openssl/include/crypto, branch openssl-3.3.5

Copyright year updates

2025-02-11T14:32:03Z

Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell Release: yes

Fix timing side-channel in ECDSA signature computation

2025-01-20T08:37:18Z

There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. Attacks on ECDSA nonce are also known as Minerva attack. Fixes CVE-2024-13176 Reviewed-by: Tim Hudson Reviewed-by: Neil Horman Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/26429) (cherry picked from commit 63c40a66c5dc287485705d06122d3a6e74a6a203)

Fix CMS encryption with key agreement when originator set

2025-01-06T10:45:45Z

OpenSSL currently does not support encryption with originator flag so it should fail nicely instead of segfaulting. Reviewed-by: Hugo Landau Reviewed-by: David von Oheimb Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26014) (cherry picked from commit 894e69e747a93a1f166891f5f029b78c68088f50)

Copyright year updates

2024-09-03T12:44:27Z

Reviewed-by: Neil Horman Release: yes

Fix '--strict-warnings' build breakage

2024-08-21T13:41:24Z

... due to a missing const. Reviewed-by: Tom Cosgrove Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25111)

riscv: Fix cpuid_obj asm checks for sm4/sm3

2024-07-12T10:10:26Z

Similar to #22881 / #23752 Reviewed-by: Tomas Mraz Reviewed-by: Paul Yang (Merged from https://github.com/openssl/openssl/pull/24486) (cherry picked from commit 6cf42ad392241c9fee586d99b53d9bfa74130b0b)

enable AES-XTS optimization for AIX

2024-06-05T08:14:25Z

Reviewed-by: Todd Short Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/24518) (cherry picked from commit dda1635cbff44d8d1b41a08e53c936ccb6c41acd)

Rename BN_generate_dsa_nonce() to ossl_bn_gen_dsa_nonce_fixed_top()

2024-05-02T07:23:07Z

And create a new BN_generate_dsa_nonce() that corrects the BIGNUM top. We do this to avoid leaking fixed top numbers via the public API. Also add a slight optimization in ossl_bn_gen_dsa_nonce_fixed_top() and make it LE/BE agnostic. Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/24265) (cherry picked from commit 9c85f6cd2d6debe5ef6ef475ff4bf17e0985f7a2)

Add ossl_bn_priv_rand_range_fixed_top() and use it for EC/DSA

2024-05-02T07:23:06Z

Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/24265) (cherry picked from commit 13b3ca5c998e6db4f7251a56c43541cb1a422bd0)

Make ossl_gen_deterministic_nonce_rfc6979() constant time

2024-05-02T07:23:04Z

Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/24265) (cherry picked from commit 2d285fa873028f6cff9484a0cdf690fe05d7fb16)