summaryrefslogtreecommitdiff
path: root/lib/libcrypto/objects
AgeCommit message (Collapse)Author
2018-11-11Add Ribose Inc's implementation of the SM3 hashing function withTheo Buehler
tweaks from jsing and myself. The SM2/SM3/SM4 algorithms are mandatory for legal use of cryptography within China and [are] widely applied in the country, covering identification/financial cards, contactless, TPM 2.0 and PKI. ok beck inoguchi jsing
2018-09-08ASN1_OBJECTs should be freed with ASN1_OBJECT_free(3), not with free(3).Theo Buehler
ok inoguchi, jsing
2018-09-08indent labelsTheo Buehler
2018-09-08missing word & a couple of typosTheo Buehler
2018-03-17Provide object identifier for chacha20-poly1305.Joel Sing
2018-03-17Provide object identifiers for TLS cipher suite key exchange andJoel Sing
authentication.
2017-05-25Add definitions for three OIDs used in EV certificates.Joel Sing
From Kyle J. McKay <mackyle at gmail dot com>
2017-02-28Fix typo in issuingDistributionPoint description.Joel Sing
2017-01-29Send the function codes from the error functions to the bit bucket,Bob Beck
as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@
2017-01-21Place {DECLARE,IMPLEMENT}_OBJ_BSEARCH{_GLOBAL,}_CMP_FN macros undefJoel Sing
LIBRESSL_INTERNAL.
2017-01-21Expand DECLARE_OBJ_BSEARCH_CMP_FN and IMPLEMENT_OBJ_BSEARCH_CMP_FN macros.Joel Sing
No change to generated assembly excluding line numbers.
2016-12-22OBJ_obj2txt() should return the total amount of space requiredKinichiro Inoguchi
reported by @rhenium on GitHub ok jsing@
2016-12-21Explicitly export a list of symbols from libcrypto.Joel Sing
Move the "internal" BN functions from bn.h to bn_lcl.h and stop exporting the bn_* symbols. These are documented as only being intended for internal use, so why they were placed in a public header is beyond me... This hides 363 previously exported symbols, most of which exist in headers that are not installed and were never intended to be public. This also removes a few crusty old things that should have died long ago (like _ossl_old_des_read_pw). But don't worry... there are still 3451 symbols exported from the library. With input and testing from inoguchi@. ok beck@ inoguchi@
2016-11-05Add objects for X25519, X448, Ed25519 and Ed448.Joel Sing
ok miod@
2016-07-17remove unused OPENSSL_NO_OBJECT caseBrent Cook
ok tedu@
2015-10-14better fix for overrun reported by Qualys Security.Ted Unangst
buf is at all times kept nul terminated, so there is no need to enforce this again upon exit. (no need to move buf around after we exahust space.) ok beck miod
2015-10-14Bail out early if we have no buf_lenBob Beck
ok miod@
2015-10-14fix a memory leak reported by Qualys Security.Ted Unangst
move the bndec variable in tighter since it's not used elsewhere in the loop, then always free it after use. ok bcook miod
2015-10-14Ensure we don't write a 0 byte past end of the buffer in the error case.Bob Beck
ok bcook@ deraadt@
2015-07-18Coverity ID 78910 - Yet another stupid API designed to not show failures. do theBob Beck
lease worst alternative and do nothing rather than dereference NULL, but having a function with fundamentally broken API to simply make a list of strings, sort them, and call a function with each string as an argument is really quite silly.... and of course it was exposed API that the ecosystem uses that we can't delete.. yet. ok miod@ doug@
2015-02-10Remove more IMPLEMENT_STACK_OF noops that have been hiding for the lastJoel Sing
15 years.
2014-11-09GOST crypto algorithms (well, most of them), ported from the removed GOSTMiod Vallat
engine to regular EVP citizens, contributed by Dmitry Eremin-Solenikov; libcrypto bits only for now. This is a verbatim import of Dmitry's work, and does not compile in this state; the forthcoming commits will address these issues. None of the GOST code is enabled in libcrypto yet, for it still gets compiled with OPENSSL_NO_GOST defined. However, the public header gost.h will be installed.
