summaryrefslogtreecommitdiff
path: root/lib/libcrypto
AgeCommit message (Expand)Author
2016-06-30Tighten behavior of _rs_allocate failure for portable arc4random implementati...Brent Cook
2016-06-30Tighten behavior of _rs_allocate on Windows.Brent Cook
2016-06-30bump to 2.4.2Brent Cook
2016-06-30Remove flags for disabling constant-time operations.Brent Cook
2016-06-25Fix from kinichiro.inoguchi@gmail.com to ensure that OCSP usesBob Beck
2016-06-25Fix the ocsp code to actually check for errors when comparing time valuesBob Beck
2016-06-21Disable DSA_FLAG_NO_EXP_CONSTTIME, always enable constant-time behavior.Brent Cook
2016-06-06Set BN_FLG_CONSTTIME on the correct variable. beck committed wrong fix.Ted Unangst
2016-06-06Correct a problem that prevents the DSA signing algorithm from runningBob Beck
2016-06-06LibreSSL 2.4.1Brent Cook
2016-05-30deprecate internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.Bob Beck
2016-05-20Fix a short-read bug in the previous version of asn1_d2i_read_bioBrent Cook
2016-05-11remove hppa64 port, which we never got going beyond broken single users.Theo de Raadt
2016-05-04fix for integer overflow in encode and encrypt update functions.Ted Unangst
2016-05-04fix a padding oracle in aesni cbc mac check. there must be enough dataTed Unangst
2016-05-04internal only negative types should not be handled here.Ted Unangst
2016-05-04be careful about consuming excessive memory by reading in chunks.Ted Unangst
2016-05-04revert the big change from yesterday to prepare for smaller commits.Ted Unangst
2016-05-03prefer limits.h over sys/limits.hBrent Cook
2016-05-03patch from openssl for multiple issues:Ted Unangst
2016-04-28Crank majors for lib{crypto,ssl,tls} due to symbol removals, symbolJoel Sing
2016-04-28don't go into an unbreakable infinite loop during operations suchTed Unangst
2016-04-28Rename EVP_aead_chacha20_poly1305() to EVP_aead_chacha20_poly1305_old()Joel Sing
2016-04-19fix typo in comment; ok beckT.J. Townsend
2016-04-13Use the correct iv and counter when decrypting the ciphertext forJoel Sing
2016-03-21Return zero from two functions on allocation failure instead of alwaysMichael McConville
2016-03-20" the the " -> " the ", or in a couple of cases replace the superfluousKenneth R Westerback
2016-03-17explicit_bzero for asn1 objects on free. Too often these contain sensitive in...Bob Beck
2016-03-15'accomodate' -> 'accommodate' in comments.Kenneth R Westerback
2016-03-13Fix examples for EVP_PKEY_CTX_set_rsa_padding.Brent Cook
2016-03-12Add error handling to the remaining calls to bn_wexpand().Brent Cook
2016-03-12Remove sentences in RETURN VALUES sections saying that functions withMichael McConville
2016-03-12Bump for LibreSSL 2.4.0Brent Cook
2016-03-11X509_free(3) is NULL-safe, so remove NULL checks before its calls.Michael McConville
2016-03-10http -> https for a few more IETF URLs in comments or man pagesMichael McConville
2016-03-06explict_bzero for some asn1 free's - ok miod@Bob Beck
2016-03-04graduate bn_expand() to a real function. the openssl version of thisTheo de Raadt
2016-03-04Revert bn_expand until there's consensus on a fix.Doug Hogan
2016-03-02fix the rest of the read_ledword() calls used as lengths to be bounded.Bob Beck
2016-03-02Add bounds checking for BN_hex2bn/BN_dec2bn.Doug Hogan
2016-03-02bound lengths coming out of a pem file to something like realityBob Beck
2016-03-01Remove support for ancient, broken DSA implementations.Doug Hogan
2016-01-04Calling clone(2) with CLONE_NEWPID yields multiple processes with pid=1.Brent Cook
2015-12-24More adress -> addressMichael McConville
2015-12-23remove NULL-checks before free()Michael McConville
2015-12-23assign pointer NULL rather than 0Michael McConville
2015-12-23assign pointer to NULL rather than 0Michael McConville
2015-12-22initialize a pointer to NULL rather than 0Michael McConville
2015-12-14initialize ext_len to 0.Bob Beck
2015-12-14initialize ok to 0Bob Beck