openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Make internal header file names consistent	tb	2022-11-26	1	-2/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Libcrypto currently has a mess of _lcl.h, _locl.h, and _local.h names used for internal headers. Move all these headers we inherited from OpenSSL to _local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include <ssl_locl.h> was fixed manually. discussed with jsing, no objection bcook
*	Remove BIGNUM consistency macros.	jsing	2022-11-26	1	-5/+1
\| \| \| \| \| \| \| \| \| \| \| \|	Compiling with BN_DEBUG (and if you want to take it further, BN_DEBUG_RAND) supposedly adds consistency checks to the BN code. These are rarely if ever used and introduce a bunch of clutter in the code. Furthermore, there are hacks in place to undo things that the debugging code does. Remove all of this mess and instead rely on always enabled checks, more readable code and proper regress coverage to ensure correct behaviour. "Good riddance." tb@
*	Send the function codes from the error functions to the bit bucket,	beck	2017-01-29	1	-7/+6
\| \| \| \| \| \|	as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@
*	Add ct and nonct versions of BN_mod_inverse for internal use	beck	2017-01-21	1	-2/+2
\| \| \| \|	ok jsing@
*	Make explicit _ct and _nonct versions of bn_mod_exp funcitons that	beck	2017-01-21	1	-2/+2
\| \| \| \| \| \| \| \| \| \| \| \|	matter for constant time, and make the public interface only used external to the library. This moves us to a model where the important things are constant time versions unless you ask for them not to be, rather than the opposite. I'll continue with this method by method. Add regress tests for same. ok jsing@
*	if (x) FOO_free(x) -> FOO_free(x).	miod	2014-07-12	1	-11/+6
\| \| \| \| \| \| \|	Improves readability, keeps the code smaller so that it is warmer in your cache. review & ok deraadt@
*	Only import cryptlib.h in the four source files that actually need it.	jsing	2014-07-11	1	-2/+3
\| \| \| \| \| \| \| \|	Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@
*	Explicitly include <openssl/opensslconf.h> in every file that references	jsing	2014-07-10	1	-1/+4
\| \| \| \| \| \| \| \| \|	an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers.
*	tags as requested by miod and tedu	deraadt	2014-06-12	1	-1/+1
\|
*	calloc instead of malloc/memset. from Benjamin Baier	tedu	2014-05-25	1	-2/+1
\|
*	Emergency knfectomie requested by tedu@.	jsing	2014-05-08	1	-143/+148
\|
*	Lacking a proof that--for this implementation--exposure of Montgomery	guenther	2014-04-19	1	-4/+4
\| \| \| \| \| \| \| \|	multiplication or RSA blinding parameters doesn't permit retroactive timing analysis of the secrets, we'll do the stupidly cheap thing and cleanse them before freeing them. ok deraadt@
*	Change library to use intrinsic memory allocation functions instead of	beck	2014-04-17	1	-2/+2
\| \| \| \| \| \| \| \|	OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free
*	OpenSSL 1.0.0f: merge	djm	2012-01-05	1	-14/+23
\|
*	resolve conflicts, fix local changes	djm	2010-10-01	1	-3/+14
\|
*	resolve conflicts	djm	2008-09-06	1	-14/+235
\|
*	openssl-engine-0.9.6 merge	beck	2000-12-15	1	-2/+2
\|
*	OpenSSL 0.9.4 merge	beck	1999-09-29	1	-21/+22
\|
*	Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD build	ryker	1998-10-05	1	-0/+143
	functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible.