summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl/shlib_version (unfollow)
Commit message (Collapse)AuthorFilesLines
2025-07-05Add minimal regress coverage for AES-XTSjsing1-2/+183
2025-07-04fix double word; ok tb@jsg1-3/+3
2025-07-02pkcs7.h: remove whitespace before opening paren.tb1-2/+2
fixes in particular ./check_complete.pl pkcs7
2025-07-02Const correct the documentation of EVP_PKEY_get{0,1}_{DH,DSA,EC_KEY,RSA}()tb1-9/+9
2025-07-02Const correct EVP_PKEY_get{0,1}_{DH,DSA,EC_KEY,RSA}()tb2-26/+22
These are safe to call concurrently and they don't modify the memory region pointed to by the pkey - they only bump the refcount of the key hanging off of it. The returned "legacy" key has to be handled with care in threaded constexts, so it is handed back as non-const. This also matches what EVP_PKEY_get0() always had. This way our signature is identical to BoringSSL's and doesn't cause compiler warnings in code that overuses const because one of the many API incoherencies added by OpenSSL 3 was to turn get0 into a function that takes and returns const while leaving get1 as it was. dlg agrees ok kenjiro
2025-07-02Fix documented EVP_PKEY{,_base}_id() signaturetb1-4/+4
These have been taking a const pkey ever since they were added in OpenSSL 1.0.0.
2025-07-02EVP_CipherInit_ex(): normalize EVP_CIPHER_CTX_ctrl() error checktb1-2/+2
While EVP_CIPHER_CTX_ctrl() can return a negative value this can't actually happen currently as all ciphers with EVP_CIPH_CTRL_INIT set normalize the EVP_CTRL_INIT return value to boolean in their ctrl() methods. Still, this check looks weird in grep, so align it. ok beck kenjiro
2025-07-01X509_print_ex.3: document X509_FLAG_NO_IDStb1-2/+7
ok job kenjiro
2025-07-01X509_print: emit UIDs unless X509_FLAG_NO_IDS is settb1-1/+28
issuerUID and subjectUID are a curiosity introduced in X.509v2 before extensions were a thing. Their purpose is to help distinguishing certs with identical subject. They are rarely used and are MUST NOT use in the CA/BF baseline requirements. They do occasionally show up in test certificates and it is confusing that openssl x509 silently ignores them. Their encoding also makes them relatively hard to spot in the output of asn1 parsing tools. The output is identical to OpenSSL < 3 and BoringSSL, but due to some weird tweaks added leading up to OpenSSL 3 their output is no longer compatible with that. It is not entirely correct anyway. Since it is a (not further specified) bit string, you shouldn't be ignoring its unused bits... The X509_FLAG_NO_IDS flag has no effect for CSRs. discussed with beck ok job kenjiro (on an earlier version)
2025-07-01x509.h: provide X509_FLAG_NO_IDStb1-1/+2
2025-06-29make the argument to ether_ntoa const.dlg2-5/+5
this drives me nuts when i want to print something out of what's already const. casting it works, but feels gross. ok guenther@ tb@ deraadt@ enh says this is already in bionic/glibc/musl
2025-06-28Provide accelerated SHA-1 for aarch64.jsing4-2/+253
Provide an assembly implementation of SHA-1 for aarch64 using the ARM Cryptographic Extension (CE). This results in around a 2x speed up for larger block sizes. ok tb@
2025-06-28Rework gcm128 implementation selection for amd64/i386.jsing7-61/+130
Provide gcm128_amd64.c and gcm128_i386.c, which contain the appropriate gcm128 initialisation and CPU feature tests for the respective platform. This allows for all of the #define spagetti to be removed from gcm128.c and removes one of the two remaining consumers of crypto_cpu_caps_ia32(). ok tb@
