Age | Commit message (Collapse) | Author | |
---|---|---|---|
2012-10-13 | resolve conflicts | Damien Miller | |
2012-10-13 | import OpenSSL-1.0.1c | Damien Miller | |
2011-11-03 | openssl-1.0.0e: resolve conflicts | Damien Miller | |
2010-12-16 | move CRYPTO_VIAC3_MAX out of cryptodev.h and into the only | Jonathan Gray | |
file it will be used from. requested by/ok mikeb@ | |||
2010-12-16 | The VIA ciphers are added to an array of CRYPTO_ALGORITHM_MAX length | Jonathan Gray | |
which should have been declared as CRYPTO_ALGORITHM_MAX + 1, fix this and reserve enough space for the VIA additions as well. ok/comments from mikeb & deraadt | |||
2010-10-06 | More OpenSSL fixes: | Damien Miller | |
- Update local engines for the EVP API change (len u_int => size_t) - Use hw_cryptodev.c instead of eng_cryptodev.c - Make x86_64-xlate.pl always write to the output file and not stdout, fixing "make -j" builds (spotted by naddy@) ok naddy@ | |||
2010-10-06 | Retire Skipjack | Mike Belopuhov | |
There's not much use for the declassified cipher from the 80's with a questionable license these days. According to the FIPS drafts, Skipjack reaches its EOL in December 2010. The libc portion will be removed after the ports hackathon. djm and thib agree, no objections from deraadt Thanks to jsg for digging up FIPS drafts. | |||
2010-10-01 | resolve conflicts, fix local changes | Damien Miller | |
2010-10-01 | import OpenSSL-1.0.0a | Damien Miller | |
2010-07-01 | AES-NI engine support for OpenSSL. | Thordur I. Bjornsson | |
This is code mostly picked up from upstream OpenSSL, or to be more exact a diff from David Woodhouse <dwmw2 at infradead dot org>. Remember to make includes before doing a build! no objections from djm@ OK deraadt@, reyk@ (AES is about 4.25x faster on his x201 now) | |||
2010-06-29 | VIA xcrypt for amd64, simpler version of a diff from deraadt | Jonathan Gray | |
with suggestions from miod. The codepath doesn't seem to be called yet, this will be investigated later. looks good miod@, ok deraadt@ | |||
2010-05-03 | When running in pic mode we don't have enough general registers for all | Jonathan Gray | |
the xcrypt inputs, hence the dance which is done to make this work. The constraint for the key however was "mr" which is both from memory and from a general register, it seems gcc3 went with the former and gcc4 went with the later in the pic case, so change the constraint for the key to just "m" which gives us more efficient code that both gcc3 and gcc4 are happy with. ok kettenis@ | |||
2009-01-09 | resolve conflicts | Damien Miller | |
2009-01-05 | update to openssl-0.9.8i; tested by several, especially krw@ | Damien Miller | |
2008-09-06 | remerge local tweaks, update per-arch configuration headers, update | Damien Miller | |
Makefiles, crank shlib_version | |||
2008-09-06 | resolve conflicts | Damien Miller | |
2008-09-06 | import of OpenSSL 0.9.8h | Damien Miller | |
2008-02-26 | fix memory leak (in one case of unaligned buffers); from Markus Kvetter | Theo de Raadt | |
ok markus | |||
2006-06-27 | resolve conflicts | Damien Miller | |
2006-06-08 | potential fd leak (we will fix this before we move to cloning) | Theo de Raadt | |
2005-05-23 | no need to byteswap for AES_ASM, from tom@ | Markus Friedl | |
2005-04-29 | resolve conflicts | Damien Miller | |
2005-04-29 | import of openssl-0.9.7g; tested on platforms from alpha to zaurus, ok deraadt@ | Damien Miller | |
2005-01-29 | adjust comment, open_dev_crypto() returns -1 on error. | Hans-Joerg Hoexer | |
