Commits · 44a287747f8594c0ab517526190c7d8af6f8572b · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

May 26, 2005
- make sure DSA signing exponentiations really are constant-time · 44a28774
  Bodo Möller authored May 26, 2005
  
  44a28774
May 24, 2005
- Synchronise with Unix build. · 20a41362
  Richard Levitte authored May 24, 2005
  
  BEN_FIPS_TEST_8
  
  20a41362
- Typo correction · e99b588f
  Richard Levitte authored May 24, 2005
  
  e99b588f
May 21, 2005
- When _XOPEN_SOURCE is defined, make sure it's defined to 500. Required in · 48a3f281
  Richard Levitte authored May 21, 2005
```
http://www.opengroup.org/onlinepubs/007908799/xsh/compilation.html.

Notified by David Wolfe <dwolfe5272@yahoo.com>
```
  48a3f281
May 19, 2005
- fips_check_rsa update. · fc0e014c
  Andy Polyakov authored May 19, 2005
  
  fc0e014c
May 17, 2005
- Place #ifdef OPENSSL_FIPS round the SHA-XXX functions in evp.h so mkdef.pl · 8baaeba8
  Dr. Stephen Henson authored May 17, 2005
```
knows about it.
```
  8baaeba8
- SHA-XXX are available in FIPS context only in 0.9.7. · 150ebacd
  Andy Polyakov authored May 17, 2005
  
  150ebacd
- fix memory leak (BIO_free_all needs pointer to first BIO) · bedcd5c0
  Bodo Möller authored May 17, 2005
```
PR: 1070
```
  bedcd5c0
May 16, 2005
- Change wording for BN_mod_exp_mont_consttime() entry · fd86c390
  Bodo Möller authored May 16, 2005
  
  fd86c390
- Remove redundant test. Add new SHAXXX algorithms to mkdef.pl, update · 63453c02
  Dr. Stephen Henson authored May 16, 2005
```
symbol info.
```
  63453c02
- Implement fixed-window exponentiation to mitigate hyper-threading · ecb1445c
  Bodo Möller authored May 16, 2005
```
timing attacks.

BN_FLG_EXP_CONSTTIME requests this algorithm, and this done by default for
RSA/DSA/DH private key computations unless
RSA_FLAG_NO_EXP_CONSTTIME/DSA_FLAG_NO_EXP_CONSTTIME/
DH_FLAG_NO_EXP_CONSTTIME is set.

Submitted by: Matthew D Wood
Reviewed by: Bodo Moeller
```
  ecb1445c
May 15, 2005
- Synchronise with the Unixly build. · 64c32bf9
  Richard Levitte authored May 15, 2005
  
  64c32bf9
May 14, 2005
- Fix from HEAD. · 775e82c5
  Dr. Stephen Henson authored May 14, 2005
  
  775e82c5
May 13, 2005
- Fixes from HEAD. · db5cbd89
  Dr. Stephen Henson authored May 13, 2005
  
  db5cbd89
May 12, 2005
- Fix from HEAD. · c6012b25
  Dr. Stephen Henson authored May 12, 2005
  
  c6012b25
- Typo. · e1ff593d
  Dr. Stephen Henson authored May 12, 2005
  
  e1ff593d
- fix msg_callback() arguments for SSL 2.0 compatible client hello · c4d9c13a
  Bodo Möller authored May 12, 2005
```
(previous revision got this wrong)
```
  c4d9c13a
May 11, 2005
- PR:Don't use the SSL 2.0 Client Hello format if SSL 2.0 is disabled · 00c1c6cb
  Bodo Möller authored May 11, 2005
```
with the SSL_OP_NO_SSLv2 option.
```
  00c1c6cb
- make update · 973fbfe3
  Bodo Möller authored May 11, 2005
  
  973fbfe3
- Allow AES CFB1 ciphers in FIPS mode. · 9fc1d3f4
  Dr. Stephen Henson authored May 11, 2005
  
  9fc1d3f4
- Stop warnings. · 765863f0
  Dr. Stephen Henson authored May 11, 2005
  
  765863f0
May 10, 2005
- Tidy up an error code. · cbd72088
  Andy Polyakov authored May 10, 2005
  
  cbd72088
- Fix fips_hmactest.c. · 8aabdf35
  Andy Polyakov authored May 10, 2005
  
  8aabdf35
- use 'p' as conversion specifier for printf to avoid truncation of · fcec4940
  Nils Larsch authored May 10, 2005
```
pointers on 64 bit platforms. Patch supplied by Daniel Gryniewicz
via Mike Frysinger <vapier@gentoo.org>.

PR: 1064
```
  fcec4940
- improve command line argument checking · 88f62fb9
  Nils Larsch authored May 10, 2005
```
PR: 1061
```
  88f62fb9
May 09, 2005
- Add algorithm selection command-line option to fips_hmactest · 69488fa9
  Andy Polyakov authored May 09, 2005
```
[and fix typo in fips.h].
```
  69488fa9
- Comply with optimization manual (no data should share cache-line with code). · b0367dde
  Andy Polyakov authored May 09, 2005
  
  b0367dde
- Missing declaration. · ad93095f
  Andy Polyakov authored May 09, 2005
  
  ad93095f
- Void new FIPS tests if configured without FIPS. · 82b47955
  Andy Polyakov authored May 09, 2005
  
  82b47955
- Add FIPS HMAC power-up test. · 95477d36
  Andy Polyakov authored May 09, 2005
  
  95477d36
May 08, 2005
- Stop warnings in asserts. · eb798944
  Dr. Stephen Henson authored May 08, 2005
```
Add support for SHA-XXX in RSA tests.

Make fips_check_rsa work for key lengths > 2048 bits.
```
  eb798944
- Eliminate "statement with no effect" warning when OPENSSL_assert macro · b1ca6f2f
  Andy Polyakov authored May 08, 2005
```
is used with constant assertion.
```
  b1ca6f2f
- Remove SSE2 option from fips sha512 [for now]. · 102e6481
  Andy Polyakov authored May 08, 2005
  
  102e6481
May 07, 2005
- Move SHA1 selftest input vectors to writable segment. · 97949ccf
  Andy Polyakov authored May 07, 2005
  
  97949ccf
- Add FIPS RNG tests. · 44e9bc81
  Andy Polyakov authored May 07, 2005
```
Submitted by: Steve Marquess
```
  44e9bc81
- Backport SHA-[224|256|384|512] from HEAD to FIPS. · 4b27a9fe
  Andy Polyakov authored May 07, 2005
  
  4b27a9fe
- Add FIPS rsa sign test program. · 0649b6f0
  Dr. Stephen Henson authored May 07, 2005
  
  0649b6f0
- FIPS RSA sign test. · 389ff2e0
  Dr. Stephen Henson authored May 07, 2005
  
  389ff2e0
- Downsync from HEAD. · 8cf18468
  Andy Polyakov authored May 07, 2005
```
PR: 1059
```
  8cf18468
May 05, 2005
- FIPS RSA verify test. · 2dab2633
  Dr. Stephen Henson authored May 05, 2005
  
  2dab2633