Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Print SKIPPED if package wycheproof-testvectors is missing. This | bluhm | 2018-09-02 | 1 | -2/+2 |
| | | | | | is the magic string that is recognized by my test framework. OK tb@ | ||||
* | Remove ECDH from TODO list. Done! | tb | 2018-09-02 | 1 | -2/+1 |
| | |||||
* | Unify FAIL printfs. | tb | 2018-09-02 | 1 | -8/+8 |
| | |||||
* | After libcrypto/ecdh/ech_key.c -r1.8 fixed the failing test cases, remove | tb | 2018-09-02 | 1 | -13/+3 |
| | | | | two noisy INFO and reorder things a bit. | ||||
* | Elliptic curve arithmetic only makes sense between points that belong to | tb | 2018-09-02 | 1 | -1/+5 |
| | | | | | | | | | | | | the same curve. Some Wycheproof tests violate this assumption, making ECDH_compute_key() compute and return garbage. Check that pub_key lies on the curve of the private key so that the calculations make sense. Most paths that get here have this checked (in particular those from OpenSSH and libssl), but one might get here after using d2i_* or manual computation. discussed with & ok jsing; "good catch!" markus | ||||
* | Run Wycheproof ECDH tests against libcrypto. Some tests currently fail, | tb | 2018-09-02 | 1 | -1/+154 |
| | | | | will be fixed with the next commit to libcrypto. | ||||
* | Use a Boolean rather than repeated string comparison. | tb | 2018-09-02 | 1 | -3/+5 |
| | |||||
* | Tweak comment. | tb | 2018-09-01 | 1 | -5/+2 |
| | |||||
* | Remove RSA-PSS from todo-list | tb | 2018-09-01 | 1 | -2/+2 |
| | |||||
* | Run Wycheproof RSASSA-PSS testvectors against libcrypto. | tb | 2018-09-01 | 1 | -2/+144 |
| | |||||
* | Remove unused argument to tls1_change_cipher_state_cipher(). | jsing | 2018-08-31 | 1 | -7/+4 |
| | |||||
* | Instead of enumerating the files to clean by hand, set PROGS=${TESTS}. | tb | 2018-08-31 | 2 | -5/+7 |
| | | | | Suggested by jsing | ||||
* | Make sure to clean up the .d files with 'make clean' | tb | 2018-08-30 | 1 | -2/+2 |
| | |||||
* | Nuke ssl_pending/ssl_shutdown function pointers. | jsing | 2018-08-30 | 9 | -56/+14 |
| | | | | | | | ssl3_pending() is used for all protocols and dtls1_shutdown() just calls ssl3_shutdown(), so just call the appropriate function directly instead. ok beck@ inoguchi@ tb@ | ||||
* | AES is now done also. | tb | 2018-08-29 | 1 | -3/+3 |
| | |||||
* | Pass algorithm as a string to all *TestGroup functions for consistency. | tb | 2018-08-29 | 1 | -22/+22 |
| | |||||
* | Run Wycheproof AES-GCM testvectors against libcrypto. | tb | 2018-08-29 | 1 | -42/+83 |
| | |||||
* | Calculate and check tag during AES-CCM encryption test. | tb | 2018-08-29 | 1 | -1/+25 |
| | |||||
* | typo | tb | 2018-08-29 | 1 | -2/+2 |
| | |||||
* | Don't fatal on keys of invalid sice, just print an INFO. | tb | 2018-08-29 | 1 | -2/+3 |
| | |||||
* | Run Wycheproof AES-CMAC testvectors against libcrypto. | tb | 2018-08-28 | 1 | -2/+116 |
| | |||||
* | remove some extra parens and fix some other formatting issues | tb | 2018-08-28 | 1 | -17/+17 |
| | | | | pointed out by gofmt (thanks anton) | ||||
* | Remove extra "and" in "These functions and have been available" | tb | 2018-08-28 | 1 | -3/+3 |
| | |||||
* | zap trailing whitespace | tb | 2018-08-28 | 1 | -7/+7 |
| | |||||
* | Drop SSLv2, SSLv3 support. | cheloha | 2018-08-28 | 1 | -6/+2 |
| | | | | | | | No need to check for SSLv2/3 sessions when printing the tally mark. Also do SSLv23_client_method -> TLS_client_method. ok jsing@ | ||||
* | Check for SSL_write(3) error. | cheloha | 2018-08-28 | 1 | -3/+4 |
