Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Sort standard_methods by pkey_id. | inoguchi | 2019-11-02 | 1 | -4/+4 | |
| | | | | ok jsing@ | |||||
* | CMS didn't make the 6.6 release: adjust the text in the HISTORY sections | schwarze | 2019-11-02 | 23 | -69/+69 | |
| | ||||||
* | .Xr CMS_ContentInfo_new 3 | schwarze | 2019-11-02 | 1 | -2/+3 | |
| | ||||||
* | .Xr BIO_new_CMS 3 | schwarze | 2019-11-02 | 1 | -2/+3 | |
| | ||||||
* | document PEM_read_CMS(3), PEM_read_bio_CMS(3), PEM_write_CMS(3), and | schwarze | 2019-11-02 | 1 | -3/+46 | |
| | | | | PEM_write_bio_CMS(3) which jsing@ just enabled in Symbols.list rev. 1.91 | |||||
* | In Symbols.list rev. 1.91, jsing enabled many CMS functions. | schwarze | 2019-11-02 | 1 | -1/+24 | |
| | | | | Install the new manual pages documenting the majority of them. | |||||
* | Bring back some icky buffer allocation code so that pkey_rsa_print() | jsing | 2019-11-02 | 1 | -9/+41 | |
| | | | | | | works again with the horrific API that is ASN1_bn_print(). Issue spotted by inoguchi@ | |||||
* | Bump libcrypto, libssl and libtls minors due to symbol additions. | jsing | 2019-11-02 | 1 | -1/+1 | |
| | ||||||
* | Provide RSA_PKCS1_OpenSSL(). | jsing | 2019-11-02 | 3 | -3/+10 | |
| | | | | Prompted by inoguchi@ | |||||
* | Make RSA_padding_{add,check}_PKCS1_OAEP_mgf1() public. | jsing | 2019-11-02 | 3 | -9/+10 | |
| | ||||||
* | Make RSA_OAEP_PARAMs public. | jsing | 2019-11-02 | 3 | -17/+22 | |
| | ||||||
* | Enable CMS in LibreSSL. | jsing | 2019-11-02 | 3 | -2/+135 | |
| | | | | ok bcook@ deraadt@ inoguchi@ job@ tb@ | |||||
* | In evp/pmeth_lib.c rev. 1.16, jsing@ enabled EVP_PKEY_RSA_PSS. | schwarze | 2019-11-01 | 1 | -3/+5 | |
| | | | | Document it. | |||||
* | In rsa.h rev. 1.45, jsing@ provided | schwarze | 2019-11-01 | 1 | -8/+16 | |
| | | | | | | the three macro constants RSA_PSS_SALTLEN_*; document them. The wording is a combination of our existing text and the wording in the OpenSSL 1.1.1 branch, which is still under a free license. | |||||
* | Add DSA CMS support. | jsing | 2019-11-01 | 1 | -1/+25 | |
| | | | | | | From OpenSSL 1.1.1d. ok tb@ | |||||
* | Add RSA CMS support. | jsing | 2019-11-01 | 3 | -5/+262 | |
| | | | | | | From OpenSSL 1.1.1d. ok tb@ | |||||
* | Provide NID for pSpecified. | jsing | 2019-11-01 | 2 | -0/+2 | |
| | | | | ok tb@ | |||||
* | Wire up PKEY methods for RSA-PSS. | jsing | 2019-11-01 | 1 | -2/+6 | |
| | | | | ok tb@ | |||||
* | Wire up ASN.1 methods for RSA-PSS. | jsing | 2019-11-01 | 1 | -1/+5 | |
| | | | | ok tb@ | |||||
* | In rsa.h rev. 1.45, jsing@ provided the three | schwarze | 2019-11-01 | 2 | -6/+64 | |
| | | | | | | macros EVP_PKEY_CTX_set_rsa_pss_keygen_*(3); document them. Text mostly taken from the OpenSSL 1.1.1 branch, which is still under a free license, but rearranged to fit the structure of our manual pages. | |||||
* | move the PSS macros to the end in preparation for adding more macros, | schwarze | 2019-11-01 | 1 | -50/+45 | |
| | | | | | reduce text duplication by forming subsections, and some minor corrections | |||||
* | The EVP_PKEY_CTX_ctrl(3) manual page requires additions for RSA-PSS | schwarze | 2019-11-01 | 4 | -267/+358 | |
| | | | | but it is growing to excessive size, so split out RSA_pkey_ctx_ctrl(3). | |||||
* | Update RSA ASN.1 code to handle RSA-PSS. | jsing | 2019-11-01 | 4 | -302/+389 | |
| | | | | | | From OpenSSL 1.1.1d. ok tb@ | |||||
* | Clean up RSA_new_method(). | jsing | 2019-11-01 | 1 | -40/+24 | |
| | | | | | | | | | | Use calloc() instead of malloc() for initialisation and remove explicit zero initialisation of members. This ensures that new members always get initialised. Also use a single error return path, simplifying code. ok tb@ | |||||
* | In rsa_pmeth.c rev. 1.30, jsing@ set the minimum RSA key length | schwarze | 2019-10-31 | 1 | -2/+3 | |
| | | | | for RSA key generation to 512 bits. Document that minimum. | |||||
* | Add CMS controls for RSA. | jsing | 2019-10-31 | 1 | -1/+8 | |
| | ||||||
* | Add support for RSA-PSS. | jsing | 2019-10-31 | 5 | -65/+370 | |
| | | | | | | From OpenSSL 1.1.1d. ok inoguchi@ | |||||
