openssl, branch OpenSSL_1_0_2g

Prepare for 1.0.2g release

2016-03-01T13:36:54Z

Reviewed-by: Richard Levitte

make update

2016-03-01T13:36:54Z

Reviewed-by: Richard Levitte

Ensure mk1mf.pl is aware of no-weak-ssl-ciphers option

2016-03-01T12:41:49Z

Update mk1mf.pl to properly handle no-weak-ssl-ciphers Reviewed-by: Richard Levitte

Update CHANGES and NEWS for new release

2016-03-01T11:48:43Z

Reviewed-by: Richard Levitte

bn/asm/x86_64-mont5.pl: unify gather procedure in hardly used path

2016-03-01T11:21:43Z

and reorganize/harmonize post-conditions. Additional hardening following on from CVE-2016-0702 Reviewed-by: Richard Levitte Reviewed-by: Rich Salz (cherry picked from master)

crypto/bn/x86_64-mont5.pl: constant-time gather procedure.

2016-03-01T11:21:29Z

At the same time remove miniscule bias in final subtraction. Performance penalty varies from platform to platform, and even with key length. For rsa2048 sign it was observed to be 4% for Sandy Bridge and 7% on Broadwell. CVE-2016-0702 Reviewed-by: Richard Levitte Reviewed-by: Rich Salz (cherry picked from master)

bn/asm/rsaz-avx2.pl: constant-time gather procedure.

2016-03-01T11:21:22Z

Performance penalty is 2%. CVE-2016-0702 Reviewed-by: Richard Levitte Reviewed-by: Rich Salz (cherry picked from master)

bn/asm/rsax-x86_64.pl: constant-time gather procedure.

2016-03-01T11:21:15Z

Performance penalty is 2% on Linux and 5% on Windows. CVE-2016-0702 Reviewed-by: Richard Levitte Reviewed-by: Rich Salz (cherry picked from master)

bn/bn_exp.c: constant-time MOD_EXP_CTIME_COPY_FROM_PREBUF.

2016-03-01T11:20:41Z

Performance penalty varies from platform to platform, and even key length. For rsa2048 sign it was observed to reach almost 10%. CVE-2016-0702 Reviewed-by: Richard Levitte Reviewed-by: Rich Salz (cherry picked from master) Resolved conflicts: crypto/bn/bn_exp.c

Disable EXPORT and LOW SSLv3+ ciphers by default

2016-03-01T11:20:35Z

Reviewed-by: Emilia Käsper