openbsd/src/lib/libcrypto, branch libressl-v2.6.5 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.6.5 2018-06-13T15:12:39+00:00 MFC: Reject excessively large primes in DH key generation. Problem reported 2018-06-13T15:12:39+00:00 jsing 2018-06-13T15:12:39+00:00 urn:sha1:cde85534cd4cb4877990e54db3067beb84ee7681 by Guido Vranken to OpenSSL (https://github.com/openssl/openssl/pull/6457) and based on his diff. suggestions from tb@, ok tb@ jsing@ Original commit by sthen@ MFC: Avoid a timing side-channel leak when generating DSA and ECDSA 2018-06-13T15:07:19+00:00 jsing 2018-06-13T15:07:19+00:00 urn:sha1:b7f92fb83a3deedd2af121feaaaa3e70fae56eca signatures. This is caused by an attempt to do fast modular arithmetic, which introduces branches that leak information regarding secret values. Issue identified and reported by Keegan Ryan of NCC Group. ok beck@ tb@ Bump to LibreSSL 2.6.5 2018-06-13T14:55:24+00:00 bcook 2018-06-13T14:55:24+00:00 urn:sha1:96360bfe7df4f4f8753df49489ae7484cb44b16f bump to 2.6.4 2017-12-11T10:50:37+00:00 bcook 2017-12-11T10:50:37+00:00 urn:sha1:2ece5bdc17bcc46a1d94daac2d5feab95a419b69 bump version in advance of final release 2017-09-26T14:23:20+00:00 bcook 2017-09-26T14:23:20+00:00 urn:sha1:bb11ab9e637768f627fefb664f488f744d3d5662 bump wo 2.6.2 2017-09-26T00:55:13+00:00 bcook 2017-09-26T00:55:13+00:00 urn:sha1:d62b89fe0278e5cfb01c030b03f8177f702b6580 Checking sizeof size_t by SIZE_MAX instead of _LP64 2017-09-03T13:07:34+00:00 inoguchi 2017-09-03T13:07:34+00:00 urn:sha1:4bc823661696046871b13d410fad0e0c625f3df8 ok bcook@ Remove OPENSSL_NO_NEXTPROTONEG - some software creates conflicting 2017-08-31T16:27:31+00:00 jsing 2017-08-31T16:27:31+00:00 urn:sha1:3e0ac1d4a78bb406210fd39a255390119b47ec1c prototypes if we have both OPENSSL_NO_NEXTPROTONEG and the prototypes defined. Bring back the RSA_SSLV23_PADDING define. 2017-08-30T16:07:35+00:00 jsing 2017-08-30T16:07:35+00:00 urn:sha1:e93767c2b5f30f3ec6c7482212044b9300295b55 Several pieces of software expect this to be available unconditionally. Fix ifdef to if in gcm128.c 2017-08-30T12:09:02+00:00 inoguchi 2017-08-30T12:09:02+00:00 urn:sha1:f9ba584b3e1e3b1ab722586ccbeebc121bccee44 ok deraadt@ bcook@