summaryrefslogtreecommitdiff
path: root/lib/libcrypto/bn
AgeCommit message (Expand)Author
2019-06-17Make BN_num_bits_word() constant time.Theo Buehler
2019-03-23Add range checks to varios ASN1_INTEGER functions to ensure theBob Beck
2019-01-20Fix BN_is_prime_* calls in libcrypto, the API returns -1 on error.Theo Buehler
2018-11-06Flip reversed test in bn_rand_interval().Theo Buehler
2018-11-05Introduce bn_rand_interval() that allows specifying an interval [a, b)Theo Buehler
2018-07-23Use a size_t instead of an int for the byte count in BN_swap_ct().Theo Buehler
2018-07-23Clean up our disgusting implementations of BN_{,u}{add,sub}(), followingTheo Buehler
2018-07-13Eliminate the weird condition in the BN_swap_ct() API that at most one bitTheo Buehler
2018-07-11Sync commentkn
2018-07-11Turn yesterday's optimistic ! in an XXX comment into a more cautious ?Theo Buehler
2018-07-10Provide BN_swap_ct(), a constant time function that conditionally swapsTheo Buehler
2018-06-10fix odd whitespaceTheo Buehler
2018-05-12Use explicit_bzero() rather than memset() when clearing a BIGNUM.Joel Sing
2018-02-20Provide BN_GENCB_new(), BN_GENCB_free() and BN_GENCB_get_arg()Joel Sing
2018-02-20Provide BN_get_rfc2409_prime_*() and BN_get_rfc3526_prime_*().Joel Sing
2017-05-02use freezero() instead of memset/explicit_bzero + free. SubstantiallyTheo de Raadt
2017-01-29Send the function codes from the error functions to the bit bucket,Bob Beck
2017-01-25Construct a BN_gcd_nonct, based on BN_mod_inverse_no_branch, as suggestedBob Beck
2017-01-21use BN_div_nonct where it is safe to do so.Bob Beck
2017-01-21Add ct and nonct versions of BN_mod_inverse for internal useBob Beck
2017-01-21Split out BN_div and BN_mod into ct and nonct versions for Internal use.Bob Beck
2017-01-21Make explicit _ct and _nonct versions of bn_mod_exp funcitons thatBob Beck
2017-01-21/usr/bin/unifdef -D MONT_MUL_MOD -D MONT_EXP_WORD -D RECP_MUL_MOD -m bn_exp.cBob Beck
2017-01-04Remove superfluous datatype that is 32 by default. Clang complainsPatrick Wildt
2016-12-21Explicitly export a list of symbols from libcrypto.Joel Sing
2016-11-08Reduce the ternary operator abusePhilip Guenther
2016-11-05Stop abusing the ternary operator to decide which function to call in aMiod Vallat
2016-11-04Replace all uses of magic numbers when operating on OPENSSL_ia32_P[] byMiod Vallat
2009-04-06import of OpenSSL 0.9.8kDamien Miller
2016-10-17If BN_div_word() fails (by returning (BN_ULONG)-1) or if the divisionPhilip Guenther
2016-09-04Less S390.Joel Sing
2016-09-04Less IA64.Joel Sing
2009-04-06import of OpenSSL 0.9.8kDamien Miller
2016-09-03switch to a constant-time gather procedure for amd64 mont5 asmBrent Cook
2016-09-03add constant-time MOD_EXP_CTIME_COPY_FROM_PREBUF.Brent Cook
2016-09-03BN_mod_exp_mont_consttime: check for zero modulus.Brent Cook
2016-09-02BN_mod_exp_mont_consttime: check for zero modulus.Brent Cook
2016-08-31Avoid undefined-behavior right-shifting by a word-size # of bits.Brent Cook
2016-07-18don't mix code and decls, ok tedu@Brent Cook
2016-07-17use memset to initialize the unionBrent Cook
2016-07-17Initialize buffers before use, noted by Kinichiro Inoguchi.Brent Cook
2016-07-05On systems where we do not have BN_ULLONG defined (most 64-bit systems),Brent Cook
2016-03-15'accomodate' -> 'accommodate' in comments.Kenneth R Westerback
2016-03-12Add error handling to the remaining calls to bn_wexpand().Brent Cook
2016-03-04graduate bn_expand() to a real function. the openssl version of thisTheo de Raadt
2016-03-04Revert bn_expand until there's consensus on a fix.Doug Hogan
2016-03-02Add bounds checking for BN_hex2bn/BN_dec2bn.Doug Hogan
2015-12-24More adress -> addressMichael McConville
2015-11-06Fix gcc version preprocessor checks to cope with gcc 5.x and beyond;Miod Vallat
2015-10-21Reject too small bits value in BN_generate_prime_ex(), so that it does not riskMiod Vallat