| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Remove fipscanister from Configure, delete fips directory | Dr. Stephen Henson | 2014-12-08 | 1 | -480/+0 |
| | | | | | Reviewed-by: Tim Hudson <tjh@openssl.org> | ||||
| * | make post failure simulation reversible in all cases | Dr. Stephen Henson | 2011-11-05 | 1 | -3/+2 |
| | | |||||
| * | Add single call public key sign and verify functions. | Dr. Stephen Henson | 2011-11-05 | 1 | -0/+10 |
| | | |||||
| * | Check for selftest failure in various places. | Dr. Stephen Henson | 2011-10-22 | 1 | -0/+4 |
| | | |||||
| * | Update error codes. | Dr. Stephen Henson | 2011-10-21 | 1 | -0/+1 |
| | | |||||
| * | Fix error codes. | Dr. Stephen Henson | 2011-10-20 | 1 | -1/+2 |
| | | |||||
| * | add authentication parameter to FIPS_module_mode_set | Dr. Stephen Henson | 2011-10-20 | 1 | -1/+5 |
| | | |||||
| * | Add FIPS selftests for ECDH algorithm. | Dr. Stephen Henson | 2011-09-30 | 1 | -0/+3 |
| | | |||||
| * | new function to lookup FIPS supported ciphers by NID | Dr. Stephen Henson | 2011-09-14 | 1 | -0/+2 |
| | | |||||
| * | More extensive DRBG health check. New function to call health check | Dr. Stephen Henson | 2011-09-12 | 1 | -0/+3 |
| | | | | | for all DRBG combinations. | ||||
| * | Add error codes for DRBG KAT failures. | Dr. Stephen Henson | 2011-09-06 | 1 | -0/+4 |
| | | | | | | Add abbreviated DRBG KAT for POST which only performs a single generate operations instead of four. | ||||
| * | Add functions to return FIPS module version. | Dr. Stephen Henson | 2011-07-05 | 1 | -0/+3 |
| | | |||||
| * | Now the FIPS capable OpenSSL is available simplify the various FIPS test | Dr. Stephen Henson | 2011-06-22 | 1 | -55/+0 |
| | | | | | | | | | | | | build options. All fispcanisterbuild builds only build fipscanister.o and include symbol renaming. Move all renamed symbols to fipssyms.h Update README.FIPS | ||||
| * | Add prototype for null cipher. | Dr. Stephen Henson | 2011-06-21 | 1 | -0/+1 |
| | | |||||
| * | Use FIPSCAPABLE for FIPS module functions used in FIPS capable OpenSSL. | Dr. Stephen Henson | 2011-06-12 | 1 | -1/+1 |
| | | |||||
| * | HMAC fips prototypes | Dr. Stephen Henson | 2011-06-12 | 1 | -0/+9 |
| | | |||||
| * | CMAC FIPS prototypes. | Dr. Stephen Henson | 2011-06-12 | 1 | -0/+8 |
| | | |||||
| * | more prototypes in fips.h | Dr. Stephen Henson | 2011-06-09 | 1 | -1/+4 |
| | | |||||
| * | Add more prototypes. | Dr. Stephen Henson | 2011-06-09 | 1 | -0/+10 |
| | | |||||
| * | Add flags for DH FIPS method. | Dr. Stephen Henson | 2011-06-08 | 1 | -6/+9 |
| | | | | | Update/fix prototypes in fips.h | ||||
| * | Add prototypes for some FIPS EC functions. | Dr. Stephen Henson | 2011-06-06 | 1 | -0/+12 |
| | | |||||
| * | Move function prototype to fips.h | Dr. Stephen Henson | 2011-06-06 | 1 | -0/+5 |
| | | |||||
| * | Add "OPENSSL_FIPSCAPABLE" define for a version of OpenSSL which is | Dr. Stephen Henson | 2011-06-03 | 1 | -0/+5 |
| | | | | | FIPS capable: i.e. FIPS module is supplied externally. | ||||
| * | Constify RSA signature buffer. | Dr. Stephen Henson | 2011-06-03 | 1 | -2/+2 |
| | | |||||
| * | Move FIPS RSA function definitions to fips.h | Dr. Stephen Henson | 2011-06-02 | 1 | -0/+28 |
| | | | | | | | | | New function to lookup digests by NID in module. Minor optimisation: if supplied hash is NULL to FIPS RSA functions and we are using PKCS padding get digest NID from otherwise unused saltlen parameter instead. | ||||
| * | Clone digest prototypes. | Dr. Stephen Henson | 2011-06-01 | 1 | -0/+3 |
| | | |||||
| * | Add more cipher prototypes. | Dr. Stephen Henson | 2011-05-29 | 1 | -0/+3 |
| | | |||||
| * | Prototypes for more FIPS functions for use in FIPS capable OpenSSL. | Dr. Stephen Henson | 2011-05-29 | 1 | -1/+7 |
