Commits · 5b0b0e98cec653ae1e65e2251c3e0fc273945df5 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

19 Feb, 2003 4 commits
- Security fix: Vaudenay timing attack on CBC. · 5b0b0e98
  Richard Levitte authored Feb 19, 2003
```
An advisory will be posted to the web.  Expect a release within the hour.
```
  5b0b0e98
- Make sure the memory allocation routines check for negative sizes · d5234c7b
  Richard Levitte authored Feb 19, 2003
  
  d5234c7b
- Borland C++ Builder 5 complains about unreachable statements. · 77e270d1
  Richard Levitte authored Feb 19, 2003
  
  77e270d1
- Update debub-steve* entries. · c893bffa
  Dr. Stephen Henson authored Feb 19, 2003
  
  c893bffa
18 Feb, 2003 2 commits
- Typo. · 988e8458
  Dr. Stephen Henson authored Feb 18, 2003
  
  988e8458
- Make the no-err option work properly · 758f942b
  Richard Levitte authored Feb 18, 2003
  
  758f942b
16 Feb, 2003 1 commit

Remove "+Olibcalls" option from HPUX targets. · 26e97244

Bodo Möller authored Feb 16, 2003

Reportedly this option is deprecated, and on some systems
"make test" fails if it is included.

PR: 495

26e97244

15 Feb, 2003 5 commits
- Session cache implementations shouldn't have to access SSL_SESSION · 4879ec7b
  Geoff Thorpe authored Feb 15, 2003
```
elements directly, so this missing functionality is required.

PR: 276
```
  4879ec7b
- Declare prototypes for function pointer types, even if they are likely to · b653327d
  Geoff Thorpe authored Feb 15, 2003
```
be cast later on.
```
  b653327d
- Update docs. · 4cadedef
  Dr. Stephen Henson authored Feb 15, 2003
  
  4cadedef
- Single pass processing to cleartext S/MIME signing. · 27068df7
  Dr. Stephen Henson authored Feb 15, 2003
  
  27068df7
- We cache a montgomery form for 'n' if the PUBLIC flag is set, not PRIVATE. · b12753df
  Geoff Thorpe authored Feb 15, 2003
```
Also, I've added handling for other mod_exp calls that were not using any
cached montgomery forms. These cases matter only for special RSA keys (eg.
ones that are missing information) so are unlikely to be used in normal
circumstances.
```
  b12753df
14 Feb, 2003 8 commits
- David Brumley <dbrumley@stanford.edu> noted and corrected a case in the · 79221bc2
  Geoff Thorpe authored Feb 14, 2003
```
verification step of CRT private key operations in the RSA code -
previously no montgomery form was checked or used for 'n', and so it would
be generated on the fly each time. As a result, private key operations are
now a percent or two faster.

Rather than adding this as another repetition of the nearly-identical
montgomery "check for first-use" initialisation code blocks, I've taken
this chance to create a helper function and macro-wrapper to replace them.

PR: 475
```
  79221bc2
- make update · ffa49dc3
  Bodo Möller authored Feb 14, 2003
  
  ffa49dc3
- Add support for IA64. · b7bbac72
  Richard Levitte authored Feb 14, 2003
```
PR: 454
```
  b7bbac72
- Handle krb5 libraries separately and make sure only libssl.so depends · c1269c81
  Richard Levitte authored Feb 14, 2003
```
on it.
```
  c1269c81
- Update linux-mips and linux-mipsel to support threads and shared libraries. · 794a386a
  Richard Levitte authored Feb 14, 2003
```
I also updated the bn_ops field with values taken from OpenBSD-mips.
PR: 498
```
  794a386a
- Pay attention to disabled SSL versions. · e270cf9c
  Richard Levitte authored Feb 14, 2003
```
PR: 500
```
  e270cf9c
- Change no_rmd160 to no_ripemd for consistency. · 7e38616d
  Richard Levitte authored Feb 14, 2003
```
PR: 500
```
  7e38616d
- Make it possible to disable OCSP, the speed application, and the use of sockets. · 85d686e7
  Richard Levitte authored Feb 14, 2003
```
PR: 358
```
  85d686e7
13 Feb, 2003 3 commits

Add full support for -rpath/-R, both in shared libraries and · 2d3de726

Richard Levitte authored Feb 13, 2003

applications, at least on the platforms where it's known how
to do it.

