aboutsummaryrefslogtreecommitdiffstats
path: root/fuzz
Commit message (Collapse)AuthorAgeFilesLines
* fuzz: assert invariants in bignum fuzzers and fix with no-stdioMrmaxmeier6 days2-0/+6
| | | | | | | | Reviewed-by: Frederik Wedel-Heinen <[email protected]> Reviewed-by: Dmitry Belyavskiy <[email protected]> Reviewed-by: Eugene Syromiatnikov <[email protected]> Merge-date: Mon Oct 19 11:24:07 2026 Merged-from: https://github.com/openssl/openssl/pull/33160
* fuzz: add missing stdio.h include for PQ fuzzersMrmaxmeier6 days3-0/+3
| | | | | | | | Reviewed-by: Frederik Wedel-Heinen <[email protected]> Reviewed-by: Dmitry Belyavskiy <[email protected]> Reviewed-by: Eugene Syromiatnikov <[email protected]> Merge-date: Mon Oct 19 11:24:06 2026 Merged-from: https://github.com/openssl/openssl/pull/33160
* Add support for Java keytool PKCS#12 files with symmetric secret keysDmitry Belyavskiy2026-09-241-15/+22
| | | | | | | | | | | | | | | Introduce PKCS12_PARSE_CTX opaque context for PKCS12_parse_ex(), replacing the growing parameter list pattern. Add PKCS12_decrypt_secretbag() for decrypting secret bags and PKCS12_SAFEBAG_get1_skey() for converting decrypted PKCS8 data to EVP_SKEY, following the existing private key pattern (PKCS12_decrypt_skey_ex + EVP_PKCS82PKEY_ex). Assisted-by: Claude Opus 4.6 <[email protected]> Reviewed-by: Mounir Idrassi <[email protected]> Reviewed-by: Simo Sorce <[email protected]> MergeDate: Thu Sep 24 07:34:22 2026 (Merged from https://github.com/openssl/openssl/pull/30937)
* Add id-aes OID to OpenSSL object databaseDmitry Belyavskiy2026-09-241-0/+1
| | | | | | | | | | This is the base AES OID used by Java keytool when storing generic AES symmetric keys in PKCS#12 files. Reviewed-by: Mounir Idrassi <[email protected]> Reviewed-by: Simo Sorce <[email protected]> MergeDate: Thu Sep 24 07:34:21 2026 (Merged from https://github.com/openssl/openssl/pull/30937)
* hashtable.c: Use previously unused variables to avoid warningTomas Mraz2026-09-171-0/+7
| | | | | | | Reviewed-by: Eugene Syromiatnikov <[email protected]> Reviewed-by: Nikola Pajkovsky <[email protected]> Merge-date: Thu Sep 17 14:05:02 2026 Merged-from: https://github.com/openssl/openssl/pull/32821
* Remove unused static variables to suppress new clang warningTomas Mraz2026-09-176-24/+18
| | | | | | | | | | | There were unused static variables in bn_lib.c, ssl_init.c, (dtls)client.c, (dtls)server.c, quic-client/server.c, dtlsssllistenertest.c Reviewed-by: Eugene Syromiatnikov <[email protected]> Reviewed-by: Nikola Pajkovsky <[email protected]> Merge-date: Thu Sep 17 14:05:01 2026 Merged-from: https://github.com/openssl/openssl/pull/32821
* Update corpora submoduleGreensi72026-09-151-0/+0
| | | | | | | Reviewed-by: Jakub Zelenka <[email protected]> Reviewed-by: Milan Broz <[email protected]> Merge-date: Tue Sep 15 15:00:02 2026 Merged-from: https://github.com/openssl/openssl/pull/32342
* Add cms_verify fuzzerGreensi72026-09-152-2/+76
| | | | | | | | | | | | | | | Fuzz CMS_verify() with CMS_NO_SIGNER_CERT_VERIFY to exercise signature verification without requiring trusted certificate store. Motivated by : CVE-2026-45447 which affects PKCS7_verify(), and add coverage for similar CMS_verify(). Assisted-by: ChatGPT:gpt-5.6 Reviewed-by: Jakub Zelenka <[email protected]> Reviewed-by: Milan Broz <[email protected]> Merge-date: Tue Sep 15 15:00:01 2026 Merged-from: https://github.com/openssl/openssl/pull/32342
* Copyright year updatesopenssl-machine2026-09-0921-21/+21
| | | | | | | Reviewed-by: Daniel Kubec <[email protected]> Reviewed-by: Eugene Syromiatnikov <[email protected]> Merge-date: Wed Sep 9 13:12:46 2026 Release: yes
* fuzz/x509v3.c: drop a dead store of certNorbert Pocs2026-08-311-1/+0
