openbsd/src/lib/libcrypto/evp/e_chacha.c, branch OPENBSD_7_9

Hide public symbols in evp.h

2024-04-09T13:52:42+00:00

largely mechanically done by the guentherizer 9000 ok tb@

Clarify how the EVP IV is used with ChaCha

2023-08-24T04:20:57+00:00

EVP_chacha20() was aligned to follow OpenSSL's nonconformant implementation during a2k20 by djm and myself in an effort to allow OpenSSH to use the OpenSSL 1.1 API. Some corresponding OpenSSL 1.1 documentation was imported at the same time. A comment attempted to translate between implementation and the incorrect documentation, which was necessarily gibberish. Improve the situation by rephrasing and dropping nonsensical bits. Prompted by a question of schwarze

Unbreak the namespace build after a broken mk.conf and tool misfire had

2023-07-07T19:37:54+00:00

me aliasing symbols not in the headers I was procesing. This unbreaks the namespace build so it will pass again ok tb@

Hide symbols in hkdf, evp, err, ecdsa, and ec

2023-07-07T13:54:46+00:00

(part 2 of commit) ok jsing@

Make internal header file names consistent

2022-11-26T16:08:57+00:00

Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include was fixed manually. discussed with jsing, no objection bcook

Reorder functions and remove unnecessary function prototypes.

2022-07-30T17:11:38+00:00

typo

2020-01-26T07:47:26+00:00

Improve the comment explaining why the previous change matches OpenSSL's

2020-01-26T07:34:05+00:00

behavior. ok jsing

Adjust EVP_chacha20()'s behavior to match OpenSSL's semantics:

2020-01-26T02:39:58+00:00

The new IV is 128 bit long and is actually the 64 bit counter followed by 64 the bit initialization vector. This is needed by an upcoming change in OpenSSH and is a breaking change for all current callers. There are language bindings for Node.js, Rust and Erlang, but none of our ports use them. Note that EVP_chacha20() was first introduced in LibreSSL on May 1, 2014 while the entirely incompatible version in OpenSSL was committed on Dec 9, 2015. Initial diff from djm and myself, further refinements by djm. Ports grepping by sthen ok jsing

In chacha_init(), allow for a NULL iv. Reported by znz on github.

2014-08-04T04:16:11+00:00

ok guenther@ jsing@