| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Demonstrate how new linux getrandom() will be called, at least until | deraadt | 2014-07-20 | 1 | -1/+37 | |
| | | | | | | | it shows up in libraries. Even the system call is probably not finalized. Bit dissapointed it has turned out to be a descriptor-less read() with EINVAL and EINTR error conditions, but we can work with it. | |||||
| * | remove disabled main hook; we use phdr now; ok bcook | deraadt | 2014-07-19 | 3 | -21/+3 | |
| | | ||||||
| * | tab love | deraadt | 2014-07-19 | 1 | -3/+3 | |
| | | ||||||
| * | Move _ARC4_ATFORK handlers from thread_private.h in portable. | bcook | 2014-07-19 | 3 | -3/+15 | |
| | | ||||||
| * | move _ARC4_LOCK/UNLOCK primitives from thread_private into OS-specific modules | bcook | 2014-07-19 | 3 | -3/+22 | |
| | | ||||||
| * | fixup typos | bcook | 2014-07-19 | 3 | -55/+54 | |
| | | ||||||
| * | Change _rs_allocate so it can combine the two regions (rs and rsx) | deraadt | 2014-07-19 | 4 | -55/+55 | |
| | | | | | | | | | | | into one if a system has an awesome getentropy(). In that case it is valid to totally throw away the rsx state in the child. If the getentropy() is not very good and has a lazy reseed operation, this combining is a bad idea, and the reseed should probably continue to use the "something old, something new" mix. _rs_allocate() can accomodate either method, but not on the fly. ok matthew | |||||
| * | Cleanup portable arc4random fork detection code: | matthew | 2014-07-18 | 3 | -33/+24 | |
| | | | | | | | | | | | | | | | 1. Use "len" parameter instead of sizeof(*rs). 2. Simplify the atfork handler to be strictly async signal safe by simply writing to a global volatile sig_atomic_t object, and then checking for this in _rs_forkdetect(). (Idea from discussions with Szabolcs Nagy and Rich Felker.) 3. Use memset(rs, 0, sizeof(*rs)) to match OpenBSD's MAP_INHERIT_ZERO fork semantics to avoid any skew in behavior across platforms. ok deraadt | |||||
| * | Seperate arc4random's os-dependent parts into static inline functions, | deraadt | 2014-07-18 | 4 | -0/+243 | |
| | | | | | | making it much easier for libressl -portable to fill in the gaps. ok bcook beck | |||||
| * | Only call getauxval(3) if HAVE_GETAUXVAL is defined. Fixes build on older | kettenis | 2014-07-16 | 1 | -1/+3 | |
| | | | | | | | | Linux (such as Ubuntu 12.04LTS) that don't have it yet. Seems the AT_XXX defines are pulled in by <link.h> now. ok beck@ | |||||
| * | Use dl_iterate_phdr() to iterate over the segments and throw the addresses | deraadt | 2014-07-13 | 2 | -2/+28 | |
| | | | | | | | | into the hash; hoping the system has some ASLR or PIE. This replaces and substantially improves upon &main which proved problematic with some picky linkers. Work with kettenis, testing by beck | |||||
| * | Provide a link to the canonical API specification. | deraadt | 2014-07-13 | 4 | -4/+16 | |
| | | | | | ok beck | |||||
| * | Take away the use of the address of main as a source of entropy. Causes | beck | 2014-07-13 | 3 | -3/+15 | |
| | | | | | | | distractions to people testing and seeing link errors in some setups. This will come back in another form ok deraadt@ | |||||
| * | getentropy on Windows. It compiles but has not been thoroughly tested yet. | wouter | 2014-07-12 | 1 | -0/+56 | |
| | | | | | OK: beck@ | |||||
| * | Remove signed/unsigned warning, statement before declaration and | wouter | 2014-07-12 | 3 | -29/+32 | |
| | | | | | | | add a function to use function pointers that does not take sizeof(fptr). OK beck@ | |||||
| * | Remove private_{Camellia,RC4}_set_key FIPS indirection tentacles, as has been | miod | 2014-07-12 | 1 | -4/+1 | |
| | | | | | done for other symmetric algorithms recently. | |||||
| * | guard inclusion of sys/sysctl.h so we can detect at compile time and | beck | 2014-07-12 | 1 | -1/+3 | |
| | | | | | | keep linux distros happy that don't have it. ok bcook@ | |||||
| * | remove gratuitous differences, ok beck | deraadt | 2014-07-12 | 1 | -39/+40 | |
| | | ||||||
| * | remove gratuitous differences, ok beck bcook | deraadt | 2014-07-12 | 2 | -12/+12 | |
| | | ||||||
| * | Solaris uses a symbolic link for /dev/urandom which harms best practice of | beck | 2014-07-12 | 1 | -18/+34 | |
| | | | | | | using O_NOFOLLOW - cope with it as best as possible by trying two different paths. - written by deraadt@ and kettenis@ | |||||
| * | odds are that some ABI change occured today, no matter how careful everyone | deraadt | 2014-07-12 | 1 | -1/+1 | |
| | | | | | is | |||||
| * | i'm a dumbdumb. fix build. | tedu | 2014-07-11 | 14 | -15/+15 | |
| | | ||||||
| * | move all the feature settings to a common header. | tedu | 2014-07-11 | 15 | -938/+17 | |
