openbsd/src/lib/libcrypto/ec/ec.h, branch OPENBSD_6_8_BASE

If a NULL or zero cofactor is passed to EC_GROUP_set_generator(),

2019-09-29T10:09:09+00:00

try to compute it using Hasse's bound. This works as long as the cofactor is small enough. Port of Brumley's fix for CVE-2019-1547 in OpenSSL 1.1.1 (old license) tests & ok inoguchi input & ok jsing commit 30c22fa8b1d840036b8e203585738df62a03cec8 Author: Billy Brumley Date: Thu Sep 5 21:25:37 2019 +0300 [crypto/ec] for ECC parameters with NULL or zero cofactor, compute it The cofactor argument to EC_GROUP_set_generator is optional, and SCA mitigations for ECC currently use it. So the library currently falls back to very old SCA-vulnerable code if the cofactor is not present. This PR allows EC_GROUP_set_generator to compute the cofactor for all curves of cryptographic interest. Steering scalar multiplication to more SCA-robust code. This issue affects persisted private keys in explicit parameter form, where the (optional) cofactor field is zero or absent. It also affects curves not built-in to the library, but constructed programatically with explicit parameters, then calling EC_GROUP_set_generator with a nonsensical value (NULL, zero). The very old scalar multiplication code is known to be vulnerable to local uarch attacks, outside of the OpenSSL threat model. New results suggest the code path is also vulnerable to traditional wall clock timing attacks. CVE-2019-1547 Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz Reviewed-by: Nicola Tuveri (Merged from https://github.com/openssl/openssl/pull/9781)

Add various macros and controls for EC_PKEY_CTX.

2019-09-06T17:59:25+00:00

These are needed for the upcoming EC CMS support (nothing else appears to use them). This largely syncs our ec_pmeth.c with OpenSSL 1.1.1b. With input from inoguchi@ and tb@. ok inoguchi@ tb@

Partial port of EC_KEY_METHOD from OpenSSL 1.1.

2019-01-19T01:17:41+00:00

Pass const method to EC_KEY_METHOD_get_*() to get rid of an XXX. from markus

Partial port of EC_KEY_METHOD from OpenSSL 1.1.

2019-01-19T01:12:48+00:00

This commit adds missing API for ECDH/ECDSA_verify. from markus

Partial port of EC_KEY_METHOD from OpenSSL 1.1.

2019-01-19T01:07:00+00:00

This commit adds init/free, support for signing, setting and getting the method, engine support as well as extra data. from markus

Add a const qualifier to the 'key' argument of i2o_ECPublicKey() and

2018-05-19T10:37:02+00:00

one to the last argument of each one of i2s_ASN1_OCTET_STRING(), s2i_ASN1_OCTET_STRING(), i2s_ASN1_INTEGER(), i2s_ASN1_ENUMERATED(), and i2s_ASN1_ENUMERATED_TABLE(). tested in a bulk build by sthen ok jsing

Add assembler code for the nist 256-bit GFp curve, written initially by

2016-11-04T17:33:20+00:00

Intel. Obtained from BoringSSL, with some integration work borrowed from OpenSSL 1.0.2; assembler code for arm and sparc64 borrowed from OpenSSL 1.1.0. None of this code is enabled in libcrypto yet. ok beck@ jsing@

Convert ECParameters_dup() from a macro that uses ASN1_dup_of() into an

2015-10-13T15:25:18+00:00

actual function. This removes the last ASN1_dup_of usage from the tree. Feedback from doug@ and miod@

Provide EC_curve_nid2nist() and EC_curve_nist2nid().

2015-06-20T13:26:08+00:00

From OpenSSL. Rides libcrypto bump. ok miod@ (a while ago)

tags as requested by miod and tedu

2014-06-12T15:49:31+00:00