| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Add CMS controls for RSA. | jsing | 2019-10-31 | 1 | -1/+8 |
| | | |||||
| * | Add support for RSA-PSS. | jsing | 2019-10-31 | 1 | -39/+198 |
| | | | | | | | From OpenSSL 1.1.1d. ok inoguchi@ | ||||
| * | Move RSA min modulus to a define and increase from 256 to 512 bits. | jsing | 2019-10-31 | 1 | -3/+3 |
| | | | | | | | From OpenSSL 1.1.1d. ok inoguchi@ | ||||
| * | Fix indent and indent before labels. | jsing | 2019-10-31 | 1 | -5/+5 |
| | | |||||
| * | Use braces where a statement has both multi-line and single-line blocks. | jsing | 2019-10-31 | 1 | -8/+13 |
| | | | | | | | Makes code more robust and reduces differences with OpenSSL. ok inoguchi@ | ||||
| * | Add additional validation of key size, message digest size and public | jsing | 2019-10-31 | 1 | -3/+17 |
| | | | | | | | | | exponent. From OpenSSL 1.1.1d. ok inoguchi@ | ||||
| * | Clean up some code. | jsing | 2019-10-31 | 1 | -11/+13 |
| | | | | | | | | Assign and test, explicitly test against NULL and use calloc() rather than malloc. ok inoguchi@ | ||||
| * | Avoid potentially leaking pub_exp in pkey_rsa_copy(). | jsing | 2019-10-31 | 1 | -4/+4 |
| | | | | | ok inoguchi@ | ||||
| * | Add two controls that were missed in the previous commit. | jsing | 2019-10-29 | 1 | -1/+13 |
| | | |||||
| * | Update RSA OAEP code. | jsing | 2019-10-29 | 1 | -15/+96 |
| | | | | | | | | This syncs the RSA OAEP code with OpenSSL 1.1.1d, correctly handling OAEP padding and providing various OAEP related controls. ok inoguchi@ tb@ | ||||
| * | Provide EVP_PKEY_CTX_get_signature_md() macro and implement the | jsing | 2019-09-09 | 1 | -1/+5 |
| | | | | | | | | | EVP_PKEY_CTRL_GET_MD control for DSA, EC and RSA. This is used by the upcoming RSA CMS code. ok inoguchi@ tb@ | ||||
| * | use timing-safe compares for checking results in signature verification | djm | 2018-09-05 | 1 | -2/+2 |
| | | | | | | | (there are no known attacks, this is just inexpensive prudence) feedback and ok tb@ jsing@ | ||||
| * | Remove RSA_padding_add_SSLv23()/RSA_padding_check_SSLv23() and related | jsing | 2017-08-28 | 1 | -3/+1 |
| | | | | | | | code. We removed SSLv2/SSLv3 a long time ago... Discussed with doug@ | ||||
| * | Send the function codes from the error functions to the bit bucket, | beck | 2017-01-29 | 1 | -20/+13 |
| | | | | | | | as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ | ||||
| * | unifdef OPENSSL_NO_CMS | jsing | 2016-10-19 | 1 | -24/+1 |
| | | |||||
| * | Remove obsolete MDC-2DES from libcrypto. | doug | 2015-06-20 | 1 | -13/+2 |
| | | | | | ok deraadt@ jsing@ miod@ | ||||
| * | Guenther has plans for OPENSSL_NO_CMS, so revert this for the moment. | beck | 2015-02-11 | 1 | -1/+24 |
| | | |||||
| * | get rid of OPENSSL_NO_CMS code we do not use. | beck | 2015-02-11 | 1 | -24/+1 |
| | | | | | ok miod@ | ||||
| * | Only import cryptlib.h in the four source files that actually need it. | jsing | 2014-07-11 | 1 | -4/+6 |
| | | | | | | | | | Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@ | ||||
| * | Explicitly include <openssl/opensslconf.h> in every file that references | jsing | 2014-07-10 | 1 | -1/+3 |
| | | | | | | | | | | an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers. | ||||
| * | Stop including standard headers via cryptlib.h - pull in the headers that | jsing | 2014-07-10 | 1 | -2/+4 |
| | | | | | | | are needed in the source files that actually require them. ok beck@ miod@ | ||||
| * | BN_free, BN_clear_free, BN_CTX_free, BN_BLINDING_free and BN_MONT_CTX_free | jsing | 2014-07-10 | 1 | -3/+2 |
| | | | | | | | all have implicit NULL checks, so we do not need them here. ok miod@ | ||||
| * | More KNF. | jsing | 2014-07-09 | 1 | -20/+22 |
| | | |||||
| * | KNF | miod | 2014-07-09 | 1 | -229/+197 |
| | | |||||
| * | replace atoi() calls with strtol(). Follow the idiomatic pattern in our | deraadt | 2014-06-12 | 1 | -13/+32 |
| | | | | | | | | | | manual page strictly. Return -2 if the strings are not strict numbers. The numbers remain in the range of "int". Range checking for these parameters is done later in the pkey_*_ctl() functions, or sometimes in functions much further downstream... but not always!!! ok millert miod mikeb | ||||
| * | tags as requested by miod and tedu | deraadt | 2014-06-12 | 1 | -1/+1 |
| | | |||||
| * | no need for null check before free. from Brendan MacDonell | tedu | 2014-05-30 | 1 | -2/+1 |
| | | |||||
| * | switch RSA key generation default to 2048 bits (matching ssh); ok miod@ | sthen | 2014-05-17 | 1 | -1/+1 |
| | | |||||
| * | Use C99 initializers for the various FOO_METHOD structs. More readable, and | miod | 2014-04-27 | 1 | -30/+15 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | avoid unreadable/unmaintainable constructs like that: const EVP_PKEY_ASN1_METHOD cmac_asn1_meth = { EVP_PKEY_CMAC, EVP_PKEY_CMAC, 0, "CMAC", "OpenSSL CMAC method", 0,0,0,0, 0,0,0, cmac_size, 0, 0,0,0,0,0,0,0, cmac_key_free, 0, 0,0 }; ok matthew@ deraadt@ | ||||
| * | Change library to use intrinsic memory allocation functions instead of | beck | 2014-04-17 | 1 | -4/+4 |
| | | | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | ||||
| * | remove FIPS mode support. people who require FIPS can buy something that | tedu | 2014-04-15 | 1 | -76/+0 |
| | | | | | | meets their needs, but dumping it in here only penalizes the rest of us. ok beck deraadt | ||||
| * | Import OpenSSL 1.0.1g | miod | 2014-04-13 | 1 | -0/+2 |
| | | |||||
| * | import OpenSSL-1.0.1c | djm | 2012-10-13 | 1 | -9/+145 |
| | | |||||
| * | import OpenSSL-1.0.0a | djm | 2010-10-01 | 1 | -0/+587 |
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |