- 06 Feb, 2013 2 commits
-
-
Ben Laurie authored
This patch makes the decoding of SSLv3 and TLS CBC records constant time. Without this, a timing side-channel can be used to build a padding oracle and mount Vaudenay's attack. This patch also disables the stitched AESNI+SHA mode pending a similar fix to that code. In order to be easy to backport, this change is implemented in ssl/, rather than as a generic AEAD mode. In the future this should be changed around so that HMAC isn't in ssl/, but crypto/ as FIPS expects. (cherry picked from commit e130841b)
-
Ben Laurie authored
This change adds CRYPTO_memcmp, which compares two vectors of bytes in an amount of time that's independent of their contents. It also changes several MAC compares in the code to use this over the standard memcmp, which may leak information about the size of a matching prefix. (cherry picked from commit 2ee79888)
-
- 04 Feb, 2013 1 commit
-
-
Dr. Stephen Henson authored
encrypted premaster secret value.
-
- 02 Feb, 2013 1 commit
-
-
Andy Polyakov authored
PR: 2963 and a number of others
-
- 24 Jan, 2013 2 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- 23 Jan, 2013 2 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- 22 Jan, 2013 6 commits
-
-
Andy Polyakov authored
PR: 2963 and a number of others
-
Andy Polyakov authored
-
Andy Polyakov authored
-
Andy Polyakov authored
-
Andy Polyakov authored
-
Andy Polyakov authored
-
- 21 Jan, 2013 1 commit
-
-
Ben Laurie authored
-
- 20 Jan, 2013 1 commit
-
-
Dr. Stephen Henson authored
-
- 19 Jan, 2013 13 commits
-
-
Andy Polyakov authored
Submitted by: Pierre Delaage
-
Ben Laurie authored
-
Andy Polyakov authored
-
Ben Laurie authored
-
Ben Laurie authored
-
Ben Laurie authored
-
Andy Polyakov authored
Submitted by: Seguei Leontiev PR: 2821
-
Andy Polyakov authored
Submitted by: Serguei Leontiev PR: 2821
-
Andy Polyakov authored
-
Ben Laurie authored
-
Ben Laurie authored
-
Ben Laurie authored
-
Andy Polyakov authored
-
- 17 Jan, 2013 1 commit
-
-
Dr. Stephen Henson authored
-
- 13 Jan, 2013 1 commit
-
-
Ben Laurie authored
-
- 12 Jan, 2013 1 commit
-
-
Ben Laurie authored
-
- 07 Jan, 2013 1 commit
-
-
Dr. Stephen Henson authored
-
- 06 Jan, 2013 3 commits
-
-
Ben Laurie authored
-
Ben Laurie authored
-
Dr. Stephen Henson authored
-
- 30 Dec, 2012 1 commit
-
-
Dr. Stephen Henson authored
-
- 29 Dec, 2012 2 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- 26 Dec, 2012 1 commit
-
-
Dr. Stephen Henson authored
definitions from e_os.h
-