summaryrefslogtreecommitdiff
path: root/src/lib/libc/string/wmemcmp.3 (unfollow)
Commit message (Collapse)AuthorFilesLines
4 daysReorder some functions.jsing1-20/+20
4 daysRemove GHASH_CHUNK and size_t related code from GCM encrypt/decrypt.jsing1-220/+1
This adds significant complexity to the code. On amd64 and aarch64 it results in a minimal slowdown for aligned inputs and a performance improvement for unaligned inputs. ok beck@ joshua@ tb@
4 daysFix wrapping.jsing1-13/+9
4 daysRemove now unused AES assembly generation scripts.jsing3-5256/+0
4 daysfor SOCKS4A don't perform a local hostname lookup that we're not goingdjm1-4/+6
to use; spotted by lucas@
4 daysAdd initial regress test frameworkjoshua3-0/+408
Add a test framework for use in LibreSSL regression tests. This test framework aims to be as lightweight and as simple to use as possible. The design is mostly inspired by Go's test system, and aims to be a drop-in utility in most existing regress tests. ok jsing tb beck
4 daysadd SOCKS4A to help textdjm1-2/+2
4 daysadd SOCKS4A support to nc(1)'s proxy (-X) modedjm3-7/+27
SOCKS4A is a fairly obscure extension to the olde SOCKS4 protocol that allows passing the destination as a string rather than a literal IPv4 address, which is the only thing that vanilla SOCKS4 supports. The motivation for adding something so niche is to test the SOCKS4A server code in ssh(1)'s dynamic forwarding (-D) support. ok tb@
4 daysRemove more unused code.jsing1-95/+1
Discussed with tb@
4 daysAdd NULL checks to HKDF and TLS1-PRF EVP_PKEY cleanup functionskenjiro3-3/+11
Check if ctx->data is NULL before calling freezero(). Also add HKDF and TLS1-PRF to the EVP_PKEY cleanup regression test, as they no longer crash with this change. ok tb@
4 daysmlkem_unittest: fix typo in commenttb1-2/+2
4 daysFix buffer size in MLKEM1024_marshal_public_key()kenjiro1-2/+2
Initialize the output buffer with MLKEM1024_PUBLIC_KEY_BYTES instead of MLKEM768_PUBLIC_KEY_BYTES. ok tb@
4 daysUnbreak GHASH on some architectures setting GHASH_ASMtb1-1/+3
The last #else branch in CRYPTO_gcm128_init() doesn't initialize the function pointers for gmult/ghash, which results in a segfault when using GCM on architectures taking this branch, notably sparc64. found by and fix from jca
5 daysSimplify err_build_SYS_str_reasonstb1-19/+13
This is currently done in a rather silly way. Shift the index by 1 and avoid weird pointer dances. Rather than relying on static initialization, use code to obviate a comment. ok beck joshua jsing
5 daysFix previous - names use underscores and not hyphens.jsing1-3/+3
5 daysAdd ML-KEM768 Hybrid Kems to obj_mac.numbeck1-0/+3
ok tb@, joshua@
5 daysAdd ML-KEM768 Hybrid Kems to objects.txtbeck1-0/+6
ok tb@, joshua@
5 daysDon't use the array index as the group_idbeck1-51/+97
This is a precursor to adding new group ids for post quantum stuff which are up in the 4000 range, so using the array index as the group id will be silly. Instead we just add the group id to the structure and we walk the list to find it. This should never be a very large list for us, so no need to do anything cuter than linear search for now. ok jsing@, joshua@
5 daysMake MLKEM1024_marshal_private_key consistent with the public_key funcitonsbeck7-66/+68
Even though this should remain internal, make it the same as the public key marshal function, and make the needed fallout changes in regress. ok kenjiro@, tb@
5 daysWhitespace nits from tbbeck1-1/+4
ok tb@
6 daysFix up MLKEM768_marshal_private_key to not use a passed in CBBbeck7-53/+54
Even though this should remain internal, make it the same as the public key marshal function, and make the needed fallout changes in regress. This does not yet do the bikeshed of renaming the structure field in the regress ctx, that will wait until a follow on to convert 1024 in a similar manner ok tb@
6 daysRemove the boringssl if || ideom from mlkembeck2-34/+46
ok jsing@, joshua@
6 daysAPI changes for ML-KEMbeck9-176/+203
- Get rid of CBB/CBS usage in public api - Make void functions return int that can fail if malloc fails. Along with some fallout and resulting bikeshedding in the regress tests. ok jsing@, tb@
6 daysSimplify EVP AES code for ECB.jsing2-33/+46
AES_ecb_encrypt() does not really do ECB - provide an aes_ecb_encrypt_internal that actually does multiple blocks and call this from aes_ecb_cipher(). Provide ECB with its own key initialisation function, which allows aes_init_key() to be simplified considerably. The block function pointer is now unused, so mop this up. ok joshua@ tb@
6 daysRemove block128_f function casts.jsing1-8/+20
Provide aes_{en,de}crypt_block128() which have correct function signatures and use these when calling the various mode functions. ok joshua@ tb@
6 daysSimplify EVP AES code for OFB.jsing1-7/+19
Provide AES-NI with its own aesni_ofb_cipher() and switch aes_ofb_cipher() to call AES_ofb128_encrypt() directly. ok joshua@ tb@
6 daysSimplify EVP AES code for CFB.jsing1-25/+79
Provide AES-NI with its own aesni_cfb*_cipher() functions, which then allows us to change the existing aes_cfb*_cipher() functions to () to call AES_cfb*_encrypt() directly. ok beck@ tb@
6 daysEC_POINT_new: wording tweaks in the BUGS sectiontb1-6/+6
7 daysSimplify EVP AES code for CTR.jsing1-22/+23
Provide AES-NI with its own aesni_ctr_cipher(), which then allows us to change aes_ctr_cipher() to call AES_ctr128_encrypt() directly. The stream.ctr function pointer is now unused and can be mopped up. ok beck@ tb@
7 daysUnifdef AES_CTR_ASM.jsing1-14/+1
This is a remnant from s390x assembly.
