openbsd/src/lib/libcrypto/crypto, branch libressl-v2.1.2

Revert to the use of C code for the basic BN routines (bn_add_words,

2014-12-07T15:45:44+00:00

bn_div_words, bn_mul_add_words, bn_mul_words, bn_sqr_words, bn_sub_words) on sgi, because the generated assembly code isn't R4000-safe.

Move Windows OS-specific functions to make porting easier.

2014-12-03T22:14:38+00:00

Several functions that need to be redefined for a Windows port are right in the middle of other code that is relatively portable. This patch isolates the functions that need Windows-specific implementations so they can be built conditionally in the portable tree. ok jsing@ deraadt@

mop up a barely started project... getting in the way of grepping the tree!

2014-11-22T07:17:50+00:00

Oops, make sure camellia is compiled on platforms without an arch-specific

2014-11-20T19:19:09+00:00

Makefile.inc (i.e. landisk and m88k)

Enable the build of GOST routines in libcrypto. Riding upon the Cammelia

2014-11-18T05:31:47+00:00

libcrypto minor bump.

Add the Cammelia cipher to libcrypto.

2014-11-17T20:31:22+00:00

There used to be a strong reluctance to provide this cipher in LibreSSL in the past, because the licence terms under which Cammelia was released by NTT were free-but-not-in-the-corners, by restricting the right to modify the source code, as well retaining the right to enforce their patents against anyone in the future. However, as stated in http://www.ntt.co.jp/news/news06e/0604/060413a.html , NTT changed its mind and made this code truly free. We only wish there had been more visibility of this, for we could have had enabled Cammelia earlier (-: Licence change noticed by deraadt@. General agreement from the usual LibreSSL suspects. Crank libcrypto.so minor version due to the added symbols.

correct the failure case for getentropy on win32

2014-11-11T13:54:33+00:00

CryptAcquireContext and CryptGenRandom returns zero (FALSE) if fails. From: Dongsheng Song

GOST crypto algorithms (well, most of them), ported from the removed GOST

2014-11-09T19:17:13+00:00

engine to regular EVP citizens, contributed by Dmitry Eremin-Solenikov; libcrypto bits only for now. This is a verbatim import of Dmitry's work, and does not compile in this state; the forthcoming commits will address these issues. None of the GOST code is enabled in libcrypto yet, for it still gets compiled with OPENSSL_NO_GOST defined. However, the public header gost.h will be installed.

Introduce EVP_MD_CTX_ctrl(), to allow for fine control of a given digest.

2014-11-09T19:12:18+00:00

This functionality was already available (and optional), and used in the bowels of the ASN.1 code. This exposes it as a public interface, which will be used by the upcoming GOST code. Crank libcrypto minor version. From Dmitry Eremin-Solenikov.

Add hooks to override native arc4random_buf on FreeBSD.

2014-11-03T06:23:30+00:00

The FreeBSD-native arc4random_buf implementation falls back to weak sources of entropy if the sysctl fails. Remove these dangerous fallbacks by overriding locally. Unfortunately, pthread_atfork() is also broken on FreeBSD (at least 9 and 10) if a program does not link to -lthr. Callbacks registered with pthread_atfork() simply fail silently. So, it is not always possible to detect a PID wraparound. I wish we could do better. This improves arc4random_buf's safety compared to the native FreeBSD implementation. Tested on FreeBSD 9 and 10.