summaryrefslogtreecommitdiffstats
path: root/crypto/rand
AgeCommit message (Collapse)Author
2012-01-15Fix OPNESSL vs. OPENSSL typos [from HEAD].Andy Polyakov
PR: 2613 Submitted by: Leena Heino
2011-12-19PR: 2563Dr. Stephen Henson
Submitted by: Paul Green <Paul.Green@stratus.com> Reviewed by: steve Improved PRNG seeding for VOS.
2011-09-16Improved error checking for DRBG calls.Dr. Stephen Henson
New functionality to allow default DRBG type to be set during compilation or during runtime.
2011-06-21Don't set FIPS rand method at same time as RAND method as this can causeDr. Stephen Henson
the FIPS library to fail. Applications that want to set the FIPS rand method can do so explicitly and presumably they know what they are doing...
2011-06-13Set rand method in FIPS_mode_set() not in rand library.Dr. Stephen Henson
2011-06-13Redirect RAND to FIPS module in FIPS mode.Dr. Stephen Henson
2011-05-26The first of many changes to make OpenSSL 1.0.1 FIPS capable.Dr. Stephen Henson
Add static build support to openssl utility. Add new "fips" option to Configure. Make use of installed fipsld and fips_standalone_sha1 Initialise FIPS error callbacks, locking and DRBG. Doesn't do anything much yet: no crypto is redirected to the FIPS module. Doesn't completely build either but the openssl utility can enter FIPS mode: which doesn't do anything much either.
2011-03-19Apply all the changes submitted by Steven M. Schweda <sms@antinode.info>Richard Levitte
2011-01-26FIPS mode changes to make RNG compile (this will need updating later as weDr. Stephen Henson
need a whole new PRNG for FIPS). 1. avoid use of ERR_peek(). 2. If compiling with FIPS use small FIPS EVP and disable ENGINE
2010-11-18PR: 2372Dr. Stephen Henson
Submitted by: "W.C.A. Wijngaards" <wouter@nlnetlabs.nl> Reviewed by: steve Fix OpenBSD compilation failure.
2010-07-08rand_nw.c: compensate for gcc bug (using %edx instead of %eax at -O3)Andy Polyakov
[from HEAD]. PR: 2296
2010-06-16clarify commentDr. Stephen Henson
2010-06-15Fix warnings (From HEAD, original patch by Ben).Dr. Stephen Henson
2010-03-22rand_win.c: fix logical bug in readscreen [from HEAD].Andy Polyakov
2010-02-17PR: 2100Dr. Stephen Henson
Submitted by: James Baker <jbaker@tableausoftware.com> et al. Workaround for slow Heap32Next on some versions of Windows.
2010-01-26PR: 2138Dr. Stephen Henson
Submitted by: Kevin Regan <k.regan@f5.com> Clear stat structure if -DPURIFY is set to avoid problems on some platforms which include unitialised fields.
2010-01-19rand_win.c: handel GetTickCount wrap-around [from HEAD].Andy Polyakov
2009-09-20Don't use __try+__except unless on VC++Dr. Stephen Henson
2009-07-24Update from 0.9.8-stable.Dr. Stephen Henson
2009-06-15Update from HEAD.Dr. Stephen Henson
2009-04-22PR: 1903Dr. Stephen Henson
Submitted by: "Paul Smedley" <pauldespam@despamsmedley.id.au> Approved by: steve@openssl.org OS/2 fixes (excludes Makefile.shared patch for now).
2009-04-06PR: 1890Dr. Stephen Henson
Submitted by: "Green, Paul" <Paul.Green@stratus.com> Approved by: steve@openssl.org Fixes to --with-zlib-include and --with-zlib-lib and init PRNG for VOS.
2009-02-15Use new common flags and fix resulting warnings.Ben Laurie
2009-01-03VMS stuff I forgot...Richard Levitte
2008-12-22This _WIN32-specific patch makes it possible to "wrap" OpenSSL in anotherAndy Polyakov
.DLL, in particular static build. The issue has been discussed in RT#1230 and later on openssl-dev, and mutually exclusive approaches were suggested. This completes compromise solution suggested in RT#1230. PR: 1230
2008-11-12Revert commit #17603, it should have been part of #17617.Andy Polyakov
2008-11-12Revert the size_t modifications from HEAD that had led to moreGeoff Thorpe
knock-on work than expected - they've been extracted into a patch series that can be completed elsewhere, or in a different branch, before merging back to HEAD.
