Skip to content
  1. Sep 07, 2019
    • Bernd Edlinger's avatar
      Remove x86/x86_64 BSAES and AES_ASM support · 87bea655
      Bernd Edlinger authored
      
      
      This leaves VPAES and AESNI support.
      The VPAES performance is comparable but BSAES is not
      completely constant time. There are table lookups
      using secret key data in AES_set_encrypt/decrypt_key
      and in ctr mode short data uses the non-constant
      time AES_encrypt function instead of bit-slicing.
      Furthermore the AES_ASM is by far outperformed
      by recent GCC versions.
      Since BSAES calls back to AES_ASM for short
      data blocks the performance on those is also
      worse than the pure software implementaion.
      
      Fixes: #9640
      
      Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
      (Merged from https://github.com/openssl/openssl/pull/9675)
      87bea655
  2. Aug 12, 2019
    • Richard Levitte's avatar
      Configurations/unit-Makefile.tmpl: Don't clean away dotted files · e17a712e
      Richard Levitte authored
      
      
      A local 'make clean' did some sweeping removals of files execpt for
      the .git directory.  This is a little too sweeping, as other dotted
      files might be cleaned away if they happen to match the pattern that's
      searched for.
      
      An example is a symlink .dir-locals.el that would keep disappearing if
      you build in the source tree and do a make clean...
      
      So we change this to leave all dotted files alone.  Our builds do not
      produce such files anyway, so this is a harmless (or rather, less
      harmful) change.
      
      Reviewed-by: default avatarPaul Dale <paul.dale@oracle.com>
      (Merged from https://github.com/openssl/openssl/pull/9573)
      
      (cherry picked from commit 853094dbe15a49b334f3488fc99a557abf021c09)
      e17a712e
  3. Jul 31, 2019
  4. Jul 25, 2019
    • Richard Levitte's avatar
      Fix default installation paths on mingw · 54aa9d51
      Richard Levitte authored
      
      
      Mingw config targets assumed that resulting programs and libraries are
      installed in a Unix-like environment and the default installation
      prefix was therefore set to '/usr/local'.
      
      However, mingw programs are installed in a Windows environment, and
      the installation directories should therefore have Windows defaults,
      i.e. the same kind of defaults as the VC config targets.
      
      A difficulty is, however, that a "cross compiled" build can't figure
      out the system defaults from environment the same way it's done when
      building "natively", so we have to fall back to hard coded defaults in
      that case.
      
      Tests can still be performed when cross compiled on a non-Windows
      platform, since all tests only depend on the source and build
      directory, and otherwise relies on normal local paths.
      
      CVE-2019-1552
      
      Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
      (Merged from https://github.com/openssl/openssl/pull/9400)
      54aa9d51
  5. Jun 04, 2019
  6. May 28, 2019
  7. May 27, 2019
  8. May 02, 2019
  9. Feb 28, 2019
  10. Feb 27, 2019
  11. Feb 19, 2019
  12. Feb 13, 2019
  13. Feb 05, 2019
  14. Feb 04, 2019
  15. Jan 31, 2019
  16. Jan 28, 2019
  17. Jan 04, 2019
  18. Dec 12, 2018
  19. Dec 05, 2018
  20. Nov 27, 2018
  21. Nov 24, 2018
  22. Nov 23, 2018
  23. Nov 19, 2018
  24. Nov 13, 2018
  25. Nov 09, 2018
  26. Oct 31, 2018
  27. Oct 29, 2018
  28. Oct 28, 2018
  29. Oct 25, 2018
    • Richard Levitte's avatar
      Windows: Produce a static version of the public libraries, always · 85299451
      Richard Levitte authored
      
      
      When building shared libraries on Windows, we had a clash between
      'libcrypto.lib' the static routine library and 'libcrypto.lib' the
      import library.
      
      We now change it so the static versions of our libraries get '_static'
      appended to their names.  These will never get installed, but can
      still be used for our internal purposes, such as internal tests.
      
      When building non-shared, the renaming mechanism doesn't come into
      play.  In that case, the static libraries 'libcrypto.lib' and
      'libssl.lib' are installed, just as always.
      
      Fixes #7492
      
      Reviewed-by: default avatarTim Hudson <tjh@openssl.org>
      (Merged from https://github.com/openssl/openssl/pull/7496)
      
      (cherry picked from commit b3023ced)
      85299451
  30. Oct 21, 2018
  31. Oct 19, 2018
  32. Oct 17, 2018
  33. Sep 21, 2018