| | | | | | | | | | | | | | | | Setting cert to NULL before assinging another X509_new() result to it is unnecessary, as was pointed out by Coverity. Drop the dead store. Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1700563 Complements: 9da88ee430a0 "Add X509V3_EXT_add_nconf fuzzer" Signed-off-by: Norbert Pocs <[email protected]> Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Eugene Syromiatnikov <[email protected]> Merge-date: Mon Aug 31 05:19:12 2026 Merged-from: https://github.com/openssl/openssl/pull/32576
* Add X509V3_EXT_add_nconf fuzzerGreensi72026-08-273-2/+95
| | | | | | | | | | | | | Add a fuzz target for parsing X509v3 configuration with both empty and non-empty context. Inspired by : https://github.com/google/boringssl/commit/33b569282ca124c81d9ba74df696a013cb9a80ae#diff-69cdea0423abe6dd8db9db93ce916f9576bf86988b2728ffa1a2178d5d94734b Assisted-by: ChatGPT:gpt-5.6 Reviewed-by: Milan Broz <[email protected]> Reviewed-by: Nikola Pajkovsky <[email protected]> Merge-date: Thu Aug 27 13:50:44 2026 Merged-from: https://github.com/openssl/openssl/pull/32143
* Fix an assertion failure which happens when a DTLS 1.3 client receives a ↵Frederik Wedel-Heinen2026-08-251-6/+1
| | | | | | | | HelloVerifyRequest. Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Viktor Dukhovni <[email protected]> (Merged from https://github.com/openssl/openssl/pull/24509)
* Run some failing tests with DTLS1.2Frederik Wedel-Heinen2026-08-251-0/+7
| | | | | | Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Matt Caswell <[email protected]> (Merged from https://github.com/openssl/openssl/pull/22275)
* Add OIDs specified by RFC 9925Skye Soss2026-08-191-0/+2
| | | | | | | | | | Defines the id-alg-unsigned and id-rdna-unsigned OIDs from RFC 9925 CLA: trivial Reviewed-by: Eugene Syromiatnikov <[email protected]> Reviewed-by: Dmitry Belyavskiy <[email protected]> Merge-date: Wed Aug 19 10:46:43 2026 Merged-from: https://github.com/openssl/openssl/pull/32062
* Update corpora submoduleGreensi72026-08-071-0/+0
| | | | | | | | Reviewed-by: Milan Broz <[email protected]> Reviewed-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Norbert Pocs <[email protected]> MergeDate: Fri Aug 7 13:36:58 2026 (Merged from https://github.com/openssl/openssl/pull/32093)
* Add PKCS7_verify fuzzerGreensi72026-08-072-0/+75
| | | | | | | | | | | | | | | | Fuzz PKCS7_verify with PKCS7_NOVERIFY flag to exercise signature verification without requiring a trusted certificate store. Motivated by CVE-2026-45447. Assisted-by: ChatGPT:gpt-5.6 Reviewed-by: Milan Broz <[email protected]> Reviewed-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Norbert Pocs <[email protected]> MergeDate: Fri Aug 7 13:36:57 2026 (Merged from https://github.com/openssl/openssl/pull/32093)
* updating fuzz-corpora submoduleMilan Broz2026-07-291-0/+0
| | | | | | | Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Norbert Pocs <[email protected]> MergeDate: Wed Jul 29 09:24:40 2026 (Merged from https://github.com/openssl/openssl/pull/32067)
* Add OSSL_ECHSTORE_read_echconfiglist fuzzerGreensi72026-07-232-0/+104
| | | | | | | | | | | | | | | Fuzz OSSL_ECHSTORE_read_echconfiglist with raw fuzzer input in stage 1. Then fixup the starting bytes to reach deeper code withotu relying only on corpus. Fixup is done for binary encoding only (not base64). Assisted-by: ChatGPT:gpt-5.5 Reviewed-by: Milan Broz <[email protected]> Reviewed-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Norbert Pocs <[email protected]> MergeDate: Thu Jul 23 13:57:54 2026 (Merged from https://github.com/openssl/openssl/pull/32021)
