openbsd/src/lib/libcrypto/dsa/dsa_gen.c, branch OPENBSD_7_9_BASE

dsa_gen: convert to BN_MONT_CTX_create()

2025-02-13T11:18:00+00:00

This can now be a single call before the BN_MONT_CTX is actually used rather than two calls separated by 170 lines. ok jsing

Make the DSS_prime_checks macro internal

2024-12-05T19:34:46+00:00

Rename it to DSA_prime_checks and add an XXX comment mentioning that we could reduce the number of rounds thanks to BPSW. There are no plans of changing that as DSA is on its way out. discussed with miod

Remove unused DSA methods

2024-05-11T06:43:50+00:00

There are no accessors to set them, so this has been involved in a bunch of dead logic ever since we made DSA opaque a few years ago. ok jsing

Remove DSA_generate_parameters

2024-03-02T09:33:14+00:00

This was deprecated in 0.9.8 and used until recently by rust-openssl and by keynote (keynote has the excuse that it was written before the deprecation). Fortunately Paul Kehrer fixed this in rust-openssl, so we can garbage collect this turd. (It was replaced with the less ergonomic DSA_generate_parameters_ex() to expose a new fancy way of displaying dots, stars and pluses on key generation). ok jsing

hide symbols in dsa

2023-07-08T14:28:15+00:00

ok tb@

Move DSA_generate_parameters() from dsa_depr.c to dsa_gen.c

2023-04-13T14:58:27+00:00

Discussed with jsing

Replace the remaining BN_copy() with bn_copy()

2023-03-27T10:25:02+00:00

ok jsing

Clean up and simplify BIGNUM handling in DSA code.

2023-01-11T04:39:42+00:00

This adds missing BN_CTX_start()/BN_CTX_end() calls, removes NULL checks before BN_CTX_end()/BN_CTX_free() (since they're NULL safe) and calls BN_free() instead of BN_clear_free() (which does the same thing). Also replace stack allocated BIGNUMs with calls to BN_CTX_get(), using the BN_CTX that is already available. ok tb@

Make internal header file names consistent

2022-11-26T16:08:57+00:00

Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include was fixed manually. discussed with jsing, no objection bcook

Fix whitespace

2022-11-19T06:33:00+00:00