aboutsummaryrefslogtreecommitdiffstats
path: root/mpi (unfollow)
Commit message (Collapse)AuthorFilesLines
2013-09-16Fix bug in mpi_tdiv_q_2exp.Werner Koch1-1/+1
* mpi/mpi-internal.h (MPN_COPY_INCR): Make it work. -- This bug has been with us since the version 0.0.0 of GnuPG. Fortunately it only affects an optimized code path which is rarely used in practice: If the shift size matches the size of a limb (i.e.. 32 or 64); this is is_prime in primegen.c. Over there the Rabin-Miller test may fail with a probability of 2^-31 (that is if the to be tested prime - 1 has the low 32 bits cleared). In practice the probability is even much less because we first do a Fermat test on the randomly generated candidates which sorts out the majority of composite numbers. The bug in MPN_COPY_INCR was found by Sven Bjorn. Signed-off-by: Werner Koch <[email protected]> (back ported from Libgcrypt commit 7f7a5ef59962ae1a819b5060f9b781469bfe27d5)
2013-07-25Mitigate a flush+reload cache attack on RSA secret exponents.Werner Koch1-3/+12
* mpi/mpi-pow.c (mpi_powm): Always perform the mpi_mul for exponents hold in secure memory. -- The attack is described in a paper to be pusblished at eprint.iacr.org: Flush+Reload: a High Resolution, Low Noise, L3 Cache Side-Channel Attack by Yuval Yarom and Katrina Falkner. 18 July 2013. Flush+Reload is a cache side-channel attack that monitors access to data in shared pages. In this paper we demonstrate how to use the attack to extract private encryption keys from GnuPG. The high resolution and low noise of the Flush+Reload attack enables a spy program to recover over 98% of the bits of the private key in a single decryption or signing round. Unlike previous attacks, the attack targets the last level L3 cache. Consequently, the spy program and the victim do not need to share the execution core of the CPU. The attack is not limited to a traditional OS and can be used in a virtualised environment, where it can attack programs executing in a different VM. Signed-off-by: Werner Koch <[email protected]>
2012-12-13Support NetBSD m68K ELF targetsWerner Koch1-2/+7
* mpi/config.links (m68k*-*-netbsdelf): New. -- The original patch from NetBSD had this additional code: if ! test x$M68060 = xYES; then path="m68k/mc68020 m68k" fi However, this bypasses the config system. It would be better to add proper support for this CPU to config.sub.
2012-11-06Fix extern inline use for gcc > 4.3 in c99 modeWerner Koch1-1/+8
* mpi/mpi-inline.h [!G10_MPI_INLINE_DECL]: Take care of changed extern inline semantics in gcc. -- I am not use how this will work out with non-gcc. However, we had no problems in the past and thus this change is the least invasive for non-gcc compilers.
2011-12-02Rename all ChangeLog files to ChangeLog-2011.Werner Koch1-0/+7
* ChangeLog: New file.
2011-08-09Removed some set but unused vars.Werner Koch3-5/+10
2011-07-04Allow building for ARM thumb. Fixes bug#1202.Werner Koch2-7/+10
2010-12-23Revert last two changes and replace by code from libgcrypt 1.4.6.Werner Koch2-12/+19
2010-10-22mips fixesWerner Koch2-22/+35
2010-06-01Fix bug 1231.Werner Koch2-2/+14
Minor doc improvement.
2009-12-09Remove sparc64 asm modulesWerner Koch2-12/+15
2008-03-25Powerpc64 fix.Werner Koch2-5/+11
2007-10-23Switched to GPLv3.Werner Koch102-559/+231
Updated gettext.
2007-01-16* config.links: powerpc64* needs to come before powerpc* or it willDavid Shaw2-5/+11
never match. Reported by Alon Bar-Lev for libgcrypt, but relevant here as well.
2006-12-11Removed the use of g10defs.h.Werner Koch5-6/+87
This required some code cleanups and the introduction of a few accessor ducntions in mpi.
2005-09-01* mpicoder.c (mpi_read): Fix minor bug in reading a zero-length MPIDavid Shaw2-5/+14
(was failing unnecessarily).
2005-07-27Converted all m_free to xfree etc.Werner Koch4-22/+22
2005-05-31Updated FSF street address and preparations for a release candidate.Werner Koch101-117/+214
2005-05-21* cardglue.c (send_status_info): Make CTRL optional.Werner Koch3-11/+40
(agent_scd_writekey, inq_writekey_parms): New. (agent_openpgp_storekey): Removed. * cardglue.h: Add a few more error code mappings. * keygen.c (copy_mpi): Removed. (save_unprotected_key_to_card): Changed to use agent_scd_writekey. * app-common.h, app-openpgp.c, tlv.c, tlv.h: Updated from newer version in gnupg 1.9 CVS.
2005-03-11* configure.ac: New option --enable-noexecstack.Werner Koch2-3/+8
* Makefile.am (ASFLAGS): Renamed to AM_CCASFLAGS and added the variable for non exectubale stack options. Adapted users.
2004-12-20* seckey-cert.c (do_check): Handle case when checksum was okay butWerner Koch2-6/+21
passphrase still wrong. Roman Pavlik found such a case. * mpicoder.c (mpi_read_from_buffer): Don't abort in case of an invalid MPI but print a message and return NULL. Use log_info and not log_error.
2004-10-26* configure.ac: New option --disable-gnupg-iconv, defineWerner Koch2-2/+6
USE_GNUPG_ICONV. (AC_CANONICAL_TARGET): Replaced by AC_CANONICAL_HOST. Changed all reference to TARGET to HOST. Made sure that i586-mingw32msvc gets detected as mingw32. (UNIT64_C): Don't include inttype.h uncoditional but use a test to ensure that it gets into conftest.h. (AH_TOP): New. Prevent double inclusion of config.h. * config.links: Use HOST instead of TARGET.
