openbsd/src, branch libressl-v2.4.1

Set BN_FLG_CONSTTIME on the correct variable. beck committed wrong fix.

2016-06-06T23:37:37+00:00

Mistake noted by Billy Brumley. Many thanks.

Correct a problem that prevents the DSA signing algorithm from running

2016-06-06T10:00:04+00:00

in constant time even if the flag BN_FLG_CONSTTIME is set. This issue was reported by Cesar Pereida (Aalto University), Billy Brumley (Tampere University of Technology), and Yuval Yarom (The University of Adelaide and NICTA). The fix was developed by Cesar Pereida.

LibreSSL 2.4.1

2016-06-06T09:50:15+00:00

Fix typo; the period should be outside the parens. From Michael McConville

2016-06-02T15:07:34+00:00

Let netcat support the use of service names instead of port numbers.

2016-06-02T04:26:32+00:00

based on a diff from Andras Farkas ok deraadt@

Gix misleading indent pointed out by GCC 6.1.

2016-05-30T22:00:43+00:00

ok beck@ jsing@

deprecate internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.

2016-05-30T13:42:54+00:00

14 years ago these were changed in OpenSSL to be the same as the _ex functions. We use the _ex functions only internally to ensure it is obvious the ctx must be cleared. ok bcook@

The icdb magic number doesn't need to be visible to static links

2016-05-30T03:06:58+00:00

ok tedu@

Remove dead support for changing BDB hash algorithm and cache of alternatives

2016-05-29T20:47:49+00:00

ok natano@ millert@ deraadt@

Nuke sigret.c

2016-05-29T20:03:54+00:00

ok deraadt@ kettenis@