]> git.ipfire.org Git - thirdparty/openssl.git/log
thirdparty/openssl.git
12 years agorevert fipslink.pl unlink retry change OpenSSL-fips-2_0 OpenSSL-fips-2_0-rc9
Dr. Stephen Henson [Wed, 18 Jan 2012 15:07:11 +0000 (15:07 +0000)] 
revert fipslink.pl unlink retry change

12 years agogive a hand old assemblers assembling loop instruction. (original by Andy)
Dr. Stephen Henson [Wed, 18 Jan 2012 14:54:20 +0000 (14:54 +0000)] 
give a hand old assemblers assembling loop instruction. (original by Andy)

12 years agotypo OpenSSL-fips-2_0-rc8
Dr. Stephen Henson [Tue, 3 Jan 2012 19:43:06 +0000 (19:43 +0000)] 
typo

12 years agoPrepare RC8
Dr. Stephen Henson [Tue, 3 Jan 2012 14:23:54 +0000 (14:23 +0000)] 
Prepare RC8

12 years agounlink target and retry to avoid intermittent Win32 failures
Dr. Stephen Henson [Tue, 3 Jan 2012 14:22:45 +0000 (14:22 +0000)] 
unlink target and retry to avoid intermittent Win32 failures

12 years agoset version to rc8-dev
Dr. Stephen Henson [Mon, 12 Dec 2011 14:02:57 +0000 (14:02 +0000)] 
set version to rc8-dev

12 years agoPrepare for RC7. OpenSSL-fips-2_0-rc7
Dr. Stephen Henson [Mon, 12 Dec 2011 13:44:05 +0000 (13:44 +0000)] 
Prepare for RC7.

12 years agoRetry rename operation with a slight delay to workaround problems on
Dr. Stephen Henson [Sat, 10 Dec 2011 18:06:55 +0000 (18:06 +0000)] 
Retry rename operation with a slight delay to workaround problems on
some versions of Windows.

12 years agouse different names for asm temp files to avoid problems on some platforms
Dr. Stephen Henson [Sat, 10 Dec 2011 13:29:23 +0000 (13:29 +0000)] 
use different names for asm temp files to avoid problems on some platforms

12 years agoClose file streams in FIPS algorithm test utilities.
Dr. Stephen Henson [Thu, 8 Dec 2011 15:14:38 +0000 (15:14 +0000)] 
Close file streams in FIPS algorithm test utilities.

12 years agoprepare for RC6 OpenSSL-fips-2_0-rc6
Dr. Stephen Henson [Sun, 4 Dec 2011 21:29:08 +0000 (21:29 +0000)] 
prepare for RC6

12 years agoFor FIPS builds we don't use the normal test files (and in the restricted
Dr. Stephen Henson [Sun, 4 Dec 2011 15:26:26 +0000 (15:26 +0000)] 
For FIPS builds we don't use the normal test files (and in the restricted
tarball some don't exist) so set TEST='' to avoid linking to them. This also
avoids problems on platforms that copy instead of symlink.

12 years agouse BUILD_ONE_CMD for fips specific links otherwise we effectively do 'make links...
Dr. Stephen Henson [Sun, 4 Dec 2011 15:14:13 +0000 (15:14 +0000)] 
use BUILD_ONE_CMD for fips specific links otherwise we effectively do 'make links' twice

12 years agoWorkaround for VxWorks
Dr. Stephen Henson [Sun, 4 Dec 2011 15:11:44 +0000 (15:11 +0000)] 
Workaround for VxWorks

12 years agoavoid use of symlinks on Windows: it causes problems on some build environments
Dr. Stephen Henson [Sun, 4 Dec 2011 15:04:20 +0000 (15:04 +0000)] 
avoid use of symlinks on Windows: it causes problems on some build environments

12 years agoFix x86cpuid so it doesn't fail for some (currently theoretical) virtual
Dr. Stephen Henson [Sat, 3 Dec 2011 21:47:48 +0000 (21:47 +0000)] 
Fix x86cpuid so it doesn't fail for some (currently theoretical) virtual
machines.