* quic: report SRTM entry match status via an output argumentNikola Pajkovsky2026-07-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | Coverity (CID 1696969, CHECKED_RETURN) flagged the ignored return value of ossl_quic_srtm_remove() in ch_enqueue_retire_conn_id(). The return value could not be usefully checked because 0 was overloaded to mean both "no matching entry" and a genuine internal failure (alloc_failed or an lhash consistency error). Give the return value a single meaning (1 on success, 0 on internal error) and report whether a matching entry was found through a new uint8_t *match output argument, which may be NULL if the caller does not need it. Resolved: https://scan5.scan.coverity.com/#/project-view/65138/10222?selectedIssue=1696969 Signed-off-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Bob Beck <[email protected]> Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Neil Horman <[email protected]> MergeDate: Tue Jul 21 09:24:45 2026 (Merged from https://github.com/openssl/openssl/pull/31974)
* Integrate mfail functionality to fuzz testsJakub Zelenka2026-07-152-94/+165
| | | | | | | | | | | | | | Run the fuzz corpora under mfail in addition to the normal path, so the existing inputs also exercise malloc-failure handling. The fuzz.pl harness sizes the mfail runs to a time budget and, on a leak, bisects down to the exact file and injection point. Adds a budgeted asan/ubsan CI job to run it. Assisted-by: Claude:claude-opus-4-6 Reviewed-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> MergeDate: Wed Jul 15 16:01:43 2026 (Merged from https://github.com/openssl/openssl/pull/30944)
* Fix fuzz test to handle memory failuresJakub Zelenka2026-07-1526-399/+471
| | | | | | | | | | It also fixes related memory leaks and removes extensive asserts that should not be present in fuzzy tests. Reviewed-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> MergeDate: Wed Jul 15 16:01:42 2026 (Merged from https://github.com/openssl/openssl/pull/30944)
* fuzz/provider.c: check evp##_up_ref return value in collect_##evpEugene Syromiatnikov2026-07-021-2/+5
| | | | | | | | | | | | | | | Coverity has reported an unchecked result of an evp##_up_ref call that is checked elsewhere. Rewrite the collect routine to try to do the up_ref first, and then call free if push doesn't succeed. Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1695451 Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1695454 Fixes: f3b988dc2951 "Add provider fuzzer" Reviewed-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Paul Dale <[email protected]> MergeDate: Thu Jul 2 07:26:22 2026 (Merged from https://github.com/openssl/openssl/pull/31792)
* Fix broken hex data by reformattingNorbert Pocs2026-06-032-4990/+626
| | | | | | | | | | | | | | | | The clang format broke some data in hexadecimal format. To make the tool obedient, the trailing comma needs to be removed, then it interpretes the data differently and therefore does not reformat it. The format can then be changed to the correct form. Fixes: https://github.com/openssl/project/issues/1959 Signed-off-by: Norbert Pocs <[email protected]> Reviewed-by: Milan Broz <[email protected]> Reviewed-by: Eugene Syromiatnikov <[email protected]> MergeDate: Wed Jun 3 07:46:14 2026 (Merged from https://github.com/openssl/openssl/pull/31350)
* Fix clang-format: remove leading space from err labelOwenSanzas2026-03-111-1/+1
| | | | | | | Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Kurt Roeckx <[email protected]> MergeDate: Wed Mar 11 20:58:54 2026 (Merged from https://github.com/openssl/openssl/pull/30331)
* Remove unnecessary comments and extra blank lineOwenSanzas2026-03-111-3/+0
| | | | | | | Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Kurt Roeckx <[email protected]> MergeDate: Wed Mar 11 20:58:51 2026 (Merged from https://github.com/openssl/openssl/pull/30331)
* Remove unnecessary caps in key/iv initialization loopsOwenSanzas2026-03-111-2/+2
