openbsd/src/lib/libcrypto/man/BN_new.3, branch OPENBSD_6_8_BASE

add links back to crypto(3) to function group entry pages

2019-06-10T09:49:48+00:00

and to isolated obsolete pages; OK bcook@ jmc@

Tree structure for manual pages: crypto(3) links to 33 function

2019-06-06T01:06:59+00:00

group pages, and these link on to all their second-level subpages. Only a handful of second-level pages have third-level subpages. So all crypto pages can now be reached from the www.libressl.org frontpage via at most four clicks, in most cases three clicks. Also link back from leaf pages to their respective group pages and add a couple of additional links between related pages. Triggered by a question from deraadt@. OK jmc@ tb@

In view of the recent BN_FLG_CONSTTIME vulnerabilities in OpenSSL,

2018-04-29T15:58:21+00:00

carefully document constant time vs. non-constant time operation of BN_div(3), BN_mod_exp(3), and BN_mod_inverse(3). Until the work that is required on the ill-designed BN_exp(3) and BN_gcd(3) interfaces can be undertaken, also document the imperfections in their behaviour, for now. Finally, mention BN_mod_exp(3) behaviour for even moduli. Delete the vague statement about some functions automatically setting BN_FLG_CONSTTIME. It created a false sense of security. Do not rely on it: not all relevant functions do that. Topic brought up by beck@, significant feedback and OK jsing@.

found a complete archive of SSLeay-0.4 to SSLeay-0.8.1b tarballs

2018-03-27T17:35:50+00:00

on the web, so fix up SSLeay HISTORY accordingly

crypto HISTORY up to SSLeay 0.9.1; researched from OpenSSL git

2018-03-21T09:03:49+00:00

bn.h HISTORY up to SSLeay 0.8.1b; researched from OpenSSL git

2018-03-20T20:26:23+00:00

Mention that BN_new(3) sets the value to zero;

2018-02-13T01:59:16+00:00

from Hubert Kario via OpenSSL commit 681acb31 Sep 29 13:10:34 2017 +0200.

tweak previous;

2017-01-30T07:51:27+00:00

Document BN_set_flags(3) and BN_get_flags(3).

2017-01-30T01:29:31+00:00

jsing@ confirmed that these macros are public and worth documenting.

Seriously warn against calling BN_init(3), BN_MONT_CTX_init(3),

2017-01-29T23:41:49+00:00

and BN_RECP_CTX_init(3). They are not only deprecated but so dangerous that they are almost unusable. I found these scary traps while reading the code in order to document BN_set_flags(3). While here, delete ERR_get_error(3) from SEE ALSO.