openbsd/src/lib/libcrypto/ec/ec_pmeth.c, branch OPENBSD_7_9_BASE

Use err_local.h rather than err.h in most places

2025-05-10T05:54:39+00:00

ok jsing

pkey_ec_derive: fix call to ECDH_compute_key()

2025-03-13T10:39:51+00:00

The last argument is a pointer to the KDF, so use NULL, not 0.

pkey_ec_derive(): simplify keylen calculation

2025-02-18T06:31:10+00:00

ok jsing

Move BIGNUMs in EC_GROUP and EC_POINT to the heap

2025-01-05T16:07:08+00:00

The only way to get an EC_GROUP or an EC_POINT is by calling the relevant _new() function and to get rid of it, something must call _free(). Thus we can establish the invariant that every group has Weierstrass coefficients p, a, b as well as order and cofactor hanging off it. Similarly, Every point has allocated BIGNUMs for its Jacobian projective coordinates. Unfortunately, a group has the generator as an optional component in addition to seed and montgomery context/one (where optionality makes more sense). This is a mostly mechanical diff and only drops a few silly comments and a couple of unnecessary NULL checks since in our part of the wrold the word invariant has a meaning. This should also appease Coverity who likes to throw fits at calling BN_free() for BIGNUM on the stack (yes, this is actually a thing). ok jsing

Make ec EVP_PKEY_CTRL_MD handler match dsa/rsa more closely

2024-10-19T14:41:03+00:00

This makes the thing a bit easier on the eyes and improves greppability. ok joshua jsing

replace atoi(3) usage with strtonum(3); ok/tweaks tb@

2024-08-26T22:01:28+00:00

Clean up pkey_ec_paramgen()

2023-12-28T22:12:37+00:00

This is basically the same as the dh and dsa version, except it's different because it's EC. Single exit, uniform error checking. "Plug" another leak. With this I earned another shining turd for my collection. ok jsing

Fix pkey_ec_keygen()

2023-12-28T22:09:10+00:00

The EC code came later, and people got better at writing terrible code. In this case, they could remain quite close to what they copy-pasted from DH, so it was relatively straightforward (for once). There's only one slight extra twist and that's easily dealt with. ok jsing

Stop including ecdsa.h and ecdh.h internally

2023-07-28T15:50:33+00:00

These headers are now reduced to #include and are provided for compatiblity only. There's no point in using them. At the same time garbage collect the last uses of OPENSSL_NO_{ECDSA,ECDH} in our tree. ok jsing

Stop including ech_local.h

2023-06-25T19:26:04+00:00