Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | No need to include evp_locl.h in there. | miod | 2014-07-13 | 6 | -18/+6 |
| | |||||
* | No need to include asn1_mac.h here. | miod | 2014-07-12 | 1 | -2/+1 |
| | |||||
* | We have EVP_CIPH_FLAG_DEFAULT_ASN1 in evp.h; no need to keep constructs to | miod | 2014-07-12 | 1 | -34/+28 |
| | | | | | | build on pre-EVP_CIPH_FLAG_DEFAULT_ASN1 codebases. ok jsing@ | ||||
* | Make the BLOCK_CIPHER_{generic,custom} macros expand to more readable struct | miod | 2014-07-12 | 1 | -67/+102 |
| | | | | definitions using C99 field initializers. No functional change. | ||||
* | if (x) FOO_free(x) -> FOO_free(x). | miod | 2014-07-12 | 5 | -16/+11 |
| | | | | | | | Improves readability, keeps the code smaller so that it is warmer in your cache. review & ok deraadt@ | ||||
* | OPENSSL_ALGORITHM_DEFINES has been removed from conf.h, no need for it now | tedu | 2014-07-11 | 1 | -8/+2 |
| | |||||
* | Fix copy for CCM, GCM and XTS. | miod | 2014-07-11 | 1 | -12/+70 |
| | | | | | | | | Internal pointers in CCM, GCM and XTS contexts should either be NULL or set to point to the appropriate key schedule. This needs to be adjusted when copying contexts. OpenSSL PR #3272 with further fixes, from OpenSSL trunk | ||||
* | In EVP_PBE_alg_add don't use the underlying NID for the cipher | miod | 2014-07-11 | 1 | -2/+2 |
| | | | | as it may have a non-standard key size; OpenSSL PR #3206 via OpenSSL trunk. | ||||
* | Missing initialization; OpenSSL PR#3289 and #3345 via OpenSSL trunk. | miod | 2014-07-11 | 1 | -2/+3 |
| | |||||
* | Only import cryptlib.h in the four source files that actually need it. | jsing | 2014-07-11 | 47 | -155/+157 |
| | | | | | | | | Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@ | ||||
* | Explicitly include <openssl/opensslconf.h> in every file that references | jsing | 2014-07-10 | 40 | -53/+155 |
| | | | | | | | | | an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers. | ||||
* | Kill a blatantly outdated (and now wrong) comment | miod | 2014-07-10 | 1 | -4/+1 |
| | |||||
* | Stop including standard headers via cryptlib.h - pull in the headers that | jsing | 2014-07-10 | 14 | -17/+45 |
| | | | | | | are needed in the source files that actually require them. ok beck@ miod@ | ||||
* | remove unused, private version strings except SSL_version_str | bcook | 2014-07-09 | 1 | -3/+1 |
| | | | | | | Also remove unused des_ver.h, which exports some of these strings, but is not installed. ok miod@ tedu@ | ||||
* | Remove BIO_f_reliable(), guilty of playing with EVP_MD_CTX internals it | miod | 2014-06-24 | 2 | -627/+1 |
| | | | | | should not know anything about. Verified not to be used in ports; riding upon the recent libcrypto major bump. | ||||
* | Switch to the ISC licensed versions of these files, which Google has made | jsing | 2014-06-21 | 2 | -101/+26 |
| | | | | | | available via boringssl. ok deraadt@ | ||||
* | free iv, then cleanse. from Cyril Jouve | tedu | 2014-06-15 | 1 | -2/+2 |
| | |||||
* | Simplify EVP_MD_CTX_create() by just using calloc(). Also, use 0 rather | jsing | 2014-06-15 | 1 | -9/+4 |
| | | | | | | than '\0' for several memset(). ok beck@ miod@ | ||||
* | Simplify EVP_CIPHER_CTX_new() - stop pretending that EVP_CIPHER_CTX_init() | jsing | 2014-06-15 | 1 | -6/+2 |
| | | | | | | does something special... just use calloc() instead. ok beck@ miod@ | ||||
* | Add missing OPENSSL_cleanse() in aead_aes_gcm_cleanup(). | jsing | 2014-06-15 | 1 | -1/+2 |
| | | | | ok beck@ miod@ | ||||
* | The OPENSSL_cleanse() in aes_gcm_cleanup() only cleans the gcm field of the | jsing | 2014-06-15 | 1 | -2/+2 |
| | | | | | | | EVP_AES_GCM_CTX, leaving the AES key untouched - clean the entire context, rather than just part of it. ok beck@ miod@ | ||||
* | tags as requested by miod and tedu | deraadt | 2014-06-12 | 60 | -54/+60 |
| | |||||
* | c-file-style hints, begone; ok beck | deraadt | 2014-06-11 | 2 | -2/+2 |
| | |||||
* | Abandon the auto-ENGINE /dev/crypto interface. VIA 3des cbc receives | deraadt | 2014-06-10 | 1 | -3/+0 |
