<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/dsa, branch OPENBSD_6_3</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=OPENBSD_6_3</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=OPENBSD_6_3'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2018-11-17T18:46:43+00:00</updated>
<entry>
<title>Use a blinding value when generating DSA and ECDSA signatures, in order to</title>
<updated>2018-11-17T18:46:43+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-11-17T18:46:43+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=798d8cfebee4c5fcbf64856a9b3f667ec024da4e'/>
<id>urn:sha1:798d8cfebee4c5fcbf64856a9b3f667ec024da4e</id>
<content type='text'>
reduce the possibility of a side-channel attack leaking the private key.

OpenBSD 6.3 errata 022
</content>
</entry>
<entry>
<title>MFC: Avoid a timing side-channel leak when generating DSA and ECDSA</title>
<updated>2018-06-13T15:08:08+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2018-06-13T15:08:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=752cb6f550d07071e7ee95a9266cb5f555f57ee6'/>
<id>urn:sha1:752cb6f550d07071e7ee95a9266cb5f555f57ee6</id>
<content type='text'>
signatures.

This is caused by an attempt to do fast modular arithmetic, which
introduces branches that leak information regarding secret values.

Issue identified and reported by Keegan Ryan of NCC Group.

ok beck@ tb@
</content>
</entry>
<entry>
<title>Add DSA_meth_{dup,free,new,set_{finish,sign}}()</title>
<updated>2018-03-17T15:19:12+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-03-17T15:19:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=36729dfed048bc0fe100881beaa75ee443855fe4'/>
<id>urn:sha1:36729dfed048bc0fe100881beaa75ee443855fe4</id>
<content type='text'>
As in RSA_meth_*, note that these functions return NULL in
out-of-memory situations, but they do not set an error explicitly.

ok jsing
</content>
</entry>
<entry>
<title>Provide DSA_get0_engine()</title>
<updated>2018-02-20T17:52:27+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-02-20T17:52:27+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=70efacd8f5621b00d21cdb72dcfe37c54364e578'/>
<id>urn:sha1:70efacd8f5621b00d21cdb72dcfe37c54364e578</id>
<content type='text'>
ok jsing
</content>
</entry>
<entry>
<title>Provide DSA_SIG_{g,s}et0()</title>
<updated>2018-02-20T17:48:35+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-02-20T17:48:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=fbdcb45625be854bf7f97564396b90ddd79e6d47'/>
<id>urn:sha1:fbdcb45625be854bf7f97564396b90ddd79e6d47</id>
<content type='text'>
ok jsing
</content>
</entry>
<entry>
<title>Provide DSA_{clear,set,test}_flags()</title>
<updated>2018-02-20T17:45:44+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-02-20T17:45:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=f3c27446c6dabcb3a22f69c8173c8bc90ccbea93'/>
<id>urn:sha1:f3c27446c6dabcb3a22f69c8173c8bc90ccbea93</id>
<content type='text'>
ok jsing
</content>
</entry>
<entry>
<title>Provide {DH,DSA}_set0_key(). Requested by sthen.</title>
<updated>2018-02-18T14:58:12+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-02-18T14:58:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=f45fe1036a32cd14875d1619aab61bc0753012a3'/>
<id>urn:sha1:f45fe1036a32cd14875d1619aab61bc0753012a3</id>
<content type='text'>
ok jsing
</content>
</entry>
<entry>
<title>Provide DSA_set0_pqg.</title>
<updated>2018-02-18T12:50:58+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-02-18T12:50:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=a9135fb960f294f9f6d8c1c7b5343b372ea31965'/>
<id>urn:sha1:a9135fb960f294f9f6d8c1c7b5343b372ea31965</id>
<content type='text'>
ok jsing
</content>
</entry>
<entry>
<title>s/DH/DSA/</title>
<updated>2018-02-17T14:35:40+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2018-02-17T14:35:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=85302f6eb21057056417176ee1eee15c94edc1eb'/>
<id>urn:sha1:85302f6eb21057056417176ee1eee15c94edc1eb</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Provide further parts of the OpenSSL 1.1 API: {DH,DSA}_get0_{key,pqg}(),</title>
<updated>2018-02-17T13:47:36+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-02-17T13:47:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=fbfe5db25186968deb518dba39952191d6027694'/>
<id>urn:sha1:fbfe5db25186968deb518dba39952191d6027694</id>
<content type='text'>
EVP_PKEY_get0_{DH,DSA,RSA}(), RSA_{g,s}et0_key().

ok jsing
</content>
</entry>
</feed>
