openbsd/src/lib/libcrypto/evp, branch libressl-v2.1.2 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.1.2 2014-11-18T05:30:07+00:00 More missing error checks I forgot to commit last week, part of the large 2014-11-18T05:30:07+00:00 miod 2014-11-18T05:30:07+00:00 urn:sha1:881663389a5ac2b5d303a10062d8844890a98596 cleanup diff. KNF (when not conflicting with other cleanup changes in progress) 2014-11-09T23:06:52+00:00 miod 2014-11-09T23:06:52+00:00 urn:sha1:b6d8b8dcb0f5eb1f67698fd5bcb64941d16bfd9a GOST crypto algorithms (well, most of them), ported from the removed GOST 2014-11-09T19:17:13+00:00 miod 2014-11-09T19:17:13+00:00 urn:sha1:35d7dd4666beda50f5094b8804802132fbe722ef engine to regular EVP citizens, contributed by Dmitry Eremin-Solenikov; libcrypto bits only for now. This is a verbatim import of Dmitry's work, and does not compile in this state; the forthcoming commits will address these issues. None of the GOST code is enabled in libcrypto yet, for it still gets compiled with OPENSSL_NO_GOST defined. However, the public header gost.h will be installed. Introduce EVP_MD_CTX_ctrl(), to allow for fine control of a given digest. 2014-11-09T19:12:18+00:00 miod 2014-11-09T19:12:18+00:00 urn:sha1:d92e6fdf5aae7a320effa3de769ce4c0378485c4 This functionality was already available (and optional), and used in the bowels of the ASN.1 code. This exposes it as a public interface, which will be used by the upcoming GOST code. Crank libcrypto minor version. From Dmitry Eremin-Solenikov. Check the result of sk_*_push() operations for failure. 2014-10-28T05:46:56+00:00 miod 2014-10-28T05:46:56+00:00 urn:sha1:794dcf073b734d649d7b5d30916d7a3ae919b66e ok doug@ jsing@ Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes(). 2014-10-22T13:02:04+00:00 jsing 2014-10-22T13:02:04+00:00 urn:sha1:fa457604779ff38b511fdfdae3c6a78664281c22 arc4random_buf() is guaranteed to always succeed - it is worth noting that a number of the replaced function calls were already missing return value checks. ok deraadt@ None of these need to include <openssl/rand.h> 2014-10-18T17:20:40+00:00 jsing 2014-10-18T17:20:40+00:00 urn:sha1:0bad55f54f7132a386746f23ba4f2d106d115563 Guard RSA / RC4-5 ASM when NO_ASM is not defined 2014-08-11T13:29:43+00:00 bcook 2014-08-11T13:29:43+00:00 urn:sha1:0b3a4a686dffa3c2cbaa5c8b196b6c5319d92347 Most assembly blocks remain inactive if OPENSSL_NO_ASM is not defined, only enabling inline assembly, but the RSA / RC4-5 blocks (used only in amd64 systems) turn on implicitly. Guard these two as well. This simplifies enabling just inline ASM in portable, no effective change in OpenBSD. Allow B64_EOF to follow a base64 padding character. This restores previous 2014-08-06T16:01:44+00:00 jsing 2014-08-06T16:01:44+00:00 urn:sha1:a246d7144cfefde1781f8320aaa6f081f3cb760b behaviour that allows a PEM block to be fed through the base64 decoder. Reported by Dmitry Eremin-Solenikov on tech@ ok deraadt@ tedu@ Correct error checks in EVP_read_pw_string_min(): UI_add_input_string() 2014-08-06T04:28:21+00:00 guenther 2014-08-06T04:28:21+00:00 urn:sha1:bb79bde60b45a6e7fc5c4c7a90472d95b589df85 and UI_add_verify_string() return -1 (and maybe -2?) on failure and >=0 on success, instead of always zero on success problem reported by Mark Patruck (mark (at) wrapped.cx) ok miod@