2025-06-28Use a single implementation of gcm_mul()/gcm_ghash().jsing1-19/+8
Since we always initialise the gmult/ghash function pointers, use the same implementaion of gcm_mul() and gcm_ghash(), regardless of the actual underlying implementation. ok tb@
2025-06-28Remove less than useful comment.jsing1-8/+1
2025-06-28Add CLMUL and MMX to machine dependent CPU capabilities for i386.jsing2-4/+10
ok tb@
2025-06-28Add CLMUL to machine dependent CPU capabilities for amd64.jsing2-4/+7
ok tb@
2025-06-27Simplify EVP AES-GCM implementation and remove AES-NI specific code.jsing3-175/+31
Like CTR, the mode implementation for GCM has two variants - rather than using multiple variants (one for AES-NI, another for non-AES-NI), consistently use CRYPTO_gcm128_{en,de}crypt_ctr32() with the aes_ctr32_encrypt_internal() function added for CTR mode. This lets us remove the AES-NI specific code, AES-NI specific EVP_CIPHER methods and the ctr function pointer from EVP_AES_GCM_CTX. ok tb@
2025-06-27Move AES-NI from EVP to AES for CTR mode.jsing6-76/+95
The mode implementation for CTR has two variants - one takes the block function, while the other takes a "ctr32" function. The latter is expected to handle the lower 32 bits of the IV/counter, but is not expected to handle overflow. The AES-NI implementation for CTR currently uses the second variant. Provide aes_ctr32_encrypt_internal() as a function that can be replaced on a machine dependent basis, along with an aes_ctr32_encrypt_generic() function that provides the default implementation and can be used as a fallback. Wire up the AES-NI version for amd64 and i386, change AES_ctr128_encrypt() to use CRYPTO_ctr128_encrypt_ctr32() (which calls aes_ctr32_encrypt_internal()) and remove the various AES-NI specific EVP_CIPHER methods for CTR. Callers of AES_ctr128_encrypt() will now use AES-NI, if available. ok tb@
2025-06-27Remove unused defines from aes_local.h.jsing1-5/+1
MAXKB was added in OpenSSL commit deb2c1a1 and appears to have never been used, while MAXKC (originally RIJNDAEL_MAXKC) stopped being used in that same commit. MAXNR is also unused - AES_MAXNR exists in the public header. ok tb@
2025-06-27openssl-ruby-tests: prepare for ruby default switch to 3.4tb1-4/+4
2025-06-25X509_print and friends: switch from BIO_write() to BIO_printf()tb1-17/+16
Manually counting letters in const strings is ... suboptimal. ok beck jsing
2025-06-24nc: document -Talpntb1-2/+6
From David Leadbeater
2025-06-24nc: add ALPN TLS option, so you can specify -T alpn=valuetb1-2/+8
From David Leadbeater with a report_tls tweak by me ok jsing
2025-06-24sort process_tls_opt[]tb1-2/+2
requested by jsing
2025-06-23sync anton's fix for OpenSSL 3.3 interop to 3.4tb1-2/+2
2025-06-23OpenSSL is linked against pthread by now; ok tb@anton1-2/+2
2025-06-16Remove AES-NI specific EVP_CIPHER methods for CFB/CFB1/CFB8.jsing1-205/+1
These now end up in aesni_encrypt() via AES_encrypt(), when appropriate. ok tb@
2025-06-16Remove AES-NI specific EVP_CIPHER methods for OFB.jsing1-64/+1
These now end up in aesni_encrypt() via AES_encrypt(), when appropriate. ok tb@
2025-06-16Remove AES-NI specific EVP_CIPHER methods for CBC.jsing1-66/+1
These now end up in aesni_cbc_encrypt() via AES_cbc_encrypt(), when appropriate. ok tb@
2025-06-16strip the temporary filename when displaying a verification error;sthen1-1/+2
avoids unnecessary diff in output between runs
2025-06-15crypto_ex_data: use same sizeof idiom as everywhere else in our own codetb1-7/+6
ok beck
