openbsd/src/lib/libcrypto/evp/evp_err.c, branch OPENBSD_6_8_BASEA mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE2020-04-27T19:31:02+00:00Disallow the use of zero length IVs in AES-GCM via2020-04-27T19:31:02+00:00tb2020-04-27T19:31:02+00:00urn:sha1:59b4077b60cc24004bc23295bd2ff465be743f11
EVP_AEAD_CTX_{open,seal}, as this leaks the authentication key.
Issue reported and fix tested by Guido Vranken.
ok beck, jsing
This commit adds a constant to a public header despite library lock,
as discussed with deraadt and sthen.
Expand the ERR_PACK() macro to ERR_REASON() for consistency.2019-03-18T05:34:29+00:00tb2019-03-18T05:34:29+00:00urn:sha1:60690466852971b4a7bd7a7a7ef0d04fe15c0ced
No binary change.
Provide EVP_PKEY_get0_hmac(). From OpenSSL 1.1.1 which is still2019-03-17T18:17:45+00:00tb2019-03-17T18:17:45+00:00urn:sha1:d1cff79a11e003c54fb26944575ab3013366508d
freely licensed.
From jsing
Provide EVP_aes_{128,192,256}_wrap(). This is a compatible2019-03-17T18:07:41+00:00tb2019-03-17T18:07:41+00:00urn:sha1:9651ec05f00bf3384031fb7428d88d3daf1e1139
implementation based on the one in OpenSSL 1.0.2r which is
still freely licensed.
The functions are undocumented in OpenSSL. To use them, one
needs to set the undocumented EVP_CIPHER_CTX_FLAG_WRAP_ALLOW
flag on the EVP_CIPHER_CTX.
resolves #505
ok jsing
Send the function codes from the error functions to the bit bucket,2017-01-29T17:49:23+00:00beck2017-01-29T17:49:23+00:00urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0
as was done earlier in libssl. Thanks inoguchi@ for noticing
libssl had more reacharounds into this.
ok jsing@ inoguchi@
Regen2015-02-15T14:35:30+00:00miod2015-02-15T14:35:30+00:00urn:sha1:abd73a522ddcc1102ca86cc090873f4547b8bb41Explicitly include <openssl/opensslconf.h> in every file that references2014-07-10T22:45:58+00:00jsing2014-07-10T22:45:58+00:00urn:sha1:62348213609ef233110561d1a6ed67ad66df1c7e
an OPENSSL_NO_* define. This avoids relying on something else pulling it
in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is
never going to do anything, since OPENSSL_NO_XYZ will never defined, due
to the fact that opensslconf.h has not been included.
This also includes some miscellaneous sorting/tidying of headers.
tags as requested by miod and tedu2014-06-12T15:49:31+00:00deraadt2014-06-12T15:49:31+00:00urn:sha1:59f4f2c61d71e266d37dd2fc97615b3fd35b4721Add a ChaCha20-Poly1305 AEAD EVP implementation to libcrypto, from Adam2014-05-15T15:09:01+00:00jsing2014-05-15T15:09:01+00:00urn:sha1:8a65f7cbd781f32dec36666d5741de0662a0a71f
Langley's Chromium OpenSSL patches.
ok miod@
Add an AEAD EVP interface to libcrypto, along with AES-GCM AEAD2014-05-15T13:53:47+00:00jsing2014-05-15T13:53:47+00:00urn:sha1:9135c0f787fcbeb8cc9c173e57e9659527be56c5
implementations. This largely pulls in Adam Langley's AEAD patches from
Chromium's OpenSSL.
ok miod@