Commits · 3bc178199418967e39d1d576206af8b0fc9b9052 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

May 31, 2005
- Synchronise with the Unix build... · 3bc17819
  Richard Levitte authored May 31, 2005
  
  3bc17819
- Preliminary support for X9.31 RSA key generation for FIPS. · 485bcc9c
  Dr. Stephen Henson authored May 31, 2005
```
Included prime derivation, random prime generation, test program and
new option to genrsa.
```
  485bcc9c
May 30, 2005
- Synchronise with Unixly build · bb1bbb32
  Richard Levitte authored May 30, 2005
  
  bb1bbb32
May 29, 2005
- make update · 4bd7bc97
  Dr. Stephen Henson authored May 29, 2005
  
  4bd7bc97
- Stop warnings. · 4d433992
  Dr. Stephen Henson authored May 29, 2005
  
  4d433992
- We have some source with \r\n as line ends. DEC C informs about that, · c3d03b70
  Richard Levitte authored May 29, 2005
```
and I really can't be bothered...
```
  c3d03b70
May 28, 2005
- Add X9.31 signature support, mainly for FIPS140. Add new option to rsautl and · e4c2c550
  Dr. Stephen Henson authored May 28, 2005
```
include options to use X9.31 in tests.
```
  e4c2c550
- Add PSS support to tests. · 570357b7
  Dr. Stephen Henson authored May 28, 2005
  
  570357b7
May 27, 2005
- Add PSS support. Minimal at this stage for FIPS140. · 7044d328
  Dr. Stephen Henson authored May 27, 2005
  
  7044d328
- Error checking. · 35d7cc81
  Dr. Stephen Henson authored May 27, 2005
  
  35d7cc81
- Use BN_with_flags() in a cleaner way. · 80790d89
  Bodo Möller authored May 27, 2005
```
Complete previous change:
Constant time DSA [sync with mainstream].
```
  80790d89
- Constant-time RSA [sync with mainstream]. · 7bad200b
  Andy Polyakov authored May 27, 2005
```
Submitted by: bodo
```
  7bad200b
- Constant time DH [sync with mainstream]. · 6b6f64da
  Andy Polyakov authored May 27, 2005
```
Submitted by: bodo
```
  6b6f64da
- Constant-time DSA signing [sync with mainstream]. · 31def5ae
  Andy Polyakov authored May 27, 2005
```
Submitted by: bodo
```
  31def5ae
May 26, 2005
- fips/sha1 -> fips/sha remains. · 713407a5
  Andy Polyakov authored May 26, 2005
  
  713407a5
- Remove fips/sha1/*. · db733335
  Andy Polyakov authored May 26, 2005
  
  db733335
- Throw in SHAmix test vectors. · 84c9b6ed
  Andy Polyakov authored May 26, 2005
  
  84c9b6ed
- Rename fips/sha1 to fips/sha. · e609c049
  Andy Polyakov authored May 26, 2005
  
  e609c049
- Allow zero length messages and make format look more like samples. · 53cfa36d
  Dr. Stephen Henson authored May 26, 2005
  
  53cfa36d
- FIPS SHA* test for new format. · b10bd63d
  Dr. Stephen Henson authored May 26, 2005
  
  b10bd63d
- make sure DSA signing exponentiations really are constant-time · 44a28774
  Bodo Möller authored May 26, 2005
  
  44a28774
May 24, 2005
- Synchronise with Unix build. · 20a41362
  Richard Levitte authored May 24, 2005
  
  BEN_FIPS_TEST_8
  
  20a41362
- Typo correction · e99b588f
  Richard Levitte authored May 24, 2005
  
  e99b588f
May 21, 2005
- When _XOPEN_SOURCE is defined, make sure it's defined to 500. Required in · 48a3f281
  Richard Levitte authored May 21, 2005
```
http://www.opengroup.org/onlinepubs/007908799/xsh/compilation.html.

Notified by David Wolfe <dwolfe5272@yahoo.com>
```
  48a3f281
May 19, 2005
- fips_check_rsa update. · fc0e014c
  Andy Polyakov authored May 19, 2005
  
  fc0e014c
May 17, 2005
- Place #ifdef OPENSSL_FIPS round the SHA-XXX functions in evp.h so mkdef.pl · 8baaeba8
  Dr. Stephen Henson authored May 17, 2005
```
knows about it.
```
  8baaeba8
- SHA-XXX are available in FIPS context only in 0.9.7. · 150ebacd
  Andy Polyakov authored May 17, 2005
  
  150ebacd
- fix memory leak (BIO_free_all needs pointer to first BIO) · bedcd5c0
  Bodo Möller authored May 17, 2005
```
PR: 1070
```
  bedcd5c0
May 16, 2005
- Change wording for BN_mod_exp_mont_consttime() entry · fd86c390
  Bodo Möller authored May 16, 2005
  
  fd86c390
- Remove redundant test. Add new SHAXXX algorithms to mkdef.pl, update · 63453c02
  Dr. Stephen Henson authored May 16, 2005
```
symbol info.
```
  63453c02
- Implement fixed-window exponentiation to mitigate hyper-threading · ecb1445c
  Bodo Möller authored May 16, 2005
```
timing attacks.

BN_FLG_EXP_CONSTTIME requests this algorithm, and this done by default for
RSA/DSA/DH private key computations unless
RSA_FLAG_NO_EXP_CONSTTIME/DSA_FLAG_NO_EXP_CONSTTIME/
DH_FLAG_NO_EXP_CONSTTIME is set.

Submitted by: Matthew D Wood
Reviewed by: Bodo Moeller
```
  ecb1445c
May 15, 2005
- Synchronise with the Unixly build. · 64c32bf9
  Richard Levitte authored May 15, 2005
  
  64c32bf9
May 14, 2005
- Fix from HEAD. · 775e82c5
  Dr. Stephen Henson authored May 14, 2005
  
  775e82c5
May 13, 2005
- Fixes from HEAD. · db5cbd89
  Dr. Stephen Henson authored May 13, 2005
  
  db5cbd89
May 12, 2005
- Fix from HEAD. · c6012b25
  Dr. Stephen Henson authored May 12, 2005
  
  c6012b25
- Typo. · e1ff593d
  Dr. Stephen Henson authored May 12, 2005
  
  e1ff593d
- fix msg_callback() arguments for SSL 2.0 compatible client hello · c4d9c13a
  Bodo Möller authored May 12, 2005
```
(previous revision got this wrong)
```
  c4d9c13a
May 11, 2005
- PR:Don't use the SSL 2.0 Client Hello format if SSL 2.0 is disabled · 00c1c6cb
  Bodo Möller authored May 11, 2005
```
with the SSL_OP_NO_SSLv2 option.
```
  00c1c6cb
- make update · 973fbfe3
  Bodo Möller authored May 11, 2005
  
  973fbfe3
- Allow AES CFB1 ciphers in FIPS mode. · 9fc1d3f4
  Dr. Stephen Henson authored May 11, 2005
  
  9fc1d3f4