A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9 2024-08-28T06:53:24+00:00 2024-08-28T06:53:24+00:00 tb 2024-08-28T06:53:24+00:00 urn:sha1:d11fe5b2062a23e69f721c28b3f515c5bec8a3aa There are currently very few differences between the rsa_asn1_meth for plain RSA and the rsa_pss_asn1_meth for RSA-PSS apart from the obviously necessary differnces for base_method, pkey_id, pem_str and info (and the fact that RSA has support for legacy private key encoding). This had the lucky side effect that it didn't really matter which ameth one ended up using after OBJ_find_sigid_algs(). With the upcoming support for X509_get_signature_infO() for RSA-PSS, this needs to change as for RSA-PSS we need to decode the PSS parameters for extracting the "security level", whereas for RSA we can just use the hash length. Thus, for RSA-PSS switch pkey_id from the incorrect rsaEncryption to rassaPss. ok jsing PS: OBJ_find_sigid_algs() manual is no longer entirely correct, but this has been the case since we added Ed25519 support to obj_xref. 2024-01-27T16:08:43+00:00 tb 2024-01-27T16:08:43+00:00 urn:sha1:82c514d8ebffd242e82c0b0b70bc91944857a299 This allows signing and verifying ASN.1 "items" using the ECDSA with SHA-3 signature algorithms. With this diff, ECDSA certificates and CMS products using ECDSA with SHA-3 can be generated using the openssl command line tool. ok jsing 2023-07-28T10:25:05+00:00 tb 2023-07-28T10:25:05+00:00 urn:sha1:ff3b404e5cda0d0876bf6dccdcc293d75dd12c57 Another bit of unused extensibility that was responsible for a lot of complexity until recently. This removes the remaining stubs from the public API. ok jsing 2023-07-22T19:08:03+00:00 tb 2023-07-22T19:08:03+00:00 urn:sha1:50f4fc20401c6f47f0efdb5dde0e8b49e7769f77 2023-07-22T18:32:05+00:00 tb 2023-07-22T18:32:05+00:00 urn:sha1:61013c691912b323eda36c6159ffec02e6752baf Instead of having two unreadable tables placed in a header generated by a janky perl script from an ugly text file, use a single table inlined in the C file. This table is used to translate between signature algorithm OIDs and pairs of OIDs of a message digest and a cipher. The table has fewer than fifty entries and isn't used in a hot path. Using binary search is overkill. Just do two linear searches, one for each translation. None of the original code remains apart from the API. ok jsing 2023-07-22T18:12:09+00:00 tb 2023-07-22T18:12:09+00:00 urn:sha1:24fee35a243bbd5738d4a56b369016aed89f6d18 These functions will be removed in the upcoming bump. Nothing uses them, so it won't hurt if they become noops. This allows us to garbage collect the sig_app and sigx_app stacks and make a first step towards simplifying the OBJ_bsearch_() dances. Also sprinkle some const correctness... because we can. intermediate step towards a diff that is ok jsing 2023-07-08T12:27:51+00:00 beck 2023-07-08T12:27:51+00:00 urn:sha1:5313bff44a2b791430242ba141e1b2b2f0ba11d6 ok tb@ 2017-01-21T04:44:43+00:00 jsing 2017-01-21T04:44:43+00:00 urn:sha1:42873dc5e4c10aa805dade89546299827d341356 No change to generated assembly excluding line numbers. 2014-06-12T15:49:31+00:00 deraadt 2014-06-12T15:49:31+00:00 urn:sha1:59f4f2c61d71e266d37dd2fc97615b3fd35b4721 2014-06-07T15:06:24+00:00 deraadt 2014-06-07T15:06:24+00:00 urn:sha1:9c53764a0ba4c6e9262d0f1609e2b5f26d82e845 and others to the regress framework. These remaining ones just muddle us up when re-reading code repeatedly. ok jsing