openssl/test/ffc_internal_test.c, branch dependabot/github_actions/actions/setup-python-7

test/ffc_internal_test.c: The ffc_params_copy_mfail test needs DSA enabled

2026-05-13T09:46:14Z

Instead of having disabled with no-dh, we need to disable it with no-dsa. Fixes: df53ee4fa00b "Add mfail test for ossl_ffc_params_copy" Reviewed-by: Matt Caswell Reviewed-by: Nikola Pajkovsky Reviewed-by: Eugene Syromiatnikov MergeDate: Wed May 13 09:46:34 2026 (Merged from https://github.com/openssl/openssl/pull/31168)

Add mfail test for ossl_ffc_params_copy

2026-05-11T07:21:44Z

Reviewed-by: Paul Dale Reviewed-by: Matt Caswell Reviewed-by: Eugene Syromiatnikov MergeDate: Mon May 11 07:21:47 2026 (Merged from https://github.com/openssl/openssl/pull/31098)

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09T07:28:19Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29242)

DH_check_pub_key() should not fail when setting result code

2023-10-11T14:22:27Z

The semantics of ossl_ffc_validate_public_key() and ossl_ffc_validate_public_key_partial() needs to be changed to not return error on non-fatal problems. Fixes #22287 Reviewed-by: Todd Short Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/22291)

Copyright year updates

2023-09-07T08:59:15Z

Reviewed-by: Richard Levitte Release: yes

Fix typos found by codespell

2023-06-15T00:11:46Z

Typos in doc/man* will be fixed in a different commit. Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/20910)

Fix NULL deference when validating FFC public key.

2023-02-07T16:05:10Z

Fixes CVE-2023-0217 When attempting to do a BN_Copy of params->p there was no NULL check. Since BN_copy does not check for NULL this is a NULL reference. As an aside BN_cmp() does do a NULL check, so there are other checks that fail because a NULL is passed. A more general check for NULL params has been added for both FFC public and private key validation instead. Reviewed-by: Paul Dale Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz

ossl_ffc_params_copy: Copy the keylength too

2022-07-18T07:06:17Z

Reviewed-by: Kurt Roeckx Reviewed-by: Paul Dale Reviewed-by: Hugo Landau (Merged from https://github.com/openssl/openssl/pull/18480)

Use as small dh key size as possible to support the security

2022-07-18T07:06:17Z

Longer private key sizes unnecessarily raise the cycles needed to compute the shared secret without any increase of the real security. We use minimum key sizes as defined in RFC7919. For arbitrary parameters we cannot know whether they are safe primes (we could test but that would be too inefficient) we have to keep generating large keys. However we now set a small dh->length when we are generating safe prime parameters because we know it is safe to use small keys with them. That means users need to regenerate the parameters if they want to take the performance advantage of small private key. Reviewed-by: Kurt Roeckx Reviewed-by: Paul Dale Reviewed-by: Hugo Landau (Merged from https://github.com/openssl/openssl/pull/18480)

Update copyright year

2021-03-11T13:27:36Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/14512)