openbsd/src/lib/libcrypto/gost, branch OPENBSD_6_4_BASE

Add consts to EVP_PKEY_asn1_set_private()

2018-08-24T20:22:15+00:00

Requires adding a const to the priv_decode() member of EVP_PKEY_ASN1_METHOD and adjusting all *_priv_decode() functions. All this is already documented this way. tested in a bulk build by sthen ok jsing

After removing support for broken PKCS#8 formats (it was high time),

2018-08-24T20:17:33+00:00

we can add const to PKCS8_pkey_get0(). In order for this to work, we need to sprinkle a few consts here and there. tested in a bulk by sthen ok jsing

Remove a handrolled GOST_le2bn().

2018-06-10T14:39:49+00:00

From Dmitry Eremin-Solenikov .

Convert a handful of X509_*() functions to take const as in OpenSSL.

2018-05-01T19:01:28+00:00

tested in a bulk by sthen ok jsing

use freezero() instead of memset/explicit_bzero + free. Substantially

2017-05-02T03:59:45+00:00

reduces conditional logic (-218, +82). MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH cache alignment calculation bn/bn_exp.c wasn'tt quite right. Two other tricky bits with ASN1_STRING_FLAG_NDEF and BN_FLG_STATIC_DATA where the condition cannot be collapsed completely. Passes regress. ok beck

Send the function codes from the error functions to the bit bucket,

2017-01-29T17:49:23+00:00

as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@

Add ct and nonct versions of BN_mod_inverse for internal use

2017-01-21T11:00:47+00:00

ok jsing@

Split out BN_div and BN_mod into ct and nonct versions for Internal use.

2017-01-21T10:38:29+00:00

ok jsing@

Explicitly export a list of symbols from libcrypto.

2016-12-21T15:49:29+00:00

Move the "internal" BN functions from bn.h to bn_lcl.h and stop exporting the bn_* symbols. These are documented as only being intended for internal use, so why they were placed in a public header is beyond me... This hides 363 previously exported symbols, most of which exist in headers that are not installed and were never intended to be public. This also removes a few crusty old things that should have died long ago (like _ossl_old_des_read_pw). But don't worry... there are still 3451 symbols exported from the library. With input and testing from inoguchi@. ok beck@ inoguchi@

unifdef OPENSSL_NO_CMS

2016-10-19T16:49:11+00:00