| | | | | | probably ok beck jsing miod | |||||
| * | Make sure we leave OPENSSL_NO_PSK in the conf files so things | beck | 2014-07-11 | 13 | -0/+13 | |
| | | | | | | can know... ok jsing@ | |||||
| * | remove unused variables getentropy for OS X | bcook | 2014-07-09 | 1 | -3/+3 | |
| | | | | | ok beck@ | |||||
| * | RSA_NULL used to be a compile option allowing the RSA interfaces to be | miod | 2014-07-09 | 1 | -2/+2 | |
| | | | | | | | | | compiled-in, with nonfunctional code, to be able to cope with the RSA patent. However, we don't use this option, and the RSA patent has expired more than 10 years ago, so just drop this piece. | |||||
| * | Remove undocumented _des_crypt() interface and its companion header file, | miod | 2014-07-08 | 1 | -2/+2 | |
| | | | | | | | | which had never been installed, so it's unlikely something ever used this in the last 15~20 years. ok deraadt@ jsing@ beck@ | |||||
| * | getentropy for osx and solaris. will be needed for a portable release | beck | 2014-07-08 | 2 | -0/+838 | |
| | | ||||||
| * | fix oops, accidental delete.. darn copying of files between machines | beck | 2014-07-08 | 1 | -2/+2 | |
| | | ||||||
| * | j should be an int, like repeat | beck | 2014-07-08 | 1 | -3/+4 | |
| | | ||||||
| * | unbreak last commit - but same intent, make re-seed less expensive | beck | 2014-07-08 | 1 | -12/+16 | |
| | | ||||||
| * | repeat calls to getentrypy() with the same pid likely indicate reseeds. | deraadt | 2014-07-08 | 1 | -3/+10 | |
| | | | | | | | Since we assume the PRNG above is doing "something old, something new" folding, shortcut and do fewer repeats through the timing loop. ok beck | |||||
| * | fix HD() misuse; from brent cook | deraadt | 2014-06-26 | 1 | -2/+2 | |
| | | ||||||
| * | AT_BASE returns us the *address* of the start of ld.so, so | beck | 2014-06-25 | 1 | -2/+2 | |
| | | | | | | use the address, not what it points to (which is always the same) ok deraadt@ | |||||
| * | get the page of data at AT_SYSINFO_EHDR | beck | 2014-06-25 | 1 | -2/+2 | |
| | | | | | ok deraadt@ | |||||
| * | comment fixes from theo | beck | 2014-06-25 | 1 | -5/+6 | |
| | | ||||||
| * | Possibly obtain a little bit of entropy from addresses returned | beck | 2014-06-25 | 1 | -2/+23 | |
| | | | | | | by getauxval if we have it. ok deraadt@ | |||||
| * | O_NOFOLLOW would be very nice to have here if the version of linux | beck | 2014-06-25 | 1 | -10/+11 | |
| | | | | | | we are running supports it. from enh@google.com | |||||
| * | Remove BIO_f_reliable(), guilty of playing with EVP_MD_CTX internals it | miod | 2014-06-24 | 1 | -2/+2 | |
| | | | | | | should not know anything about. Verified not to be used in ports; riding upon the recent libcrypto major bump. | |||||
| * | Crank libcrypto major since my previous commit changed the size of the | jsing | 2014-06-24 | 1 | -1/+1 | |
| | | | | | ChaCha context. Other changes will also ride this crank. | |||||
| * | unbreak build of getentropy_sysctl - we need linux/sysctl.h, and | beck | 2014-06-23 | 1 | -18/+21 | |
| | | | | | RANDOM_UUID is an enum member. | |||||
| * | unbreak - main needs to be extern in here somewhere. | beck | 2014-06-23 | 1 | -1/+2 | |
| | | ||||||
| * | repair indentation for an inner loop; shorten some macros and variable | deraadt | 2014-06-21 | 1 | -129/+135 | |
| | | | | | | names to shorten line lengths ok beck | |||||
| * | hash in correct pointer | deraadt | 2014-06-21 | 1 | -2/+2 | |
| | | ||||||
| * | KNF | beck | 2014-06-20 | 1 | -48/+56 | |
| | | ||||||
| * | indent | deraadt | 2014-06-20 | 1 | -2/+2 | |
| | | ||||||
| * | rearrange so that the main function with the important comments is at the top | otto | 2014-06-20 | 1 | -78/+80 | |
| | | | | | ok deraadt@ beck@ | |||||
| * | Work in progress on how to deal with the inherit unreliability of | beck | 2014-06-20 | 1 | -0/+439 | |
| | | | | | | | /dev/urandom. Does well in the fallback case. Get it in tree so it can be worked on. ok otto@ deraadt@ | |||||
| * | Provide support for non-funopen systems. | deraadt | 2014-06-11 | 1 | -2/+2 | |
| | | | | | ok beck | |||||
| * | Abandon the auto-ENGINE /dev/crypto interface. VIA 3des cbc receives | deraadt | 2014-06-10 | 1 | -2/+2 | |
| | | | | | | | | | | | | | | collateral damage. The syncronous nature of this mechanism has hampered performance for symmetric crypto relative to brute-force cpu. The assymetric crypto support never really materialized in drivers. So abandon the complexity. ok tedu beck mikeb some disagrement from djm but if he wants to test /dev/crypto ciphers he should do it without this this gigantic API in the way | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |