openbsd/src/lib/libcrypto, branch tb_20230715A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=tb_202307152023-07-15T19:29:46+00:00This commit was manufactured by cvs2git to create tag 'tb_20230715'.2023-07-15T19:29:46+00:00cvs2svnadmin@example.com2023-07-15T19:29:46+00:00urn:sha1:72cc860132e5b7971e495ba621dcd0713b5dd801Mop up MD32_XARRAY from md5.2023-07-15T15:37:05+00:00jsing2023-07-15T15:37:05+00:00urn:sha1:1ccbafc5259d1d9ac7953865285bd87e6824898d
MD32_XARRAY was added as a workaround for a broken HP C compiler (circa
1999). Clean it up to simplify the code.
No change in generated assembly.
Mop up MD32_XARRAY from md4.2023-07-15T15:30:43+00:00jsing2023-07-15T15:30:43+00:00urn:sha1:01d9cdcc5f5cbefb02459fe5ffea28c94c1483a3
MD32_XARRAY was added as a workaround for a broken HP C compiler (circa
1999). Clean it up to simplify the code.
No change in generated assembly.
Refactor ASN1_item_sign_ctx()2023-07-13T20:59:10+00:00tb2023-07-13T20:59:10+00:00urn:sha1:b47ff84e8ef1dd1e7649dcafb4793c0e190471f7
Oh, joy! The muppets had a feast: they could combine the horrors of EVP
with X.509... Return values between -1 and 3 indicating how much work
needs to be done, depending on whether methods are present or absent.
Needless to say that RSA and EdDSA had inconsistent return values until
recently.
Instead of interleaving if/else branches, split out two helper functions
that do essentially independent things, which results in something that
isn't entirely bad. Well, at least not compared to the surrounding code.
asn1_item_set_algorithm_identifiers() extracts the signature algorithm
from the digest and pkey if known, and sets it on the two X509_ALGOR that
may or may not have been passed in.
asn1_item_sign() converts data into der and signs.
Of course there were also a few leaks and missing error checks.
ok jsing
Revert accidental addition of cofactor ECDH support2023-07-12T08:54:18+00:00tb2023-07-12T08:54:18+00:00urn:sha1:efa15ee1c4f122ae67998dd88bdd8ac06e697206
This snuck in with ech_key.c r1.33 because I committed from a dirty tree.
Rename EC_KEY from r to key like in the rest of the file2023-07-10T19:10:51+00:00tb2023-07-10T19:10:51+00:00urn:sha1:bfb18033d6a99b9bcd6163a67b935402e8dc9909Pull BIGNUM constants out of get_* function bodies2023-07-10T03:26:30+00:00tb2023-07-10T03:26:30+00:00urn:sha1:7088bd4571207ed09ccfefbdf3a05f1cca8ba8bc
The get_rfc*_prime_* functions will be removed. The constants will remain
for the BN_get_rfc*_prime_* functions. Make the latter call BN_bin2bn()
directly on these constants rather than going through get_*. This avoids
some overlong lines. Also KNF for some comments.
Reduces the diff I currently carry by quite a bit.
BIO_indent: use %*s rather than puts in a loop2023-07-10T02:33:33+00:00tb2023-07-10T02:33:33+00:00urn:sha1:52790ba31e8dbfcb4dfcbcf0025ca01a2d342e5d
ok beck jsing millert
bn_print: string.h is no longer needed2023-07-10T02:29:28+00:00tb2023-07-10T02:29:28+00:00urn:sha1:3a8b7e605e474f3f27046066194458fbf8885a22Fix ndef_{prefix,suffix}()2023-07-09T19:22:43+00:00tb2023-07-09T19:22:43+00:00urn:sha1:839c3ea11171d86f26bbd45c967b4967b8b939cc
These functions inline a poor version of asn1_item_flags_i2d() without
error checks. This can be replaced with a single correct call to
ASN1_item_ndef_i2d(). Mechanically adding malloc checks and checks for
negative did not really improve things all that much in a related project.
ok beck jsing