summaryrefslogtreecommitdiff
path: root/lib/libcrypto/evp
AgeCommit message (Collapse)Author
2014-07-12We have EVP_CIPH_FLAG_DEFAULT_ASN1 in evp.h; no need to keep constructs toMiod Vallat
build on pre-EVP_CIPH_FLAG_DEFAULT_ASN1 codebases. ok jsing@
2014-07-12Make the BLOCK_CIPHER_{generic,custom} macros expand to more readable structMiod Vallat
definitions using C99 field initializers. No functional change.
2014-07-12if (x) FOO_free(x) -> FOO_free(x).Miod Vallat
Improves readability, keeps the code smaller so that it is warmer in your cache. review & ok deraadt@
2014-07-11OPENSSL_ALGORITHM_DEFINES has been removed from conf.h, no need for it nowTed Unangst
2014-07-11Fix copy for CCM, GCM and XTS.Miod Vallat
Internal pointers in CCM, GCM and XTS contexts should either be NULL or set to point to the appropriate key schedule. This needs to be adjusted when copying contexts. OpenSSL PR #3272 with further fixes, from OpenSSL trunk
2014-07-11In EVP_PBE_alg_add don't use the underlying NID for the cipherMiod Vallat
as it may have a non-standard key size; OpenSSL PR #3206 via OpenSSL trunk.
2014-07-11Missing initialization; OpenSSL PR#3289 and #3345 via OpenSSL trunk.Miod Vallat
2014-07-11Only import cryptlib.h in the four source files that actually need it.Joel Sing
Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@
2014-07-10Explicitly include <openssl/opensslconf.h> in every file that referencesJoel Sing
an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers.
2014-07-10Kill a blatantly outdated (and now wrong) commentMiod Vallat
2014-07-10Stop including standard headers via cryptlib.h - pull in the headers thatJoel Sing
are needed in the source files that actually require them. ok beck@ miod@
2014-07-09remove unused, private version strings except SSL_version_strBrent Cook
Also remove unused des_ver.h, which exports some of these strings, but is not installed. ok miod@ tedu@
2014-06-24Remove BIO_f_reliable(), guilty of playing with EVP_MD_CTX internals itMiod Vallat
should not know anything about. Verified not to be used in ports; riding upon the recent libcrypto major bump.
2014-06-21Switch to the ISC licensed versions of these files, which Google has madeJoel Sing
available via boringssl. ok deraadt@
2014-06-15free iv, then cleanse. from Cyril JouveTed Unangst
2014-06-15Simplify EVP_MD_CTX_create() by just using calloc(). Also, use 0 ratherJoel Sing
than '\0' for several memset(). ok beck@ miod@
2014-06-15Simplify EVP_CIPHER_CTX_new() - stop pretending that EVP_CIPHER_CTX_init()Joel Sing
does something special... just use calloc() instead. ok beck@ miod@
2014-06-15Add missing OPENSSL_cleanse() in aead_aes_gcm_cleanup().Joel Sing
ok beck@ miod@
2014-06-15The OPENSSL_cleanse() in aes_gcm_cleanup() only cleans the gcm field of theJoel Sing
EVP_AES_GCM_CTX, leaving the AES key untouched - clean the entire context, rather than just part of it. ok beck@ miod@
2014-06-12tags as requested by miod and teduTheo de Raadt
2014-06-11c-file-style hints, begone; ok beckTheo de Raadt
2014-06-10Abandon the auto-ENGINE /dev/crypto interface. VIA 3des cbc receivesTheo de Raadt
collateral damage. The syncronous nature of this mechanism has hampered performance for symmetric crypto relative to brute-force cpu. The assymetric crypto support never really materialized in drivers. So abandon the complexity. ok tedu beck mikeb some disagrement from djm but if he wants to test /dev/crypto ciphers he should do it without this this gigantic API in the way
2014-06-10Use C99 initialisers for EVP_MD structs, for clarity, grepability and toJoel Sing
protect from future field reordering/removal. No difference in generated assembly.
2014-06-07Remove various test stubs. The good ones have been moved by jsingTheo de Raadt
and others to the regress framework. These remaining ones just muddle us up when re-reading code repeatedly. ok jsing
2014-06-07malloc() result does not need a cast.Theo de Raadt
ok miod
2014-05-30remove CONST_STRICT. ok beck deraadtTed Unangst
2014-05-30no need for null check before free. from Brendan MacDonellTed Unangst
2014-05-26Implement an improved version of the EVP AEAD API. TheJoel Sing
EVP_AEAD_CTX_{open,seal} functions previously returned an ssize_t that was overloaded to indicate success/failure, along with the number of bytes written as output. This change adds an explicit *out_len argument which is used to return the number of output bytes and the return value is now an int that is purely used to identify success or failure. This change effectively rides the last libcrypto crank (although I do not expect there to be many users of the EVP AEAD API currently). Thanks to Adam Langley for providing the improved code that this diff is based on. ok miod@
2014-05-25calloc instead of malloc/memset. from Benjamin BaierTed Unangst
2014-05-22Convert OPENSSL_malloc stuff back to intrinsics, a few were missedBob Beck
as new stuff was brought in. ok miod@
2014-05-17no no md2Ted Unangst
2014-05-17no no seedTed Unangst
2014-05-16When OPENSSL_LOAD_CONF was added it ended up with more #if 0 code,Joel Sing
more #ifdefs and a new source file that contains a single function. Nuke the #if 0 code that is now a macro and move the single function in evp_acnf.c to c_all.c, which is where the other code lives. While here, tidy evp.h slightly, remove an unnecessary #ifdef __OpenBSD__ and nuke a comment that is now a lie. ok miod@
2014-05-15More KNF.Joel Sing
2014-05-15Use C99 initialisers for the AEAD struct.Joel Sing
2014-05-15KNF.Joel Sing
2014-05-15Add a ChaCha20-Poly1305 AEAD EVP implementation to libcrypto, from AdamJoel Sing
Langley's Chromium OpenSSL patches. ok miod@
2014-05-15KNF.Joel Sing
2014-05-15Add an AEAD EVP interface to libcrypto, along with AES-GCM AEADJoel Sing
implementations. This largely pulls in Adam Langley's AEAD patches from Chromium's OpenSSL. ok miod@
2014-05-15Stop being a dummy... presumably these are left overs from pedantic modeJoel Sing
that were not wrapped with #if PEDANTIC. ok miod@
2014-05-11More KNF.Joel Sing
2014-05-11KNF.Joel Sing
2014-05-08More KNF.Joel Sing
2014-05-08KNF.Joel Sing
2014-05-08Remove KSSL debug code.Joel Sing
"fire bomb" tedu@
2014-05-08KNF.Joel Sing
2014-05-08Nuke OPENSSL_FIPS - having #ifdefs inside a #ifndef for the same thingJoel Sing
is amusing. ok deraadt@
2014-05-08KNF.Joel Sing
2014-05-07KNF.Joel Sing
2014-05-07KNF.Joel Sing