openbsd/src/lib/libcrypto/ecdh, branch libressl-v3.3.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.3.1 2019-09-05T16:15:39+00:00 Replace OPENSSL_cleanse() with explicit_bzero(). 2019-09-05T16:15:39+00:00 jsing 2019-09-05T16:15:39+00:00 urn:sha1:6995028c4845cd8ab946887e928bbc5188b38bb3 Provide prototype for ecdh_KDF_X9_63() 2019-09-05T16:12:36+00:00 jsing 2019-09-05T16:12:36+00:00 urn:sha1:b7b73c5664f51f5cd0f5d96ad6d7f7389e64a556 Include correct header. 2019-09-05T16:12:15+00:00 jsing 2019-09-05T16:12:15+00:00 urn:sha1:c511f8dadea7ea62d0d01517b6a46a7e0c52042d style(9) and whitespace. 2019-09-05T16:10:11+00:00 jsing 2019-09-05T16:10:11+00:00 urn:sha1:28cc4b6530dff1ebf259be3446c4e8558c16b9c0 Restore per-file license/copyright removed in OpenSSL commit 4f22f40507f. 2019-09-05T16:07:00+00:00 jsing 2019-09-05T16:07:00+00:00 urn:sha1:8c9ef3163743011774230deeb779f3ec928f33c8 Remove ECDH_KDF_X9_62 wrapper. 2019-09-05T16:05:36+00:00 jsing 2019-09-05T16:05:36+00:00 urn:sha1:6d3803ff4b91d700df645497d96659954e3505d3 Provide ECDH KDF for X9.63 as needed for CMS ECC. 2019-09-05T16:04:42+00:00 jsing 2019-09-05T16:04:42+00:00 urn:sha1:d44a34cbe7ab5e93afd1fd3ca4d039481dfd9334 From OpenSSL 1.1.1b. ok tb@ inoguchi@ Partial port of EC_KEY_METHOD from OpenSSL 1.1. 2019-01-19T01:12:48+00:00 tb 2019-01-19T01:12:48+00:00 urn:sha1:a8a1d0862b279d5f1d505fa305718acb94730824 This commit adds missing API for ECDH/ECDSA_verify. from markus Elliptic curve arithmetic only makes sense between points that belong to 2018-09-02T17:20:31+00:00 tb 2018-09-02T17:20:31+00:00 urn:sha1:32c49c1b2869018c729137c06e57058c5894a964 the same curve. Some Wycheproof tests violate this assumption, making ECDH_compute_key() compute and return garbage. Check that pub_key lies on the curve of the private key so that the calculations make sense. Most paths that get here have this checked (in particular those from OpenSSH and libssl), but one might get here after using d2i_* or manual computation. discussed with & ok jsing; "good catch!" markus make ENGINE_finish() succeed on NULL and simplify callers as in 2018-04-14T07:09:21+00:00 tb 2018-04-14T07:09:21+00:00 urn:sha1:0c5418014797b1fadca3f270eb2f140fd6f5bdf8 OpenSSL commit 7c96dbcdab9 by Rich Salz. This cleans up the caller side quite a bit and reduces the number of lines enclosed in #ifndef OPENSSL_NO_ENGINE. codesearch.debian.net shows that almost nothing checks the return value of ENGINE_finish(). While there, replace a few nearby 'if (!ptr)' with 'if (ptr == NULL)'. ok jsing, tested by & ok inoguchi