openbsd/src/lib/libcrypto/pem, branch OPENBSD_6_3_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_3_BASE 2017-05-02T03:59:45+00:00 use freezero() instead of memset/explicit_bzero + free. Substantially 2017-05-02T03:59:45+00:00 deraadt 2017-05-02T03:59:45+00:00 urn:sha1:5904cc0e04409fde39a97e6580535da34eeb4291 reduces conditional logic (-218, +82). MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH cache alignment calculation bn/bn_exp.c wasn'tt quite right. Two other tricky bits with ASN1_STRING_FLAG_NDEF and BN_FLG_STATIC_DATA where the condition cannot be collapsed completely. Passes regress. ok beck Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:23+00:00 beck 2017-01-29T17:49:23+00:00 urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0 as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ Make explicit _ct and _nonct versions of bn_mod_exp funcitons that 2017-01-21T09:38:59+00:00 beck 2017-01-21T09:38:59+00:00 urn:sha1:a0a595cda97de2b217b0582cfa601ee4c746bfce matter for constant time, and make the public interface only used external to the library. This moves us to a model where the important things are constant time versions unless you ask for them not to be, rather than the opposite. I'll continue with this method by method. Add regress tests for same. ok jsing@ Make sure PEM_SealInit() will correctly destroy the PEM_ENCODE_SEAL_CTX 2016-11-05T11:32:45+00:00 miod 2016-11-05T11:32:45+00:00 urn:sha1:ffd43b659f17d59a2d2db62b9eb10f47c783643c upon error, as there is no way to do this outside of PEM_SealFinal(), which can only work if PEM_SealInit() succeeded... ok beck@ jsing@ unifdef OPENSSL_NO_CMS 2016-10-19T16:49:11+00:00 jsing 2016-10-19T16:49:11+00:00 urn:sha1:2a3b8c956b102b5686a0e8569612a0edb275f365 Place IMPLEMENT_PEM macros under #ifndef LIBRESSL_INTERNAL. 2016-09-04T16:22:54+00:00 jsing 2016-09-04T16:22:54+00:00 urn:sha1:c0f8a40299f0fbc47e11d8d37df6ecd2deabef60 Sort and group functions. 2016-09-04T16:12:33+00:00 jsing 2016-09-04T16:12:33+00:00 urn:sha1:8fa59688817a0ed0d0b58366f255bc2340ff8544 Expand IMPLEMENT_PEM macros. 2016-09-04T15:53:03+00:00 jsing 2016-09-04T15:53:03+00:00 urn:sha1:7aeb67d2176ac44399d41b5b045c93fe11f2bf1a No change in generated assembly. fix the rest of the read_ledword() calls used as lengths to be bounded. 2016-03-02T14:28:14+00:00 beck 2016-03-02T14:28:14+00:00 urn:sha1:98006793401fc106134ad5c3f3f490bcc7671b13 inspired by guido vranken https://guidovranken.wordpress.com/2016/03/01/public-disclosure-malformed-private-keys-lead-to-heap-corruption-in-b2i_pvk_bio/ ok doug@ bound lengths coming out of a pem file to something like reality 2016-03-02T05:02:35+00:00 beck 2016-03-02T05:02:35+00:00 urn:sha1:4b2ecbbafcc28f5338cb1c6af81eedcaccedc4f4 ok deraadt@