openbsd/src/lib/libssl/tls12_record_layer.c, branch libressl-v4.3.2

Remove GOST and STREEBOG support from libssl.

2024-02-03T15:58:34+00:00

This version of GOST is old and not anywhere close to compliant with modern GOST standards. It is also very intrusive in libssl and makes a mess everywhere. Efforts to entice a suitably minded anyone to care about it have been unsuccessful. At this point it is probably best to remove this, and if someone ever showed up who truly needed a working version, it should be a clean implementation from scratch, and have it use something closer to the typical API in libcrypto so it would integrate less painfully here. This removes it from libssl in preparation for it's removal from libcrypto with a future major bump ok tb@

Switch from EVP_CIPHER_type() to EVP_CIPHER_nid()

2024-01-18T16:30:43+00:00

EVP_CIPHER_type() will never return NID_gost89_cnt since it has no associated ASN1_OBJECT. Switching to EVP_CIPHER_nid() has a slight chance of working. Do that before beck applies the flensing knife. ok beck

fix comment to unbreak things that care about warnings

2023-07-08T20:38:23+00:00

ok tb@ krw@

Hide all public symbols in libssl

2023-07-08T16:40:14+00:00

With the guentherizer 9000 ok tb@

Make internal header file names consistent

2022-11-26T16:08:57+00:00

Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include was fixed manually. discussed with jsing, no objection bcook

Convert the legacy TLS stack to tls_content.

2022-11-11T17:15:27+00:00

This converts the legacy TLS stack to tls_content - records are now opened into a tls_content structure, rather than being written back into the same buffer that the sealed record was read into. This will allow for further clean up of the legacy record layer. ok tb@

Convert the new record layers to opaque EVP_AEAD_CTX

2022-01-14T09:12:15+00:00

ok jsing

Mop up enc_read_ctx and read_hash.

2021-10-23T15:02:27+00:00

These are no longer public, so we can mop them up along with the machinery needed to set/clear them. ok beck@ tb@

Replace DTLS r_epoch with the read epoch from the TLSv1.2 record layer.

2021-08-30T19:12:25+00:00

ok inoguchi@ tb@

Move to an AEAD nonce allocated in the TLSv1.2 record layer.

2021-08-30T19:00:49+00:00

There is little to gain by mallocing and freeing the AEAD nonce for each record - move to an AEAD nonce allocated for the record layer, which matches what we do for TLSv1.3. ok inoguchi@ tb@