openssl/providers/implementations/asymciphers, branch dependabot/github_actions/actions/setup-python-7

Refactor FIPS parameter and indicator handling

2026-03-11T14:55:27Z

Consolidate FIPS indicators and self-test parameters into a single structure managed by `fipsparams.pm`. Replace individual accessor functions with a generic `ossl_fips_config` function that retrieves values by name. This removes repetitive boilerplate code and simplifies parameter access within the FIPS provider. Signed-off-by: Simo Sorce Reviewed-by: Paul Dale Reviewed-by: Shane Lontis Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/30213)

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

New decoder generator returns matched field count

2026-02-21T13:24:20Z

It can be useful to know how many parameters matched a decoded field, (or at least whether that number is non-zero). Tne new `produce_param_decoder_with_count` generator produces code that updates a count output variable. In particular, an RSA parameter handler did not handle requests for only unexpected parameter as gracefully as one might want. It can now return early when none of the provided parameters are relevant. [ The number reported is a count of matching parameter values, not a count of the resulting decoded fields, so if a parameter key occurs more than once, the count can be larger than the number of fields actually set. ] Reviewed-by: Tim Hudson Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz Reviewed-by: Paul Yang MergeDate: Sat Feb 21 13:25:11 2026 (Merged from https://github.com/openssl/openssl/pull/29953)

Switch FIPS self tests to deferred execution

2026-02-13T09:53:41Z

Update the FIPS module to run self-tests on demand (deferred) rather than on module load. Change the test definitions in self_test_data.c from SELF_TEST_ONLOAD to SELF_TEST_DEFERRED. Add calls to ossl_deferred_self_test() in the newctx functions for ciphers, digests, signatures, KDFs, KEMs and DRBGs to trigger execution upon first instantiation. Introduce CIPHER_PROV_CHECK and DIGEST_PROV_CHECK macros in common headers to facilitate these checks. Define dependencies for composite tests to ensure prerequisite tests run when needed. Signed-off-by: Simo Sorce Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/29222)

rsa_enc.c: Properly duplicate the oaep_label member

2026-01-23T10:37:25Z

Otherwise UAF and doublefree appears when the duplicate is freed. Reported by Tomas Dulka and Stanislav Fort (Aisle Research) Reviewed-by: Richard Levitte Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale MergeDate: Fri Jan 23 10:37:36 2026 (Merged from https://github.com/openssl/openssl/pull/29707)

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09T07:28:19Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29242)

Providers: Remove OSSL_ALG_PARAM_ENGINE

2025-12-04T12:32:18Z

Resolves: https://github.com/openssl/project/issues/1427 Signed-off-by: Norbert Pocs Reviewed-by: Paul Yang Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/29305)

providers/: Remove ENGINEs

2025-12-04T12:31:05Z

Signed-off-by: Norbert Pocs Reviewed-by: Matt Caswell Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Dmitry Belyavskiy Reviewed-by: Saša Nedvědický Reviewed-by: Eugene Syromiatnikov (Merged from https://github.com/openssl/openssl/pull/29305)

asymciphers: Use include file for generated code

2025-10-20T07:45:53Z

Signed-off-by: Simo Sorce Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/28838)

Add OSSL_ prefix back onto param names

2025-09-16T22:49:02Z

Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/28529)