summaryrefslogtreecommitdiffstats
path: root/crypto/ec
AgeCommit message (Collapse)Author
2012-03-01For OpenVMS, use inttypes.h instead of stdint.hRichard Levitte
2012-01-24only include string.h onceDr. Stephen Henson
2011-11-14ec_cvt.c: performance update from HEAD.Andy Polyakov
2011-10-26PR: 2632Dr. Stephen Henson
Submitted by: emmanuel.azencot@bull.net Reviewed by: steve Return -1 immediately if not affine coordinates as BN_CTX has not been set up.
2011-10-19Fix warnings.Bodo Möller
Also, use the common Configure mechanism for enabling/disabling the 64-bit ECC code.
2011-10-18Improve optional 64-bit NIST-P224 implementation, and add NIST-P256 andBodo Möller
NIST-P521. (Now -DEC_NISTP_64_GCC_128 enables all three of these; -DEC_NISTP224_64_GCC_128 no longer works.) Submitted by: Google Inc.
2011-10-09Backport PSS signature support from HEAD.Dr. Stephen Henson
2011-09-16make dependDr. Stephen Henson
2011-09-16Improved error checking for DRBG calls.Dr. Stephen Henson
New functionality to allow default DRBG type to be set during compilation or during runtime.
2011-08-14Remove hard coded ecdsaWithSHA1 hack in ssl routines and check for RSADr. Stephen Henson
using OBJ xref utilities instead of string comparison with OID name. This removes the arbitrary restriction on using SHA1 only with some ECC ciphersuites.
2011-07-28recognise ecdsaWithSHA1 OIDDr. Stephen Henson
2011-06-06Redirection of ECDSA, ECDH operations to FIPS module.Dr. Stephen Henson
Also use FIPS EC methods unconditionally for now: might want to use them only in FIPS mode or with a switch later.
2011-06-06Add flags field to EC_KEY structure (backport from HEAD).Dr. Stephen Henson
2011-06-06Make no-ec2m work again (backport from HEAD).Dr. Stephen Henson
2011-06-06Reorganise ECC code so it can use FIPS module.Dr. Stephen Henson
Move compression, point2oct and oct2point functions into separate files. Add a flags field to EC_METHOD. Add a flag EC_FLAGS_DEFAULT_OCT to use the default compession and oct functions (all existing methods do this). This removes dependencies from EC_METHOD while keeping original functionality. Backport from HEAD with minor changes.
2011-06-06Backport from HEAD:Dr. Stephen Henson
New option to disable characteristic two fields in EC code. Make no-ec2m work on Win32 build.
2011-05-12Have EC_NISTP224_64_GCC_128 treated like any algorithm, and have disabled byDr. Stephen Henson
default. If we don't do it this way, it screws up libeay.num. (update from HEAD, original from levitte).
2011-01-24New function EC_KEY_set_affine_coordinates() this performs all theDr. Stephen Henson
NIST PKV tests.
2011-01-24check EC public key isn't point at infinityDr. Stephen Henson
2011-01-24PR: 1612Dr. Stephen Henson
Submitted by: Robert Jackson <robert@rjsweb.net> Reviewed by: steve Fix EC_POINT_cmp function for case where b but not a is the point at infinity.
2010-10-03Add call to ENGINE_register_all_complete() to ENGINE_load_builtin_engines(),Dr. Stephen Henson
this means that some implementations will be used automatically, e.g. aesni, we do this for cryptodev anyway. Setup cpuid in ENGINE_load_builtin_engines() too as some ENGINEs use it.
2010-08-27More C language police work.Bodo Möller
2010-08-27C conformity fixes: Move declarations before statements in all blocks.Bodo Möller
2010-08-27C conformity fixes:Bodo Möller
- Move declarations before statements in all blocks. - Where 64-bit type is required, use it explicitly (not 1l).