Note: this has only been tested on GNU-based platforms (Linux), and
needs to be tested on all others.  Additionally, it's not yet
supported on the following platforms, for lack of information:

Darwin (MacOS X)
Cygwin
OSF1/Alpha
SVR3
ReliantUNIX

Please help out with testing and the platforms we don't yet know well
enough.

2d3de726

Another long name to deal with · 4989f059
Richard Levitte authored Feb 13, 2003

4989f059
Oh, the destest program did look at the return value... · e4b52ac3
Richard Levitte authored Feb 13, 2003

e4b52ac3

12 Feb, 2003 5 commits

new lock for EC_PRE_COMP structures · abd22c9c
Bodo Möller authored Feb 12, 2003
```
Submitted by: Nils Larsch
```
abd22c9c

Allow EC_GROUP objects to share precomputation for improved memory · ba729265

Bodo Möller authored Feb 12, 2003

efficiency (EC_PRE_COMP objects are now constant once completed).

Extend 'extra_data' API to support arbitrarily many slots (although we
need only one at the moment).

Modify EC internal 'extra_data' API: EC_GROUP_[clear_]free_extra_data
now frees only a single slot (the previous functions are available as
EC_GROUP_[clear_]free_all_extra_data).

Submitted by: Nils Larsch
Reviewed by: Bodo Moeller

ba729265

Adjust DES_cbc_cksum() so the returned value is the same as MIT's · 9ec1d35f
Richard Levitte authored Feb 12, 2003
```
mit_des_cbc_cksum().  The difference was first observed, then verified by
looking at the MIT source.
```
9ec1d35f
Option to disable SSL auto chain build · cf56663f
Dr. Stephen Henson authored Feb 12, 2003

cf56663f
comments · ea513641
Bodo Möller authored Feb 12, 2003

ea513641

11 Feb, 2003 2 commits
- first section is now "Changes between 0.9.7a and 0.9.8", not "... 0.9.7 and 0.9.8" · 8537943e
  Bodo Möller authored Feb 11, 2003
  
  8537943e
- GeneralString support in mini-ASN1 compiler · a8f5b2ed
  Dr. Stephen Henson authored Feb 11, 2003
  
  a8f5b2ed
10 Feb, 2003 2 commits
- Typo. · 33075f22
  Dr. Stephen Henson authored Feb 10, 2003
  
  33075f22
- Make sure memcpy() is properly declared by including string.h. · 28f573a2
  Richard Levitte authored Feb 10, 2003
  
  28f573a2
08 Feb, 2003 3 commits
- fix EC_GROUP_copy for EC_GFp_nist_method() · e2c9c91b
  Bodo Möller authored Feb 08, 2003
```
Submitted by: Nils Larsch
```
  e2c9c91b
- avoid coredump · d42d2d1a
  Bodo Möller authored Feb 08, 2003
```
Submitted by: Nils Larsch
```
  d42d2d1a
- remove debugging leftovers · 65b254e8
  Bodo Möller authored Feb 08, 2003
  
  65b254e8
07 Feb, 2003 1 commit
- comment · 82871eaa
  Bodo Möller authored Feb 07, 2003
  
  82871eaa
06 Feb, 2003 3 commits
- typo · 24893ca9
  Bodo Möller authored Feb 06, 2003
  
  24893ca9
- PKCS#1 has a new RFC, which we do implement · 27a9bf17
  Richard Levitte authored Feb 06, 2003
  
  27a9bf17
- implement fast point multiplication with precomputation · 37c660ff
  Bodo Möller authored Feb 06, 2003
```
Submitted by: Nils Larsch
Reviewed by: Bodo Moeller
```
  37c660ff
05 Feb, 2003 1 commit
- typo in WIN16 section · 772ec413
  Bodo Möller authored Feb 05, 2003
```
Submitted by: Toni Andjelkovic <toni@soth.at>
```
  772ec413