openssl/include, branch OpenSSL_1_1_1w

Prepare for release of 1.1.1w

2023-09-11T14:08:11Z

Reviewed-by: Matt Caswell Release: yes

Prepare for 1.1.1w

2023-08-01T13:51:44Z

Reviewed-by: Tomas Mraz Release: yes

Prepare for release of 1.1.1v

2023-08-01T13:51:35Z

Reviewed-by: Tomas Mraz Release: yes

Copyright year updates

2023-08-01T13:51:30Z

Reviewed-by: Tomas Mraz Release: yes

Fix DH_check() excessive time with over sized modulus

2023-07-19T09:24:06Z

The DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it is excessively large. There is already a maximum DH modulus size (10,000 bits) over which OpenSSL will not generate or derive keys. DH_check() will however still perform various tests for validity on such a large modulus. We introduce a new maximum (32,768) over which DH_check() will just fail. An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check(). CVE-2023-3446 Reviewed-by: Paul Dale Reviewed-by: Tom Cosgrove Reviewed-by: Bernd Edlinger Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/21452)

Prepare for 1.1.1v

2023-05-30T12:43:18Z

Reviewed-by: Richard Levitte Release: yes

Prepare for release of 1.1.1u

2023-05-30T12:42:39Z

Reviewed-by: Richard Levitte Release: yes

Copyright year updates

2023-05-30T12:42:20Z

Reviewed-by: Richard Levitte Release: yes

Re-add BN_F_OSSL_BN_RSA_DO_UNBLIND which was incorrectly removed

2023-04-20T08:24:38Z

Reviewed-by: Dmitry Belyavskiy Reviewed-by: Matt Caswell Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/20784)

Revert "Fix Timing Oracle in RSA decryption"

2023-03-31T10:46:29Z

This reverts commit 43d8f88511991533f53680a751e9326999a6a31f. Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/20284)