Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Adjust EVP_PKEY_CTRL_HKDF_KEY to OpenSSL's semantics | tb | 2023-06-26 | 1 | -2/+9 |
| | | | | | | | | | | | | For some reason there is no NULL check on setting the HKDF key for p2 like in the other cases in the switch, instead OpenSSL fail in memdup, nulling out the key but leaving he key_len at the old value. This looks accidental but our behavior makes some haproxy regress tests segfault. So mimic weird OpenSSL semantics but in addition set the key_len to 0. Reported by Ilya Shipitsin ok jsing | ||||
* | Make internal header file names consistent | tb | 2022-11-26 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include <ssl_locl.h> was fixed manually. discussed with jsing, no objection bcook | ||||
* | Simplify: freezero() is NULL safe; assign + test in one go, as usual. | tb | 2022-05-05 | 1 | -11/+5 |
| | | | | ok jsing | ||||
* | Avoid malloc(0) in EVP_PKEY_CTX_set1_hkdf_key() | tb | 2022-05-05 | 1 | -2/+2 |
| | | | | ok jsing | ||||
* | Securely wipe the entire HKDF_PKEY_CTX instead of only taking care of | tb | 2022-05-05 | 1 | -5/+3 |
| | | | | | | a piece of the embedded info array. ok jsing | ||||
* | Fix argument order in HKDF and HKDF_extract(). | tb | 2022-05-05 | 1 | -5/+5 |
| | |||||
* | Translate from OpenSSL's HKDF API to BoringSSL API. | tb | 2022-05-05 | 1 | -8/+7 |
| | | | | ok beck jsing | ||||
* | Remove function codes from errors, i.e., KDFerr(A, B) -> KDFerror(B) | tb | 2022-05-05 | 1 | -5/+5 |
| | | | | ok beck jsing | ||||
* | Fix typo in previous. | tb | 2022-05-05 | 1 | -2/+2 |
| | |||||
* | Inline OPENSSL_memdup() using malloc() + memcpy() | tb | 2022-05-05 | 1 | -3/+5 |
| | | | | ok beck jsing | ||||
* | Translate OPENSSL_{cleanse,clear_free,free,zalloc}() to libc API. | tb | 2022-05-05 | 1 | -11/+11 |
| | | | | ok beck jsing | ||||
* | Adjust includes for LibreSSL | tb | 2022-05-05 | 1 | -4/+7 |
| | | | | ok beck jsing | ||||
* | Use C99 initializres for hkdf_pkey_meth | tb | 2022-05-05 | 1 | -26/+10 |
| | | | | ok beck jsing | ||||
* | Remove OpenSSL versions of HKDF*(). | tb | 2022-05-05 | 1 | -117/+1 |
| | | | | ok beck jsing | ||||
* | Whitespace nit (knfmt(1) agrees after inserting an empty line after the | tb | 2022-05-04 | 1 | -4/+5 |
| | | | | variable declaration) | ||||
* | KNF according to knfmt(1) | tb | 2022-05-04 | 1 | -234/+246 |
| | |||||
* | Add RCS tags | tb | 2022-05-04 | 1 | -0/+1 |
| | |||||
* | Restore copyright years to 2016-2018 as they were before the previous | tb | 2022-05-04 | 1 | -1/+1 |
| | | | | commit. | ||||
* | Reinstate the licenses that were replaced with license stubs in | tb | 2022-05-04 | 1 | -6/+45 |
| | | | | | OpenSSL commits d2e9e320186f0917cc940f46bdf1a7e4120da9b0 and b6cff313cbb1d0381b329fe4f6a8f009cdb270e4 | ||||
* | Rename hkdf.c to hkdf_evp.c to avoid a name clash with hkdf/hkdf.c | tb | 2022-05-04 | 1 | -0/+352 |