<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/evp, branch libressl-v2.3.1</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=libressl-v2.3.1</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=libressl-v2.3.1'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2015-10-12T06:05:52+00:00</updated>
<entry>
<title>unifdef EVP_CHECK_DES_KEY: Ben Kaduk noticed it has a syntax error; that</title>
<updated>2015-10-12T06:05:52+00:00</updated>
<author>
<name>guenther</name>
<email></email>
</author>
<published>2015-10-12T06:05:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=6b5533302f38d023e5695dade57c09ac256a199e'/>
<id>urn:sha1:6b5533302f38d023e5695dade57c09ac256a199e</id>
<content type='text'>
error was present in the original 2004 commit, so it hasn't been used in
over 11 years, thus exceeding our deprecation requirements by over a decade.
OpenSSL has chosen to *fix it*; we'll gladly watch it burn

ok jsing@
</content>
</entry>
<entry>
<title>Temporarily revive MD4 for MS CHAP support.</title>
<updated>2015-09-14T01:45:03+00:00</updated>
<author>
<name>doug</name>
<email></email>
</author>
<published>2015-09-14T01:45:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=ea990ff7851a189e7a61b56357a6d6e0de88a040'/>
<id>urn:sha1:ea990ff7851a189e7a61b56357a6d6e0de88a040</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Remove MD4 support from LibreSSL.</title>
<updated>2015-09-13T23:36:21+00:00</updated>
<author>
<name>doug</name>
<email></email>
</author>
<published>2015-09-13T23:36:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=785c6ad9250acc090d76964e9c21e550856a22f3'/>
<id>urn:sha1:785c6ad9250acc090d76964e9c21e550856a22f3</id>
<content type='text'>
MD4 should have been removed a long time ago.  Also, RFC 6150 moved it to
historic in 2011.  Rides the major crank from removing SHA-0.

Discussed with many including beck@, millert@, djm@, sthen@
ok jsing@, input + ok bcook@
</content>
</entry>
<entry>
<title>Remove SHA-0 support.</title>
<updated>2015-09-13T21:09:56+00:00</updated>
<author>
<name>doug</name>
<email></email>
</author>
<published>2015-09-13T21:09:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=f84194ca116d8e28c7eb7098c2c8d88f43bd56ac'/>
<id>urn:sha1:f84194ca116d8e28c7eb7098c2c8d88f43bd56ac</id>
<content type='text'>
SHA-0 was withdrawn shortly after publication 20 years ago and replaced
with SHA-1.  This will require a major crank.

ok bcook@, jsing@
</content>
</entry>
<entry>
<title>Correct spelling of OPENSSL_cleanse.</title>
<updated>2015-09-10T15:56:26+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2015-09-10T15:56:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=647569a51c1530d10e75e272f0982682f696caa7'/>
<id>urn:sha1:647569a51c1530d10e75e272f0982682f696caa7</id>
<content type='text'>
ok miod@
</content>
</entry>
<entry>
<title>Replace remaining CRYPTO_memcmp() calls with timingsafe_memcmp().</title>
<updated>2015-06-20T12:01:14+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2015-06-20T12:01:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=4fbad15f23f9774fc485f5683eaed15955f59a37'/>
<id>urn:sha1:4fbad15f23f9774fc485f5683eaed15955f59a37</id>
<content type='text'>
ok doug@ deraadt@
</content>
</entry>
<entry>
<title>Remove obsolete MDC-2DES from libcrypto.</title>
<updated>2015-06-20T01:07:25+00:00</updated>
<author>
<name>doug</name>
<email></email>
</author>
<published>2015-06-20T01:07:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=13b44077b7b29b4c5c4e74960c560bfe55f3fde8'/>
<id>urn:sha1:13b44077b7b29b4c5c4e74960c560bfe55f3fde8</id>
<content type='text'>
ok deraadt@ jsing@ miod@
</content>
</entry>
<entry>
<title>Regen</title>
<updated>2015-02-15T14:35:30+00:00</updated>
<author>
<name>miod</name>
<email></email>
</author>
<published>2015-02-15T14:35:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=abd73a522ddcc1102ca86cc090873f4547b8bb41'/>
<id>urn:sha1:abd73a522ddcc1102ca86cc090873f4547b8bb41</id>
<content type='text'>
</content>
</entry>
<entry>
<title>1.18 would introduce a possible out-of-bounds access in the error path;</title>
<updated>2015-02-14T15:49:51+00:00</updated>
<author>
<name>miod</name>
<email></email>
</author>
<published>2015-02-14T15:49:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=7c212c070d546611ce90c48f5bf1c210dcb0a2f6'/>
<id>urn:sha1:7c212c070d546611ce90c48f5bf1c210dcb0a2f6</id>
<content type='text'>
Coverity CID 105346
ok doug@
</content>
</entry>
<entry>
<title>Remove DEBUG_PKCS5V2 code.</title>
<updated>2015-02-14T15:45:21+00:00</updated>
<author>
<name>miod</name>
<email></email>
</author>
<published>2015-02-14T15:45:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=2b58a2e1ecb2c9193af7cfb72d8b8691ff753122'/>
<id>urn:sha1:2b58a2e1ecb2c9193af7cfb72d8b8691ff753122</id>
<content type='text'>
</content>
</entry>
</feed>
