Age | Commit message (Collapse) | Author | |
---|---|---|---|
2012-10-05 | Fix EC_KEY initialization race. | Bodo Möller | |
Submitted by: Adam Langley | |||
2012-01-10 | fix warning (revert original patch) | Dr. Stephen Henson | |
2011-12-07 | Initial experimental support for X9.42 DH parameter format to handle | Dr. Stephen Henson | |
RFC5114 parameters and X9.42 DH public and private keys. | |||
2011-12-02 | Fix ecdsatest.c. | Bodo Möller | |
Submitted by: Emilia Kasper | |||
2011-11-14 | Fix some warnings caused by __owur. Temporarily (I hope) remove the more | Ben Laurie | |
aspirational __owur annotations. | |||
2011-11-05 | Add single call public key sign and verify functions. | Dr. Stephen Henson | |
2011-10-22 | Check for selftest failure in various places. | Dr. Stephen Henson | |
2011-09-05 | make update | Bodo Möller | |
2011-09-01 | make timing attack protection unconditional | Dr. Stephen Henson | |
2011-06-08 | Set flags in ECDH and ECDSA methods for FIPS. | Dr. Stephen Henson | |
2011-05-25 | Fix the ECDSA timing attack mentioned in the paper at: | Dr. Stephen Henson | |
http://eprint.iacr.org/2011/232.pdf Thanks to the original authors Billy Bob Brumley and Nicola Tuveri for bringing this to our attention. | |||
2011-04-23 | Add PRNG security strength checking. | Dr. Stephen Henson | |
2011-04-06 | Only use fake rand once per operation. This stops the EC | Dr. Stephen Henson | |
pairwise consistency test interfering with the test. | |||
2011-04-06 | check buffer is larger enough before overwriting | Dr. Stephen Henson | |
2011-03-24 | make update | Richard Levitte | |
2011-03-12 | Add SRP support. | Ben Laurie | |
2011-02-21 | Update dependencies. | Dr. Stephen Henson | |
2011-02-14 | Add ECDSA functionality to fips module. Initial very incomplete version | Dr. Stephen Henson | |
of algorithm test program. | |||
2011-02-12 | New option to disable characteristic two fields in EC code. | Dr. Stephen Henson | |
2011-01-26 | Change AR to ARX to allow exclusion of fips object modules | Dr. Stephen Henson | |
2010-06-12 | Fix warnings. | Ben Laurie | |
2009-12-01 | PR: 1432 | Dr. Stephen Henson | |
Submitted by: "Andrzej Chmielowiec" <achmielowiec@enigma.com.pl>, steve@openssl.org Approved by: steve@openssl.org Truncate hash if it is too large: as required by FIPS 186-3. | |||
2009-10-18 | make update | Dr. Stephen Henson | |
2009-09-09 | Seed PRNG with DSA and ECDSA digests for additional protection against | Dr. Stephen Henson | |
possible PRNG state duplication. | |||
2008-11-12 | Revert the size_t modifications from HEAD that had led to more | Geoff Thorpe | |
knock-on work than expected - they've been extracted into a patch series that can be completed elsewhere, or in a different branch, before merging back to HEAD. | |||
2008-11-01 | More size_tification. | Ben Laurie | |
2008-08-06 | Remove the dual-callback scheme for numeric and pointer thread IDs, | Geoff Thorpe | |
deprecate the original (numeric-only) scheme, and replace with the CRYPTO_THREADID object. This hides the platform-specifics and should reduce the possibility for programming errors (where failing to explicitly check both thread ID forms could create subtle, platform-specific bugs). Thanks to Bodo, for invaluable review and feedback. | |||
2008-07-03 | Revert my earlier CRYPTO_THREADID commit, I will commit a reworked | Geoff Thorpe | |
version some time soon. | |||
2008-06-04 | More type-checking. | Ben Laurie | |
2008-03-28 | There was a need to support thread ID types that couldn't be reliably cast | Geoff Thorpe | |
to 'unsigned long' (ie. odd platforms/compilers), so a pointer-typed version was added but it required portable code to check *both* modes to determine equality. This commit maintains the availability of both thread ID types, but deprecates the type-specific accessor APIs that invoke the callbacks - instead a single type-independent API is used. This simplifies software that calls into this interface, and should also make it less error-prone - as forgetting to call and compare *both* thread ID accessors could have led to hard-to-debug/infrequent bugs (that might only affect certain platforms or thread implementations). As the CHANGES note says, there were corresponding deprecations and replacements in the thread-related functions for BN_BLINDING and ERR too. | |||
2007-11-19 | Should reject signatures that we can't properly verify | Bodo Möller | |
and couldn't generate (as pointed out by Ernst G Giessmann) | |||
2007-11-16 | The hash length check wasn't strict enough, | Bodo Möller | |
as pointed out by Ernst G Giessmann | |||
2007-08-12 | Fix warnings. | Dr. Stephen Henson | |
2007-01-21 | Constify version strings and some structures. | Dr. Stephen Henson | |
2006-11-21 | Update from 0.9.8 stable. Eliminate duplicate error codes. | Dr. Stephen Henson | |
2006-10-04 | return an error if the supplied precomputed values lead to an invalid signature | Nils Larsch | |
2006-02-13 | fix typo: pass pre-computed parameters to the underlying signature function; ↵ | Nils Larsch | |
thanks to Lucas Newman | |||
2006-01-29 | add additional checks + cleanup | Nils Larsch | |
Submitted by: David Hartman <david_hartman@symantec.com> | |||
2005-12-18 | Missing CFLAG in couple of depend: targets. | Andy Polyakov | |
PR: 1247 Submitted by: Doug Kaufman | |||
2005-09-19 | cleanup doxygen comments | Nils Larsch | |
2005-07-17 | fix typo | Nils Larsch | |
2005-07-16 | make | Nils Larsch | |
./configure no-deprecated [no-dsa] [no-dh] [no-ec] [no-rsa] make depend all test work again PR: 1159 | |||
2005-06-23 | Wrap the inclusion of openssl/engine.h with a protective check for | Richard Levitte | |
the absence of OPENSSL_NO_ENGINE. | |||
2005-05-20 | fix typo, add prototype | Nils Larsch | |
2005-05-16 | Further BUILDENV refinement, further fool-proofing of Makefiles and | Andy Polyakov | |
[most importantly] put back dependencies accidentaly eliminated in check-in #13342. | |||
2005-05-16 | ecc api cleanup; summary: | Nils Larsch | |
- hide the EC_KEY structure definition in ec_lcl.c + add some functions to use/access the EC_KEY fields - change the way how method specific data (ecdsa/ecdh) is attached to a EC_KEY - add ECDSA_sign_ex and ECDSA_do_sign_ex functions with additional parameters for pre-computed values - rebuild libeay.num from 0.9.7 | |||
2005-05-15 | Fool-proofing Makefiles | Andy Polyakov | |
2005-05-10 | give EC_GROUP_new_by_nid a more meanigful name: | Nils Larsch | |
EC_GROUP_new_by_nid -> EC_GROUP_new_by_curve_name | |||
2005-05-09 | Update util/ck_errf.pl script, and have it run automatically | Bodo Möller | |
during "make errors" and thus during "make update". Fix lots of bugs that util/ck_errf.pl can detect automatically. Various others of these are still left to fix; that's why "make update" will complain loudly when run now. | |||
2005-04-29 | hide the definition of ECDSA_METHOD and ECDSA_DATA (and mutatis mutandis | Nils Larsch | |
for ecdh) |