openbsd/src/lib/libcrypto/engine/engine.h, branch OPENBSD_6_8_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE 2019-01-19T01:07:00+00:00 Partial port of EC_KEY_METHOD from OpenSSL 1.1. 2019-01-19T01:07:00+00:00 tb 2019-01-19T01:07:00+00:00 urn:sha1:aa769d92fad41004606a446424dde716784d7854 This commit adds init/free, support for signing, setting and getting the method, engine support as well as extra data. from markus Add automatic threading initialization for libcrypto. 2018-11-11T06:41:28+00:00 bcook 2018-11-11T06:41:28+00:00 urn:sha1:3c41ae7ec959c3c608931951c8655a0e1df18696 This implements automatic thread support initialization in libcrypto. This does not remove any functions from the ABI, but does turn them into no-ops. Stub implementations of pthread_mutex_(init|lock|unlock) are provided for ramdisks. This does not implement the new OpenSSL 1.1 thread API internally, keeping the original CRYTPO_lock / CRYPTO_add_lock functions for library locking. For -portable, crypto_lock.c can be reimplemented with OS-specific primitives as needed. ok beck@, tb@, looks sane guenther@ Remove OpenSSL engine RSAX. 2015-07-19T22:34:27+00:00 doug 2015-07-19T22:34:27+00:00 urn:sha1:25841ddc7e1d255a907b71bc100b10c363287a75 OpenSSL stopped building it last year and removed it this year. Based on OpenSSL commit c436e05bdc7f49985a750df64122c960240b3ae1. Also cranked major version in libcrypto, libssl and libtls. "fine with me" bcook@ miod@ None of these need to include <openssl/rand.h> 2014-10-18T17:20:40+00:00 jsing 2014-10-18T17:20:40+00:00 urn:sha1:0bad55f54f7132a386746f23ba4f2d106d115563 KNF. 2014-06-22T12:16:28+00:00 jsing 2014-06-22T12:16:28+00:00 urn:sha1:320f8f4ee4d951cc71084d612a59c7c70290206f tags as requested by miod and tedu 2014-06-12T15:49:31+00:00 deraadt 2014-06-12T15:49:31+00:00 urn:sha1:59f4f2c61d71e266d37dd2fc97615b3fd35b4721 Abandon the auto-ENGINE /dev/crypto interface. VIA 3des cbc receives 2014-06-10T16:15:19+00:00 deraadt 2014-06-10T16:15:19+00:00 urn:sha1:b147e3087c995acd3d243bd1df04a843ea6babbc collateral damage. The syncronous nature of this mechanism has hampered performance for symmetric crypto relative to brute-force cpu. The assymetric crypto support never really materialized in drivers. So abandon the complexity. ok tedu beck mikeb some disagrement from djm but if he wants to test /dev/crypto ciphers he should do it without this this gigantic API in the way A few months back there was a big community fuss regarding direct-use 2014-06-02T15:08:38+00:00 deraadt 2014-06-02T15:08:38+00:00 urn:sha1:63bcac43aa0d6361864d2102a9cbe8ec910b763e of the intel RDRAND instruction. Consensus was RDRAND should probably only be used as an additional source of entropy in a mixer. Guess which library bends over backwards to provide easy access to RDRAND? Yep. Guess which applications are using this support? Not even one... but still, this is being placed as a trap for someone. Send this support straight to the abyss. ok kettenis Expand the OPENSSL_{GLOBAL,EXPORT,IMPORT,EXTERN} macros - this rids the 2014-05-22T17:53:00+00:00 jsing 2014-05-22T17:53:00+00:00 urn:sha1:6ad0ba42a7ed2a0a965264f958d1610e77ea3392 libssl tree from all uses of these defines. ok miod@ Remove the GOST engine: It is not compiled or used and depends on the 2014-04-15T18:02:05+00:00 reyk 2014-04-15T18:02:05+00:00 urn:sha1:156754a7255a66585eae75de94a4d0f62dd305c0 "dynamic engine" feature that is not enabled in our build. People who need it can still pull it out of the Attic; if it is to have a Russian engine just because it's a Russian engine. OK deraadt@ beck@