openbsd/src/lib/libcrypto/ec, branch libressl-v3.5.1A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=libressl-v3.5.12022-01-20T11:12:14+00:00Fix check for BN_mod_inverse_ct return value2022-01-20T11:12:14+00:00inoguchi2022-01-20T11:12:14+00:00urn:sha1:1ca471b8e14d63d9b7059b86938ef989ff0857db
ok jsing@ millert@ tb@
Garbage collect the app_items field of ASN1_ADB2022-01-14T08:16:13+00:00tb2022-01-14T08:16:13+00:00urn:sha1:ec5f7af843436771be5081c868e0fb0b44069ead
This is unused and was removed in OpenSSL 5b70372d when it was
replaced with an ASN.1 ADB callback (which we don't support).
ok inoguchi jsing
Prepare to provide EVP_PKEY_{public,param}_check2022-01-10T12:10:26+00:00tb2022-01-10T12:10:26+00:00urn:sha1:875eb616f98cd0720501dc97ee72ed96343b0b33
This implements checking of a public key and of key generation
parameters for DH and EC keys. With the same logic and setters
and const quirks as for EVP_PKEY_check().
There are a couple of quirks: For DH no default EVP_PKEY_check()
is implemented, instead EVP_PKEY_param_check() calls DH_check_ex()
even though DH_param_check_ex() was added for this purpose.
EVP_PKEY_public_check() for EC curves also checks the private key
if present.
ok inoguchi jsing
Prepare to provide EVP_PKEY_check()2022-01-10T11:52:43+00:00tb2022-01-10T11:52:43+00:00urn:sha1:c4f6925dc73274ba5f411d30fbd78b6be1580782
This allows checking the validity of an EVP_PKEY. Only RSA and EC keys
are supported. If a check function is set the EVP_PKEY_METHOD, it will
be used, otherwise the check function on the EVP_PKEY_ASN1_METHOD is
used. The default ASN.1 methods wrap RSA_check_key() and
EC_KEY_check_key(), respectively.
The corresponding setters are EVP_PKEY_{asn1,meth}_set_check().
It is unclear why the PKEY method has no const while the ASN.1 method
has const.
Requested by tobhe and used by PHP 8.1.
Based on OpenSSL commit 2aee35d3
ok inoguchi jsing
Include evp_locl.h where it will be needed once most structs from2021-12-12T21:30:14+00:00tb2021-12-12T21:30:14+00:00urn:sha1:b632ec4f99386efc52214c580c9f233748302224
evp.h will be moved to evp_locl.h in an upcoming bump.
ok inoguchi
Add #include "bn_lcl.h" to the files that will soon need it.2021-12-04T16:08:32+00:00tb2021-12-04T16:08:32+00:00urn:sha1:57082c28039cc632468182b73bebd65a224cbf9d
ok inoguchi jsing
Default to using named curve parameter encoding2021-09-12T16:23:19+00:00tb2021-09-12T16:23:19+00:00urn:sha1:10e8e3b7f398be5d656d5725a95663a364220e35
The pre-OpenSSL 1.1.0 default was to use explicit curve parameter
encoding. Most applications want to use named curve parameter encoding
and have to opt into this explicitly.
Stephen Henson changed this default in OpenSSL commit 86f300d3 6 years
ago and provided a new OPENSSL_EC_EXPLICIT_CURVE define to opt back into
the old default. According to Debian's codesearch, no application
currently does this, which indicates that we currently have a bad default.
In the future it is more likely that applications expect the new
default, so we follow OpenSSL to avoid problems.
Prompted by schwarze who noted that OPENSSL_EC_EXPLICIT_CURVE is missing.
ok beck inoguchi jsing
Expose EC_GROUP_order_bits() in <openssl/ec.h>2021-09-10T14:35:36+00:00tb2021-09-10T14:35:36+00:00urn:sha1:6dd11356e9657c7c8b0960c655d0ddec826964b5
ok beck jsing
Prepare to provide EC_GROUP_order_bits()2021-09-08T17:29:21+00:00tb2021-09-08T17:29:21+00:00urn:sha1:bb3ed186af675577b3dc493706d7c8cceca9243d
ok jsing
Remove some dead code that was missed in an earlier cleanup and2021-08-31T20:14:40+00:00tb2021-08-31T20:14:40+00:00urn:sha1:b47c41b6f2c64c26122d207c3dc5b148fe6d1a35
fix a stale comment.
Found by mortimer with clang 13's -Wunused-but-set-variable.
ok beck