| Commit message (Expand) | Author | Age | Files | Lines |
* | Add missing OPENSSL_cleanse() in aead_aes_gcm_cleanup(). | jsing | 2014-06-15 | 1 | -1/+2 |
* | The OPENSSL_cleanse() in aes_gcm_cleanup() only cleans the gcm field of the | jsing | 2014-06-15 | 1 | -2/+2 |
* | Rename ssl3_record_sequence_update() to ssl3_record_sequence_increment(), | jsing | 2014-06-15 | 7 | -55/+28 |
* | Add more bounded attributes to the buffer and md5/sha headers in libssl | avsm | 2014-06-14 | 3 | -19/+35 |
* | typo | miod | 2014-06-13 | 1 | -2/+2 |
* | Correctly calculate the key block length when using export ciphers. | jsing | 2014-06-13 | 2 | -2/+10 |
* | Overhaul the keyblock handling in ssl3_change_cipher_state(). Use | jsing | 2014-06-13 | 1 | -32/+45 |
* | Correctly calculate the key block length when used with export ciphers. | jsing | 2014-06-13 | 1 | -17/+24 |
* | Use meaningful variable names, rather than i, j, k and cl. | jsing | 2014-06-13 | 1 | -23/+27 |
* | Do not bother trying to work out of we can reuse a cipher context - just | jsing | 2014-06-13 | 1 | -22/+12 |
* | Separate the comression handling from the cipher/message digest handling in | jsing | 2014-06-13 | 1 | -43/+47 |
* | Swap compress/expand around so they are in the correct order - these ended | jsing | 2014-06-13 | 2 | -28/+28 |
* | The export_key/export_iv variables are only used in the is_export case. | jsing | 2014-06-13 | 1 | -7/+10 |
* | Rename a bunch of variables in ssl3_change_cipher_state() for readability. | jsing | 2014-06-13 | 1 | -38/+40 |
* | Add ChaCha20-Poly1305 based ciphersuites. | jsing | 2014-06-13 | 10 | -14/+162 |
* | Switch the AES-GCM cipher suites to SSL_CIPHER_ALGORITHM2_AEAD. | jsing | 2014-06-13 | 2 | -42/+136 |
* | Combine the MAC handling for both !EVP_CIPH_FLAG_AEAD_CIPHER and | jsing | 2014-06-13 | 2 | -28/+22 |
* | Use SSL3_SEQUENCE_SIZE and if we're going to preincrement we may as well | jsing | 2014-06-13 | 1 | -4/+3 |
* | Add support for handling SSL_CIPHER_ALGORITHM2_AEAD ciphers, which are | jsing | 2014-06-13 | 8 | -66/+498 |
* | Add an SSL_AEAD_CTX to enable the use of EVP_AEAD with an SSL cipher. | jsing | 2014-06-13 | 8 | -8/+98 |
* | Remove support for the `opaque PRF input' extension, which draft has expired | miod | 2014-06-13 | 23 | -668/+29 |
* | replace atoi() calls with strtol(). Follow the idiomatic pattern in our | deraadt | 2014-06-12 | 3 | -40/+97 |
* | tags as requested by miod and tedu | deraadt | 2014-06-12 | 847 | -764/+856 |
* | Stop setting the EVP_MD_CTX_FLAG_NON_FIPS_ALLOW - it has been ignored since | jsing | 2014-06-11 | 8 | -16/+0 |
* | Tsk. Tsk. Someone forgot to compile test the other half. | jsing | 2014-06-11 | 1 | -2/+2 |
* | Disable TLS support... | jsing | 2014-06-11 | 6 | -16/+0 |
* | Provide support for non-funopen systems. | deraadt | 2014-06-11 | 1 | -8/+30 |
* | More KNF. | jsing | 2014-06-11 | 2 | -112/+182 |
* | Fix memory leak: free s if calloc fails. | logan | 2014-06-11 | 2 | -2/+6 |
* | c-file-style hints, begone; ok beck | deraadt | 2014-06-11 | 49 | -49/+49 |
* | Check return value of EVP_MD_CTX_copy_ex() in ssl3_handshake_mac() | logan | 2014-06-10 | 1 | -1/+3 |
* | Abandon the auto-ENGINE /dev/crypto interface. VIA 3des cbc receives | deraadt | 2014-06-10 | 4 | -1368/+1 |
* | KNF. | jsing | 2014-06-10 | 8 | -756/+756 |
* | KNF. | jsing | 2014-06-10 | 11 | -435/+516 |
* | Remove pointless casts and use c instead of &c[0], since it is the same | jsing | 2014-06-10 | 1 | -9/+3 |
* | In tls1_cert_verify_mac(), check the return value of EVP_MD_CTX_copy_ex() | jsing | 2014-06-10 | 2 | -6/+10 |
* | Use C99 initialisers for EVP_MD structs, for clarity, grepability and to | jsing | 2014-06-10 | 11 | -180/+266 |
* | More KNF. | jsing | 2014-06-10 | 1 | -19/+18 |
* | Avoid potential NULL pointer function calls in n_ssl3_mac() by checking | jsing | 2014-06-10 | 1 | -2/+4 |
* | Multiple fixes for ssl3_digest_cached_records() - if EVP_MD_CTX_create() | jsing | 2014-06-10 | 1 | -8/+12 |
* | Ensure ssl3_final_finish_mac() returns failure if either the MD5 or SHA1 | jsing | 2014-06-10 | 1 | -5/+10 |
* | use memset instead of bzero | deraadt | 2014-06-09 | 1 | -2/+2 |
* | do not include dso.h where it is not needed; ok miod | deraadt | 2014-06-09 | 3 | -3/+0 |
* | More KNF. | jsing | 2014-06-09 | 1 | -11/+11 |
* | Add an SSL_CIPHER_ALGORITHM2_AEAD flag that is used to mark a cipher as | jsing | 2014-06-08 | 4 | -0/+114 |
* | Add a define for the SSLv3 sequence size and use it, rather than sprinkling | jsing | 2014-06-08 | 7 | -14/+16 |
* | No, we will not be building with OPENSSL_NO_X509_VERIFY. Nuke it and | jsing | 2014-06-08 | 2 | -28/+16 |
* | Clean up BIO_free() handling in bio_ssl.c - BIO_free() has its own NULL | jsing | 2014-06-08 | 2 | -26/+32 |
* | Be explicit with types. No binary change. | jsing | 2014-06-08 | 2 | -6/+6 |
* | Stop using DSO_global_lookup to reach getaddrinfo() and friends | deraadt | 2014-06-08 | 1 | -40/+3 |