| | | | | | | | | | | Drop the `&& i < 16` and `&& i < 8` guards that were carried over from the original fixed-size arrays. The loops now fill the entire heap-allocated buffer, with values wrapping naturally via unsigned char. Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Kurt Roeckx <[email protected]> MergeDate: Wed Mar 11 20:58:49 2026 (Merged from https://github.com/openssl/openssl/pull/30331)
* Refactor do_evp_cipher error paths to use goto errOwenSanzas2026-03-111-38/+20
| | | | | | | | | | Initialize key, iv, and ctx to NULL at declaration and consolidate all cleanup into a single err label, as suggested by @npajkovsky. Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Kurt Roeckx <[email protected]> MergeDate: Wed Mar 11 20:58:47 2026 (Merged from https://github.com/openssl/openssl/pull/30331)
* fuzz/provider.c: fix API call order in do_evp_cipher and do_evp_mdOwenSanzas2026-03-111-7/+43
| | | | | | | | | | | | | | | | | | | | | | | Both do_evp_cipher() and do_evp_md() call the parameter-setting function (EVP_CIPHER_CTX_set_params / EVP_MD_CTX_set_params) before initializing the algorithm context (EVP_EncryptInit_ex2 / EVP_DigestInit_ex2). Since the context has no algorithm associated at that point, set_params always returns 0 and the function early-returns, making the cipher and digest paths dead code (~20% of all fuzzer inputs). Fix by swapping the call order so the context is initialized first. Additionally, heap-allocate key/iv buffers sized to the cipher's actual key and IV length, since some ciphers (e.g. DES-EDE3-OFB) require buffers larger than the previous fixed 16/8-byte arrays. Fixes #30281 Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Kurt Roeckx <[email protected]> MergeDate: Wed Mar 11 20:58:44 2026 (Merged from https://github.com/openssl/openssl/pull/30331)
* Copyright year updatesopenssl-machine2026-03-104-4/+4
| | | | | | | Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Eugene Syromiatnikov <[email protected]> MergeDate: Tue Mar 10 14:37:54 2026 Release: yes
* Removes fixed version TLS methods.Frederik Wedel-Heinen2026-02-242-2/+2
| | | | | | | | | | | | Fixes #28343 Reviewed-by: Kurt Roeckx <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Matt Caswell <[email protected]> Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Neil Horman <[email protected]> MergeDate: Tue Feb 24 21:19:39 2026 (Merged from https://github.com/openssl/openssl/pull/30128)
* update fuzz/corpora submoduleNikola Pajkovsky2026-01-191-0/+0
| | | | | | | | Signed-off-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Norbert Pocs <[email protected]> Reviewed-by: Kurt Roeckx <[email protected]> (Merged from https://github.com/openssl/openssl/pull/29670)
* Add an OID for "id-alg-hss-lms-hashsig"slontis2026-01-131-1/+2
| | | | | | | | Reviewed-by: Dmitry Belyavskiy <[email protected]> Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> MergeDate: Tue Jan 13 10:13:35 2026 (Merged from https://github.com/openssl/openssl/pull/29599)
* fuzz/cmp.c: Correct the usages of BIO_new()Jiasheng Jiang2026-01-121-1/+14
| | | | | | | | | | | | | | | Use BIO_free() to free "in" if error occurs to avoid memory leak. Moreover, add check for "out" to avoid NULL pointer dereference. Also replace OPENSSL_assert with return. Fixes: e599d0a ("Add CMP fuzzing to fuzz/cmp.c, including a couple of helpers in crypto/cmp/") Signed-off-by: Jiasheng Jiang <[email protected]> Reviewed-by: Matt Caswell <[email protected]> Reviewed-by: Frederik Wedel-Heinen <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> MergeDate: Mon Jan 12 18:40:14 2026 (Merged from https://github.com/openssl/openssl/pull/27920)
* Add PKCS12 fuzzerHeath Dutton🕴️2026-01-122-2/+82
| | | | | | Reviewed-by: Kurt Roeckx <[email protected]> Reviewed-by: Paul Dale <[email protected]> (Merged from https://github.com/openssl/openssl/pull/29572)
* fuzz/provider.c: Add check for OPENSSL_malloc() to avoid potential NULL ↵Jiasheng Jiang2026-01-101-0/+73
