by Davide Galassi and others, so that one can
actually follow what is going on. There is no performance impact from
this change as the code still does essentially the same thing. There's
a ton of work still to be done to make the BN code less terrible.
ok jsing, kn
Eliminate the weird condition in the BN_swap_ct() API that at most one bit2018-07-13T08:43:31+00:00tb2018-07-13T08:43:31+00:00urn:sha1:30d844db17bda4a9465f89832a192a4685d70d38
be set in condition. This makes the constant time bit-twiddling a bit
trickier, but it's not too bad. Thanks to halex for an extensive rubber
ducking session over a non-spicy spicy tabouleh falafel..
ok jsing, kn
Sync comment2018-07-11T13:57:53+00:00kn2018-07-11T13:57:53+00:00urn:sha1:f1a8f36c4bd220fad86be1b60aa0105b32e88eee
Makes it a tad easier to read through and compare with BN_swap_ct().
OK tb
Turn yesterday's optimistic ! in an XXX comment into a more cautious ?2018-07-11T07:38:00+00:00tb2018-07-11T07:38:00+00:00urn:sha1:467436bd0e4e1edb3f39ae645b8aba182e9b2b23Provide BN_swap_ct(), a constant time function that conditionally swaps2018-07-10T21:52:07+00:00tb2018-07-10T21:52:07+00:00urn:sha1:56d9c9fb3e9ee89475112311a073d8411159080c
two bignums. It's saner and substantially less ugly than the existing
public BN_constantime_swap() function and will be used in forthcoming work
on constant time ECC code.
From Billy Brumley and his team. Thanks!
ok jsing
fix odd whitespace2018-06-10T19:38:19+00:00tb2018-06-10T19:38:19+00:00urn:sha1:9b3a84945fe74b679a5580f0805138ff98543f62Use explicit_bzero() rather than memset() when clearing a BIGNUM.2018-05-12T17:31:41+00:00jsing2018-05-12T17:31:41+00:00urn:sha1:c3079e78e6b75e352ffdf7f47cb431867798c366
ok bcook@ tb@
Provide BN_GENCB_new(), BN_GENCB_free() and BN_GENCB_get_arg()2018-02-20T17:13:14+00:00jsing2018-02-20T17:13:14+00:00urn:sha1:293a70c9811459080f491f606e3ce48530401462Provide BN_get_rfc2409_prime_*() and BN_get_rfc3526_prime_*().2018-02-20T17:02:30+00:00jsing2018-02-20T17:02:30+00:00urn:sha1:b647d28a68beee37f49a7301d01f2895030f0682