openbsd/src/lib/libcrypto/dsa, branch libressl-v2.7.4 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.7.4 2018-06-13T15:08:08+00:00 MFC: Avoid a timing side-channel leak when generating DSA and ECDSA 2018-06-13T15:08:08+00:00 jsing 2018-06-13T15:08:08+00:00 urn:sha1:752cb6f550d07071e7ee95a9266cb5f555f57ee6 signatures. This is caused by an attempt to do fast modular arithmetic, which introduces branches that leak information regarding secret values. Issue identified and reported by Keegan Ryan of NCC Group. ok beck@ tb@ Add DSA_meth_{dup,free,new,set_{finish,sign}}() 2018-03-17T15:19:12+00:00 tb 2018-03-17T15:19:12+00:00 urn:sha1:36729dfed048bc0fe100881beaa75ee443855fe4 As in RSA_meth_*, note that these functions return NULL in out-of-memory situations, but they do not set an error explicitly. ok jsing Provide DSA_get0_engine() 2018-02-20T17:52:27+00:00 tb 2018-02-20T17:52:27+00:00 urn:sha1:70efacd8f5621b00d21cdb72dcfe37c54364e578 ok jsing Provide DSA_SIG_{g,s}et0() 2018-02-20T17:48:35+00:00 tb 2018-02-20T17:48:35+00:00 urn:sha1:fbdcb45625be854bf7f97564396b90ddd79e6d47 ok jsing Provide DSA_{clear,set,test}_flags() 2018-02-20T17:45:44+00:00 tb 2018-02-20T17:45:44+00:00 urn:sha1:f3c27446c6dabcb3a22f69c8173c8bc90ccbea93 ok jsing Provide {DH,DSA}_set0_key(). Requested by sthen. 2018-02-18T14:58:12+00:00 tb 2018-02-18T14:58:12+00:00 urn:sha1:f45fe1036a32cd14875d1619aab61bc0753012a3 ok jsing Provide DSA_set0_pqg. 2018-02-18T12:50:58+00:00 tb 2018-02-18T12:50:58+00:00 urn:sha1:a9135fb960f294f9f6d8c1c7b5343b372ea31965 ok jsing s/DH/DSA/ 2018-02-17T14:35:40+00:00 jsing 2018-02-17T14:35:40+00:00 urn:sha1:85302f6eb21057056417176ee1eee15c94edc1eb Provide further parts of the OpenSSL 1.1 API: {DH,DSA}_get0_{key,pqg}(), 2018-02-17T13:47:36+00:00 tb 2018-02-17T13:47:36+00:00 urn:sha1:fbfe5db25186968deb518dba39952191d6027694 EVP_PKEY_get0_{DH,DSA,RSA}(), RSA_{g,s}et0_key(). ok jsing use freezero() instead of memset/explicit_bzero + free. Substantially 2017-05-02T03:59:45+00:00 deraadt 2017-05-02T03:59:45+00:00 urn:sha1:5904cc0e04409fde39a97e6580535da34eeb4291 reduces conditional logic (-218, +82). MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH cache alignment calculation bn/bn_exp.c wasn'tt quite right. Two other tricky bits with ASN1_STRING_FLAG_NDEF and BN_FLG_STATIC_DATA where the condition cannot be collapsed completely. Passes regress. ok beck