summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* update FAQDr. Stephen Henson2013-02-111-1/+1
|
* FAQ/README: we are now using Git instead of CVSLutz Jaenicke2013-02-113-4/+4
| | | | (cherry picked from commit f88dbb8385c199a2a28e9525c6bba3a64bda96af)
* sparccpuid.S: work around emulator bug on T1.Andy Polyakov2013-02-111-2/+2
|
* s3_cbc.c: make CBC_MAC_ROTATE_IN_PLACE universal.Andy Polyakov2013-02-081-8/+9
|
* s3_cbc.c: get rid of expensive divisions.Andy Polyakov2013-02-081-13/+20
|
* s3_cbc.c: fix warning [in Windows build].Andy Polyakov2013-02-081-3/+3
|
* e_aes_cbc_hmac_sha1.c: align calculated MAC at cache line.Andy Polyakov2013-02-081-36/+43
| | | | It also ensures that valgring is happy.
* ssl/*: revert "remove SSL_RECORD->orig_len" and merge "fix IV".Andy Polyakov2013-02-087-59/+43
| | | | | Revert is appropriate because binary compatibility is not an issue in 1.1.
* Fix for EXP-RC2-CBC-MD5Adam Langley2013-02-062-9/+47
| | | | | | | MD5 should use little endian order. Fortunately the only ciphersuite affected is EXP-RC2-CBC-MD5 (TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5) which is a rarely used export grade ciphersuite. (cherry picked from commit f306b87d766e6ecf30824635c7c395b67cff9dbc)
* e_aes_cbc_hmac_sha1.c: cleanse temporary copy of HMAC secret.Andy Polyakov2013-02-061-0/+2
| | | | (cherry picked from commit 529d27ea472fc2c7ba9190a15a58cb84012d4ec6)
* e_aes_cbc_hmac_sha1.c: address the CBC decrypt timing issues.Andy Polyakov2013-02-064-40/+208
| | | | | Address CBC decrypt timing issues and reenable the AESNI+SHA1 stitch. (cherry picked from commit 125093b59f3c2a2d33785b5563d929d0472f1721)
* ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.Andy Polyakov2013-02-067-31/+38
| | | | | | Kludge alert. This is arranged by passing padding length in unused bits of SSL3_RECORD->type, so that orig_len can be reconstructed. (cherry picked from commit 8bfd4c659f180a6ce34f21c0e62956b362067fba)
* Don't access EVP_MD_CTX internals directly.Dr. Stephen Henson2013-02-061-2/+2
| | | | (cherry picked from commit 04e45b52ee3be81121359cc1198fd01e38096e9f)
* s3/s3_cbc.c: allow for compilations with NO_SHA256|512.Andy Polyakov2013-02-061-1/+18
| | | | (cherry picked from commit d5371324d978e4096bf99b9d0fe71b2cb65d9dc8)
* ssl/s3_cbc.c: md_state alignment portability fix.Andy Polyakov2013-02-061-15/+16
| | | | | | RISCs are picky and alignment granted by compiler for md_state can be insufficient for SHA512. (cherry picked from commit 36260233e7e3396feed884d3f501283e0453c04f)
* ssl/s3_cbc.c: uint64_t portability fix.Andy Polyakov2013-02-061-11/+6
| | | | | | | Break dependency on uint64_t. It's possible to declare bits as unsigned int, because TLS packets are limited in size and 32-bit value can't overflow. (cherry picked from commit cab13fc8473856a43556d41d8dac5605f4ba1f91)
* typo.Dr. Stephen Henson2013-02-061-1/+1
| | | | (cherry picked from commit 34ab3c8c711ff79c2b768f0b17e4b2a78fd1df5d)
* Add ordinal for CRYPTO_memcmp: since this will affect multipleDr. Stephen Henson2013-02-061-0/+1
| | | | | branches it needs to be in a "gap". (cherry picked from commit 81ce0e14e72e8e255ad1bd9c7cfaa47a6291919c)
* Timing fix mitigation for FIPS mode.Dr. Stephen Henson2013-02-063-0/+62
| | | | | | | | | We have to use EVP in FIPS mode so we can only partially mitigate timing differences. Make an extra call to EVP_DigestSignUpdate to hash additonal blocks to cover any timing differences caused by removal of padding. (cherry picked from commit b908e88ec15aa0a74805e3f2236fc4f83f2789c2)
* Oops. Add missing file.Ben Laurie2013-02-061-0/+696
| | | | (cherry picked from commit 014265eb02e26f35c8db58e2ccbf100b0b2f0072)
* Update DTLS code to match CBC decoding in TLS.Ben Laurie2013-02-065-57/+67