7 daysSimplify EVP code for AES CBC.jsing1-26/+33
Change aes_cbc_cipher() to call AES_cbc_encrypt() directly, rather than via the stream.cbc function pointer. Remove stream.cbc since it is no longer used. Also provide a separate aes_cbc_init_key() function which makes this standalone and does not require checking mode flags. ok joshua@ tb@
7 daysadd missing u64/uint64_t conversionbcook1-3/+3
ok jsing@
7 daysUse stdint types instead of u64/u32/u8.jsing5-134/+127
No change in generated assembly.
7 daysRemove contortions with the rem_4bit table.jsing1-28/+9
Instead of using size_t and a PACK macro, store the entries as uint16_t and then uncondtionally left shift 48 bits. This gives a small performance gain on some architectures and has the advantage of reducing the size of the table from 1024 bits to 256 bits. ok beck@ joshua@ tb@
7 daysInline REDUCE1BIT macro.jsing1-15/+6
The REDUCE1BIT macro is now only used in one place, so just inline it. Additionally we do not need separate 32 bit and 64 bit versions - just use the 64 bit version and let the compiler deal with it (we effectively get the same code on i386). ok beck@ joshua@
7 daysbio_dump: only run strncmp if there's something to comparetb1-2/+2
7 daysbio_mem: avoid pointer arithmetic on NULLtb1-2/+4
Prompted by a diff by Kenjiro Nakayama ok jsing
7 daysrc2: two files escaped the lure of the attic, set these poor souls freetb2-241/+0
7 daysRemove TABLE_BITS from gcm128.jsing2-248/+3
TABLE_BITS is always currently defined as 4 - 8 is considered to be insecure due to timing leaks and 1 is considerably slower. Remove code that is not regularly tested, does not serve a lot of purpose and is making clean up harder than it needs to be. ok tb@
8 daysReplace GCM_MUL/GHASH defines with static inline functions.jsing1-121/+99
Rather than having defines for GCM_MUL/GHASH (along with the wonder that is GCM_FUNCREF_4BIT) then conditioning on their availability, provide and call gcm_mul()/gcm_ghash() unconditionally. This simplifies all of the call sites. ok tb@
8 daysStop using CRYPTO_gcm128_init() and stack allocated GCM128_CONTEXT.jsing1-16/+16
Since struct gcm128_context is not exposed via a public header, there is no way CRYPTO_gcm128_init() can actually be used properly. Instead, use CRYPTO_gcm128_new() and CRYPTO_gcm128_free_bird()^WCRYPTO_gcm128_release() (naming consistency is apparently hard).
11 daysnc: disallow -T with = when arguments are not key=value pairstb1-1/+3
From Ross L Richardson
2025-05-10Increase default PKCS12_SALT_LEN from 8 to 16 bytestb1-2/+2
Currently PKCS12_setup_mac() function uses salt length of 8 bytes / 64 bits when no salt length is specified. Increase this fallback default to 16 bytes / 128 bits, as recommended by NIST SP 800-132. Note this is for interoperability purposes. Some FIPS implementations enforce minimum salt length of 16 bytes. Examples of such FIPS implemenations are Bouncycastle FIPS Java API and Chainguard FIPS Provider for OpenSSL. Also future v3.6 release of OpenSSL will also increase the default salt length to 16 bytes. From Dimitri John Ledkov, thanks
2025-05-10asn_moid: move inclusion of err_local.h to the proper placetb1-2/+2
2025-05-10Sort FOOerror() in ASCII ordertb1-18/+18
2025-05-10Simplify the remaining FOOerror()tb1-26/+28
Redirect through an additional macro that adds the repeated function, file and line macros. Reduces the eyesore and makes the whole thing much more redable. similar to a suggestion by jsing a while back
2025-05-10Remove unused internal FOOerror()tb1-11/+1
pointed out by djm a while back
2025-05-10Remove error macros except PEMerr(), RSAerr() and SSLerr()tb1-37/+4
These three are still used in about half a dozen ports. All the others are unused. ok jsing
2025-05-10ssl_local.h: stop guarding SYSerror() with an #ifdeftb1-3/+1
2025-05-10Move the internal FOOerror() to err_local.htb2-40/+38
These are now only used in libcrypto. They should never have been in a public header in the first place. ok jsing
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-05-25 01:30:27 +0000