openbsd/src/lib/libcrypto/man/BN_add.3, branch OPENBSD_7_9

remove some "intentionally undocumented" comments regarding stuff

2025-06-08T22:37:23+00:00

that no longer exists, and add .Lb; OK tb@

One more reciprocal thing hid in here (yay for consistent naming)

2023-04-27T09:47:03+00:00

Remove stale references to BN reciprocal stuff

2023-04-27T09:45:56+00:00

Correctly detect b < a in BN_usub().

2023-01-31T05:16:52+00:00

BN_usub() requires that a >= b and should return an error in the case that b < a. This is currently only detected by checking the number of words in a versus b - if they have the same number of words, the top word is not checked and b < a, which then succeeds and produces an incorrect result. Fix this by checking for the case where a and b have an equal number of words, yet there is a borrow returned from bn_sub_words(). ok miod@ tb@

Mark BN_mod_exp2_mont() as intentionally undocumented.

2022-11-16T14:19:22+00:00

It appears to be intended for internal use by DSA_do_verify(3) and using codesearch.debian.net, i found nothing outside OpenSSL/LibreSSL using it. In April 2018, jsing@ questioned whether the five related functions BN_mod_exp_mont() and friends should even be exposed by , so we decided to not document them. Now tb@ agrees that there is no reason to document BN_mod_exp2_mont() as long as we don't want to document BN_mod_exp_mont().

document BN_mod_add_quick(3), BN_mod_sub_quick(3), BN_mod_lshift(3),

2021-12-20T15:02:13+00:00

BN_mod_lshift_quick(3), BN_mod_lshift1(3), and BN_mod_lshift1_quick(3)

document BN_uadd(3) and BN_usub(3)

2021-12-19T18:39:32+00:00

Add missing const qualifiers in a number of BN_* manuals.

2021-11-30T18:34:35+00:00

ok schwarze

In view of the recent BN_FLG_CONSTTIME vulnerabilities in OpenSSL,

2018-04-29T15:58:21+00:00

carefully document constant time vs. non-constant time operation of BN_div(3), BN_mod_exp(3), and BN_mod_inverse(3). Until the work that is required on the ill-designed BN_exp(3) and BN_gcd(3) interfaces can be undertaken, also document the imperfections in their behaviour, for now. Finally, mention BN_mod_exp(3) behaviour for even moduli. Delete the vague statement about some functions automatically setting BN_FLG_CONSTTIME. It created a false sense of security. Do not rely on it: not all relevant functions do that. Topic brought up by beck@, significant feedback and OK jsing@.

found a complete archive of SSLeay-0.4 to SSLeay-0.8.1b tarballs

2018-03-27T17:35:50+00:00

on the web, so fix up SSLeay HISTORY accordingly