- 15 Feb, 2016 1 commit
-
-
Steve Marquess authored
Reviewed-by:
Stephen Henson <steve@openssl.org>
-
- 04 Jul, 2015 2 commits
-
-
Steve Marquess authored
Reviewed-by:
Rich Salz <rsalz@openssl.org> Reviewed-by:
Stephen Henson <steve@openssl.org>
-
Andy Polyakov authored
Reviewed-by:
Rich Salz <rsalz@openssl.org> Reviewed-by:
Stephen Henson <steve@openssl.org>
-
- 13 May, 2015 12 commits
-
-
Andy Polyakov authored
As for complementary fips.c modification. Goal is to ensure that FIPS_signature does not end up in .bss segment, one guaranteed to be zeroed upon program start-up. One would expect explicitly initialized values to end up in .data segment, but it turned out that values explicitly initialized with zeros can end up in .bss. The modification does not affect program flow, because first byte was the only one of significance [to FINGERPRINT_premain]. Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Andy Polyakov authored
Special note about additional -pie flag in android-armv7. The initial reason for adding it is that Android 5 refuses to execute non-PIE binaries. But what about older systems and previously validated platforms? It should be noted that flag is not used when compiling object code, fipscanister.o in this context, only when linking applications, *supplementary* fips_algvs used during validation procedure. Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Andy Polyakov authored
Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Andy Polyakov authored
Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Andy Polyakov authored
Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Andy Polyakov authored
Normally it would be generated from a perlasm module, but doing so would affect existing armv4cpuid.S, which in turn would formally void previously validated platforms. Hense separate module is generated. Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Andy Polyakov authored
This is achieved by filtering perlasm output through arm-xlate.pl. But note that it's done only if "flavour" argument is not 'void'. As 'void' is default value for other ARM targets, permasm output is not actually filtered on previously validated platforms. Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Andy Polyakov authored
While ARMv7 in general is capable of unaligned access, not all instructions actually are. And trouble is that compiler doesn't seem to differentiate those capable and incapable of unaligned access. As result exceptions could be observed in xts128.c and ccm128.c modules. Contemporary Linux kernels handle such exceptions by performing requested operation and resuming execution as is if it succeeded. While on iOS exception is fatal. Correct solution is to let STRICT_ALIGNMENT be on all ARM platforms, but doing so is in formal conflict with FIPS maintenance policy. Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Andy Polyakov authored
Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Andy Polyakov authored
Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Andy Polyakov authored
Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Andy Polyakov authored
Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
- 24 Oct, 2014 2 commits
-
-
Dr. Stephen Henson authored
Reviewed-by:
Tim Hudson <tjh@openssl.org> Reviewed-by:
Steve Marquess <marquess@openssl.org>
-
Dr. Stephen Henson authored
X9.31 tests need to look in files for '9.31' RSA-PSS tests may contain additonal text as well as "salt len: n". We now just look at the start of a filename for a match. Separate ECDSA2 test list. Reorder test to handle new formats: for example PQGVer for DSA2 can be detected based on file format but if this fails revert to PQGVER. For future debugging add a --debug-detect option which prints out more details of the test detection including the first few lines of each request file. Reviewed-by:
Tim Hudson <tjh@openssl.org> Reviewed-by:
Steve Marquess <marquess@openssl.org>
-
- 11 Jul, 2014 1 commit
-
-
Dr. Stephen Henson authored
Dual EC DRBG removal now accepted for 2.0.8 onwards.
-
- 12 May, 2014 2 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
Revert Dual EC DRBG removal commit as it was not accepted for 2.0.7 version of the module. This reverts commit 200f249b.
-
- 16 Dec, 2013 6 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Andy Polyakov authored
(cherry picked from commit 1a9d60d2)
-
Dr. Stephen Henson authored
(cherry picked from commit 964eaad7)
-
Dr. Stephen Henson authored
-
- 10 Apr, 2013 1 commit
-
-
Dr. Stephen Henson authored
-
- 14 Oct, 2012 1 commit
-
-
Dr. Stephen Henson authored
-
- 04 Oct, 2012 2 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- 23 May, 2012 2 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- 18 Jan, 2012 2 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- 03 Jan, 2012 3 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- 12 Dec, 2011 2 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- 10 Dec, 2011 1 commit
-
-
Dr. Stephen Henson authored
some versions of Windows.
-