Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-05-15 | More KNF. | Joel Sing | |
2014-05-15 | Use C99 initialisers for the AEAD struct. | Joel Sing | |
2014-05-15 | KNF. | Joel Sing | |
2014-05-15 | Add a ChaCha20-Poly1305 AEAD EVP implementation to libcrypto, from Adam | Joel Sing | |
Langley's Chromium OpenSSL patches. ok miod@ | |||
2014-05-15 | KNF. | Joel Sing | |
2014-05-15 | Add an AEAD EVP interface to libcrypto, along with AES-GCM AEAD | Joel Sing | |
implementations. This largely pulls in Adam Langley's AEAD patches from Chromium's OpenSSL. ok miod@ | |||
2014-05-15 | Stop being a dummy... presumably these are left overs from pedantic mode | Joel Sing | |
that were not wrapped with #if PEDANTIC. ok miod@ | |||
2014-05-11 | More KNF. | Joel Sing | |
2014-05-11 | KNF. | Joel Sing | |
2014-05-08 | More KNF. | Joel Sing | |
2014-05-08 | KNF. | Joel Sing | |
2014-05-08 | Remove KSSL debug code. | Joel Sing | |
"fire bomb" tedu@ | |||
2014-05-08 | KNF. | Joel Sing | |
2014-05-08 | Nuke OPENSSL_FIPS - having #ifdefs inside a #ifndef for the same thing | Joel Sing | |
is amusing. ok deraadt@ | |||
2014-05-08 | KNF. | Joel Sing | |
2014-05-07 | KNF. | Joel Sing | |
2014-05-07 | KNF. | Joel Sing | |
2014-05-03 | Add checks for invalid base64 encoded data, specifically relating to the | Joel Sing | |
handling of padding. This fixes a crash that can be triggered by feeding base64 data followed by 64 or more padding characters, which results in a negative output length. This issue was reported by David Ramos, although the same bug has been sitting in the OpenSSL RT since 2011: https://rt.openssl.org/Ticket/Display.html?id=2608 Worse still, BIO_read seems to be completely unable to detect that the base64 input was invalid/corrupt - in particular, enabling BIO_FLAGS_BASE64_NO_NL results in a stream of zero value bytes rather than no input (possibly a good replacement for /dev/null...), which could result in nasty consequences. Prior to this fix some zero value bytes were also injected without this flag being enabled. The recently added base64 regress triggers and documents these issues (and also ensures that this change retains functional behaviour). | |||
2014-05-03 | It is definitly not the correct spelling. | Joel Sing | |
2014-05-03 | KNF. | Joel Sing | |
2014-05-03 | KNF. | Joel Sing | |
2014-05-01 | Nuke unused evptests.txt - the real one is over in regress. | Joel Sing | |
ok miod@ | |||
2014-05-01 | Provide an EVP implementation for ChaCha. | Joel Sing | |
ok miod@ | |||
2014-04-27 | Use C99 initializers for the various FOO_METHOD structs. More readable, and | Miod Vallat | |
avoid unreadable/unmaintainable constructs like that: const EVP_PKEY_ASN1_METHOD cmac_asn1_meth = { EVP_PKEY_CMAC, EVP_PKEY_CMAC, 0, "CMAC", "OpenSSL CMAC method", 0,0,0,0, 0,0,0, cmac_size, 0, 0,0,0,0,0,0,0, cmac_key_free, 0, 0,0 }; ok matthew@ deraadt@ | |||
2014-04-26 | Replace all use of ERR_add_error_data with ERR_asprintf_error_data. | Bob Beck | |
This avoids a lot of ugly gymnastics to do snprintfs before sending the bag of strings to ERR, and eliminates at least one place in dso_dlfctn.c where it was being called with the incorrect number of arguments and using random things off the stack as addresses of strings. ok krw@, jsing@ | |||
2014-04-23 | Unifdef -UPEDANTIC. ok beck@ tedu@ | Miod Vallat | |
2014-04-23 | Figure out endianness at compile-time, using _BYTE_ORDER from | Miod Vallat | |