12 years agoChange EVP_MAXCHUNK so it doesn't wraparound to 0 on some platforms (IP32L64).
Dr. Stephen Henson [Sat, 3 Dec 2011 21:44:01 +0000 (21:44 +0000)] 
Change EVP_MAXCHUNK so it doesn't wraparound to 0 on some platforms (IP32L64).

12 years agoPrepare for RC6.
Dr. Stephen Henson [Sat, 3 Dec 2011 19:51:52 +0000 (19:51 +0000)] 
Prepare for RC6.

12 years agoAdd tests to ensure ECDSA key gen and DSA signing fails if DRBG
Dr. Stephen Henson [Sat, 3 Dec 2011 19:41:28 +0000 (19:41 +0000)] 
Add tests to ensure ECDSA key gen and DSA signing fails if DRBG
entropy source fails.

12 years agofunctions aren't unused: revert
Dr. Stephen Henson [Sat, 3 Dec 2011 19:19:34 +0000 (19:19 +0000)] 
functions aren't unused: revert

12 years agoremove unused functions from module
Dr. Stephen Henson [Sat, 3 Dec 2011 18:27:31 +0000 (18:27 +0000)] 
remove unused functions from module

12 years agobn/asm/mips.pl: fix typos [from HEAD], original by Andy
Dr. Stephen Henson [Sat, 3 Dec 2011 18:26:26 +0000 (18:26 +0000)] 
bn/asm/mips.pl: fix typos [from HEAD], original by Andy

12 years agoprepare for rc5 OpenSSL-fips-2_0-rc5
Dr. Stephen Henson [Fri, 25 Nov 2011 16:27:19 +0000 (16:27 +0000)] 
prepare for rc5

12 years agoreturn error if counter exceeds limit and seed value supplied
Dr. Stephen Henson [Fri, 25 Nov 2011 16:03:27 +0000 (16:03 +0000)] 
return error if counter exceeds limit and seed value supplied

12 years agocheck counter value against 4 * L, not 4096
Dr. Stephen Henson [Fri, 25 Nov 2011 15:00:20 +0000 (15:00 +0000)] 
check counter value against 4 * L, not 4096

12 years agobump version for rc5-dev: hopefully will never be needed...
Dr. Stephen Henson [Mon, 21 Nov 2011 00:05:15 +0000 (00:05 +0000)] 
bump version for rc5-dev: hopefully will never be needed...

12 years agoprepare for rc4 OpenSSL-fips-2_0-rc4
Dr. Stephen Henson [Sat, 19 Nov 2011 17:04:28 +0000 (17:04 +0000)] 
prepare for rc4

12 years agoAdd flag to support cofactor ECDH
Dr. Stephen Henson [Sat, 19 Nov 2011 17:03:44 +0000 (17:03 +0000)] 
Add flag to support cofactor ECDH

12 years agobump version to rc4-dev
Dr. Stephen Henson [Fri, 18 Nov 2011 21:59:36 +0000 (21:59 +0000)] 
bump version to rc4-dev

12 years agoprepare for RC3 OpenSSL-fips-2_0-rc3
Dr. Stephen Henson [Fri, 18 Nov 2011 18:50:57 +0000 (18:50 +0000)] 
prepare for RC3

12 years agoIn EC_KEY_set_public_key_affine_coordinates include explicit check to see passed...
Dr. Stephen Henson [Wed, 16 Nov 2011 13:28:11 +0000 (13:28 +0000)] 
In EC_KEY_set_public_key_affine_coordinates include explicit check to see passed components do not exceed field order

12 years agoportability fix for some perl versions
Dr. Stephen Henson [Fri, 11 Nov 2011 19:01:11 +0000 (19:01 +0000)] 
portability fix for some perl versions

12 years agofclose streams in fips_drbvs.c OpenSSL-fips-2_0-rc2
Dr. Stephen Henson [Wed, 9 Nov 2011 14:23:17 +0000 (14:23 +0000)] 
fclose streams in fips_drbvs.c

Produced error message for unsupported curves in fips_ecdhvs.c

12 years agoPrepare for RC3 (which may never happen).
Dr. Stephen Henson [Tue, 8 Nov 2011 19:08:40 +0000 (19:08 +0000)] 
Prepare for RC3 (which may never happen).

