openbsd/src/lib/libcrypto/evp, branch libressl-v2.3.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.3.0 2015-09-14T01:45:03+00:00 Temporarily revive MD4 for MS CHAP support. 2015-09-14T01:45:03+00:00 doug 2015-09-14T01:45:03+00:00 urn:sha1:ea990ff7851a189e7a61b56357a6d6e0de88a040 Remove MD4 support from LibreSSL. 2015-09-13T23:36:21+00:00 doug 2015-09-13T23:36:21+00:00 urn:sha1:785c6ad9250acc090d76964e9c21e550856a22f3 MD4 should have been removed a long time ago. Also, RFC 6150 moved it to historic in 2011. Rides the major crank from removing SHA-0. Discussed with many including beck@, millert@, djm@, sthen@ ok jsing@, input + ok bcook@ Remove SHA-0 support. 2015-09-13T21:09:56+00:00 doug 2015-09-13T21:09:56+00:00 urn:sha1:f84194ca116d8e28c7eb7098c2c8d88f43bd56ac SHA-0 was withdrawn shortly after publication 20 years ago and replaced with SHA-1. This will require a major crank. ok bcook@, jsing@ Correct spelling of OPENSSL_cleanse. 2015-09-10T15:56:26+00:00 jsing 2015-09-10T15:56:26+00:00 urn:sha1:647569a51c1530d10e75e272f0982682f696caa7 ok miod@ Replace remaining CRYPTO_memcmp() calls with timingsafe_memcmp(). 2015-06-20T12:01:14+00:00 jsing 2015-06-20T12:01:14+00:00 urn:sha1:4fbad15f23f9774fc485f5683eaed15955f59a37 ok doug@ deraadt@ Remove obsolete MDC-2DES from libcrypto. 2015-06-20T01:07:25+00:00 doug 2015-06-20T01:07:25+00:00 urn:sha1:13b44077b7b29b4c5c4e74960c560bfe55f3fde8 ok deraadt@ jsing@ miod@ Regen 2015-02-15T14:35:30+00:00 miod 2015-02-15T14:35:30+00:00 urn:sha1:abd73a522ddcc1102ca86cc090873f4547b8bb41 1.18 would introduce a possible out-of-bounds access in the error path; 2015-02-14T15:49:51+00:00 miod 2015-02-14T15:49:51+00:00 urn:sha1:7c212c070d546611ce90c48f5bf1c210dcb0a2f6 Coverity CID 105346 ok doug@ Remove DEBUG_PKCS5V2 code. 2015-02-14T15:45:21+00:00 miod 2015-02-14T15:45:21+00:00 urn:sha1:2b58a2e1ecb2c9193af7cfb72d8b8691ff753122 Enable building with -DOPENSSL_NO_DEPRECATED. 2015-02-11T03:19:37+00:00 doug 2015-02-11T03:19:37+00:00 urn:sha1:e816a1ec1d4411707051912b945e8eab7a5a94e8 If you didn't enable deprecated code, there were missing err.h and bn.h includes. This commit allows building with or without deprecated code. This was not derived from an OpenSSL commit. However, they recently enabled OPENSSL_NO_DEPRECATED in git and fixed these header problems in a different way. Verified with clang that this only changes line numbers in the generated asm. ok miod@