openbsd/src/lib/libcrypto/evp/evp_local.h, branch OPENBSD_7_9_BASEA mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9_BASE2025-05-27T03:58:12+00:00Make EVP_CIPHER_[gs]et_asn1_iv() local to evp_cipher2025-05-27T03:58:12+00:00tb2025-05-27T03:58:12+00:00urn:sha1:68a52297dea2d50284c7a8a12b92d8f2c15421f3
These formerly public functions have only ever been called from
EVP_CIPHER_asn1_to_param() and EVP_CPIHER_param_to_asn1(), either
directly if the EVP_CIPH_FLAG_DEFAULT_ASN1 flag is set, or indirectly
when set as the .[gs]et_asn1_parameters() method of the EVP_CIPHER.
This commit removes their use in .[gs]et_asn1_parameters() dating back
to long before the EVP_CIPH_FLAG_DEFAULT_ASN1 was introduced in 2010.
This way the only remaining consumer of .[gs]et_asn1_parameters() is RC2.
ok jsing
Remove the pkey_{,public_,param_}check() handlers2024-08-29T16:58:19+00:00tb2024-08-29T16:58:19+00:00urn:sha1:c8099c070f0c547b73edced83591dbd871254307
This disables the EVP_PKEY_*check() API and makes it fail (more precisely
indicate lack of support) on all key types.
This is an intermediate step to full removal.
Removal is ok beck jsing
Implement X509_get_signature_info()2024-08-28T07:15:04+00:00tb2024-08-28T07:15:04+00:00urn:sha1:f822543d6a7043acc1d14a3e0b44eddc1051b097
This is a slightly strange combination of OBJ_find_sigid_algs() and the
security level API necessary because OBJ_find_sigid_algs() on its own
isn't smart enough for the special needs of RSA-PSS and EdDSA.
The API extracts the hash's NID and the pubkey's NID from the certificate's
signatureAlgorithm and invokes special handlers for RSA-PSS and EdDSA
for retrieving the corresponding information. This isn't entirely free
for RSA-PSS, but for now we don't cache this information.
The security bits calculation is a bit hand-wavy, but that's something
that comes along with this sort of numerology.
ok jsing
Garbage collect unused attributes member from EVP_PKEY2024-08-22T12:24:24+00:00tb2024-08-22T12:24:24+00:00urn:sha1:fc0702d8720a97dcf11b0e1241a3245bf18fcb95
ok miod
Garbage collect various *_init() pmeths2024-04-12T09:41:39+00:00tb2024-04-12T09:41:39+00:00urn:sha1:7998df60d7c72723241b97acb596059b0acf7304
It's unclear whether the functions these support were ever really
used for anything else than kicking off an overenginerred state
machine.
ok jsing
Garbage collect the unused verifyctx() and verifyctx_init()2024-03-26T01:41:06+00:00tb2024-03-26T01:41:06+00:00urn:sha1:a8e30fcbc007cf9ca032538900879a19999e0c29
ok joshua jsing
Bye bye gost, bye, bye turdiness2024-03-24T06:05:41+00:00tb2024-03-24T06:05:41+00:00urn:sha1:5bb911ebdb5199150af9adab46b9bb77cbfdc087
ok beck
Remove more PBE stuff from the public API2024-03-02T10:20:27+00:00tb2024-03-02T10:20:27+00:00urn:sha1:207b3a197be2d83ff1333f7fa2dccd6d5271b120
This is still needed internally for CMS and its predecessors. This
removal will enable disentangling some of its innards.
ok jsing
Make legacy cipher methods internal2024-03-02T10:08:29+00:00tb2024-03-02T10:08:29+00:00urn:sha1:6952f7a4dea03a42ca5c0da4f3344dd7ddaf041e
These are ASN.1 handlers for CIPHERs, still used by CMS and its
predecessors. They should never have been public.
ok jsing
Remove EVP_PBE_* API from public visibility2024-03-02T10:06:48+00:00tb2024-03-02T10:06:48+00:00urn:sha1:705576b96a445d220b98a9940401456c7bf52a10
You can no longer add your custom PBE algorithm. Pity. EVP_PBE_CipherInit()
stays for internal use, the rest goes away copmletely.
ok jsing