12 years agoPlatform update from HEAD.
Andy Polyakov [Tue, 8 Nov 2011 14:44:55 +0000 (14:44 +0000)] 
Platform update from HEAD.

12 years agoadd fips_algvs.c to restricted tarball
Dr. Stephen Henson [Mon, 7 Nov 2011 13:54:30 +0000 (13:54 +0000)] 
add fips_algvs.c to restricted tarball

12 years agoPrepare for RC2
Dr. Stephen Henson [Mon, 7 Nov 2011 13:18:12 +0000 (13:18 +0000)] 
Prepare for RC2

12 years agoMacOS and iOS support
Dr. Stephen Henson [Mon, 7 Nov 2011 13:16:55 +0000 (13:16 +0000)] 
MacOS and iOS support

12 years agofipsld, incore: switch to new cross-compile support [from HEAD].
Andy Polyakov [Mon, 7 Nov 2011 00:22:59 +0000 (00:22 +0000)] 
fipsld, incore: switch to new cross-compile support [from HEAD].

12 years agoe_aes.c: fold aesni_xts_cipher and [most importantly] fix aes_xts_cipher's
Andy Polyakov [Sun, 6 Nov 2011 19:49:58 +0000 (19:49 +0000)] 
e_aes.c: fold aesni_xts_cipher and [most importantly] fix aes_xts_cipher's
return value after custom flag was rightly reverted [from HEAD].

12 years agocheck for unset entropy and nonce callbacks
Dr. Stephen Henson [Sun, 6 Nov 2011 13:08:54 +0000 (13:08 +0000)] 
check for unset entropy and nonce callbacks

12 years agoUpdate fips_test_suite to take multiple command line options and
Dr. Stephen Henson [Sun, 6 Nov 2011 12:52:27 +0000 (12:52 +0000)] 
Update fips_test_suite to take multiple command line options and
an induced error checking function.

12 years agotypo
Dr. Stephen Henson [Sat, 5 Nov 2011 18:25:16 +0000 (18:25 +0000)] 
typo

12 years agomake post failure simulation reversible in all cases
Dr. Stephen Henson [Sat, 5 Nov 2011 18:15:01 +0000 (18:15 +0000)] 
make post failure simulation reversible in all cases

12 years agotypo: use key for POST callback
Dr. Stephen Henson [Sat, 5 Nov 2011 18:11:16 +0000 (18:11 +0000)] 
typo: use key for POST callback

12 years agofix set but unused warnings
Dr. Stephen Henson [Sat, 5 Nov 2011 18:04:50 +0000 (18:04 +0000)] 
fix set but unused warnings

12 years agoarmv4cpuid.S, armv4-gf2m.pl: make newest code compilable by older assembler [from...
Andy Polyakov [Sat, 5 Nov 2011 13:57:02 +0000 (13:57 +0000)] 
armv4cpuid.S, armv4-gf2m.pl: make newest code compilable by older assembler [from HEAD].

12 years agox86cpuid.pl: don't punish "last-year" OSes on "this-year" CPUs [from HEAD].
Andy Polyakov [Sat, 5 Nov 2011 13:56:10 +0000 (13:56 +0000)] 
x86cpuid.pl: don't punish "last-year" OSes on "this-year" CPUs [from HEAD].
PR: 2633

12 years agoppc.pl: fix bug in bn_mul_comba4 [from HEAD].
Andy Polyakov [Sat, 5 Nov 2011 13:55:20 +0000 (13:55 +0000)] 
ppc.pl: fix bug in bn_mul_comba4 [from HEAD].
PR: 2636
Submitted by: Charles Bryant

12 years agoAdd single call public key sign and verify functions.
Dr. Stephen Henson [Sat, 5 Nov 2011 01:32:52 +0000 (01:32 +0000)] 
Add single call public key sign and verify functions.

12 years agoAdd support for memory leak checking in fips_algvs.
Dr. Stephen Henson [Wed, 2 Nov 2011 19:16:43 +0000 (19:16 +0000)] 
Add support for memory leak checking in fips_algvs.