| | | | | | | | | | | | | | pointer dereference Add check for the return value of OPENSSL_malloc() to avoid potential NULL pointer dereference. Fixes: f3b988d ("Add provider fuzzer") Signed-off-by: Jiasheng Jiang <[email protected]> Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Frederik Wedel-Heinen <[email protected]> Reviewed-by: Neil Horman <[email protected]> (Merged from https://github.com/openssl/openssl/pull/27868)
* Update documentation using enable-ssl3 Configure flagsAndrew Dinh2025-12-231-6/+4
| | | | | | | | | Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Viktor Dukhovni <[email protected]> (Merged from https://github.com/openssl/openssl/pull/29338)
* 4.0-POST-CLANG-FORMAT-WEBKIT4.0-POST-CLANG-FORMAT-WEBKITBob Beck2025-12-0925-744/+5376
| | | | | | | Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Nikola Pajkovsky <[email protected]> (Merged from https://github.com/openssl/openssl/pull/29242)
* Reduce Max number of commands handled per fuzzer pass in quic-lcidm.Neil Horman2025-10-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | We've gotten a few recent reports of a hang in the quic-lcidm fuzzer: https://issues.oss-fuzz.com/issues/448510502 It looks pretty straightforward (I think). The fuzzer input buffer is used in this particular case to randomly issue commands to the lcidm hash table (add/delete/query/flush/etc). The loop for the command processing (based on the input buffer), is limited to 10k commands. However the fuzzer will on occasion provide very large buffers (500k) which easily saturate that limit. If the input buffer happens to do something like get biased toward mostly additions, we wind up with a huge hashtable that has to constantly grow and rehash, which we've seen leads to timeouts in the past. Most direct fix I think here, given that this is something of an artificial failure in the fuzzer, is to simply clamp the command limit more. Fixes openssl/project#1664 Reviewed-by: Kurt Roeckx <[email protected]> Reviewed-by: Matt Caswell <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> (Merged from https://github.com/openssl/openssl/pull/28724)
* hashtable: add option to disable RCU locksNikola Pajkovsky2025-10-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | a new config option _no_rcu_ is added into HT_CONFIG. When _no_rcu_ is set then hashtable can be guarded with any other locking primitives, and behives as ordinary hashtable. Also, all the impact of the atomics used internally to the hash table was mitigated. RCU performance # INFO: @ test/lhash_test.c:747 # multithread stress runs 40000 ops in 40.779656 seconds No RCU, guarded with RWLOCK # INFO: @ test/lhash_test.c:747 # multithread stress runs 40000 ops in 36.976926 seconds Signed-off-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Neil Horman <[email protected]> (Merged from https://github.com/openssl/openssl/pull/28677)
* Add util/codespell-check.sh and run itBob Beck2025-09-262-4/+4
| | | | | | | Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Richard Levitte <[email protected]> (Merged from https://github.com/openssl/openssl/pull/28639)
* Copyright year updatesopenssl-machine2025-09-0219-19/+19
| | | | | | Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Saša Nedvědický <[email protected]> Release: yes
* Fix failure checking on rcu_read_lockNeil Horman2025-08-091-1/+2
| | | | | | | | | | | | | | | | | | | | | | during memfail testing: https://github.com/openssl/openssl/actions/runs/16794088536/job/47561223902 We get lots of test failures in ossl_rcu_read_lock. This occurs because we have a few cases in the read lock path that attempt mallocs, which, if they fail, trigger an assert or a silent failure, which isn't really appropriate. We should instead fail gracefully, by informing the caller that the lock failed, like we do for CRYPTO_THREAD_read_lock. Fortunately, these are all internal apis, so we can convert ossl_rcu_read_lock to return an int indicating success/failure, and fail gracefully during the test, rather than hitting an assert abort. Fixes openssl/project#1315 Reviewed-by: Paul Yang <[email protected]> Reviewed-by: Dmitry Belyavskiy <[email protected]> Reviewed-by: Paul Dale <[email protected]> (Merged from https://github.com/openssl/openssl/pull/28195)
