openssl/test/evp_kdf_test.c, branch dependabot/github_actions/actions/setup-python-7

test/evp_kdf_test.c: add checks or EVP_KDF_CTX_{,get0_,get1_}kdf()

2026-07-02T07:24:15Z

Signed-off-by: Eugene Syromiatnikov Reviewed-by: Bob Beck Reviewed-by: Nikola Pajkovsky MergeDate: Thu Jul 2 07:24:24 2026 (Merged from https://github.com/openssl/openssl/pull/28954)

Fix broken hex data by reformatting

2026-06-03T07:46:03Z

The clang format broke some data in hexadecimal format. To make the tool obedient, the trailing comma needs to be removed, then it interpretes the data differently and therefore does not reformat it. The format can then be changed to the correct form. Fixes: https://github.com/openssl/project/issues/1959 Signed-off-by: Norbert Pocs Reviewed-by: Milan Broz Reviewed-by: Eugene Syromiatnikov MergeDate: Wed Jun 3 07:46:14 2026 (Merged from https://github.com/openssl/openssl/pull/31350)

test: fix unreachable code in test_kdf_pbkdf2_large_output in evp_kdf_test.c

2026-06-02T11:09:59Z

The condition `if (sizeof(len) > 32)` was intended to set `len` to SIZE_MAX on platforms where size_t can hold values larger than 32 bits. However, sizeof() returns the size in bytes, not bits. Since sizeof(size_t) is typically 4 or 8 bytes on all current platforms, the condition was always false, leaving len at 0 and skipping the large-output test. This commit fixes the check by comparing SIZE_MAX directly against 0xFFFFFFFFU, which correctly detects whether size_t can represent values exceeding 32-bit range. This ensures the test properly validates PBKDF2 behavior when requested output length is excessively large. Fixes: 1cae59d14b9e "Make KDFs fail if requesting a zero-length key." Signed-off-by: Anton Moryakov Reviewed-by: Eugene Syromiatnikov Reviewed-by: Daniel Kubec MergeDate: Tue Jun 2 11:10:23 2026 (Merged from https://github.com/openssl/openssl/pull/31344)

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

KDF: Add configuration options to disable many of the KDF algorithms.

2026-01-19T04:51:45Z

This includes KDF's for ss,x963,hmac-drbg,KB,KRB5,PVK,SNMP,SSH and X942. SSKDF/X963KDF Changes: Modify code to handle algorithms being disabled via configuration options. Reviewed-by: Tim Hudson Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/29576)

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09T07:28:19Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29242)

Clear util dir from engines

2025-12-04T12:32:18Z

Signed-off-by: Norbert Pocs Reviewed-by: Paul Yang Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/29305)

Implement EVP_KDF_CTX_set_SKEY

2025-08-31T01:11:06Z

This allows to use a SKEY as input to a KDF derive operation. Signed-off-by: Simo Sorce Reviewed-by: Tim Hudson Reviewed-by: Matt Caswell Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/28369)

Implement EVP_KDF_derive_SKEY

2025-08-31T01:11:06Z

Signed-off-by: Dmitry Belyavskiy Signed-off-by: Simo Sorce Reviewed-by: Tim Hudson Reviewed-by: Matt Caswell Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/28369)

test: use array memory (re)allocation routines

2025-08-08T16:22:10Z

Signed-off-by: Eugene Syromiatnikov Reviewed-by: Saša Nedvědický Reviewed-by: Matt Caswell Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/28059)