openbsd/src/lib/libcrypto, branch libressl-v2.8.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.8.1 2018-09-23T17:52:40+00:00 bump for LibreSSL 2.8.1 2018-09-23T17:52:40+00:00 bcook 2018-09-23T17:52:40+00:00 urn:sha1:f5abecb9062e0d8c0287a85f40ca95017c254540 Simplify initialization of asn1_cb; use correct spelling of NULL. 2018-09-17T18:18:01+00:00 tb 2018-09-17T18:18:01+00:00 urn:sha1:f0f374ba92c5b66a086071327dcd9e602dd74237 sync with mozilla-release (one removal, TURKTRUST, more details at 2018-09-12T22:17:08+00:00 sthen 2018-09-12T22:17:08+00:00 urn:sha1:0731e37042e0d53709a76cd8c185118bfdc9a087 https://bugzilla.mozilla.org/show_bug.cgi?id=1439127) ok danj guenther millert tweak previous; 2018-09-12T15:09:22+00:00 jmc 2018-09-12T15:09:22+00:00 urn:sha1:aa9ad6b8b696d669df75e1543f0d0d8d5c25a693 Add some accessor functions: 2018-09-12T06:35:38+00:00 djm 2018-09-12T06:35:38+00:00 urn:sha1:f4c645b723e47187baadb03d81e1b313974151a7 RSA_meth_get_finish() RSA_meth_set1_name() EVP_CIPHER_CTX_(get|set)_iv() feedback and ok jsing@ tb@ ASN1_OBJECTs should be freed with ASN1_OBJECT_free(3), not with free(3). 2018-09-08T13:49:26+00:00 tb 2018-09-08T13:49:26+00:00 urn:sha1:6753a9e85c3ca1350efc84ae555a7ac88810b2a3 ok inoguchi, jsing indent labels 2018-09-08T10:31:24+00:00 tb 2018-09-08T10:31:24+00:00 urn:sha1:4626a52e8483d08f0f98c86dc00279a73388e537 missing word & a couple of typos 2018-09-08T10:20:33+00:00 tb 2018-09-08T10:20:33+00:00 urn:sha1:74b013dac643328059455cb98a750c27be252cc7 use timing-safe compares for checking results in signature verification 2018-09-05T00:55:33+00:00 djm 2018-09-05T00:55:33+00:00 urn:sha1:cbd19c03dd185d497c1db407d6c4f002cb4abc92 (there are no known attacks, this is just inexpensive prudence) feedback and ok tb@ jsing@ Elliptic curve arithmetic only makes sense between points that belong to 2018-09-02T17:20:31+00:00 tb 2018-09-02T17:20:31+00:00 urn:sha1:32c49c1b2869018c729137c06e57058c5894a964 the same curve. Some Wycheproof tests violate this assumption, making ECDH_compute_key() compute and return garbage. Check that pub_key lies on the curve of the private key so that the calculations make sense. Most paths that get here have this checked (in particular those from OpenSSH and libssl), but one might get here after using d2i_* or manual computation. discussed with & ok jsing; "good catch!" markus