2004-10-13* Makefile.am (.S.o): Include MPI_SFLAGS. This is our bug 145.Werner Koch2-1/+5
2004-09-30* mpicoder.c (mpi_read): If we must fail due to a oversize (generallyDavid Shaw2-1/+9
corrupt) MPI, make sure the number of bytes we read is valid so we can skip the rest of the bad packet (in hopes the whole stream isn't invalid).
2004-05-20* longlong.h: Typo.David Shaw3-8/+16
* mpi-pow.c (mpi_powm): s/exp/exponent/ to shutup a compiler warning. From Werner on stable branch.
2004-01-21hppa1.1/udiv-qrnnd.S: Alignment fix from Lamont Jones for Debian.David Shaw2-0/+6
2004-01-12* config.links: OpenBSD 3.4 is now ELF, so use the proper assembler codeDavid Shaw5-31/+102
for that. Use the portable C MPI code for OpenBSD before 3.4, and remove the special i386-openbsd assembly directory. * Makefile.am: Add the portable C links to DISTCLEANFILES. Noted by Nelson H. F. Beebe. * mpi-mpow.c (build_index): s/index/idx/ to avoid gcc warning. From Werner on stable branch. * longlong.h: Added PowerPC 64 bit code from GPM-4.1.2 but didn't enable it yet. From Werner on stable branch.
2004-01-12Use the portable C MPI code for OpenBSD before 3.4, and remove the specialDavid Shaw10-774/+0
i386-openbsd assembly directory.
2003-12-30* g10m.c: Dead code. Remove.David Shaw3-99/+7
* Makefile.am: Don't compile g10m.c.
2003-12-17* mpiutil.c (mpi_set_opaque, mpi_get_opaque): Make the length of an opaqueDavid Shaw2-2/+7
MPI unsigned.
2003-12-05* config.links: Show target in asm-syntax.h file and include targets forDavid Shaw2-2/+11
K*BSD (GNU userland with BSD kernel).
2003-11-21* config.links: sparc64 assembler doesn't work on FreeBSD or OpenBSDDavid Shaw2-4/+9
either.
2003-05-26* Makefile.am: Make use of AM_CFLAGS. (From wk on stable branch)David Shaw2-2/+6
2003-05-24* mpicoder.c, mpi-inline.h, mpi-inv.c, mpiutil.c, mpih-div.c,David Shaw8-85/+83
mpi-internal.h, mpi-scan.c: Edit all preprocessor instructions to remove whitespace before the '#'. This is not required by C89, but there are some compilers out there that don't like it.
2003-04-25* config.links: Re-disable assembler on Darwin. Darwin 6.5 broke itDavid Shaw2-5/+9
again.
2003-04-15* longlong.h (umul_ppmm): Support SH3 and SH4. Thanks toWerner Koch2-2/+8
[email protected].
2002-11-16* config.links: Use OpenBSD/NetBSD powerpc assembler code for Darwin.David Shaw2-2/+7
Successfully tested by Gordon Worley.
2002-10-18* config.links (powerpc-apple-darwin6.1): Disable assemblerWerner Koch2-1/+11
due to non-working modules/as. Suggested by Gordon Worley.
2002-10-02* longlong.h: Some whitespace changes in HPPA to fix assembler problems onDavid Shaw2-20/+25
HP-UX. From David Ellement.
2002-09-20* mpicoder.c (do_get_buffer): Avoid zero length allocation.Werner Koch2-3/+12
Checked that all callers behave properly when NBYTES returns 0 as the length of the allocated buffer.
2002-09-11* mpi-bit.c (mpi_normalize): Replaced the check for protected byV1-2-5V1-2-4V1-2-3RC-1-2-5rc2RC-1-2-5rc1RC-1-2-4rc1RC-1-2-3rc2RC-1-2-3rc1Werner Koch3-38/+34
is_opaque. (mpi_get_nbits): Removed the special case for protected MPIs. * mpicoder.c (do_get_buffer): Likewise. (mpi_print): Removed the nbit_info printing.
2002-09-10* mpicoder.c (mpi_set_buffer): Cast all left operands of a shiftWerner Koch2-7/+13
to a larger type so that 16 bit CPUs don't suffer from an overflow. Suggested by TOGAWA Satoshi.
2002-08-24* longlong.h: Remove space between \ and newline. gcc is complaining.David Shaw2-2/+7
2002-08-13* mpicoder.c (do_get_buffer): Don't remove leading zeros if theWerner Koch2-6/+14
MPI is marked as protected.
2002-08-022002-08-02 Timo Schulz <[email protected]>Timo Schulz2-2/+6
* mpicoder.c: Add a '\n' to all log_bug functions.
2002-08-02* config.links: Added case for sparc64-netbsd. Suggested byWerner Koch2-0/+11
[email protected].
2002-07-25* config.links: Add special rule for OpenBSD on x86 to use specialDavid Shaw2-0/+13
i386-openbsd files. OpenBSD (at least until version 3.1) has an older assembler that won't work with the files in i386.
2002-07-25These are special i386 files for use on OpenBSD, which (at least untilDavid Shaw10-0/+774
version 3.1) has an older assembler that won't work with the files in i386.
2002-07-24removed pragma for RISC OSStefan Bellon2-4/+5
2002-07-24* longlong.h: Replaced all K&R multiline strings by ISO ones forWerner Koch2-224/+233
the sake of modern compilers. Suggested by Marco Parrone.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-17 22:45:31 +0000