summaryrefslogtreecommitdiff
path: root/lib/libssl/t1_enc.c
AgeCommit message (Expand)Author
2014-07-10decompress libssl. ok beck jsingTed Unangst
2014-07-09tedu the SSL export cipher handling - since we do not have enabled exportJoel Sing
2014-07-08pedantic avoidance of division by zero, likely not actuallyBob Beck
2014-06-21Pull the code that builds a DTLS sequence number out into its own functionJoel Sing
2014-06-21Pull out the sequence number selection and handle this up front. Also, theJoel Sing
2014-06-21More KNF and clean up.Joel Sing
2014-06-15Rename ssl3_record_sequence_update() to ssl3_record_sequence_increment(),Joel Sing
2014-06-13Correctly calculate the key block length when using export ciphers.Joel Sing
2014-06-13Swap compress/expand around so they are in the correct order - these endedJoel Sing
2014-06-13Combine the MAC handling for both !EVP_CIPH_FLAG_AEAD_CIPHER andJoel Sing
2014-06-13Add support for handling SSL_CIPHER_ALGORITHM2_AEAD ciphers, which areJoel Sing
2014-06-13Remove support for the `opaque PRF input' extension, which draft has expiredMiod Vallat
2014-06-12tags as requested by miod and teduTheo de Raadt
2014-06-11Stop setting the EVP_MD_CTX_FLAG_NON_FIPS_ALLOW - it has been ignored sinceJoel Sing
2014-06-10In tls1_cert_verify_mac(), check the return value of EVP_MD_CTX_copy_ex()Joel Sing
2014-06-08Add a define for the SSLv3 sequence size and use it, rather than sprinklingJoel Sing
2014-06-08Be explicit with types. No binary change.Joel Sing
2014-06-08Factor out the part of tls1_change_cipher_state() that is specific toJoel Sing
2014-06-08Factor out the sequence number reset code to aid in upcoming changes.Joel Sing
2014-06-07Add missing NULL check after calling EVP_PKEY_new_mac_key().Joel Sing
2014-06-07Use !is_read to imply SSL3_CC_WRITE.Joel Sing
2014-06-07Move the export label initialisation into the export handling code, sinceJoel Sing
2014-06-07Remove pointless casts - no binary change.Joel Sing
2014-06-07Rename variables to make it clear that these are only used in the exportJoel Sing
2014-06-07Further clean up of context handling in tls1_change_cipher_state().Joel Sing
2014-06-02Rename more variables for readability and consistency.Joel Sing
2014-06-01Overhaul the key block handling in tls1_change_cipher_state() - useJoel Sing
2014-06-01In tls1_setup_key_block(), use the correct IV length for GCM mode, whichJoel Sing
2014-06-01Clean up the tls1_change_cipher_state() key length handling and use aJoel Sing
2014-05-30remove some #if 0 code. we don't need any more reminders that we're usingTed Unangst
2014-05-30Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS andJoel Sing
2014-05-29Fix another two cases where the return value of ssl_replace_hash() isJoel Sing
2014-05-28More KNF.Joel Sing
2014-05-28Refactor tls1_change_cipher_state() and split the compression handling outJoel Sing
2014-05-28There is no point in checking if a pointer is non-NULL before calling free,Joel Sing
2014-05-25Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much ofJoel Sing
2014-05-25The ssl_ciper_get_evp() function is currently overloaded to also return theJoel Sing
2014-05-24Invoke OPENSSL_cleanse() with the size of the variable you are cleaning.Miod Vallat
2014-05-20KSSL is dead... nuke KSSL_DEBUG from orbit.Joel Sing
2014-04-28use the correct algorithm mask. reported by satish lvr viaTed Unangst
2014-04-21more malloc/realloc/calloc cleanups; ok beck kettenisTheo de Raadt
2014-04-20Chop off more SSLv2 tentacles and start fixing and noting y2038 issues.Philip Guenther
2014-04-19More KNF.Joel Sing
2014-04-18now that knf carpet bombing is finished, switch to hand to hand combat.Ted Unangst
2014-04-17Change library to use intrinsic memory allocation functions instead ofBob Beck
2014-04-15remove FIPS mode support. people who require FIPS can buy something thatTed Unangst
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
2014-04-13Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery.Miod Vallat
2014-02-27SECURITY fixes backported from openssl-1.0.1f. ok mikeb@Jeremie Courreges-Anglas
2013-02-14cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txtMarkus Friedl