| | | |||||
| * | Add FIPS_digestinit prototype for FIPS capable OpenSSL. | Dr. Stephen Henson | 2011-05-29 | 1 | -0/+2 |
| | | |||||
| * | Add prototypes for FIPS EVP implementations: for use in FIPS capable | Dr. Stephen Henson | 2011-05-28 | 1 | -0/+51 |
| | | | | | OpenSSL. | ||||
| * | Fix error discrepancy. | Dr. Stephen Henson | 2011-05-12 | 1 | -1/+1 |
| | | |||||
| * | Rename FIPS_mode_set and FIPS_mode. Theses symbols will be defined in | Dr. Stephen Henson | 2011-05-11 | 1 | -2/+2 |
| | | | | | the FIPS capable OpenSSL. | ||||
| * | Return error codes for selftest failure instead of hard assertion errors. | Dr. Stephen Henson | 2011-05-06 | 1 | -0/+9 |
| | | |||||
| * | Add PRNG security strength checking. | Dr. Stephen Henson | 2011-04-23 | 1 | -0/+9 |
| | | |||||
| * | Return errors instead of aborting when selftest fails. | Dr. Stephen Henson | 2011-04-22 | 1 | -0/+2 |
| | | |||||
| * | Add continuous RNG test to entropy source. Entropy callbacks now need | Dr. Stephen Henson | 2011-04-21 | 1 | -0/+2 |
| | | | | | to specify a "block length". | ||||
| * | Add periodic DRBG health checks as required by SP800-90. | Dr. Stephen Henson | 2011-04-20 | 1 | -0/+1 |
| | | |||||
| * | Add AES CCM selftest. | Dr. Stephen Henson | 2011-04-19 | 1 | -0/+2 |
| | | |||||
| * | Add XTS selftest, include in fips_test_suite. | Dr. Stephen Henson | 2011-04-15 | 1 | -0/+2 |
| | | |||||
| * | Add new POST support to X9.31 PRNG. | Dr. Stephen Henson | 2011-04-14 | 1 | -1/+0 |
| | | |||||
| * | Update CMAC, HMAC, GCM to use new POST system. | Dr. Stephen Henson | 2011-04-14 | 1 | -1/+0 |
| | | | | | Fix crash if callback not set. | ||||
| * | Remove several of the old obsolete FIPS_corrupt_*() functions. | Dr. Stephen Henson | 2011-04-14 | 1 | -9/+0 |
| | | |||||
| * | Initial incomplete POST overhaul: add support for POST callback to | Dr. Stephen Henson | 2011-04-14 | 1 | -14/+59 |
| | | | | | allow status of POST to be monitored and/or failures induced. | ||||
| * | Update fips_pkey_signature_test: use fixed string if supplies tbs is | Dr. Stephen Henson | 2011-04-12 | 1 | -2/+2 |
| | | | | | | | | NULL. Always allocate signature buffer. Update ECDSA selftest to use fips_pkey_signature_test. Add copyright notice to file. | ||||
| * | Fix memory leaks: uninstantiate DRBG during health checks. Cleanup md_ctx | Dr. Stephen Henson | 2011-04-12 | 1 | -0/+1 |
| | | | | | when performing ECDSA selftest. | ||||
| * | Add error for health check failure. | Dr. Stephen Henson | 2011-04-09 | 1 | -93/+83 |
| | | | | | Rebuild all FIPS error codes to clean out old obsolete codes. | ||||
| * | Update OpenSSL DRBG support code. Use date time vector as additional data. | Dr. Stephen Henson | 2011-04-07 | 1 | -0/+2 |
| | | | | | Set FIPS RAND_METHOD at same time as OpenSSL RAND_METHOD. | ||||
| * | Extensive reorganisation of PRNG handling in FIPS module: all calls | Dr. Stephen Henson | 2011-04-05 | 1 | -0/+13 |
| | | | | | | | | | | now use an internal RAND_METHOD. All dependencies to OpenSSL standard PRNG are now removed: it is the applications resposibility to setup the FIPS PRNG and initalise it. Initial OpenSSL RAND_init_fips() function that will setup the DRBG for the "FIPS capable OpenSSL". | ||||
| * | Rename deprecated FIPS_rand functions to FIPS_x931. These shouldn't be | Dr. Stephen Henson | 2011-04-05 | 1 | -3/+3 |
| | | | | | | used by applications directly and the X9.31 PRNG is deprecated by new FIPS140-2 rules anyway. | ||||
| * | Set error code is additional data callback fails. | Dr. Stephen Henson | 2011-04-04 | 1 | -0/+2 |
| | | |||||
 |
index : openssl | |
| openssl | Fast-forward packages |
| summaryrefslogtreecommitdiffstats |