openbsd/src/lib/libcrypto, branch libressl-v3.0.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.0.0 2019-07-13T17:26:38+00:00 explain the acronym "CRT"; suggested by tb@ 2019-07-13T17:26:38+00:00 schwarze 2019-07-13T17:26:38+00:00 urn:sha1:e9ef26d0b799866960d5d8ea8c87d53cea6b50ff Using pthread_atfork instead of __register_atfork with uClibc on noMMU 2019-07-11T10:37:28+00:00 inoguchi 2019-07-11T10:37:28+00:00 urn:sha1:c513fcc21523226bcda18cc239488f0508ef6e37 uClibc on noMMU doesn't provide __register_atfork(). Reported by redbirdtek on Github issue. https://github.com/libressl-portable/portable/issues/538 ok bcook@ Clean up pvkfmt.c 2019-07-08T11:56:18+00:00 inoguchi 2019-07-08T11:56:18+00:00 urn:sha1:38918e2b1105203e3a43e4c44a53bf432952771c - Replace EVP_CIPHER_CTX_init with EVP_CIPHER_CTX_new and handle return value - Replace EVP_CIPHER_CTX_cleanup with EVP_CIPHER_CTX_free - Change two 'return -1;' to 'goto err;' for avoiding leak - Remove the case if enclevel == 0 - Change enclevel checking to make more consistent - Change all goto label to 'err' and insert space before goto label ok and advise from tb@ Fix pvk format processing in libcrypto 2019-07-07T10:52:56+00:00 inoguchi 2019-07-07T10:52:56+00:00 urn:sha1:b7ed3b2ab5936f64572047d1bcd708bbdeeb5a59 - Return the valid pointer in i2b_PVK() - Use EVP_Decrypt* instead of EVP_Encrypt* - Fix error handling after BIO_write() in i2b_PVK_bio() ok tb@ snprintf/vsnprintf return < 0 on error, rather than -1. 2019-07-03T03:24:04+00:00 deraadt 2019-07-03T03:24:04+00:00 urn:sha1:bdd1c0627cbfd4015db19da84ab1a24f50d9f6dc Add cpuid support for arm64 so that we can recognize which 2019-07-02T19:31:28+00:00 patrick 2019-07-02T19:31:28+00:00 urn:sha1:154e31023af7e0be306e0968992087fe0a23f907 hardware crypto features are available. "no objections" kettenis@ failed to detect asprintf() error by observing return of -1, instead the 2019-06-28T05:47:57+00:00 deraadt 2019-06-28T05:47:57+00:00 urn:sha1:c1fcaeae79bc31f65b74c1825ddee23b90beee04 code was inspecting the pointer (which is, sadly, undefined on error, because the current specification of asprintf is crazy sloppy) Make BN_num_bits_word() constant time. 2019-06-17T17:11:48+00:00 tb 2019-06-17T17:11:48+00:00 urn:sha1:aad713565aa006bc353dc31ecaa5e9f0aa3de235 Previously, this function would leak the most significant word of its argument due to branching and memory access pattern. This patch is enough to fix the use of BN_num_bits() on RSA prime factors in the library. The diff is a simplified and more readable (but perhaps less efficient) version of https://github.com/openssl/openssl/commit/972c87df by Andy Polyakov and David Benjamin (pre license change). Consult that commit message for details. Subsequent fixes to follow in the near future. Issue pointed out by David Schrammel and Samuel Weiser as part of a larger report. tests & ok inoguchi, ok jsing Improve pages that briefly mentioned ERR - usually below SEE ALSO - 2019-06-14T13:59:32+00:00 schwarze 2019-06-14T13:59:32+00:00 urn:sha1:cff95e5bdef5339a84855d7ce45dab9e7c3b196d but failed to provide any real information. OK tb@ jmc@ Further improve the documentation of library initialization and configuration. 2019-06-14T13:41:31+00:00 schwarze 2019-06-14T13:41:31+00:00 urn:sha1:d342104b3f35ddd0a6581d33f40a3e26852d29d3 Among other improvements: * Use a uniform wording at the top of the DECSRIPTION for obsolete pages. * Better explain how to use a non-standard configuration file. * Remove obsolete functions from SEE ALSO. Triggered by some suggestions from tb@. Tweaks and OK tb@.