openssl, branch OpenSSL_1_1_0d

Prepare for 1.1.0d release

2017-01-26T13:10:20Z

Reviewed-by: Richard Levitte

Update CHANGES and NEWS for new release

2017-01-26T11:01:36Z

Reviewed-by: Richard Levitte

bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqr8x_internal.

2017-01-26T10:54:36Z

CVE-2017-3732 Reviewed-by: Rich Salz

Document DH_check_params()

2017-01-26T10:54:36Z

Reviewed-by: Viktor Dukhovni

Better check of DH parameters in TLS data

2017-01-26T10:54:36Z

When the client reads DH parameters from the TLS stream, we only checked that they all are non-zero. This change updates the check to use DH_check_params() DH_check_params() is a new function for light weight checking of the p and g parameters: check that p is odd check that 1 < g < p - 1 Reviewed-by: Viktor Dukhovni

crypto/evp: harden AEAD ciphers.

2017-01-26T10:54:36Z

Originally a crash in 32-bit build was reported CHACHA20-POLY1305 cipher. The crash is triggered by truncated packet and is result of excessive hashing to the edge of accessible memory. Since hash operation is read-only it is not considered to be exploitable beyond a DoS condition. Other ciphers were hardened. Thanks to Robert Święcki for report. CVE-2017-3731 Reviewed-by: Rich Salz

crypto/evp: harden RC4_MD5 cipher.

2017-01-26T10:54:35Z

Originally a crash in 32-bit build was reported CHACHA20-POLY1305 cipher. The crash is triggered by truncated packet and is result of excessive hashing to the edge of accessible memory (or bogus MAC value is produced if x86 MD5 assembly module is involved). Since hash operation is read-only it is not considered to be exploitable beyond a DoS condition. Thanks to Robert Święcki for report. CVE-2017-3731 Reviewed-by: Rich Salz

Remove assert from is_partially_overlapping()

2017-01-25T15:07:37Z

This function is used to validate application supplied parameters. An assert should be used to check for an error that is internal to OpenSSL. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2275) (cherry picked from commit b153f0921bea38127de0b9440b0487db3004330d)

Adjust in and in_len instead of donelen

2017-01-25T15:07:36Z

Don't use the temp variable donelen in the non-aad fragmented code path. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2275) (cherry picked from commit ef055ec536a3c6e698dd9f45b41d57a32366b4fa)

Fix the overlapping check for fragmented "Update" operations

2017-01-25T15:07:36Z

When doing in place encryption the overlapping buffer check can fail incorrectly where we have done a partial block "Update" operation. This fixes things to take account of any pending partial blocks. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2275) (cherry picked from commit 7141ba31969d0b378d08104a51f8f99b9187b9d5)