Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Initialize priv_key and pub_key on first use instead of at the top. | tb | 2018-11-09 | 1 | -4/+4 |
| | | | | ok beck jsing mestre | ||||
* | unrevert the use of bn_rand_interval(). | tb | 2018-11-06 | 1 | -5/+3 |
| | | | | ok beck jsing | ||||
* | revert use of bn_rand_interval due to failures with ECDHE and TLS | tb | 2018-11-06 | 1 | -3/+5 |
| | |||||
* | Make use of bn_rand_interval() where appropriate. | tb | 2018-11-05 | 1 | -5/+3 |
| | | | | ok beck jsing | ||||
* | Eliminate a few "} else" branches, a few unneeded NULL checks before | tb | 2018-11-05 | 1 | -11/+9 |
| | | | | | | freeing and indent nearby labels. ok beck jsing | ||||
* | Remove two unnecessary BN_FLG_CONSTTIME dances: BN_mod_exp_ct() already | tb | 2018-11-05 | 1 | -9/+3 |
| | | | | | | takes care of this internally. ok beck jsing | ||||
* | Make explicit _ct and _nonct versions of bn_mod_exp funcitons that | beck | 2017-01-21 | 1 | -2/+3 |
| | | | | | | | | | | | | matter for constant time, and make the public interface only used external to the library. This moves us to a model where the important things are constant time versions unless you ask for them not to be, rather than the opposite. I'll continue with this method by method. Add regress tests for same. ok jsing@ | ||||
* | Remove flags for disabling constant-time operations. | bcook | 2016-06-30 | 1 | -10/+4 |
| | | | | | | | | This removes support for DSA_FLAG_NO_EXP_CONSTTIME, DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags, making all of these operations unconditionally constant-time. Based on the original patch by César Pereid. ok beck@ | ||||
* | Disable DSA_FLAG_NO_EXP_CONSTTIME, always enable constant-time behavior. | bcook | 2016-06-21 | 1 | -10/+10 |
| | | | | | | | Improved patch from Cesar Pereida. See https://github.com/libressl-portable/openbsd/pull/61 for more details. ok beck@ | ||||
* | None of these need to include <openssl/rand.h> | jsing | 2014-10-18 | 1 | -2/+1 |
| | |||||
* | if (x) FOO_free(x) -> FOO_free(x). | miod | 2014-07-12 | 1 | -3/+2 |
| | | | | | | | Improves readability, keeps the code smaller so that it is warmer in your cache. review & ok deraadt@ | ||||
* | Only import cryptlib.h in the four source files that actually need it. | jsing | 2014-07-11 | 1 | -2/+2 |
| | | | | | | | | Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@ | ||||
* | Explicitly include <openssl/opensslconf.h> in every file that references | jsing | 2014-07-10 | 1 | -1/+4 |
| | | | | | | | | | an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers. | ||||
* | KNF | miod | 2014-07-09 | 1 | -37/+41 |
| | |||||
* | tags as requested by miod and tedu | deraadt | 2014-06-12 | 1 | -1/+1 |
| | |||||
* | remove FIPS mode support. people who require FIPS can buy something that | tedu | 2014-04-15 | 1 | -16/+0 |
| | | | | | meets their needs, but dumping it in here only penalizes the rest of us. ok beck deraadt | ||||
* | resolve conflicts | djm | 2012-10-13 | 1 | -0/+16 |
| | |||||
* | resolve conflicts, fix local changes | djm | 2010-10-01 | 1 | -4/+0 |
| | |||||
* | resolve conflicts | djm | 2009-01-09 | 1 | -0/+4 |
| | |||||
* | resolve conflicts | djm | 2008-09-06 | 1 | -4/+11 |
| | |||||
* | resolve conflicts | djm | 2006-06-27 | 1 | -1/+15 |
| | |||||
* | resolve conflicts | djm | 2005-04-29 | 1 | -0/+2 |
| | |||||
* | merge with 0.9.7-beta1 | markus | 2002-09-05 | 1 | -3/+1 |
| | |||||
* | OpenSSL 0.9.7 stable 2002 05 08 merge | beck | 2002-05-15 | 1 | -2/+1 |
| | |||||
* | import DSA changes from 0.9.6a (Bleichenbacher attack), ok provos@/deraadt@ | markus | 2001-04-23 | 1 | -10/+5 |
| | |||||
* | openssl-engine-0.9.6 merge | beck | 2000-12-15 | 1 | -1/+1 |
| | |||||
* | OpenSSL 0.9.5a merge | beck | 2000-04-15 | 1 | -1/+2 |
| | |||||
* | OpenSSL 0.9.4 merge | beck | 1999-09-29 | 1 | -7/+7 |
| | |||||
* | Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD build | ryker | 1998-10-05 | 1 | -0/+112 |
functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible. |