<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/ec, branch libressl-v2.9.2</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=libressl-v2.9.2</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=libressl-v2.9.2'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2019-01-19T01:18:56+00:00</updated>
<entry>
<title>$OpenBSD$</title>
<updated>2019-01-19T01:18:56+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2019-01-19T01:18:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=b06dfc928cc93f45b249d94d8d77a37df942bf31'/>
<id>urn:sha1:b06dfc928cc93f45b249d94d8d77a37df942bf31</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Partial port of EC_KEY_METHOD from OpenSSL 1.1.</title>
<updated>2019-01-19T01:17:41+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2019-01-19T01:17:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=e703f4ea1718542db072958b64181b462187d8ba'/>
<id>urn:sha1:e703f4ea1718542db072958b64181b462187d8ba</id>
<content type='text'>
Pass const method to EC_KEY_METHOD_get_*() to get rid
of an XXX.

from markus
</content>
</entry>
<entry>
<title>Partial port of EC_KEY_METHOD from OpenSSL 1.1.</title>
<updated>2019-01-19T01:12:48+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2019-01-19T01:12:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=a8a1d0862b279d5f1d505fa305718acb94730824'/>
<id>urn:sha1:a8a1d0862b279d5f1d505fa305718acb94730824</id>
<content type='text'>
This commit adds missing API for ECDH/ECDSA_verify.

from markus
</content>
</entry>
<entry>
<title>Partial port of EC_KEY_METHOD from OpenSSL 1.1.</title>
<updated>2019-01-19T01:07:00+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2019-01-19T01:07:00+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=aa769d92fad41004606a446424dde716784d7854'/>
<id>urn:sha1:aa769d92fad41004606a446424dde716784d7854</id>
<content type='text'>
This commit adds init/free, support for signing, setting and
getting the method, engine support as well as extra data.

from markus
</content>
</entry>
<entry>
<title>Port OpenSSL commit 99540ec79491f59ed8b46b4edf130e17dc907f52 -- mitigation</title>
<updated>2018-11-15T05:53:31+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-11-15T05:53:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=c68f49c1f250c7a1b71ff7df5f893ece438e0c28'/>
<id>urn:sha1:c68f49c1f250c7a1b71ff7df5f893ece438e0c28</id>
<content type='text'>
for a timing vullnerability in ECDSA signature generation (CVE-2018-0735).

Note that the blinding that we introduced back in June for ECDSA and DSA
should mitigate this and related issues. This simply adds an additional
layer of protection.

discussed with jsing
</content>
</entry>
<entry>
<title>Avoid dereferencing eckey before checking it for NULL.</title>
<updated>2018-11-09T23:39:45+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-11-09T23:39:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=2feae24d2aed9e9b3713ff77dffe7a373ed0039d'/>
<id>urn:sha1:2feae24d2aed9e9b3713ff77dffe7a373ed0039d</id>
<content type='text'>
CID 184282

ok beck jsing mestre
</content>
</entry>
<entry>
<title>unrevert the use of bn_rand_interval().</title>
<updated>2018-11-06T07:02:33+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-11-06T07:02:33+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=b1f2fa8da88f8be2fe7d6d9d2b8308537fcfb408'/>
<id>urn:sha1:b1f2fa8da88f8be2fe7d6d9d2b8308537fcfb408</id>
<content type='text'>
ok beck jsing
</content>
</entry>
<entry>
<title>Unset Z_is_zero after applying coordinate blinding and</title>
<updated>2018-11-06T06:59:25+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-11-06T06:59:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=5733d08d40f3af89bccdede48bc95c6b840c337a'/>
<id>urn:sha1:5733d08d40f3af89bccdede48bc95c6b840c337a</id>
<content type='text'>
re-enable coordinate blinding.

ok jsing
</content>
</entry>
<entry>
<title>disable EC_POINT coordinate blinding due to failures in ECDHE and TLS</title>
<updated>2018-11-06T02:16:13+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-11-06T02:16:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=d45a794dee47be1c2775b0914d6db527a52fc805'/>
<id>urn:sha1:d45a794dee47be1c2775b0914d6db527a52fc805</id>
<content type='text'>
</content>
</entry>
<entry>
<title>revert use of bn_rand_interval due to failures with ECDHE and TLS</title>
<updated>2018-11-06T02:14:39+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2018-11-06T02:14:39+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=2040275bab908960f255a8c01f793ac41a51b26b'/>
<id>urn:sha1:2040275bab908960f255a8c01f793ac41a51b26b</id>
<content type='text'>
</content>
</entry>
</feed>