2014-10-28Check the result of sk_*_push() operations for failure.Miod Vallat
ok doug@ jsing@
2014-10-07Use strdup() instead of malloc() + memcpy().Miod Vallat
ok doug@ jsing@
2014-08-08Fix CVE-2014-3508, pretty printing and OID validation:Philip Guenther
- make sure the output buffer is always NUL terminated if buf_len was initially greater than zero. - reject OIDs that are too long, too short, or not in proper base-127 Based on https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=0042fb5fd1c9d257d713b15a1f45da05cf5c1c87 ok bcook@
2014-07-11Fix OID encoding for single components. OpenSSL PR #2556 via OpenSSL trunk.Miod Vallat
(be sure to make cleandir and make includes before building)
2014-07-11Only import cryptlib.h in the four source files that actually need it.Joel Sing
Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@
2014-07-10Explicitly include <openssl/opensslconf.h> in every file that referencesJoel Sing
an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers.
2014-07-10Stop including standard headers via cryptlib.h - pull in the headers thatJoel Sing
are needed in the source files that actually require them. ok beck@ miod@
2014-06-12tags as requested by miod and teduTheo de Raadt
2014-06-07Remove various test stubs. The good ones have been moved by jsingTheo de Raadt
and others to the regress framework. These remaining ones just muddle us up when re-reading code repeatedly. ok jsing
2014-06-07malloc() result does not need a cast.Theo de Raadt
ok miod
2014-06-01Clean up some of the nightmare of string and pointer arithmatic inBob Beck
this nasty function. This gets rid of the nasty tmp variables used to hold temporary strings and the DECIMAL_SIZE hack. it gets rid of the rather pointless null checks for buf (since the original code dereferences it before checking). It also gets rid of the insane possibility this could return -1 when stuff is using the return values to compute lengths All the failure cases now return 0 and an empty string like the first error case in the original code. ok miod@ tedu@
2014-05-30more: no need for null check before freeTheo de Raadt
ok tedu guenther
2014-05-29ok, next pass after review: when possible, put the reallocarray argumentsTheo de Raadt
in the "size_t nmemb, size_t size"
2014-05-29convert 53 malloc(a*b) to reallocarray(NULL, a, b). that is 53Theo de Raadt
potential integer overflows easily changed into an allocation return of NULL, with errno nicely set if need be. checks for an allocations returning NULL are commonplace, or if the object is dereferenced (quite normal) will result in a nice fault which can be detected & repaired properly. ok tedu
2014-05-25Turn off MemCheck_on and MemCheck_off. These calls are pointless since theJoel Sing
crypto memory debugging code has been castrated. ok miod@ "kill it" beck@
2014-05-24Almost nothing actually needs to include <openssl/e_os2.h>, however byJoel Sing
including it they get <openssl/opensslconf.h>. So instead of pulling in <openssl/e_os2.h>, just pull in <openssl/opensslconf.h>. "go ahead" miod@
2014-05-01Update with recently added objects.Joel Sing
ok miod@
2014-05-01Provide an EVP implementation for ChaCha.Joel Sing
ok miod@
2014-05-01Add support for the french ANSSI FRP256v1 elliptic curve.Miod Vallat
While not to be considered a good choice of elliptic curve (refer to http://safecurves.cr.yp.to/ for more details), it is nevertheless deemed a good decision to allow developers with requirements to use such a curve, to be able to do this via a crypto library allowing for much better choices to be made, without having to change (much of) their code to get better crypto. ok beck@ deraadt@
2014-05-01Add Brainpool elliptic curves. From OpenSSL RT#2239 via ${DAYJOB}.Miod Vallat
Be sure to rerun `make includes' after updating. ok tedu@ beck@ deraadt@
2014-04-20Restore beck's rev 1.21: snprintf() was reviewedPhilip Guenther
2014-04-19KNF.Joel Sing
2014-04-19KNF.Joel Sing
2014-04-19We'll interpret a (void) cast on snprintf() to mean it's been verified thatPhilip Guenther
truncation is either desirable, not an issue, or is detected and handled later ok deraadt@
2014-04-19use intrinsic strlcpy and strlcat everywhere so we only have one set ofBob Beck
funcitons to check for incorrect use. keep BUF_strlcpy and BUF_strlcat for API comptibility only. ok tedu@
2014-04-18Shrink a local buffer to the size it really needs to be; this is the onlyMiod Vallat
discrepancy found while checking proper {HEX,DECIMAL}_SIZE macro usage, which is confusing enough. tweaks and ok jca@, ok guenther@
2014-04-17a little less obfuscationTed Unangst
2014-04-17Change library to use intrinsic memory allocation functions instead ofBob Beck
OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-22 01:33:03 +0000