summaryrefslogtreecommitdiffstats
path: root/crypto
AgeCommit message (Expand)Author
2018-12-06rsa/rsa_ssl.c: make RSA_padding_check_SSLv23 constant-time.Andy Polyakov
2018-12-06rsa/rsa_oaep.c: remove memcpy calls from RSA_padding_check_PKCS1_OAEP.Andy Polyakov
2018-12-06rsa/rsa_pk1.c: remove memcpy calls from RSA_padding_check_PKCS1_type_2.Andy Polyakov
2018-12-06rsa/rsa_eay.c: make RSAerr call in rsa_ossl_private_decrypt unconditional.Andy Polyakov
2018-12-06err/err.c: add err_clear_last_constant_time.Andy Polyakov
2018-11-24Stop marking default digest for EC keys as mandatoryDavid Woodhouse
2018-11-23rsa/rsa_eay.c: cache MONT_CTX for public modulus earlier.Andy Polyakov
2018-11-20Prepare for 1.0.2r-devMatt Caswell
2018-11-20Prepare for 1.0.2q releaseOpenSSL_1_0_2qMatt Caswell
2018-11-20make updateMatt Caswell
2018-11-20Update copyright yearMatt Caswell
2018-11-20VMS: ensure crypto/getenv.c is included in the buildRichard Levitte
2018-11-14DSA: Check for sanity of input parametersVitezslav Cizek
2018-11-12CVE-2018-5407 fix: ECC ladderBilly Brumley
2018-11-02Add a constant time flag to one of the bignums to avoid a timing leak.Pauli
2018-10-30Merge to 1.0.2: DSA mod inverse fix.Pauli
2018-10-29Merge DSA reallocation timing fix CVE-2018-0734.Pauli
2018-10-18md_rand.c: don't stop polling until properly initializedDr. Matthias St. Pierre
2018-10-18Apply self-imposed path length also to root CAsViktor Dukhovni
2018-10-18Only CA certificates can be self-issuedViktor Dukhovni
2018-10-12rsa/rsa_ossl.c: fix and extend commentary [skip ci].Andy Polyakov
2018-10-02Access `group->mont_data` conditionally in EC_GROUP_set_generator()Nicola Tuveri
2018-09-27Merge 1.0.2 setuid calls to getenv(3) safety.Pauli
2018-09-26Use gethostbyname_r if availableManikantan Subramanian
2018-09-21crypto/bn/asm/x86_64-gcc.c: remove unnecessary redefinition of BN_ULONGRichard Levitte
2018-09-20drbg_get_entropy: force a reseed before calling ssleay_rand_bytes()Dr. Matthias St. Pierre
2018-09-20crypto/ui/ui_openssl.c: make sure to recognise ENXIO and EIO tooRichard Levitte
2018-09-10Check the return value from ASN1_INTEGER_setMatt Caswell
2018-09-03Check the return from BN_sub() in BN_X931_generate_Xpq().Pauli
2018-09-03Remove redundant ASN1_INTEGER_set callEric Brown
2018-08-28bn/bn_lib.c: conceal even memmory access pattern in bn2binpad.Andy Polyakov
2018-08-28bn/bn_blind.c: use Montgomery multiplication when possible.Andy Polyakov
2018-08-28rsa/rsa_eay.c: implement variant of "Smooth CRT-RSA."Andy Polyakov
2018-08-28crypto/bn: add more fixed-top routines.Andy Polyakov
2018-08-17x509v3/v3_purp.c: resolve Thread Sanitizer nit.Andy Polyakov
2018-08-14Prepare for 1.0.2q-devMatt Caswell
2018-08-14Prepare for 1.0.2p releaseOpenSSL_1_0_2pMatt Caswell
2018-08-14make updateMatt Caswell
2018-08-14i2d_ASN1_BOOLEAN(): correct error moduleRichard Levitte
2018-08-14Update copyright yearMatt Caswell
2018-08-14i2d_ASN1_BOOLEAN(): allocate memory if the user didn't provide a bufferRichard Levitte
2018-08-11i2d_ASN1_OBJECT(): allocate memory if the user didn't provide a bufferRichard Levitte
2018-08-10rsa/*: switch to BN_bn2binpad.Andy Polyakov
2018-08-10bn/bn_lib.c address Coverity nit in bn2binpad.Andy Polyakov
2018-08-10bn/bn_lib.c: add computationally constant-time bn_bn2binpad.Andy Polyakov
2018-08-07Make EVP_PKEY_asn1_new() stricter with its inputRichard Levitte
2018-08-01ecdsa/ecs_ossl.c: switch to fixed-length Montgomery multiplication.Andy Polyakov
2018-08-01Fix BN_gcd errors for some curvesBilly Brumley
2018-08-01bn/bn_mod.c: harmonize BN_mod_add_quick with original implementation.Andy Polyakov
2018-08-01ecdsa/ecs_ossl.c: revert blinding in ECDSA signature.Andy Polyakov