summaryrefslogtreecommitdiff
path: root/lib/libcrypto/evp
AgeCommit message (Collapse)Author
2014-05-15More KNF.Joel Sing
2014-05-15Use C99 initialisers for the AEAD struct.Joel Sing
2014-05-15KNF.Joel Sing
2014-05-15Add a ChaCha20-Poly1305 AEAD EVP implementation to libcrypto, from AdamJoel Sing
Langley's Chromium OpenSSL patches. ok miod@
2014-05-15KNF.Joel Sing
2014-05-15Add an AEAD EVP interface to libcrypto, along with AES-GCM AEADJoel Sing
implementations. This largely pulls in Adam Langley's AEAD patches from Chromium's OpenSSL. ok miod@
2014-05-15Stop being a dummy... presumably these are left overs from pedantic modeJoel Sing
that were not wrapped with #if PEDANTIC. ok miod@
2014-05-11More KNF.Joel Sing
2014-05-11KNF.Joel Sing
2014-05-08More KNF.Joel Sing
2014-05-08KNF.Joel Sing
2014-05-08Remove KSSL debug code.Joel Sing
"fire bomb" tedu@
2014-05-08KNF.Joel Sing
2014-05-08Nuke OPENSSL_FIPS - having #ifdefs inside a #ifndef for the same thingJoel Sing
is amusing. ok deraadt@
2014-05-08KNF.Joel Sing
2014-05-07KNF.Joel Sing
2014-05-07KNF.Joel Sing
2014-05-03Add checks for invalid base64 encoded data, specifically relating to theJoel Sing
handling of padding. This fixes a crash that can be triggered by feeding base64 data followed by 64 or more padding characters, which results in a negative output length. This issue was reported by David Ramos, although the same bug has been sitting in the OpenSSL RT since 2011: https://rt.openssl.org/Ticket/Display.html?id=2608 Worse still, BIO_read seems to be completely unable to detect that the base64 input was invalid/corrupt - in particular, enabling BIO_FLAGS_BASE64_NO_NL results in a stream of zero value bytes rather than no input (possibly a good replacement for /dev/null...), which could result in nasty consequences. Prior to this fix some zero value bytes were also injected without this flag being enabled. The recently added base64 regress triggers and documents these issues (and also ensures that this change retains functional behaviour).
2014-05-03It is definitly not the correct spelling.Joel Sing
2014-05-03KNF.Joel Sing
2014-05-03KNF.Joel Sing
2014-05-01Nuke unused evptests.txt - the real one is over in regress.Joel Sing
ok miod@
2014-05-01Provide an EVP implementation for ChaCha.Joel Sing
ok miod@
2014-04-27Use C99 initializers for the various FOO_METHOD structs. More readable, andMiod Vallat
avoid unreadable/unmaintainable constructs like that: const EVP_PKEY_ASN1_METHOD cmac_asn1_meth = { EVP_PKEY_CMAC, EVP_PKEY_CMAC, 0, "CMAC", "OpenSSL CMAC method", 0,0,0,0, 0,0,0, cmac_size, 0, 0,0,0,0,0,0,0, cmac_key_free, 0, 0,0 }; ok matthew@ deraadt@
2014-04-26Replace all use of ERR_add_error_data with ERR_asprintf_error_data.Bob Beck
This avoids a lot of ugly gymnastics to do snprintfs before sending the bag of strings to ERR, and eliminates at least one place in dso_dlfctn.c where it was being called with the incorrect number of arguments and using random things off the stack as addresses of strings. ok krw@, jsing@
2014-04-23Unifdef -UPEDANTIC. ok beck@ tedu@Miod Vallat
2014-04-23Figure out endianness at compile-time, using _BYTE_ORDER fromMiod Vallat
<machine/endian.h>, rather than writing 1 to a 32-bit variable and checking whether the first byte is nonzero. tweaks and ok matthew@; ok beck@ tedu@
2014-04-22Remove files which look like actual code compiled in libcrypto, but isn't.Miod Vallat
One even says (in comments): HAS BUGS! DON'T USE
2014-04-19use intrinsic strlcpy and strlcat everywhere so we only have one set ofBob Beck
funcitons to check for incorrect use. keep BUF_strlcpy and BUF_strlcat for API comptibility only. ok tedu@
2014-04-17kill REF_PRINT/REF_CHECK debugging framework noone would useTheo de Raadt
ok miod
2014-04-17Change library to use intrinsic memory allocation functions instead ofBob Beck
OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free
2014-04-17Do not feed RSA private key information to the random subsystem asTheo de Raadt
entropy. It might be fed to a pluggable random subsystem.... What were they thinking?! ok guenther
2014-04-17call the correct decrypt function in aes_cbc_cipher()Jonathan Gray
From: commit e9c80e04c1a3b5a0de8e666155ab4ecb2697a77d Author: Andy Polyakov <appro@openssl.org> Date: Wed Dec 18 21:42:46 2013 +0100 evp/e_[aes|camellia].c: fix typo in CBC subroutine. It worked because it was never called. Our e_camellia.c does not have this problem. ok miod@ deraadt@
2014-04-16Clean up dangerous strncpy use. This included a use where the resultingBob Beck
string was potentially not nul terminated and a place where malloc return was unchecked. while we're at it remove dummytest.c ok miod@
2014-04-15remove md2, jpake, and seed clutter.Ted Unangst
2014-04-15we don't use these files for buildingTed Unangst
2014-04-15remove FIPS mode support. people who require FIPS can buy something thatTed Unangst
meets their needs, but dumping it in here only penalizes the rest of us. ok beck deraadt
2014-04-15Moved to regress/lib/libcrypto.Miod Vallat
2014-04-15Send the rotIBM stream cipher (ebcdic) to Valhalla to party for eternityBob Beck
with the bearded ones... some API's that nobody should be using will dissapear with this commit.
2014-04-14unifdef -U OPENBSD_DEV_CRYPTO and OPENSSL_OPENBSD_DEV_CRYPTO. This code was theMiod Vallat
early attempt at getting kernel-assisted crypto(4) used by libcrypto, before the engine API existed, and has been #if 0'd out for ages anyway. No API/ABI change.
2014-04-14remove auto-generated dependencies from the old unused build system, soTheo de Raadt
that it is easier to find code pieces. They are getting in the way. ok miod
2014-04-13Cope with the removal of openssl/symhacks.hTheo de Raadt
2014-04-13Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery.Miod Vallat
2013-02-14cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txtMarkus Friedl
from the openssl git (changes between openssl 1.0.1c and 1.0.1d). ok djm@
2013-01-26remove ACSS, crank libcrypto major; ok markus@ deraadt@Damien Miller
2012-10-13resolve conflictsDamien Miller
2012-10-13import OpenSSL-1.0.1cDamien Miller
2011-11-03openssl-1.0.0e: resolve conflictsDamien Miller
2010-10-01fix -Wall due to API changeDamien Miller
2010-10-01resolve conflicts, fix local changesDamien Miller