2010-08-26(formatting error)Bodo Möller
2010-08-26New 64-bit optimized implementation EC_GFp_nistp224_method().Bodo Möller
Binary compatibility is not affected as this will only be compiled in if explicitly requested (#ifdef EC_NISTP224_64_GCC_128). Submitted by: Emilia Kasper (Google)
2010-08-26ECC library bugfixes.Bodo Möller
Submitted by: Emilia Kapser (Google)
2010-02-23Always check bn_wexpend() return values for failure (CVE-2009-3245).Bodo Möller
(The CHANGES entry covers the change from PR #2111 as well, submitted by Martin Olsson.) Submitted by: Neel Mehta
2009-11-30PR: 2118Dr. Stephen Henson
Submitted by: Mounir IDRASSI <mounir.idrassi@idrix.net> Approved by: steve@openssl.org Check return value of ECDSA_sign() properly.
2009-05-05ec_mult.c: update from HEAD (Win64 compile warnings).Andy Polyakov
2008-12-27Check scalar->d before we use it (in BN_num_bits()). (Coverity ID 129)Ben Laurie
2008-11-12Revert the size_t modifications from HEAD that had led to moreGeoff Thorpe
knock-on work than expected - they've been extracted into a patch series that can be completed elsewhere, or in a different branch, before merging back to HEAD.
2008-11-05Update obsolete email address...Dr. Stephen Henson
2008-11-01More size_tification.Ben Laurie
2008-10-28ec2_mult.c readability update.Andy Polyakov
2008-09-23Fix EC_KEY_check_key.Andy Polyakov
2008-08-06Remove the dual-callback scheme for numeric and pointer thread IDs,Geoff Thorpe
deprecate the original (numeric-only) scheme, and replace with the CRYPTO_THREADID object. This hides the platform-specifics and should reduce the possibility for programming errors (where failing to explicitly check both thread ID forms could create subtle, platform-specific bugs). Thanks to Bodo, for invaluable review and feedback.
2008-07-03Revert my earlier CRYPTO_THREADID commit, I will commit a reworkedGeoff Thorpe
version some time soon.
2008-05-02Indicate support for digest init ctrl.Dr. Stephen Henson
2008-04-24Add 64-bit support to BN_nist_mod_244 and engage BN_nist_mod_* on 64-bitAndy Polyakov
platforms.
2008-03-28There was a need to support thread ID types that couldn't be reliably castGeoff Thorpe
to 'unsigned long' (ie. odd platforms/compilers), so a pointer-typed version was added but it required portable code to check *both* modes to determine equality. This commit maintains the availability of both thread ID types, but deprecates the type-specific accessor APIs that invoke the callbacks - instead a single type-independent API is used. This simplifies software that calls into this interface, and should also make it less error-prone - as forgetting to call and compare *both* thread ID accessors could have led to hard-to-debug/infrequent bugs (that might only affect certain platforms or thread implementations). As the CHANGES note says, there were corresponding deprecations and replacements in the thread-related functions for BN_BLINDING and ERR too.
2008-03-22Update dependencies.Dr. Stephen Henson
2008-03-16Fix a variety of warnings generated by some elevated compiler-fascism,Geoff Thorpe
OPENSSL_NO_DEPRECATED, etc. Steve, please double-check the CMS stuff...
2008-03-12And so it begins...Dr. Stephen Henson
Initial support for CMS. Add zlib compression BIO. Add AES key wrap implementation. Generalize S/MIME MIME code to support CMS and/or PKCS7.
2007-08-31Compress and more aggressively constify ec_curve.c [the latter isAndy Polyakov
achieved by minimizing link relocations].
2007-05-22Fix crypto/ec/ec_mult.c to work properly with scalars of value 0Bodo Möller
2007-04-05Fix duplicate error number.Ben Laurie
2007-01-21Constify version strings and some structures.Dr. Stephen Henson
2006-12-20add support for ecdsa-with-sha256 etc.Nils Larsch
2006-12-19Fix the BIT STRING encoding of EC points or parameter seedsBodo Möller
(need to prevent the removal of trailing zero bits).