<machine/endian.h>, rather than writing 1 to a 32-bit variable and checking whether the first byte is nonzero. tweaks and ok matthew@; ok beck@ tedu@ | |||
2014-04-22 | Remove files which look like actual code compiled in libcrypto, but isn't. | Miod Vallat | |
One even says (in comments): HAS BUGS! DON'T USE | |||
2014-04-19 | use intrinsic strlcpy and strlcat everywhere so we only have one set of | Bob Beck | |
funcitons to check for incorrect use. keep BUF_strlcpy and BUF_strlcat for API comptibility only. ok tedu@ | |||
2014-04-17 | kill REF_PRINT/REF_CHECK debugging framework noone would use | Theo de Raadt | |
ok miod | |||
2014-04-17 | Change library to use intrinsic memory allocation functions instead of | Bob Beck | |
OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | |||
2014-04-17 | Do not feed RSA private key information to the random subsystem as | Theo de Raadt | |
entropy. It might be fed to a pluggable random subsystem.... What were they thinking?! ok guenther | |||
2014-04-17 | call the correct decrypt function in aes_cbc_cipher() | Jonathan Gray | |
From: commit e9c80e04c1a3b5a0de8e666155ab4ecb2697a77d Author: Andy Polyakov <appro@openssl.org> Date: Wed Dec 18 21:42:46 2013 +0100 evp/e_[aes|camellia].c: fix typo in CBC subroutine. It worked because it was never called. Our e_camellia.c does not have this problem. ok miod@ deraadt@ | |||
2014-04-16 | Clean up dangerous strncpy use. This included a use where the resulting | Bob Beck | |
string was potentially not nul terminated and a place where malloc return was unchecked. while we're at it remove dummytest.c ok miod@ | |||
2014-04-15 | remove md2, jpake, and seed clutter. | Ted Unangst | |
2014-04-15 | we don't use these files for building | Ted Unangst | |
2014-04-15 | remove FIPS mode support. people who require FIPS can buy something that | Ted Unangst | |
meets their needs, but dumping it in here only penalizes the rest of us. ok beck deraadt | |||
2014-04-15 | Moved to regress/lib/libcrypto. | Miod Vallat | |
2014-04-15 | Send the rotIBM stream cipher (ebcdic) to Valhalla to party for eternity | Bob Beck | |
with the bearded ones... some API's that nobody should be using will dissapear with this commit. | |||
2014-04-14 | unifdef -U OPENBSD_DEV_CRYPTO and OPENSSL_OPENBSD_DEV_CRYPTO. This code was the | Miod Vallat | |
early attempt at getting kernel-assisted crypto(4) used by libcrypto, before the engine API existed, and has been #if 0'd out for ages anyway. No API/ABI change. | |||
2014-04-14 | remove auto-generated dependencies from the old unused build system, so | Theo de Raadt | |
that it is easier to find code pieces. They are getting in the way. ok miod | |||
2014-04-13 | Cope with the removal of openssl/symhacks.h | Theo de Raadt | |
2014-04-13 | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | Miod Vallat | |
2013-02-14 | cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txt | Markus Friedl | |
from the openssl git (changes between openssl 1.0.1c and 1.0.1d). ok djm@ | |||
2013-01-26 | remove ACSS, crank libcrypto major; ok markus@ deraadt@ | Damien Miller | |
2012-10-13 | resolve conflicts | Damien Miller | |
2012-10-13 | import OpenSSL-1.0.1c | Damien Miller | |
2011-11-03 | openssl-1.0.0e: resolve conflicts | Damien Miller | |
2010-10-01 | fix -Wall due to API change | Damien Miller | |
2010-10-01 | resolve conflicts, fix local changes | Damien Miller | |