summaryrefslogtreecommitdiffstats
path: root/crypto
Commit message (Expand)AuthorAgeFilesLines
* Prepare for 1.0.2r releaseOpenSSL_1_0_2rMatt Caswell2019-02-261-3/+3
* Update copyright yearMatt Caswell2019-02-263-3/+3
* Ensure bn_cmp_words can handle the case where n == 0Matt Caswell2019-02-251-0/+3
* Clear BN_FLG_CONSTTIME on BN_CTX_get()Nicola Tuveri2019-02-201-0/+2
* Test for constant-time flag leakage in BN_CTXNicola Tuveri2019-02-201-0/+101
* cygwin: drop explicit O_TEXTCorinna Vinschen2019-02-151-2/+9
* test/evp_test.c: use EVP_DecryptUpdate when decrypting, even for AADRichard Levitte2019-01-151-1/+1
* make updateRichard Levitte2019-01-152-1/+5
* Prevent calling decryption in an encryption context and vice versaRichard Levitte2019-01-151-4/+36
* make updateMatt Caswell2019-01-032-3/+5
* Make EVP_PKEY_asn1_add0() stricter about its inputRichard Levitte2018-12-071-12/+15
* rsa/rsa_ssl.c: make RSA_padding_check_SSLv23 constant-time.Andy Polyakov2018-12-061-36/+96
* rsa/rsa_oaep.c: remove memcpy calls from RSA_padding_check_PKCS1_OAEP.Andy Polyakov2018-12-061-40/+56
* rsa/rsa_pk1.c: remove memcpy calls from RSA_padding_check_PKCS1_type_2.Andy Polyakov2018-12-061-46/+52
* rsa/rsa_eay.c: make RSAerr call in rsa_ossl_private_decrypt unconditional.Andy Polyakov2018-12-061-2/+3
* err/err.c: add err_clear_last_constant_time.Andy Polyakov2018-12-062-0/+44
* Stop marking default digest for EC keys as mandatoryDavid Woodhouse2018-11-241-1/+1
* rsa/rsa_eay.c: cache MONT_CTX for public modulus earlier.Andy Polyakov2018-11-231-5/+5
* Prepare for 1.0.2r-devMatt Caswell2018-11-201-3/+3
* Prepare for 1.0.2q releaseOpenSSL_1_0_2qMatt Caswell2018-11-201-3/+3
* make updateMatt Caswell2018-11-203-7/+16
* Update copyright yearMatt Caswell2018-11-209-9/+9
* VMS: ensure crypto/getenv.c is included in the buildRichard Levitte2018-11-201-1/+2
* DSA: Check for sanity of input parametersVitezslav Cizek2018-11-141-0/+6
* CVE-2018-5407 fix: ECC ladderBilly Brumley2018-11-122-0/+278
* Add a constant time flag to one of the bignums to avoid a timing leak.Pauli2018-11-011-1/+1
* Merge to 1.0.2: DSA mod inverse fix.Pauli2018-10-291-2/+32
* Merge DSA reallocation timing fix CVE-2018-0734.Pauli2018-10-281-1/+1
* md_rand.c: don't stop polling until properly initializedDr. Matthias St. Pierre2018-10-181-8/+6
* Apply self-imposed path length also to root CAsViktor Dukhovni2018-10-181-5/+4
* Only CA certificates can be self-issuedViktor Dukhovni2018-10-181-2/+2
* rsa/rsa_ossl.c: fix and extend commentary [skip ci].Andy Polyakov2018-10-121-1/+2
* Access `group->mont_data` conditionally in EC_GROUP_set_generator()Nicola Tuveri2018-10-022-14/+30
* Merge 1.0.2 setuid calls to getenv(3) safety.Pauli2018-09-2710-14/+51
* Use gethostbyname_r if availableManikantan Subramanian2018-09-261-1/+22
* crypto/bn/asm/x86_64-gcc.c: remove unnecessary redefinition of BN_ULONGRichard Levitte2018-09-211-6/+0
* drbg_get_entropy: force a reseed before calling ssleay_rand_bytes()Dr. Matthias St. Pierre2018-09-203-3/+33
* crypto/ui/ui_openssl.c: make sure to recognise ENXIO and EIO tooRichard Levitte2018-09-201-0/+18
* Check the return value from ASN1_INTEGER_setMatt Caswell2018-09-101-1/+2
* Check the return from BN_sub() in BN_X931_generate_Xpq().Pauli2018-09-031-1/+3
* Remove redundant ASN1_INTEGER_set callEric Brown2018-09-021-1/+0
* bn/bn_lib.c: conceal even memmory access pattern in bn2binpad.Andy Polyakov2018-08-281-10/+24
* bn/bn_blind.c: use Montgomery multiplication when possible.Andy Polyakov2018-08-281-19/+44
* rsa/rsa_eay.c: implement variant of "Smooth CRT-RSA."Andy Polyakov2018-08-281-18/+83
* crypto/bn: add more fixed-top routines.Andy Polyakov2018-08-285-13/+113
* x509v3/v3_purp.c: resolve Thread Sanitizer nit.Andy Polyakov2018-08-171-4/+0
* Prepare for 1.0.2q-devMatt Caswell2018-08-141-3/+3
* Prepare for 1.0.2p releaseOpenSSL_1_0_2pMatt Caswell2018-08-141-3/+3
* make updateMatt Caswell2018-08-143-27/+48
* i2d_ASN1_BOOLEAN(): correct error moduleRichard Levitte2018-08-143-1/+3