2025-06-15Remove aesni_init_key().jsing1-47/+22
The various methods can now use the regular init key functions, since the call to AES_set_{en,de}crypt_key() will be routed to the AES-NI implementation, if supported. ok tb@
2025-06-15Integrate AES-NI into the AES code.jsing6-62/+270
Currently, the AES-NI code is only integrated into EVP - add code to integrate AES-NI into AES. Rename the assembly provided functions and provide C versions for the original names, which check for AES-NI support and dispatch to the appropriate function. This means that the AES_* public API will now use AES-NI, if available. ok tb@
2025-06-15Provide machine dependent CPU capabilities for i386.jsing2-3/+17
This indicates if AES-NI is available via CRYPTO_CPU_CAPS_I386_AES. ok tb@
2025-06-15Provide CRYPTO_CPU_CAPS_AMD64_AES in machine dependent CPU capabilities.jsing2-4/+7
ok tb@
2025-06-15tlsfuzzer: adjust test filenames to upstream churn.tb1-154/+154
Requires py3-tlsfuzzer-20250516 to work
2025-06-14ec_asn1_test: be better at sortingtb1-3/+3
2025-06-14ec_asn1_test: for curves that have a seed, validate the parameters a and btb1-2/+195
per X9.62, F.3.4.b. This ensures that the table entries in ec_curves.c for the NIST curves P-224, P-256, P-384, and P-521 are internally consistent and in particular that the seed is correct.
2025-06-14Fix signature of BN_zerotb1-5/+4
This was changed a bit more than two years ago.
2025-06-13The mdoc(7) .Ft macro does not need quoting of its arguments, but aboutschwarze23-124/+124
10% of our manual pages using this macro employed useless quoting anyway. Remove these quotes such that they do not incite fear, uncertainty, and doubt in developers who happen to look at these pages. jmc@ and tb@ agree with the direction.
2025-06-12<uvm/uvmexp.h> is clearly only for VM_MALLOC_CONF, but <sys/sysctl.h> takesderaadt1-2/+1
care of doing that include.
2025-06-12Bring the DESCRIPTION a bit closer to reality, in particular stopschwarze1-7/+31
claiming that the "add" functions add anything. Indicate that they are mostly NOOPs nowadays, but without being overly specific. Also, more explicitly discourage abusing OpenSSL_add_all_algorithms(3) for loadiing a configuration file. Guidance and OK tb@.
2025-06-12Add a test to verify the fpurge problem doesn't happen. fpurge()yasuoka1-1/+41
mistaknely made the write buffer usable even if the stream is read mode. See the change of lib/libc/stdio/fpurge.c,v 1.11.
2025-06-11EC_GROUP_check: rephrase a sentence so it's a bit less awkwardtb1-5/+7
2025-06-11The functions SMIME_read_ASN1(3) and SMIME_write_ASN1(3)schwarze3-290/+1
are no longer public, so delete their manual pages. OK tb@
2025-06-11Since the function SMIME_write_ASN1(3) is no longer public, move theschwarze2-63/+181
descriptions of CMS_REUSE_DIGEST, PKCS7_REUSE_DIGEST, SMIME_BINARY, and SMIME_CRLFEOL and some improved wordings from that former page to SMIME_write_CMS(3) and SMIME_write_PKCS7(3), with some further polishing. Feedback and OK tb@.
2025-06-11pk7_asn1: delete lines containing nothing but a tabtb1-7/+1
2025-06-11Lie less below RETURN VALUES, add a related BUGS entry,schwarze2-10/+24
and since SMIME_write_ASN1(3) is no longer public, replace the .Xr to it with some other pointers. OK tb@
2025-06-11SMIME_read_ASN1(3) and SMIME_write_ASN1(3) are no longer public,schwarze4-12/+18
so link to SMIME_read_CMS(3), SMIME_read_PKCS7(3), SMIME_write_CMS(3), and/or SMIME_write_PKCS7(3) instead; OK tb@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-08-04 02:52:02 +0000