openbsd/src/lib/libcrypto/rsa/rsa_pss.c, branch OPENBSD_7_9_BASE

Use err_local.h rather than err.h in most places

2025-05-10T05:54:39+00:00

ok jsing

Clean up use of EVP_MD_CTX_{legacy_clear,cleanup} in

2024-03-26T05:26:27+00:00

RSA_verify_PKCS1_PSS_mgf1 ok jsing@ tb@

Use EVP_MD_CTX_legacy_clear() internally

2024-02-18T15:45:42+00:00

ok jsing

Hide symbols in rsa

2023-07-08T12:26:45+00:00

ok tb@

Make internal header file names consistent

2022-11-26T16:08:57+00:00

Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include was fixed manually. discussed with jsing, no objection bcook

Prepare to make RSA and RSA_METHOD opaque by including rsa_locl.h

2022-01-07T09:55:32+00:00

where it will be needed in the upcoming bump. discussed with jsing

Include evp_locl.h where it will be needed once most structs from

2021-12-12T21:30:14+00:00

evp.h will be moved to evp_locl.h in an upcoming bump. ok inoguchi

use timing-safe compares for checking results in signature verification

2018-09-05T00:55:33+00:00

(there are no known attacks, this is just inexpensive prudence) feedback and ok tb@ jsing@

Send the function codes from the error functions to the bit bucket,

2017-01-29T17:49:23+00:00

as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@

Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes().

2014-10-22T13:02:04+00:00

arc4random_buf() is guaranteed to always succeed - it is worth noting that a number of the replaced function calls were already missing return value checks. ok deraadt@