openbsd/src/lib/libcrypto/rsa, branch libressl-v2.6.4

Bring back the RSA_SSLV23_PADDING define.

2017-08-30T16:07:35+00:00

Several pieces of software expect this to be available unconditionally.

Remove RSA_padding_add_SSLv23()/RSA_padding_check_SSLv23() and related

2017-08-28T17:41:59+00:00

code. We removed SSLv2/SSLv3 a long time ago... Discussed with doug@

use freezero() instead of memset/explicit_bzero + free. Substantially

2017-05-02T03:59:45+00:00

reduces conditional logic (-218, +82). MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH cache alignment calculation bn/bn_exp.c wasn'tt quite right. Two other tricky bits with ASN1_STRING_FLAG_NDEF and BN_FLG_STATIC_DATA where the condition cannot be collapsed completely. Passes regress. ok beck

revert previous accidental commit

2017-04-28T22:46:40+00:00

* empty log message *

2017-04-28T22:38:51+00:00

Send the function codes from the error functions to the bit bucket,

2017-01-29T17:49:23+00:00

as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@

Construct a BN_gcd_nonct, based on BN_mod_inverse_no_branch, as suggested

2017-01-25T06:15:44+00:00

by Alejandro Cabrera to avoid the possibility of a sidechannel timing attack during RSA private key generation. Modify BN_gcd to become not visible under LIBRESSL_INTERNAL and force the use of the _ct or _nonct versions of the function only within the library. ok jsing@

Add ct and nonct versions of BN_mod_inverse for internal use

2017-01-21T11:00:47+00:00

ok jsing@

Split out BN_div and BN_mod into ct and nonct versions for Internal use.

2017-01-21T10:38:29+00:00