ok markus@ | |||
2005-01-26 | on error set correct pointer to NULL. | Hans-Joerg Hoexer | |
From phk@freebsd.org ok markus@ | |||
2004-06-15 | machdep.xcrypt now has a different meaning: Instead of > 0 indicating | Theo de Raadt | |
that AES is there, we now have 3 flag bits: C3_HAS_AES, C3_HAS_SHA (SHA1 & SHA256), and C3_HAS_MM (RSA). Change this code to only look at C3_HAS_AES for now. | |||
2004-04-08 | merge 0.9.7d | Markus Friedl | |
2004-02-04 | remove some debug code and cleanup.. | Theo de Raadt | |
2004-02-03 | OK, this time the AES soft keys work with ssh and such. I spent over 3 | Theo de Raadt | |
hours learning that OpenSSL's internal functions for AES extended keys generate screwy byte order swapped data.. | |||
2004-02-03 | oops, software key gen bug | Theo de Raadt | |
2004-02-03 | Switch to using software generated extended keys (because the cpu cannot | Theo de Raadt | |
yet generate 192 & 256 bit keys). Ensure that 192 and 256 are in the nids table. This also accelerates performance for 128 a tiny bit: type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 34921.48k 129617.82k 362059.93k 623649.81k 790397.77k aes-192-cbc 26227.43k 99215.33k 283242.84k 509881.15k 665323.22k aes-256-cbc 26133.22k 97458.06k 265990.84k 457824.69k 579835.09k | |||
2004-02-03 | If on an i386, detect existance of the VIA C3 xcrypt-* using sysctl of | Theo de Raadt | |
the machdep.xcrypt node. If they exist, use the xcrypt-cbc instruction to accelerate aes-{128,192,256}-cbc, for more than 100x performance increase. This code has no effect on any cpu... Tested thus far using openssl speed command, and of course, ssh. 778MB/sec AES-128-CBC performance at 8192 byte block size. | |||
2003-11-13 | remove obsolete files | Markus Friedl | |
2003-11-11 | merge 0.9.7c; minor bugsfixes; | Markus Friedl | |
API addition: ERR_release_err_state_table [make includes before you build libssl/libcrypto] | |||
2003-08-07 | support AES with 192 and 256 bit keys, too. | Markus Friedl | |
tested with kern.cryptodevallowsoft=1; ok deraadt@ | |||
2003-06-03 | nuke term 3, since we're all in ~deraadt/terms and I clued in now. | Bob Beck | |
2003-05-12 | merge 0.9.7b with local changes; crank majors for libssl/libcrypto | Markus Friedl | |
2003-05-11 | import 0.9.7b (without idea and rc5) | Markus Friedl | |
2003-04-08 | remove printf("bar\n"); | Markus Friedl | |
2003-04-06 | sprintf->snprintf. deraadt@ suggestions and ok | Hakan Olsson | |
2002-09-14 | merge with openssl-0.9.7-stable-SNAP-20020911, | Markus Friedl | |
new minor for libcrypto (_X509_REQ_print_ex) tested by miod@, pb@ | |||
2002-09-10 | merge openssl-0.9.7-beta3, tested on vax by miod@ | Markus Friedl | |
2002-09-05 | merge with 0.9.7-beta1 | Markus Friedl | |
2002-09-04 | sync formatting with 0.9.7 | Markus Friedl | |
2002-09-03 | remove whitespace changes (keep diffs to 0.9.7-beta1 minimal) | Markus Friedl | |
2002-09-03 | unused files, not part of OpenSSL 0.9.7 | Markus Friedl | |
2002-07-30 | sync with http://www.openssl.org/news/patch_20020730_0_9_7.txt | Markus Friedl | |
(adds fix for unused kerberos and engine code, and some more assertions, as well as a 64bit integer string fix for conf_mod.c) | |||
2002-07-16 | correct memset arguments; from Moritz Jodeit <moritz@jodeit.org> via PR/2822. | Federico G. Schwindt | |
2002-06-20 | remove support for RC4 via /dev/crypto, suggested by Niels; ok provos@ | Markus Friedl | |
2002-06-19 | do not syslog from libraries! | Theo de Raadt | |