| | | | | | | | | | | | | | collateral damage. The syncronous nature of this mechanism has hampered performance for symmetric crypto relative to brute-force cpu. The assymetric crypto support never really materialized in drivers. So abandon the complexity. ok tedu beck mikeb some disagrement from djm but if he wants to test /dev/crypto ciphers he should do it without this this gigantic API in the way | ||||
* | Use C99 initialisers for EVP_MD structs, for clarity, grepability and to | jsing | 2014-06-10 | 11 | -180/+266 |
| | | | | | | protect from future field reordering/removal. No difference in generated assembly. | ||||
* | Remove various test stubs. The good ones have been moved by jsing | deraadt | 2014-06-07 | 2 | -35/+0 |
| | | | | | | and others to the regress framework. These remaining ones just muddle us up when re-reading code repeatedly. ok jsing | ||||
* | malloc() result does not need a cast. | deraadt | 2014-06-07 | 5 | -5/+5 |
| | | | | ok miod | ||||
* | remove CONST_STRICT. ok beck deraadt | tedu | 2014-05-30 | 1 | -5/+1 |
| | |||||
* | no need for null check before free. from Brendan MacDonell | tedu | 2014-05-30 | 1 | -2/+1 |
| | |||||
* | Implement an improved version of the EVP AEAD API. The | jsing | 2014-05-26 | 5 | -106/+109 |
| | | | | | | | | | | | | | | | | EVP_AEAD_CTX_{open,seal} functions previously returned an ssize_t that was overloaded to indicate success/failure, along with the number of bytes written as output. This change adds an explicit *out_len argument which is used to return the number of output bytes and the return value is now an int that is purely used to identify success or failure. This change effectively rides the last libcrypto crank (although I do not expect there to be many users of the EVP AEAD API currently). Thanks to Adam Langley for providing the improved code that this diff is based on. ok miod@ | ||||
* | calloc instead of malloc/memset. from Benjamin Baier | tedu | 2014-05-25 | 1 | -3/+1 |
| | |||||
* | Convert OPENSSL_malloc stuff back to intrinsics, a few were missed | beck | 2014-05-22 | 2 | -4/+4 |
| | | | | | as new stuff was brought in. ok miod@ | ||||
* | no no md2 | tedu | 2014-05-17 | 1 | -3/+0 |
| | |||||
* | no no seed | tedu | 2014-05-17 | 2 | -17/+0 |
| | |||||
* | When OPENSSL_LOAD_CONF was added it ended up with more #if 0 code, | jsing | 2014-05-16 | 3 | -94/+14 |
| | | | | | | | | | | | more #ifdefs and a new source file that contains a single function. Nuke the #if 0 code that is now a macro and move the single function in evp_acnf.c to c_all.c, which is where the other code lives. While here, tidy evp.h slightly, remove an unnecessary #ifdef __OpenBSD__ and nuke a comment that is now a lie. ok miod@ | ||||
* | More KNF. | jsing | 2014-05-15 | 4 | -7/+7 |
| | |||||
* | Use C99 initialisers for the AEAD struct. | jsing | 2014-05-15 | 1 | -9/+9 |
| | |||||
* | KNF. | jsing | 2014-05-15 | 1 | -70/+67 |
| | |||||
* | Add a ChaCha20-Poly1305 AEAD EVP implementation to libcrypto, from Adam | jsing | 2014-05-15 | 3 | -0/+272 |
| | | | | | | Langley's Chromium OpenSSL patches. ok miod@ | ||||
* | KNF. | jsing | 2014-05-15 | 2 | -74/+75 |
| | |||||
* | Add an AEAD EVP interface to libcrypto, along with AES-GCM AEAD | jsing | 2014-05-15 | 5 | -33/+549 |
| | | | | | | | implementations. This largely pulls in Adam Langley's AEAD patches from Chromium's OpenSSL. ok miod@ | ||||
* | Stop being a dummy... presumably these are left overs from pedantic mode | jsing | 2014-05-15 | 1 | -3/+1 |
| | | | | | | that were not wrapped with #if PEDANTIC. ok miod@ | ||||
* | More KNF. | jsing | 2014-05-11 | 5 | -16/+27 |
| | |||||
* | KNF. | jsing | 2014-05-11 | 2 | -322/+287 |
| | |||||
* | More KNF. | jsing | 2014-05-08 | 11 | -45/+94 |
| | |||||
* | KNF. | jsing | 2014-05-08 | 12 | -308/+383 |
| | |||||
* | Remove KSSL debug code. | jsing | 2014-05-08 | 1 | -21/+0 |
| | | | | "fire bomb" tedu@ | ||||
* | KNF. | jsing | 2014-05-08 | 7 | -912/+917 |
| | |||||
* | Nuke OPENSSL_FIPS - having #ifdefs inside a #ifndef for the same thing | jsing | 2014-05-08 | 2 | -18/+0 |
| | | | | | | is amusing. ok deraadt@ | ||||
* | KNF. | jsing | 2014-05-08 | 16 | -1499/+1544 |
| |