summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/hmac (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Fix HMAC() with NULL keytb2022-05-051-2/+7
| | | | | | | | | | | | | | | | | If a NULL key is passed to HMAC_Init_ex(), it tries to reuse the previous key. This makes no sense inside HMAC() since the HMAC_CTX has no key set yet. This is hit by HKDF() with NULL salt() via the EVP API and results in a few Wycheproof test failures. If key is NULL, use a zero length dummy key. This was not hit from wycheproof.go since we pass a []byte with a single NUL from Go. Matches OpenSSL if key is NULL and key_len is 0. If key_len != 0, OpenSSL will still fail by passing a NULL key which makes no sense, so set key_len to 0 instead. ok beck jsing
* Avoid segfaults in EVP_PKEY_CTX_free()tb2022-03-301-2/+5
| | | | | | | | | | | | | It is possible to call pmeth->cleanup() with an EVP_PKEY_CTX whose data is NULL. If pmeth->init() in int_ctx_new() fails, EVP_PKEY_CTX_free() is called with such a context. This in turn calls pmeth->cleanup(), and thus these cleanup functions must be careful not to use NULL data. Most of them are, but one of GOST's functions and HMAC's aren't. Reported for HMAC by Masaru Masada https://github.com/libressl-portable/openbsd/issues/129 ok bcook jsing
* pkey_hmac_init(): use calloc()tb2022-03-301-7/+3
| | | | | | | Instead of using malloc() and setting most struct members to 0, simply use calloc(). ok bcook jsing
* Remove HMAC_CTX_{init,cleanup}() and HMAC_init from public visibilitytb2022-01-142-6/+5
| | | | | | | | | | | | | | | | In OpenSSL commit 32fd54a9a3 HMAC_CTX_cleanup() was integrated into HMAC_CTX_init(), then HMAC_CTX_init() was renamed to HMAC_CTX_reset() in dc0099e1. LibreSSL retained them for API compatibility with OpenSSL 1.0. Not many things use them anymore. In fact, some projects that didn't want to modify their code for OpenSSL 1.1 API compatibility used the removed functions to wrap the OpenSSL 1.1 API. We had to patch some of these and this will now no longer be necessary. Also remove HMAC_cleanup(). Nothing uses this. ok inoguchi jsing
* Make structs in evp.h and hmac.h opaquetb2022-01-142-12/+11
| | | | | | This moves most structs to evp_locl.h and moves HMAC_CTX to hmac_local.h. ok inoguchi jsing
* Annotate the structs that will be moved to hmac_local.h and evp_locl.htb2021-12-121-4/+5
| | | | | | | | | | | | in an upcoming bump. This omits EVP_AEAD_CTX which will be dealt with separately. EVP_CIPHER_INFO internals are still publicly visible in OpenSSL, so it won't be moved. Move typedefs for HMAC_CTX and EVP_ENCODE_CTX to ossl_typ.h. These typedefs will be visible by files including only hmac.h or evp.h since hmac.h includes evp.h and evp.h includes ossl_typ.h. ok inoguchi
* Include evp_locl.h where it will be needed once most structs fromtb2021-12-122-2/+4
| | | | | | evp.h will be moved to evp_locl.h in an upcoming bump. ok inoguchi
* Add a mostly empty hmac_local.h. HMAC_CTX and a few other thingstb2021-12-124-3/+79
| | | | | | | from hmac.h will be moved there in an umpcoming bump. Include this file where it will be needed. ok inoguchi
* Provide HMAC_CTX_new(), HMAC_CTX_free(), HMAC_CTX_reset() andjsing2018-02-172-11/+52
| | | | HMAC_CTX_get_md().
