openbsd/src/lib/libcrypto/evp, branch libressl-v3.5.3

Add check for EVP_CIPHER_CTX_ctrl

2022-01-20T11:31:37+00:00

suggestion from tb@

Add check for EVP_CIPHER_CTX_set_key_length return value

2022-01-20T11:22:48+00:00

CID 21653 ok jsing@ millert@ tb@

Add check for BIO_indent return value

2022-01-20T11:06:24+00:00

CID 24778 ok jsing@ millert@ tb@

Implement new-style OpenSSL BIO callbacks

2022-01-14T08:40:57+00:00

This provides support for new-style BIO callbacks in BIO_{read,write,gets,puts}() and a helper function to work out whether it should call the new or the old style callback. It also adds a few typedefs and minor code cleanup as well as the BIO_{get,set}_callback_ex() from jsing, ok tb

Remove legacy sign/verify from EVP_MD.

2022-01-14T08:38:06+00:00

This removes m_dss.c, m_dss1.c, and m_ecdsa.c and the corresponding public API EVP_{dss,dss1,ecdsa}(). This is basically the following OpenSSL commit. The mentioned change in RSA is already present in rsa/rsa_pmeth.c. ok inoguchi jsing commit 7f572e958b13041056f377a62d3219633cfb1e8a Author: Dr. Stephen Henson Date: Wed Dec 2 13:57:04 2015 +0000 Remove legacy sign/verify from EVP_MD. Remove sign/verify and required_pkey_type fields of EVP_MD: these are a legacy from when digests were linked to public key types. All signing is now handled by the corresponding EVP_PKEY_METHOD. Only allow supported digest types in RSA EVP_PKEY_METHOD: other algorithms already block unsupported types. Remove now obsolete EVP_dss1() and EVP_ecdsa(). Reviewed-by: Richard Levitte Plus OpenSSL commit 625a9baf11c1dd94f17e5876b6ee8d6271b3921d for m_dss.c

Make structs in evp.h and hmac.h opaque

2022-01-14T08:04:14+00:00

This moves most structs to evp_locl.h and moves HMAC_CTX to hmac_local.h. ok inoguchi jsing

Unifdef LIBRESSL_OPAQUE_* and LIBRESSL_NEXT_API

2022-01-14T07:49:49+00:00

This marks the start of major surgery in libcrypto. Do not attempt to build the tree for a while (~50 commits).

Fix typo in header guard

2022-01-12T08:52:25+00:00

Prepare to provide the EVP_MD_meth_* API

2022-01-10T13:42:28+00:00

This allows implementations to add their own EVP_MD_METHODs. Only the setters are provided. This is used by erlang for the otp_test_engine. ok inoguchi jsing

Prepare to provide EVP_PKEY_{public,param}_check

2022-01-10T12:10:26+00:00

This implements checking of a public key and of key generation parameters for DH and EC keys. With the same logic and setters and const quirks as for EVP_PKEY_check(). There are a couple of quirks: For DH no default EVP_PKEY_check() is implemented, instead EVP_PKEY_param_check() calls DH_check_ex() even though DH_param_check_ex() was added for this purpose. EVP_PKEY_public_check() for EC curves also checks the private key if present. ok inoguchi jsing