openssl/crypto, branch OpenSSL_1_0_2k

Prepare for 1.0.2k release

2017-01-26T13:22:36Z

Reviewed-by: Richard Levitte

bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqr8x_internal.

2017-01-26T10:55:03Z

CVE-2017-3732 Reviewed-by: Rich Salz

crypto/evp: harden RC4_MD5 cipher.

2017-01-26T10:55:03Z

Originally a crash in 32-bit build was reported CHACHA20-POLY1305 cipher. The crash is triggered by truncated packet and is result of excessive hashing to the edge of accessible memory (or bogus MAC value is produced if x86 MD5 assembly module is involved). Since hash operation is read-only it is not considered to be exploitable beyond a DoS condition. Thanks to Robert Święcki for report. CVE-2017-3731 Reviewed-by: Rich Salz

Fix error handling in compute_key, BN_CTX_get can return NULL

2017-01-24T17:27:10Z

Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/2132) (cherry picked from commit 7928ee4d685b727619555bc1ec0aee805f6fc8c4)

Fix DSA parameter generation control error

2017-01-20T07:30:41Z

When setting the digest parameter for DSA parameter generation, the signature MD was set instead of the parameter generation one. Fortunately, that's also the one that was used for parameter generation, but it ultimately meant the parameter generator MD and the signature MD would always be the same. Fixes github issue #2016 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2250) (cherry picked from commit 8a05c4d3b5a1bfb9193ea24e71735e11de7168d2)

Clean one unused variable, plus an useless one.

2017-01-18T14:24:23Z

Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/1906) (cherry picked from commit 2191dc846a85ce82925cb06b4dd8649da7fc403c)

Fix a memory leak in RSA_padding_add_PKCS1_OAEP_mgf1

2017-01-09T21:36:43Z

Signed-off-by: Kurt Roeckx Reviewed-by: Matt Caswell GH: #2140 (cherry picked from commit c6d215e0d278fcd51ad474a3647b61e1b67290bb)

Reformat M_check_autoarg to match our coding style

2016-12-20T22:22:39Z

Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2121) (cherry picked from commit 2629440d42e4d64cd0cb849c1b19fa87a4fcb90f)

M_check_autoarg: sanity check the key

2016-12-20T22:03:45Z

For now, checking that the size is non-zero will suffice. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2120) (cherry picked from commit d7c8f142ea5953bf260b70a58739c1c9b0f038eb)

perlasm/x86_64-xlate.pl: refine sign extension in ea package.

2016-12-12T10:03:30Z

$1<<32>>32 worked fine with either 32- or 64-bit perl for a good while, relying on quirk that [pure] 32-bit perl performed it as $1<<0>>0. But this apparently changed in some version past minimally required 5.10, and operation result became 0. Yet, it went unnoticed for another while, because most perl package providers configure their packages with -Duse64bitint option. Reviewed-by: Rich Salz (cherry picked from commit 82e089308bd9a7794a45f0fa3973d7659420fbd8)