* use freezero() instead of memset/explicit_bzero + free. Substantiallyderaadt2017-05-021-7/+2
| | | | | | | | | | reduces conditional logic (-218, +82). MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH cache alignment calculation bn/bn_exp.c wasn'tt quite right. Two other tricky bits with ASN1_STRING_FLAG_NDEF and BN_FLG_STATIC_DATA where the condition cannot be collapsed completely. Passes regress. ok beck
* Ensure MD and key initialized before processing HMACinoguchi2017-03-031-4/+18
| | | | | | | | Ensure both MD and key have been initialized before processing HMAC. Releasing HMAC_CTX in error path of HMAC(). In regress test, added test 4,5,6 and cleaned up the code. ok jsing@
* Send the function codes from the error functions to the bit bucket,beck2017-01-291-4/+3
| | | | | | as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@
* Correct spelling of OPENSSL_cleanse.jsing2015-09-102-4/+4
| | | | ok miod@
* Various memory leaks upon error or unchecked allocations.miod2015-07-201-4/+13
| | | | ok doug@
* Replace assert() and OPENSSL_assert() calls with proper error return paths.miod2015-02-101-4/+11
| | | | Careful review, feedback & ok doug@ jsing@
* Only import cryptlib.h in the four source files that actually need it.jsing2014-07-113-8/+9
| | | | | | | | Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@
* Stop including standard headers via cryptlib.h - pull in the headers thatjsing2014-07-102-2/+6
| | | | | | are needed in the source files that actually require them. ok beck@ miod@
* More KNF.jsing2014-06-214-42/+39
|
* KNFmiod2014-06-213-178/+186
|
* tags as requested by miod and teduderaadt2014-06-124-2/+4
|
* Use C99 initializers for the various FOO_METHOD structs. More readable, andmiod2014-04-272-50/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | avoid unreadable/unmaintainable constructs like that: const EVP_PKEY_ASN1_METHOD cmac_asn1_meth = { EVP_PKEY_CMAC, EVP_PKEY_CMAC, 0, "CMAC", "OpenSSL CMAC method", 0,0,0,0, 0,0,0, cmac_size, 0, 0,0,0,0,0,0,0, cmac_key_free, 0, 0,0 }; ok matthew@ deraadt@
* Change library to use intrinsic memory allocation functions instead ofbeck2014-04-172-5/+5
| | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free
* we don't use these files for buildingtedu2014-04-151-75/+0
|
* remove FIPS mode support. people who require FIPS can buy something thattedu2014-04-151-37/+0
| | | | | meets their needs, but dumping it in here only penalizes the rest of us. ok beck deraadt
* Moved to regress/lib/libcrypto.miod2014-04-151-164/+0
|
* Send the rotIBM stream cipher (ebcdic) to Valhalla to party for eternitybeck2014-04-151-11/+0
| | | | | with the bearded ones... some API's that nobody should be using will dissapear with this commit.
* remove auto-generated dependencies from the old unused build system, soderaadt2014-04-141-35/+0
| | | | | that it is easier to find code pieces. They are getting in the way. ok miod
* resolve conflictsdjm2012-10-131-0/+37
|
* This commit was generated by cvs2git to track changes on a CVS vendordjm2012-10-132-6/+10
|\ | | | | branch.
| * import OpenSSL-1.0.1cdjm2012-10-133-6/+47
| |
* | openssl-1.0.0e: resolve conflictsdjm2011-11-031-3/+0
| |
* | This commit was generated by cvs2git to track changes on a CVS vendordjm2011-11-031-0/+2
|\| | | | | branch.
| * import OpenSSL 1.0.0edjm2011-11-032-3/+2
| |
* | resolve conflicts, fix local changesdjm2010-10-013-133/+67
| |
* | This commit was generated by cvs2git to track changes on a CVS vendordjm2010-10-012-0/+432
|\| | | | | branch.
| * import OpenSSL-1.0.0adjm2010-10-014-32/+499
| |
| * import openssl-0.9.8jdjm2009-01-092-0/+11
| |
| * import of OpenSSL 0.9.8hdjm2008-09-062-23/+10
| |
| * import of openssl-0.9.7jdjm2006-06-272-9/+7
| |
| * import of openssl-0.9.7g; tested on platforms from alpha to zaurus, ok deraadt@djm2005-04-292-0/+17
| |
| * import 0.9.7b (without idea and rc5)markus2003-05-111-0/+3
| |
| * import openssl-0.9.7-beta1markus2002-09-052-57/+62
| |
* | This commit was generated by cvs2git to track changes on a CVS vendordjm2010-10-011-10/+34
|\ \ | | | | | | branch.
| * | import OpenSSL-1.0.0adjm2010-10-011-10/+34
| | |
* | | resolve conflictsdjm2009-01-091-0/+3
| | |
* | | This commit was generated by cvs2git to track changes on a CVS vendordjm2009-01-091-7/+8
|\| | | | | | | | branch.
| * | import openssl-0.9.8jdjm2009-01-091-7/+8
| | |
* | | update to openssl-0.9.8i; tested by several, especially krw@djm2009-01-052-0/+8
| | |
* | | resolve conflictsdjm2008-09-062-23/+10
| | |
* | | This commit was generated by cvs2git to track changes on a CVS vendordjm2008-09-061-23/+9
|\| | | | | | | | branch.
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-08-29 19:47:24 +0000