summaryrefslogtreecommitdiffstats
path: root/crypto/bn
AgeCommit message (Expand)Author
2019-12-04Improve the overflow handling in rsaz_512_sqrBernd Edlinger
2019-12-04Fix an overflow bug in rsaz_512_sqrAndy Polyakov
2019-09-10make updateMatt Caswell
2019-09-06Uniform bn_bn2binpad() and bn_bn2lebinpad() implementationsNicola Tuveri
2019-09-06Make BN_num_bits() consttime upon BN_FLG_CONSTTIMENicola Tuveri
2019-02-26Update copyright yearMatt Caswell
2019-02-25Ensure bn_cmp_words can handle the case where n == 0Matt Caswell
2019-02-20Clear BN_FLG_CONSTTIME on BN_CTX_get()Nicola Tuveri
2019-02-20Test for constant-time flag leakage in BN_CTXNicola Tuveri
2018-11-20Update copyright yearMatt Caswell
2018-11-12CVE-2018-5407 fix: ECC ladderBilly Brumley
2018-09-21crypto/bn/asm/x86_64-gcc.c: remove unnecessary redefinition of BN_ULONGRichard Levitte
2018-09-03Check the return from BN_sub() in BN_X931_generate_Xpq().Pauli
2018-08-28bn/bn_lib.c: conceal even memmory access pattern in bn2binpad.Andy Polyakov
2018-08-28bn/bn_blind.c: use Montgomery multiplication when possible.Andy Polyakov
2018-08-28crypto/bn: add more fixed-top routines.Andy Polyakov
2018-08-14make updateMatt Caswell
2018-08-14Update copyright yearMatt Caswell
2018-08-10bn/bn_lib.c address Coverity nit in bn2binpad.Andy Polyakov
2018-08-10bn/bn_lib.c: add computationally constant-time bn_bn2binpad.Andy Polyakov
2018-08-01bn/bn_mod.c: harmonize BN_mod_add_quick with original implementation.Andy Polyakov
2018-08-01ecdsa/ecs_ossl.c: revert blinding in ECDSA signature.Andy Polyakov
2018-08-01bn/bn_{mont|exp}.c: switch to zero-padded intermediate vectors.Andy Polyakov
2018-08-01bn/bn_lib.c: add BN_FLG_FIXED_TOP flag.Andy Polyakov
2018-08-01bn/bn_mont.c: improve readability of post-condition code.Andy Polyakov
2018-08-01bn/bn_lib.c: remove bn_check_top from bn_expand2.Andy Polyakov
2018-07-26Make number of Miller-Rabin tests for a prime tests depend on the security le...Kurt Roeckx
2018-06-18bn/asm/rsaz-avx2.pl: harmonize clang version detection.Andy Polyakov
2018-06-09bn/asm/sparcv9-mont.pl: iron another glitch in squaring code path.Andy Polyakov
2018-05-29The result of a ^ 0 mod -1 is 0 not 1Matt Caswell
2018-05-17Make BN_GF2m_mod_arr more constant timeMatt Caswell
2018-05-04bn/asm/*-mont.pl: harmonize with BN_from_montgomery_word.Andy Polyakov
2018-04-27fix: BN_swap mishandles flags (1.0.2)Billy Brumley
2018-03-27Update copyright yearMatt Caswell
2018-02-02Fix timing leak in BN_from_montgomery_word.Andy Polyakov
2018-02-01Don't leak the exponent bit width in BN_mod_exp_mont_consttime.David Benjamin
2018-02-01Make BN_num_bits_word constant-time.David Benjamin
2018-01-16Revert BN_copy() flag copy semantics changeMatt Caswell
2017-12-08Standardize syntax around sizeof(foo)Rich Salz
2017-12-06bn/asm/rsaz-avx2.pl: fix digit correction bug in rsaz_1024_mul_avx2.Andy Polyakov
2017-11-07Don't error with -1 for BIGNUM exp operationsMatt Caswell
2017-11-02bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqrx8x_internal.Andy Polyakov
2017-10-11Ensure we test all parameters for BN_FLG_CONSTTIMEMatt Caswell
2017-09-27BN_copy now propagates BN_FLG_CONSTTIMESamuel Weiser
2017-09-27Fixed error in propagating BN_FLG_CONSTTIME flag through BN_MONT_CTX_set, whi...Samuel Weiser
2017-06-17Remove a pointless "#if 0" block from BN_mul.Bernd Edlinger
2017-06-14Fix possible crash in X931 code.Bernd Edlinger
2017-05-11Remove dead code.Pauli
2017-04-22Numbers greater than 1 are usually non-negative.David Benjamin
2017-03-24bn/asm/sparcv9-mont.pl: fix squaring code path.Andy Polyakov