openbsd/src/lib/libcrypto/man/BN_add.3, branch OPENBSD_6_8_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE 2018-04-29T15:58:21+00:00 In view of the recent BN_FLG_CONSTTIME vulnerabilities in OpenSSL, 2018-04-29T15:58:21+00:00 schwarze 2018-04-29T15:58:21+00:00 urn:sha1:0cafa356a8c4c7fcd0ceea551f687c5d7fbef24e carefully document constant time vs. non-constant time operation of BN_div(3), BN_mod_exp(3), and BN_mod_inverse(3). Until the work that is required on the ill-designed BN_exp(3) and BN_gcd(3) interfaces can be undertaken, also document the imperfections in their behaviour, for now. Finally, mention BN_mod_exp(3) behaviour for even moduli. Delete the vague statement about some functions automatically setting BN_FLG_CONSTTIME. It created a false sense of security. Do not rely on it: not all relevant functions do that. Topic brought up by beck@, significant feedback and OK jsing@. found a complete archive of SSLeay-0.4 to SSLeay-0.8.1b tarballs 2018-03-27T17:35:50+00:00 schwarze 2018-03-27T17:35:50+00:00 urn:sha1:30d10c511917e0e339dec931667fc4b6eb014430 on the web, so fix up SSLeay HISTORY accordingly crypto HISTORY up to 0.9.7; researched from OpenSSL git 2018-03-22T21:08:22+00:00 schwarze 2018-03-22T21:08:22+00:00 urn:sha1:d1309e0bd6b01602902f2b12832ae8d7492733e1 crypto HISTORY up to SSLeay 0.9.1; researched from OpenSSL git 2018-03-21T09:03:49+00:00 schwarze 2018-03-21T09:03:49+00:00 urn:sha1:9c6b7656d1237ca414073bcf0955561c2e9e90cc bn.h HISTORY up to SSLeay 0.9.0; researched from OpenSSL git 2018-03-21T06:26:31+00:00 schwarze 2018-03-21T06:26:31+00:00 urn:sha1:3cbc5c2f74db3c4adba5f8981ac9c111dbc0d113 bn.h HISTORY up to SSLeay 0.8.1b; researched from OpenSSL git 2018-03-20T20:26:23+00:00 schwarze 2018-03-20T20:26:23+00:00 urn:sha1:07f97848a667870ec14d7a5a8446ae5e5c370e9c Document BN_set_flags(3) and BN_get_flags(3). 2017-01-30T01:29:31+00:00 schwarze 2017-01-30T01:29:31+00:00 urn:sha1:19dcc2c9146afbb7e7ee92dd56ef7f469c46c87e jsing@ confirmed that these macros are public and worth documenting. correctly mark all documented macros found in <openssl/bn.h> 2017-01-07T05:06:22+00:00 schwarze 2017-01-07T05:06:22+00:00 urn:sha1:b8e091ac7ad9bd0cd506bb982faaeb9af8e35d5a replace all references to bn(3) with BN_new(3), 2016-12-10T21:13:25+00:00 schwarze 2016-12-10T21:13:25+00:00 urn:sha1:14bc249be8db92222ed9b5d6bba0c94e30fae42d and make sure all BN*(3) pages point back to BN_new(3) Add Copyright and license. 2016-11-20T15:57:50+00:00 schwarze 2016-11-20T15:57:50+00:00 urn:sha1:362ed46bb3c8b51d209d0083bc4ec271bb736cb5 Merge a sentence from OpenSSL saying that BN_sub(3) can do in-place manipulation.