openssl/include, branch openssl-3.1

Copyright year updates

2025-02-11T14:40:50Z

Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell Release: yes

Fix timing side-channel in ECDSA signature computation

2025-01-20T08:41:32Z

There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. Attacks on ECDSA nonce are also known as Minerva attack. Fixes CVE-2024-13176 Reviewed-by: Tim Hudson Reviewed-by: Neil Horman Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/26429) (cherry picked from commit 63c40a66c5dc287485705d06122d3a6e74a6a203)

Fix CMS encryption with key agreement when originator set

2025-01-06T10:47:42Z

OpenSSL currently does not support encryption with originator flag so it should fail nicely instead of segfaulting. Reviewed-by: Hugo Landau Reviewed-by: David von Oheimb Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26014) (cherry picked from commit 894e69e747a93a1f166891f5f029b78c68088f50)

Increase limit for CRL download

2024-10-08T14:04:04Z

Reviewed-by: Matt Caswell Reviewed-by: Tom Cosgrove Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25608) (cherry picked from commit cdbe47bf3c02979183d1f66b42c511a18a63c61d)

Copyright year updates

2024-09-03T12:55:43Z

Reviewed-by: Neil Horman Release: yes

Fix '--strict-warnings' build breakage due to a missing const.

2024-08-21T13:44:08Z

Reviewed-by: Tom Cosgrove Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25111) (cherry picked from commit ef4df981aecfc6c3cdc1585a1c07b199db711ec1)

Fix handling of max_fragment_length extension for PSK

2024-06-20T14:51:55Z

A psk session was assumed to be a resumption which failed a check when parsing the max_fragment_length extension hello from the client. Relevant code from PR#18130 which was a suggested fix to the issue was cherry-picked. Fixes #18121 Reviewed-by: Matt Caswell Reviewed-by: Viktor Dukhovni Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/24513) (cherry picked from commit fa495604516a610d988f02298c8d97a6ac4777bb)

enable AES-XTS optimization for AIX in 3.0 branch

2024-06-07T06:10:14Z

Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/24531) (cherry picked from commit 443823b51c3cfa2f4c427bf89c3ec121eaaf96e9)

Copyright year updates

2024-06-04T14:18:59Z

Reviewed-by: Neil Horman Release: yes

Add reason codes with the correct offset for two alerts

2024-05-14T13:30:49Z

Fixes #24300. The current values of SSL_R_NO_APPLICATION_PROTOCOL and SSL_R_PSK_IDENTITY_NOT_FOUND don't allow for a correct lookup of the corresponding reason strings. CLA: trivial Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/24338) (cherry picked from commit 9e33c9c48f6cde4d607a4205476b2faf442e9cb5)