* apps, fuzz, providers: use array memory (re)allocation routinesEugene Syromiatnikov2025-08-082-2/+2
| | | | | | | | | | | Co-Authored-by: Alexandr Nedvedicky <[email protected]> Signed-off-by: Eugene Syromiatnikov <[email protected]> Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Matt Caswell <[email protected]> Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Neil Horman <[email protected]> (Merged from https://github.com/openssl/openssl/pull/28059)
* fuzz/dtlsserver.c: Remove incorrect ifdef guardMichael Baentsch2025-07-301-3/+0
| | | | | | | Reviewed-by: Kurt Roeckx <[email protected]> Reviewed-by: Matt Caswell <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> (Merged from https://github.com/openssl/openssl/pull/28102)
* Implement KEMRecipientInfo (RFC9629) in CMSDaniel Van Geest2025-07-301-0/+2
| | | | | | | | | | | | | | | | | Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber). Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt` to allow the user to specify the KDF algorithm and optional user keying material for each recipient. A provider may indicate which RecipientInfo type is supported for a key, otherwise CMS will try to figure it out itself. A provider may also indicate which KDF to use in KEMRecipientInfo if the user hasn't specified one. Reviewed-by: Dmitry Belyavskiy <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> (Merged from https://github.com/openssl/openssl/pull/27681)
* Add HKDF algorithms with fixed digests.Daniel Van Geest2025-07-101-0/+3
| | | | | | | | | | | | | | | Add HKDF-SHA256, HKDF-SHA384 and HKDF-SHA512 which are versions of HKDF that have the digest pre-set. The digest cannot be changed for contexts of these types. RFC 8619 defines algorithm identifiers for these combinations. These algorithm identifiers will be used in future features, e.g. KEMRecipientInfo. Reviewed-by: Shane Lontis <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Paul Dale <[email protected]> (Merged from https://github.com/openssl/openssl/pull/27247)
* fuzz: Silence warnings on Win64 buildsTomas Mraz2025-07-0223-48/+49
| | | | | | Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Neil Horman <[email protected]> (Merged from https://github.com/openssl/openssl/pull/27806)
* Add return check to BIO_new, SSL_CTX_new and EVP_PKEY_newicy172025-06-201-1/+10
| | | | | | Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Matt Caswell <[email protected]> (Merged from https://github.com/openssl/openssl/pull/27829)
* Copyright year updatesopenssl-machine2025-03-122-2/+2
| | | | | | Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Matt Caswell <[email protected]> Release: yes
* fix slh-dsa incorrect prediction of result codeNeil Horman2025-02-251-1/+1
| | | | | | | | | | | | | | | | | The slh_dsa fuzzer predicts failure in EVP_message_sign_init in the event we pass a context_string param of more than 255 bytes. That makes for an accurate prediction, but only if we actually create the param. augment the setting of exepct_rc_init to be determined not only by our allocation of a > 255 byte message, but also on selector bit 1, which determines if we create the parameter at all. Fixes https://oss-fuzz.com/testcase-detail/4807793999937536 Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Paul Dale <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26884)
generated by cgit (git 2.51.2) at 2026-10-25 17:21:47 +0100