Fix many memory leaks in algorithm test utilities.

12 years agoRemove duplicate test from health check. Fix memory leaks by uninstantiating
Dr. Stephen Henson [Wed, 2 Nov 2011 16:35:24 +0000 (16:35 +0000)] 
Remove duplicate test from health check. Fix memory leaks by uninstantiating
DRBG before reinitialising it.

12 years agoPrint out an error for "make test" in FIPS builds.
Dr. Stephen Henson [Wed, 2 Nov 2011 00:43:45 +0000 (00:43 +0000)] 
Print out an error for "make test" in FIPS builds.

12 years agoReplace exit calls with return in fips_test_suite
Dr. Stephen Henson [Wed, 2 Nov 2011 00:07:15 +0000 (00:07 +0000)] 
Replace exit calls with return in fips_test_suite

12 years agoAdd support for multicall fips_algvs utility combining functionality
Dr. Stephen Henson [Tue, 1 Nov 2011 13:45:30 +0000 (13:45 +0000)] 
Add support for multicall fips_algvs utility combining functionality
of all fips test utilities in a single binary and some minimal script
parsing for platforms lacking a suitable shell.

In order to keep changes to the build system to a minimum it #includes all
the utilities C source files (yuck).

12 years agoPR: 2632
Dr. Stephen Henson [Wed, 26 Oct 2011 16:46:20 +0000 (16:46 +0000)] 
PR: 2632
Submitted by: emmanuel.azencot@bull.net
Reviewed by: steve

Return -1 immediately if not affine coordinates as BN_CTX has not been
set up.

12 years agoPrepare for RC2.
Dr. Stephen Henson [Mon, 24 Oct 2011 16:58:49 +0000 (16:58 +0000)] 
Prepare for RC2.

12 years agoprepare for RC1
Dr. Stephen Henson [Mon, 24 Oct 2011 16:53:59 +0000 (16:53 +0000)] 
prepare for RC1

12 years agotypo
Dr. Stephen Henson [Mon, 24 Oct 2011 13:24:28 +0000 (13:24 +0000)] 
typo

12 years agoThis commit was manufactured by cvs2svn to create branch 'OpenSSL-fips-
cvs2svn [Mon, 24 Oct 2011 06:00:07 +0000 (06:00 +0000)] 
This commit was manufactured by cvs2svn to create branch 'OpenSSL-fips-
2_0-stable'.

12 years agoe_aes.c: fold even aesni_ccm_cipher.
Andy Polyakov [Mon, 24 Oct 2011 06:00:06 +0000 (06:00 +0000)] 
e_aes.c: fold even aesni_ccm_cipher.

12 years agoe_aes.c: prevent potential DoS in aes_gcm_tls_cipher.
Andy Polyakov [Sun, 23 Oct 2011 22:58:40 +0000 (22:58 +0000)] 
e_aes.c: prevent potential DoS in aes_gcm_tls_cipher.

12 years agocryptlib.c: remove stdio dependency in Windows fipscanister.lib.
Andy Polyakov [Sun, 23 Oct 2011 19:41:00 +0000 (19:41 +0000)] 
cryptlib.c: remove stdio dependency in Windows fipscanister.lib.

12 years agoNo need for custom flag in XTS mode: block length is 1.
Dr. Stephen Henson [Sun, 23 Oct 2011 17:06:28 +0000 (17:06 +0000)] 
No need for custom flag in XTS mode: block length is 1.

12 years agofips_canister.c: harmonize fingerprinting for all Windows, CE or not.
Andy Polyakov [Sun, 23 Oct 2011 15:17:30 +0000 (15:17 +0000)] 
fips_canister.c: harmonize fingerprinting for all Windows, CE or not.

12 years agoconfig: in cross-compile case interrogate cross-compiler, not host, work
Andy Polyakov [Sun, 23 Oct 2011 15:12:37 +0000 (15:12 +0000)] 
config: in cross-compile case interrogate cross-compiler, not host, work
around sub-shell limitation.

