summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/objects/objects.pl (unfollow)
Commit message (Collapse)AuthorFilesLines
2026-03-31Run new test certificate bundles through Go's verifier.jsing1-0/+2
2026-03-31Add additional certificate test bundles.jsing4-0/+1450
2026-03-31Generate two additional certificate test scenarios which have deep chains.jsing1-0/+16
2026-03-30libssl regress: adjust golden numbers for RSASSA-PSStb2-39/+44
Add the three RSASSA-PSS SignatureScheme 0x080b, 0x080a, 0x0809 in the appropriate spots in (components of) the ClientHello and adjust various length octets by adding 6.
2026-03-30libssl: announce support for RSASSA-PSS signature schemestb1-1/+7
Announce the signature schemes for RSASSA-PSS with pubkey OID RSASSA-PSS between RSASSA-PSS with pubkey OID rsaEncryption and RSASSA-PKCS1-v1_5. This is the last step in the everlasting saga for making these signature schemes and certificates with RSASSA-PSS OID work. Fortunately, these are rarely used since they are extremely complex and inefficient also due to the large size of the parameters. This addresses bug reports by Steffen Ullrich and Tom Lane. Tested by bluhm. ok djm jsing kenjiro
2026-03-30ssl_sigalg_pkey_ok: allow RSASSA-PSS with pubkey OID RSASSA-PSStb1-5/+6
This fixes a long-standing logic error that hasn't been noticed because we never announced the rsa_pss_pss_sha{256,384,512} SignatureScheme. The EVP_PKEY_id() of a RSA-PSS pubkey is EVP_PKEY_RSA_PSS, not EVP_PKEY_RSA. Thanks to beck for helping me figure out how to fix this correctly. It drove me nuts for a very long time. Problem also noticed by Tom Lane due to some PostgreSQL regress failures. ok djm jsing kenjiro
2026-03-30ssl_sigalgs: whitespace tweaktb1-1/+2
2026-03-29ML-KEM: ensure that key_768 is only dereferenced with 768-bit keystb1-3/+7
This looks like a NULL dereference that should crash, but for some reason it doesn't, even with -O0 with all compilers i tried. At the very least it may result in compilers deducing that key_768 != NULL and lead to incorrect optimizations. ok claudio jsing kenjiro miod
2026-03-29Add missing include path required to reach newly added crypto_assembly.hanton1-2/+3
include.
2026-03-28Include crypto_assembly.h instead of manually ensuring _CET_ENDBR exists.jsing6-36/+12
ok kenjiro@ tb@