| | | | | | | | | | | jsing@ notes that this is not a complete solution, as we don't account for retries or partial writes, but that this is a step in a right direction. May want to revisit this later to provide a complete solution. ok jsing@ | ||||
* | tweak failure messages | tb | 2018-08-27 | 1 | -9/+9 |
| | |||||
* | dedup AES-CBC-PKCS5 encryption and decryption checks | tb | 2018-08-27 | 1 | -66/+24 |
| | |||||
* | 2x missing "..." | tb | 2018-08-27 | 1 | -3/+3 |
| | |||||
* | Run Wycheproof AES-CCM testvectors against libcrypto. | tb | 2018-08-27 | 1 | -2/+200 |
| | |||||
* | n2s and l2n3 finally bite the dust! | jsing | 2018-08-27 | 1 | -7/+1 |
| | |||||
* | Convert ssl3_get_cert_verify() to CBS and clean up somewhat. | jsing | 2018-08-27 | 1 | -74/+72 |
| | | | | ok inoguchi@ | ||||
* | Dedup DTLS header writing code and convert to CBB. | jsing | 2018-08-27 | 1 | -25/+35 |
| | | | | | | | | | There are three versions of the DTLS header writing code, which primarily differ by the fragment offset and fragment length values that differ. Rework dtls1_write_message_header() such that it can be used in all three cases and convert it to CBB in the process. ok inoguchi@ tb@ | ||||
* | Add some missing statics. | jsing | 2018-08-27 | 2 | -5/+5 |
| | |||||
* | Simplify new session ticket encoding/generation. | jsing | 2018-08-27 | 3 | -84/+90 |
| | | | | | | | | | | | The original code did a crazy encode/malloc/encode/decode/modify/encode dance, in order to encode a session in the form needed to encrypt then add to a session ticket. By modifying the encoding functions slightly, we can do this entire dance as a single encode. Inspired by similar changes in BoringSSL. ok inoguchi@ tb@ | ||||
* | Fix formatting and grammatical issues with the description of how to use | jsing | 2018-08-27 | 1 | -19/+17 |
| | | | | | | | i2d_SSL_SESSION. Also rework the example code so that it is clearer and uses more appropriate names. Input from and ok schwarze@, tb@ | ||||
* | Add protocol and cipher patterns in regress appstest.sh | inoguchi | 2018-08-27 | 1 | -18/+88 |
| | |||||
* | fix the same "an non" issue found by tb in EVP_EncryptInit.3; | jmc | 2018-08-26 | 1 | -3/+3 |
| | |||||
* | Check return value of EVP_CipherInit_ex() | tb | 2018-08-26 | 1 | -6/+15 |
| | |||||
* | Run Wycheproof AES-CBC-PKCS5 testvectors against libcrypto. | tb | 2018-08-26 | 1 | -1/+189 |
| | |||||
* | Remove some redundant info from log.Fatalf | tb | 2018-08-26 | 1 | -2/+2 |
| | |||||
* | simplify returned value | tb | 2018-08-26 | 1 | -2/+2 |
| | |||||
* | Some of the functions in this manual need <openssl/dsa.h>, others | tb | 2018-08-26 | 1 | -3/+45 |
| | | | | | | | | | need <openssl/x509.h>. The functions {d2i,i2d}_DSA_params_{bio,fp}(3) were missing from the manual, so document them. The return values of the i2d_* functions are left undocumented, as these still need to be audited. ok schwarze (lots of input and help as usual) | ||||
* | typo: an nonce -> a nonce | tb | 2018-08-26 | 1 | -3/+3 |
| | |||||
* | Stop s_server if error occurs in regress appstest.sh | inoguchi | 2018-08-26 | 1 | -4/+13 |
| | |||||
* | Also run DSA tests with the PEM encoded public key. | tb | 2018-08-25 | 1 | -2/+22 |
| | |||||
* | update usage for pkcs8; | jmc | 2018-08-24 | 1 | -10/+9 |
| | | | | ok tb | ||||
* | tweak previous; | jmc | 2018-08-24 | 1 | -3/+3 |
| | |||||
* | crank majors after symbol addition/modification/removal | tb | 2018-08-24 | 3 | -6/+6 |
| | |||||
* | Adjust documentation for SSL_copy_session_id() | tb | 2018-08-24 | 1 | -8/+7 |
| | | | | ok jsing |