12 years agoCheck for selftest failure in various places.
Dr. Stephen Henson [Sat, 22 Oct 2011 17:24:27 +0000 (17:24 +0000)] 
Check for selftest failure in various places.

12 years agox86gas.pl: relax .init segment alignment.
Andy Polyakov [Sat, 22 Oct 2011 10:49:52 +0000 (10:49 +0000)] 
x86gas.pl: relax .init segment alignment.

12 years agomk1mk.pl: cleanup engines' handling and make fips build work on WIN64I.
Andy Polyakov [Fri, 21 Oct 2011 19:34:48 +0000 (19:34 +0000)] 
mk1mk.pl: cleanup engines' handling and make fips build work on WIN64I.

12 years agoUpdate error codes.
Dr. Stephen Henson [Fri, 21 Oct 2011 11:46:16 +0000 (11:46 +0000)] 
Update error codes.

12 years agofips.c: remove preprocessor artefact.
Andy Polyakov [Fri, 21 Oct 2011 06:03:45 +0000 (06:03 +0000)] 
fips.c: remove preprocessor artefact.

12 years agofix (?) AVX clearing
Dr. Stephen Henson [Fri, 21 Oct 2011 01:57:37 +0000 (01:57 +0000)] 
fix (?) AVX clearing

12 years agoCheck for uninitialised DRBG_CTX and don't free up default DRBG_CTX.
Dr. Stephen Henson [Fri, 21 Oct 2011 00:12:53 +0000 (00:12 +0000)] 
Check for uninitialised DRBG_CTX and don't free up default DRBG_CTX.

12 years agofips.c: x86[_64] capability masking.
Andy Polyakov [Thu, 20 Oct 2011 21:03:09 +0000 (21:03 +0000)] 
fips.c: x86[_64] capability masking.

12 years agoarmcap.c: auto-setup processor capability vector.
Andy Polyakov [Thu, 20 Oct 2011 20:52:26 +0000 (20:52 +0000)] 
armcap.c: auto-setup processor capability vector.

12 years agoFix error codes.
Dr. Stephen Henson [Thu, 20 Oct 2011 13:56:01 +0000 (13:56 +0000)] 
Fix error codes.

12 years agofips/fips_[canister|premain].c: make it work with VC6 and add sentinels
Andy Polyakov [Thu, 20 Oct 2011 12:09:13 +0000 (12:09 +0000)] 
fips/fips_[canister|premain].c: make it work with VC6 and add sentinels
even to code segments.

12 years agosha1-mips.pl: fix typo.
Andy Polyakov [Thu, 20 Oct 2011 08:39:29 +0000 (08:39 +0000)] 
sha1-mips.pl: fix typo.

12 years agoDrain unused MacOS directory.
Andy Polyakov [Thu, 20 Oct 2011 08:28:06 +0000 (08:28 +0000)] 
Drain unused MacOS directory.

12 years agoAdd "nopass" for empty password too.
Dr. Stephen Henson [Wed, 19 Oct 2011 23:23:35 +0000 (23:23 +0000)] 
Add "nopass" for empty password too.

12 years agoadd authentication parameter to FIPS_module_mode_set
Dr. Stephen Henson [Wed, 19 Oct 2011 22:34:53 +0000 (22:34 +0000)] 
add authentication parameter to FIPS_module_mode_set

12 years agovxworks-mips: unify and add assembler.
Andy Polyakov [Wed, 19 Oct 2011 21:49:20 +0000 (21:49 +0000)] 
vxworks-mips: unify and add assembler.

12 years agoRemove superseded MIPS assembler modules.
Andy Polyakov [Wed, 19 Oct 2011 21:42:21 +0000 (21:42 +0000)] 
Remove superseded MIPS assembler modules.

12 years agofips_canister.c: more cross-compiler platfroms verified.
Andy Polyakov [Wed, 19 Oct 2011 21:05:53 +0000 (21:05 +0000)] 
fips_canister.c: more cross-compiler platfroms verified.

12 years agoarm_arch.h: add missing pre-defined macro, __ARM_ARCH_5TEJ__.
Andy Polyakov [Wed, 19 Oct 2011 18:57:03 +0000 (18:57 +0000)] 
arm_arch.h: add missing pre-defined macro, __ARM_ARCH_5TEJ__.

