openbsd/src/lib/libcrypto/evp, branch libressl-v2.5.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.5.0 2016-09-09T00:03:22+00:00 back out calls to EVP_CIPHER_CTX_cleanup() in EVP_Cipher/Encrypt/DecryptFinal 2016-09-09T00:03:22+00:00 bcook 2016-09-09T00:03:22+00:00 urn:sha1:e7a99fe0041a88ac1778aaf8d7013809d62350a8 Software that refers to ctx after calling Final breaks with these changes. revert parts of 1.31 and 1.32 include <sys/types.h> to get <sys/cdefs.h> instead (for __warn_references) 2016-09-04T12:35:23+00:00 bcook 2016-09-04T12:35:23+00:00 urn:sha1:5ada7b1d97b8f747507b099fa6c8324f2b410489 corrected by deraadt@ / guenther@ include <sys/cdefs.h> for portable 2016-09-04T12:20:06+00:00 bcook 2016-09-04T12:20:06+00:00 urn:sha1:750ff4574cb9d911883ecf00f158988daf742e4f deprecate EVP_EncryptFinal(), EVP_DecryptFinal() and EVP_CipherFinal() 2016-09-03T14:54:25+00:00 bcook 2016-09-03T14:54:25+00:00 urn:sha1:3ec8629e017a6dddd8f30a0f5fbdff47a85c8b4f This switches EVP_CipherFinal() to work as EVP_EncryptFinal() and EVP_DecryptFinal() do, always clearing the cipher context on completion. Indicate that, since it is not possible to tell whether this function will clear the context (the API has changed over time in OpenSSL), it is better to use the _ex() variants and explicitly clear instead. ok beck@ deprecate internal use of EVP_[Cipher|Encrypt|Decrypt]_Final. 2016-05-30T13:42:54+00:00 beck 2016-05-30T13:42:54+00:00 urn:sha1:5841b6a630957adeb6dc4dbe8ff11ddc224d3de4 14 years ago these were changed in OpenSSL to be the same as the _ex functions. We use the _ex functions only internally to ensure it is obvious the ctx must be cleared. ok bcook@ fix for integer overflow in encode and encrypt update functions. 2016-05-04T15:05:13+00:00 tedu 2016-05-04T15:05:13+00:00 urn:sha1:14ce935972dfee67affb9dbef7b76c66fc35423b additionally, in EncodeUpdate, if the amount written would overflow, return 0 instead to prevent bugs in the caller. CVE-2016-2105 and CVE-2016-2106 from openssl. fix a padding oracle in aesni cbc mac check. there must be enough data 2016-05-04T15:01:33+00:00 tedu 2016-05-04T15:01:33+00:00 urn:sha1:f67a456a3757b6d60641164adc3e3a5bdfc8fa4d for both the mac and padding bytes. CVE-2016-2107 from openssl revert the big change from yesterday to prepare for smaller commits. 2016-05-04T14:53:29+00:00 tedu 2016-05-04T14:53:29+00:00 urn:sha1:519d297fc2fe7aa90db3d99be37ea38e11547106 prefer limits.h over sys/limits.h 2016-05-03T14:05:41+00:00 bcook 2016-05-03T14:05:41+00:00 urn:sha1:da87549cff83dd705f62d49b47eeff6fcc5b6f4e patch from openssl for multiple issues: 2016-05-03T12:38:53+00:00 tedu 2016-05-03T12:38:53+00:00 urn:sha1:c6409771d22d6e819d9017d650687b93c835ed3a missing padding check in aesni functions overflow in evp encode functions use of invalid negative asn.1 types ok beck