2008-11-05PR: 1777Dr. Stephen Henson
Submitted by: "Alon Bar-Lev" <alon.barlev@gmail.com> Approved by: steve@openssl.org Fix some size_t issues.
2008-11-04Only one of these needs to be signed.Ben Laurie
2008-11-02Not sure about this one... seems to be needed to make 64 bit releaseDr. Stephen Henson
builds work properly...
2008-11-01More size_tification.Ben Laurie
2008-10-28randfile.c: .rnd can become orphaned on VMS.Andy Polyakov
Submitted by: David North
2008-08-06Remove the dual-callback scheme for numeric and pointer thread IDs,Geoff Thorpe
deprecate the original (numeric-only) scheme, and replace with the CRYPTO_THREADID object. This hides the platform-specifics and should reduce the possibility for programming errors (where failing to explicitly check both thread ID forms could create subtle, platform-specific bugs). Thanks to Bodo, for invaluable review and feedback.
2008-07-03Revert my earlier CRYPTO_THREADID commit, I will commit a reworkedGeoff Thorpe
version some time soon.
2008-06-04More type-checking.Ben Laurie
2008-05-20Correctly adjust location of commentLutz Jänicke
Submitted by: Ben Laurie <ben@links.org>
2008-05-16Another occurance of possible valgrind/purify "uninitialized memory"Lutz Jänicke
complaint related to the PRNG: with PURIFY policy don't feed uninitialized memory into the PRNG. Submitted by: Bodo Moeller <bmoeller@openssl.org> :-)
2008-03-28There was a need to support thread ID types that couldn't be reliably castGeoff Thorpe
to 'unsigned long' (ie. odd platforms/compilers), so a pointer-typed version was added but it required portable code to check *both* modes to determine equality. This commit maintains the availability of both thread ID types, but deprecates the type-specific accessor APIs that invoke the callbacks - instead a single type-independent API is used. This simplifies software that calls into this interface, and should also make it less error-prone - as forgetting to call and compare *both* thread ID accessors could have led to hard-to-debug/infrequent bugs (that might only affect certain platforms or thread implementations). As the CHANGES note says, there were corresponding deprecations and replacements in the thread-related functions for BN_BLINDING and ERR too.
2008-01-03Netware support.Dr. Stephen Henson
Submitted by: Guenter Knauf <eflash@gmx.net>
2007-09-24Port from 0.9.8-stableLutz Jänicke
2007-03-02Initialize "buf" to 0 to make valgrind happy :-)Lutz Jänicke
Note: the RAND_bytes() manual page says: RAND_bytes() puts num cryptographically strong pseudo-random bytes into buf. It does not talk about using the previous contents of buf so we are working as documented.
2007-03-02Do not use uninitialized memory to seed the PRNG as it may confuseLutz Jänicke
code checking tools. PR: 1499
2007-01-21Constify version strings and some structures.Dr. Stephen Henson
2006-11-21Update from 0.9.8 stable. Eliminate duplicate error codes.Dr. Stephen Henson
2006-06-30use <poll.h> as by Single Unix SpecificationBodo Möller
2006-06-28always read in RAND_poll() if we can't use select because of a tooBodo Möller
large FD: it's non-blocking mode anyway
2006-06-27Use poll() when possible to gather Unix randomness entropyRichard Levitte
2006-06-23New functions CRYPTO_set_idptr_callback(),Bodo Möller
CRYPTO_get_idptr_callback(), CRYPTO_thread_idptr() for a 'void *' type thread ID, since the 'unsigned long' type of the existing thread ID does not always work well.
2006-04-11Add BeOS support.Ulf Möller
PR: 1312 Submitted by: Oliver Tappe <zooey@hirschkaefer.de> Reviewed by: Ulf Moeller
2006-02-04Update filenames in makefiles.Dr. Stephen Henson