* | Move RSA min modulus to a define and increase from 256 to 512 bits. | jsing | 2019-10-31 | 2 | -4/+6 | |
| | | | | | | From OpenSSL 1.1.1d. ok inoguchi@ | |||||
* | Fix indent and indent before labels. | jsing | 2019-10-31 | 1 | -5/+5 | |
| | ||||||
* | Use braces where a statement has both multi-line and single-line blocks. | jsing | 2019-10-31 | 1 | -8/+13 | |
| | | | | | | Makes code more robust and reduces differences with OpenSSL. ok inoguchi@ | |||||
* | Add additional validation of key size, message digest size and public | jsing | 2019-10-31 | 1 | -3/+17 | |
| | | | | | | | | exponent. From OpenSSL 1.1.1d. ok inoguchi@ | |||||
* | Clean up some code. | jsing | 2019-10-31 | 1 | -11/+13 | |
| | | | | | | | Assign and test, explicitly test against NULL and use calloc() rather than malloc. ok inoguchi@ | |||||
* | Avoid potentially leaking pub_exp in pkey_rsa_copy(). | jsing | 2019-10-31 | 1 | -4/+4 | |
| | | | | ok inoguchi@ | |||||
* | In rsa.h rev. 1.41, jsing@ provided RSA_pkey_ctx_ctrl(3). | schwarze | 2019-10-29 | 1 | -1/+26 | |
| | | | | Write the documentation from scratch. | |||||
* | merge documentation for several macros EVP_PKEY_CTX_*_rsa_oaep_*(3) | schwarze | 2019-10-29 | 1 | -4/+239 | |
| | | | | | | and EVP_PKEY_CTX_*_ecdh_*(3); from Antoine Salon <asalon at vmware dot com> via OpenSSL commit 87103969 Oct 1 14:11:57 2018 -0700 from the OpenSSL 1.1.1 branch, which is still under a free license | |||||
* | merge documentation for EVP_PKEY_CTX_set1_id(3), EVP_PKEY_CTX_get1_id(3), | schwarze | 2019-10-29 | 1 | -2/+57 | |
| | | | | | | and EVP_PKEY_CTX_get1_id_len(3), but make it sound more like English text; from Paul Yang via OpenSSL commit f922dac8 Sep 6 10:36:11 2018 +0800 from the OpenSSL 1.1.1 branch, which is still under a free license | |||||
* | merge documentation of EVP_PKEY_CTX_set_ec_param_enc(3) | schwarze | 2019-10-29 | 1 | -6/+23 | |
| | | | | from Stephen Henson via OpenSSL commit 146ca72c Feb 19 14:35:43 2015 +0000 | |||||
* | correct HISTORY of some RSA control macros | schwarze | 2019-10-29 | 1 | -5/+26 | |
| | ||||||
* | list supported algorithm ids and clarify how the engine argument is used | schwarze | 2019-10-29 | 1 | -10/+50 | |
| | ||||||
* | Add two controls that were missed in the previous commit. | jsing | 2019-10-29 | 1 | -1/+13 | |
| | ||||||
* | Update RSA OAEP code. | jsing | 2019-10-29 | 2 | -21/+124 | |
| | | | | | | | This syncs the RSA OAEP code with OpenSSL 1.1.1d, correctly handling OAEP padding and providing various OAEP related controls. ok inoguchi@ tb@ | |||||
* | Provide EVP_PKEY_CTX_md(). | jsing | 2019-10-29 | 2 | -8/+18 | |
| | | | | | | | | | | | | This handles controls with a message digest by name, looks up the message digest and then proxies the control through with the EVP_MD *. This is internal only for now and will be used in upcoming RSA related changes. Based on OpenSSL 1.1.1d. ok inoguchi@ tb@ | |||||
* | Free maskHash when RSA_PSS_PARAMS is freed. | jsing | 2019-10-25 | 1 | -3/+23 | |
| | | | | ok tb@ | |||||
* | Provide ASN1_TYPE_{,un}pack_sequence(). | jsing | 2019-10-24 | 2 | -2/+36 | |
| | | | | | | | | These are internal only for now. Based on OpenSSL 1.1.1d. ok inoguchi@ | |||||
* | Provide RSA_OAEP_PARAMS along with ASN.1 encoding/decoding. | jsing | 2019-10-24 | 2 | -2/+97 | |
| | | | | | | | | For now these are internal only. From OpenSSL 1.1.1d. ok inoguchi@ | |||||
* | Bump libcrypto, libssl and libtls majors due to changes in struct sizes | jsing | 2019-10-24 | 1 | -2/+2 | |
| | | | | and symbol addition. | |||||
* | Add RSA_PSS_PARAMS pointer to RSA struct. | jsing | 2019-10-24 | 1 | -1/+8 | |
| | | | | | | This will be used by upcoming RSA-PSS code. ok tb@ | |||||
* | Add maskHash field to RSA_PSS_PARAMS. | jsing | 2019-10-24 | 1 | -1/+4 | |
| | | | | | | | This will be soon used as an optimisation and reduces the differences between OpenSSL. ok tb@ | |||||
* | Provide RSA_pkey_ctx_ctrl(). | jsing | 2019-10-24 | 3 | -2/+20 | |
| | | | | | | | | | This is a wrapper around EVP_PKEY_CTX_ctrl() which requires the key to be either RSA or RSA-PSS. From OpenSSL 1.1.1d. ok tb@ | |||||
* | Add EVP_PKEY_RSA_PSS. | jsing | 2019-10-24 | 1 | -1/+2 | |
| | | | | ok tb@ |