openbsd/src/lib/libcrypto/rsa/rsa_chk.c, branch OPENBSD_7_9_BASE

Use err_local.h rather than err.h in most places

2025-05-10T05:54:39+00:00

ok jsing

Hide symbols in rsa

2023-07-08T12:26:45+00:00

ok tb@

Make internal header file names consistent

2022-11-26T16:08:57+00:00

Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include was fixed manually. discussed with jsing, no objection bcook

Fix check for BN_mod_inverse_ct return value

2022-01-20T11:12:14+00:00

ok jsing@ millert@ tb@

Check that the RSA exponent is neither even nor 1 in RSA_check_key()

2022-01-10T00:03:02+00:00

Part of OpenSSL commit 464d59a5 ok inoguchi jsing

Prepare to make RSA and RSA_METHOD opaque by including rsa_locl.h

2022-01-07T09:55:32+00:00

where it will be needed in the upcoming bump. discussed with jsing

Send the function codes from the error functions to the bit bucket,

2017-01-29T17:49:23+00:00

as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@

Construct a BN_gcd_nonct, based on BN_mod_inverse_no_branch, as suggested

2017-01-25T06:15:44+00:00

by Alejandro Cabrera to avoid the possibility of a sidechannel timing attack during RSA private key generation. Modify BN_gcd to become not visible under LIBRESSL_INTERNAL and force the use of the _ct or _nonct versions of the function only within the library. ok jsing@

Add ct and nonct versions of BN_mod_inverse for internal use

2017-01-21T11:00:47+00:00

ok jsing@

Split out BN_div and BN_mod into ct and nonct versions for Internal use.

2017-01-21T10:38:29+00:00

ok jsing@