| | | | | | This change updates the DTLS code to match the constant-time CBC behaviour in the TLS. (cherry picked from commit 9f27de170d1b7bef3d46d41382dc4dafde8b3900)
* Don't crash when processing a zero-length, TLS >= 1.1 record.Ben Laurie2013-02-065-7/+24
| | | | | | | | The previous CBC patch was bugged in that there was a path through enc() in s3_pkt.c/d1_pkt.c which didn't set orig_len. orig_len would be left at the previous value which could suggest that the packet was a sufficient length when it wasn't. (cherry picked from commit 6cb19b7681f600b2f165e4adc57547b097b475fd)
* Make CBC decoding constant time.Ben Laurie2013-02-069-197/+214
| | | | | | | | | | | | | | This patch makes the decoding of SSLv3 and TLS CBC records constant time. Without this, a timing side-channel can be used to build a padding oracle and mount Vaudenay's attack. This patch also disables the stitched AESNI+SHA mode pending a similar fix to that code. In order to be easy to backport, this change is implemented in ssl/, rather than as a generic AEAD mode. In the future this should be changed around so that HMAC isn't in ssl/, but crypto/ as FIPS expects. (cherry picked from commit e130841bccfc0bb9da254dc84e23bc6a1c78a64e)
* Add and use a constant-time memcmp.Ben Laurie2013-02-069-8/+27
| | | | | | | | This change adds CRYPTO_memcmp, which compares two vectors of bytes in an amount of time that's independent of their contents. It also changes several MAC compares in the code to use this over the standard memcmp, which may leak information about the size of a matching prefix. (cherry picked from commit 2ee798880a246d648ecddadc5b91367bee4a5d98)
* Fix for trace code: SSL3 doesn't include a length value forDr. Stephen Henson2013-02-041-1/+10
| | | | encrypted premaster secret value.
* x86_64 assembly pack: keep making Windows build more robust.Andy Polyakov2013-02-022-2/+4
| | | | PR: 2963 and a number of others
* Don't use C++ style comments.Dr. Stephen Henson2013-01-251-15/+15
|
* Fix warning: lenmax isn't used any more.Dr. Stephen Henson2013-01-241-2/+0
|
* Don't include comp.h in cmd_cd.c if OPENSSL_NO_COMP setDr. Stephen Henson2013-01-231-0/+2
|
* fix domdDr. Stephen Henson2013-01-231-1/+1
|
* x86_64 assembly pack: make Windows build more robust.Andy Polyakov2013-01-2217-17/+34
| | | | PR: 2963 and a number of others
* TABLE update.Andy Polyakov2013-01-221-9/+42
|
* Configure: update linux-mips* lines.Andy Polyakov2013-01-221-3/+3
|
* bn/asm/mips.pl: hardwire local call to bn_div_words.Andy Polyakov2013-01-221-1/+1
|
* sha512-ppc.pl: minimize stack frame.Andy Polyakov2013-01-221-4/+2
|
* gost2814789t.c: portability fixes.Andy Polyakov2013-01-221-20/+38
|
* Fix warnings.Ben Laurie2013-01-221-1/+2
|
* Don't include comp.h if no-comp set.Dr. Stephen Henson2013-01-201-1/+2
|
* Improve WINCE support.Andy Polyakov2013-01-199-11/+32
| | | | Submitted by: Pierre Delaage
* Merge branch 'master' of openssl.net:opensslBen Laurie2013-01-191-0/+1
|\
| * More .gitignore adjustments.Andy Polyakov2013-01-191-0/+1
| |
* | Merge branch 'master' of openssl.net:opensslBen Laurie2013-01-196-6/+1902
|\|
| * gost_crypt.c: add assertions.Andy Polyakov2013-01-191-0/+11
| | | | | | | | | | Submitted by: Seguei Leontiev PR: 2821
| * engines/ccgost: add test case.Andy Polyakov2013-01-193-3/+1600
| | | | | | | | | | Submitted by: Serguei Leontiev PR: 2821
| * sha512-ppc.pl: add PPC32 code, >2x improvement on in-order cores.Andy Polyakov2013-01-192-3/+291
| |
* | Remove kludge to use RC4 asm.Ben Laurie2013-01-191-1/+1
| |
* | Build/test cleanly on MacOS.Ben Laurie2013-01-191-1/+1
| |
* | Remove extraneous brackets (clang doesn't like them).Ben Laurie2013-01-191-1/+1
| |
* | Can't check a size_t for < 0.Ben Laurie2013-01-191-1/+3
| |
* | Make "make depend" work on MacOS out of the box.Ben Laurie2013-01-198-57/+70
|/
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-12 07:27:16 +0100