openssl/crypto/dsa, branch master

Copyright year updates

2026-09-09T13:12:46Z

Reviewed-by: Daniel Kubec Reviewed-by: Eugene Syromiatnikov Merge-date: Wed Sep 9 13:12:46 2026 Release: yes

Generate the error headers and tables at build time

2026-09-01T14:01:38Z

Teach util/mkerr.pl two new modes. -emit FILE writes one generated error file to standard output as a pure function of openssl.ec and openssl.txt, with no source scan and no state update; every file in the openssl.ec L table becomes a GENERATE rule driven by it, and the generated error headers join the mandatory generated headers. -state scans the sources and maintains openssl.txt but writes no other files; "make errors" now uses it, so the developer flow only curates the state and the build emits everything else. Reason-code assignment moves out of the header emission into its own pass, the three emitters become subroutines writing to a filehandle, and the up-to-date stamp moves from the statefile's own timestamp to a separate gitignored stamp file, since the statefile is now a build input whose timestamp must track its content. Removing the committed copies also retires 15 that had silently drifted from the generator's output, among them crypto/bio/bio_err.c, which was missing the reason strings for three BIO error codes that exist in the state file. Reviewed-by: Neil Horman Reviewed-by: Andrew Dinh Reviewed-by: Tomas Mraz Merge-date: Tue Sep 1 14:03:03 2026 Merged-from: https://github.com/openssl/openssl/pull/32243

Fix potential double-free in dsa_finish()

2026-08-30T12:27:48Z

dsa_finish() (the default DSA method's finish slot) frees the cached Montgomery context, dsa->method_mont_p, without NULLing the pointer. Once the cache has been warmed (e.g. by signing), a subsequent finish call — e.g. via DSA_free() after DSA_set_method() — frees it again. NULL the pointer after freeing. Fixes: https://github.com/openssl/openssl/issues/32541 Assisted-by: Pi:moonshotai/kimi-k3 Signed-off-by: Richard Levitte Reviewed-by: Jakub Zelenka Reviewed-by: Matt Caswell Merge-date: Sun Aug 30 14:54:56 2026 Merged-from: https://github.com/openssl/openssl/pull/32543

Make sure we always check return of CRYPTO_UP_REF which can fail.

2026-07-20T11:13:57Z

Reviewed-by: Kurt Roeckx Reviewed-by: Paul Dale MergeDate: Mon Jul 20 11:13:58 2026 (Merged from https://github.com/openssl/openssl/pull/31753)

FIPS: Make keygen PCT failures recoverable

2026-06-11T16:01:55Z

Key generation pairwise consistency tests (PCT) no longer cause the FIPS provider to enter a non recoverable error state. Originally I considered that the pairwise tests should never fail, so a failure was considered as a fatal error. Unfortunately this is not true, since the RSA pairwise test was changed to call rsa_ossl_public_encrypt(). This function can return -1 based on the values of n and e, resulting in a DOS for bad inputs. Under NIST FIPS 186-5, the public exponent (e) must be an odd positive integer greater than (e > 65536) and less than 2^256. The OpenSSL code however returns an error if e > 2^64 when n > 3072. (This check was added to prevent a CVE DOS). While FIPS 140-3 mandates that a module must transition into an error state upon self-test failures, a PCT is classified as a conditional self-test, not a pre-operational self-test (like an integrity test or a Known Answer Test) The cryptographic module is only required to immediately discard the faulty key pair and output a local error. The module is allowed to immediately attempt generating a new key pair using fresh entropy, without needing a full system reboot or module reset. Detected by Oracle during Jipher testing. Reviewed-by: Simo Sorce Reviewed-by: Paul Dale MergeDate: Thu Jun 11 16:03:42 2026 (Merged from https://github.com/openssl/openssl/pull/31359)

Add missing header guards in local crypto includes.

2026-05-06T11:35:24Z

These are guarded with "OSSL_LIBCRYPTO" to ensure the namespace is distinct from the "OSSL_CRYPTO" guards used in include/crypto Reviewed-by: Tomas Mraz Reviewed-by: Nikola Pajkovsky Reviewed-by: Norbert Pocs MergeDate: Wed May 6 11:35:55 2026 (Merged from https://github.com/openssl/openssl/pull/31001)

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

Make ASN1_STRING opaque

2026-02-25T10:12:51Z

This laudable goal, should it land, will be followed with an issue raised to eat our own dogfood and find every file with added to it in this commit, and change to the appropriate accessors, which should be possible in most places we aren't actually implementing things that change the values Fixes: https://github.com/openssl/openssl/issues/29860 Reviewed-by: Neil Horman Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz MergeDate: Wed Feb 25 10:14:57 2026 (Merged from https://github.com/openssl/openssl/pull/29862)

Pass low level DSA objects to the default provider

2026-02-13T07:57:58Z

As we did for RSA objects we do the same for DSA objects. Reviewed-by: Shane Lontis Reviewed-by: Tomas Mraz MergeDate: Fri Feb 13 07:58:23 2026 (Merged from https://github.com/openssl/openssl/pull/29960)

Clean up some final vistigial remnants of EVP_PKEY_METHOD

2025-12-18T10:57:39Z

We retain the opaque type because it is still used by the ENGINE stubs. Reviewed-by: Shane Lontis Reviewed-by: Paul Yang (Merged from https://github.com/openssl/openssl/pull/29384)