openbsd/src/lib/libcrypto/dsa, branch libressl-v4.1.2A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=libressl-v4.1.22025-03-01T11:33:07+00:00Zap trailing whitespace in dsa.h2025-03-01T11:33:07+00:00tb2025-03-01T11:33:07+00:00urn:sha1:464e60f99b2e27e8f2877f74cabc7b9dc1947c76dsa_gen: convert to BN_MONT_CTX_create()2025-02-13T11:18:00+00:00tb2025-02-13T11:18:00+00:00urn:sha1:b873158067d72f18b3026b7f4691a448bf46372b
This can now be a single call before the BN_MONT_CTX is actually used
rather than two calls separated by 170 lines.
ok jsing
Remove #error if OPENSSL_NO_FOO is defined2025-01-25T17:59:44+00:00tb2025-01-25T17:59:44+00:00urn:sha1:5d52abc236226c5a47c36b07e2256e77141e373a
discussed with jsing
Make the DSS_prime_checks macro internal2024-12-05T19:34:46+00:00tb2024-12-05T19:34:46+00:00urn:sha1:3af9f1dd8cf5840a4914ba14a8494cd82a9de2b1
Rename it to DSA_prime_checks and add an XXX comment mentioning that
we could reduce the number of rounds thanks to BPSW. There are no
plans of changing that as DSA is on its way out.
discussed with miod
Remove the undocumented DSA_is_prime() macro2024-12-05T19:29:08+00:00tb2024-12-05T19:29:08+00:00urn:sha1:2c6c75b481334453752e3edee7f8fac54d80abfa
It aliases BN_is_prime(), which was removed in April 2023.
makes sense to miod
Remove weird pad member that was never set to zero after malloc() so2024-11-29T07:42:35+00:00tb2024-11-29T07:42:35+00:00urn:sha1:916f80d01875d84154d09cf15bfc3c885c8c0b05
the weird thing it was supposed to be doing couldn't possibly work.
ok jsing
Drop a useless cast in pkey_dsa_ctrl()2024-10-19T14:39:44+00:00tb2024-10-19T14:39:44+00:00urn:sha1:fc85c69ed538a17bce2bf6cd0e11e68e5245aa16
ok joshua jsing
replace strtol(3) usage with strtonum(3); idea/ok/tweaks tb@2024-08-26T22:00:47+00:00op2024-08-26T22:00:47+00:00urn:sha1:74733354b5147290f7bc39826a56793e0c4bdcdaHide global _it symbols in dsa.h2024-07-08T17:11:05+00:00beck2024-07-08T17:11:05+00:00urn:sha1:df515fecaa47efd3417fbef336db05264fe9a708
ok tb@
libcrypto: constify most error string tables2024-06-24T06:43:23+00:00tb2024-06-24T06:43:23+00:00urn:sha1:c9802a5afe29675d69b605ce906d34fd89c024ac
These constitute the bulk of the remaining global mutable state in
libcrypto. This commit moves most of them into data.rel.ro, leaving
out ERR_str_{functs,libraries,reasons} (which require a slightly
different approach) and SYS_str_reasons which is populated on startup.
The main observation is that if ERR_load_strings() is called with a 0 lib
argument, the ERR_STRING_DATA argument is not actually modified. We could
use this fact to cast away const on the caller side and be done with it.
We can make this cleaner by adding a helper ERR_load_const_strings() which
explicitly avoids the assignment to str->error overriding the error code
already set in the table.
In order for this to work, we need to sprinkle some const in err/err.c.
CMS called ERR_load_strings() with non-0 lib argument, but this didn't
actually modify the error data since it ored in the value already stored
in the table.
Annoyingly, we need to cast const away once, namely in the call to
lh_insert() in int_err_set_item(). Fixing this would require changing
the public API and is going to be tricky since it requires that the
LHASH_DOALL_FN_* types adjust.
ok jsing