12 years ago"make update" (partial)
Bodo Möller [Wed, 19 Oct 2011 15:29:14 +0000 (15:29 +0000)] 
"make update" (partial)

12 years agoBN_BLINDING multi-threading fix.
Bodo Möller [Wed, 19 Oct 2011 14:59:27 +0000 (14:59 +0000)] 
BN_BLINDING multi-threading fix.

Submitted by: Emilia Kasper (Google)

12 years agoTypo (?)
Dr. Stephen Henson [Wed, 19 Oct 2011 12:05:08 +0000 (12:05 +0000)] 
Typo (?)

12 years agoBuild fipscanister.o only by default. Utility build now needs
Dr. Stephen Henson [Wed, 19 Oct 2011 11:47:21 +0000 (11:47 +0000)] 
Build fipscanister.o only by default. Utility build now needs
make build_tests

12 years agoRecognise new option.
Dr. Stephen Henson [Wed, 19 Oct 2011 11:44:25 +0000 (11:44 +0000)] 
Recognise new option.

12 years agoFix indentation
Bodo Möller [Wed, 19 Oct 2011 09:24:22 +0000 (09:24 +0000)] 
Fix indentation

12 years agoFix warnings.
Bodo Möller [Wed, 19 Oct 2011 08:59:53 +0000 (08:59 +0000)] 
Fix warnings.
Also, use the common Configure mechanism for enabling/disabling the 64-bit ECC code.

12 years agoUpdate premain fingerprint.
Dr. Stephen Henson [Tue, 18 Oct 2011 22:11:11 +0000 (22:11 +0000)] 
Update premain fingerprint.

12 years agoImprove optional 64-bit NIST-P224 implementation, and add NIST-P256 and
Bodo Möller [Tue, 18 Oct 2011 19:43:16 +0000 (19:43 +0000)] 
Improve optional 64-bit NIST-P224 implementation, and add NIST-P256 and
NIST-P521. (Now -DEC_NISTP_64_GCC_128 enables all three of these;
-DEC_NISTP224_64_GCC_128 no longer works.)

Submitted by: Google Inc.

12 years agofipssyms.h: assign alias to newly introduced bn_gather5.
Andy Polyakov [Tue, 18 Oct 2011 18:59:33 +0000 (18:59 +0000)] 
fipssyms.h: assign alias to newly introduced bn_gather5.

12 years agofips/*: extend fipsro segmenting to all _MSC_VER builds (including WinCE).
Andy Polyakov [Tue, 18 Oct 2011 18:56:09 +0000 (18:56 +0000)] 
fips/*: extend fipsro segmenting to all _MSC_VER builds (including WinCE).

12 years agofips_enc.c: assign minimal block size to bad_cipher [to avoid arithmetic
Andy Polyakov [Tue, 18 Oct 2011 18:52:05 +0000 (18:52 +0000)] 
fips_enc.c: assign minimal block size to bad_cipher [to avoid arithmetic
exceptions in TLS layer].

12 years agoengines/.cvsignore: stop whining about e_padlock-*.s.
Andy Polyakov [Tue, 18 Oct 2011 13:39:47 +0000 (13:39 +0000)] 
engines/.cvsignore: stop whining about e_padlock-*.s.

12 years agoevp/e_aes.c: fold AES-NI modes that heavily rely on indirect calls
Andy Polyakov [Tue, 18 Oct 2011 13:37:26 +0000 (13:37 +0000)] 
evp/e_aes.c: fold AES-NI modes that heavily rely on indirect calls
(trade 2% small-block performance), engage bit-sliced AES in GCM.

12 years agox86_64-xlate.pl: make vpaes-x86_64.pl and rc4-md5-x86_64 work with ml64,
Andy Polyakov [Tue, 18 Oct 2011 09:50:23 +0000 (09:50 +0000)] 
x86_64-xlate.pl: make vpaes-x86_64.pl and rc4-md5-x86_64 work with ml64,
fix bug in .crt section alignment.
PR: 2620, 2624