openssl, branch OpenSSL_1_0_2p

Prepare for 1.0.2p release

2018-08-14T13:01:02Z

Reviewed-by: Richard Levitte

make update

2018-08-14T13:01:02Z

Reviewed-by: Richard Levitte

i2d_ASN1_BOOLEAN(): correct error module

2018-08-14T12:57:51Z

Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/6957)

Update copyright year

2018-08-14T12:40:34Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6955)

Updates to CHANGES and NEWS for the new release

2018-08-14T09:57:38Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6951)

i2d_ASN1_BOOLEAN(): allocate memory if the user didn't provide a buffer

2018-08-14T09:50:12Z

Just as was done recently for i2d_ASN1_OBJECT, we also make i2d_ASN1_BOOLEAN comply with the documentation. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/6943)

i2d_ASN1_OBJECT(): allocate memory if the user didn't provide a buffer

2018-08-11T10:38:46Z

Since 0.9.7, all i2d_ functions were documented to allocate an output buffer if the user didn't provide one, under these conditions (from the 1.0.2 documentation): For OpenSSL 0.9.7 and later if B<*out> is B memory will be allocated for a buffer and the encoded data written to it. In this case B<*out> is not incremented and it points to the start of the data just written. i2d_ASN1_OBJECT was found not to do this, and would crash if a NULL output buffer was provided. Fixes #6914 Reviewed-by: Matthias St. Pierre (Merged from https://github.com/openssl/openssl/pull/6918) (cherry picked from commit 6114041540d8d1fecaf23a861788c3c742d3b467)

rsa/*: switch to BN_bn2binpad.

2018-08-10T19:08:21Z

Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/6889) (cherry picked from commit 582ad5d4d9b7703eb089016935133e3a18ea8205) Resolved conflicts: crypto/rsa/rsa_ossl.c crypto/rsa/rsa_pk1.c

bn/bn_lib.c address Coverity nit in bn2binpad.

2018-08-10T19:08:15Z

It was false positive, but one can as well view it as readability issue. Switch even to unsigned indices because % BN_BYTES takes 4-6 instructions with signed dividend vs. 1 (one) with unsigned. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/6889) (cherry picked from commit 83e034379fa3f6f0d308ec75fbcb137e26154aec)

bn/bn_lib.c: add computationally constant-time bn_bn2binpad.

2018-08-10T19:07:14Z

"Computationally constant-time" means that it might still leak information about input's length, but only in cases when input is missing complete BN_ULONG limbs. But even then leak is possible only if attacker can observe memory access pattern with limb granularity. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/6889) (cherry picked from commit 89d8aade5f4011ddeea7827f08ec544c914f275a) Resolved conflicts: crypto/bn/bn_lib.c