- 13 Jun, 2018 1 commit
-
-
Matt Caswell authored
Keegan Ryan (NCC Group) has demonstrated a side channel attack on an ECDSA signature operation. During signing the signer calculates: s:= k^-1 * (m + r * priv_key) mod order The addition operation above provides a sufficient signal for a flush+reload attack to derive the private key given sufficient signature operations. As a mitigation (based on a suggestion from Keegan) we add blinding to the operation so that: s := k^-1 * blind^-1 (blind * m + blind * r * priv_key) mod order Since this attack is a localhost side channel only no CVE is assigned. Reviewed-by:Rich Salz <rsalz@openssl.org>
-
- 24 May, 2018 1 commit
-
-
Matt Caswell authored
When signing or verifying a file using pkeyutl the input is supposed to be a hash. Some algorithms sanity check the length of the input, while others don't and silently truncate. To avoid accidents we check that the length of the input looks sane. Reviewed-by:
-
- 22 May, 2018 1 commit
-
-
Kurt Roeckx authored
Because TLS 1.3 sends more non-application data records some clients run into problems because they don't expect SSL_read() to return and set SSL_ERROR_WANT_READ after processing it. This can cause problems for clients that use blocking I/O and use select() to see if data is available. It can be cleared using SSL_CTX_clear_mode(). Reviewed-by:Matt Caswell <matt@openssl.org> GH: #6260
-
- 12 May, 2018 1 commit
-
-
Richard Levitte authored
Fixes #4716 Reviewed-by:
-
- 09 May, 2018 4 commits
-
-
Nicola Tuveri authored
Reviewed-by:
Richard Levitte <levitte@openssl.org> Reviewed-by:
Andy Polyakov <appro@openssl.org> Reviewed-by:
-
Billy Brumley authored
Reviewed-by:
-
Billy Brumley authored
Reviewed-by:
-
Billy Brumley authored
* EC_POINT_mul is now responsible for constant time point multiplication (for single fixed or variable point multiplication, when the scalar is in the range [0,group_order), so we need to strip the nonce padding from ECDSA. * Entry added to CHANGES * Updated EC_POINT_mul documentation - Integrate existing EC_POINT_mul and EC_POINTs_mul entries in the manpage to reflect the shift in constant-time expectations when performing a single fixed or variable point multiplication; - Add documentation to ec_method_st to reflect the updated "contract" between callers and implementations of ec_method_st.mul. Reviewed-by:
-
- 19 Apr, 2018 1 commit
-
-
A. Schulze authored
CLA: trivial Reviewed-by:
Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com> Reviewed-by:
-
- 17 Apr, 2018 1 commit
-
-
Richard Levitte authored
Reviewed-by:
-
- 05 Apr, 2018 1 commit
-
-
Matt Caswell authored
When libssl is initialised it will attempt to load any config file. This ensures any system_default configuration (as per https://github.com/openssl/openssl/pull/4848 ) is used. Reviewed-by:
-
- 04 Apr, 2018 1 commit
-
-
Bernd Edlinger authored
Reviewed-by:
-
- 03 Apr, 2018 2 commits
-
-
Matt Caswell authored
Where a CMS detached signature is used with text content the text goes through a canonicalisation process first prior to signing or verifying a signature. This process strips trailing space at the end of lines, converts line terminators to CRLF and removes additional trailing line terminators at the end of a file. A bug in the canonicalisation process meant that some characters, such as form-feed, were incorrectly treated as whitespace and removed. This is contrary to the specification (RFC5485). This fix could mean that detached text data signed with an earlier version of OpenSSL 1.1.0 may fail to verify using the fixed version, or text data signed with a fixed OpenSSL may fail to verify with an earlier version of OpenSSL 1.1.0. A workaround is to only verify the canonicalised text data and use the "-binary" flag (for the "cms" command line application) or set the SMIME_BINARY/PKCS7_BINARY/CMS_BINARY flags (if using CMS_verify()). Reviewed-by:
Tim Hudson <tjh@openssl.org> Reviewed-by:
-
Matt Caswell authored
Fix the last release version number in CHANGES Reviewed-by:
-
- 29 Mar, 2018 1 commit
-
-
Dr. Matthias St. Pierre authored
The RAND_DRBG API was added in PR #5462 and modified by PR #5547. This commit adds the corresponding documention. Reviewed-by:
Kurt Roeckx <kurt@roeckx.be> Reviewed-by:
-
- 27 Mar, 2018 1 commit
-
-
Matt Caswell authored
Reviewed-by:
-
- 26 Mar, 2018 1 commit
-
-
Rich Salz authored
Reviewed-by:
-
- 19 Mar, 2018 1 commit
-
-
Matt Caswell authored
Reviewed-by:
-
- 14 Mar, 2018 1 commit
-
-
Matt Caswell authored
Reviewed-by:
-
- 07 Mar, 2018 1 commit
-
-
Viktor Dukhovni authored
With "-multi" the OCSP responder forks multiple child processes, and respawns them as needed. This can be used as a long-running service, not just a demo program. Therefore the index file is automatically re-read when changed. The responder also now optionally times out client requests. Reviewed-by:
-
- 05 Mar, 2018 1 commit
-
-
Matt Caswell authored
Reviewed-by:
-
- 04 Mar, 2018 1 commit
-
-
Rich Salz authored
Reviewed-by:
-
- 02 Mar, 2018 1 commit
-
-
Matt Caswell authored
Reviewed-by:
-
- 23 Feb, 2018 1 commit
-
-
Richard Levitte authored
[extended tests] Reviewed-by:
-
- 13 Feb, 2018 3 commits
-
-
Matt Caswell authored
Reviewed-by: -
Dr. Matthias St. Pierre authored
Removed mixed tabs (converted tabs to eight spaces) Reviewed-by:
-
Dr. Matthias St. Pierre authored
Reviewed-by:
-
- 12 Feb, 2018 1 commit
-
-
Matt Caswell authored
Fix a typo in INSTALL and update the link in CHANGES Reviewed-by:
-
- 07 Feb, 2018 1 commit
-
-
Matt Caswell authored
[extended tests] Reviewed-by:
-
- 29 Jan, 2018 1 commit
-
-
Richard Levitte authored
Reviewed-by:
-
- 28 Jan, 2018 1 commit
-
-
Richard Levitte authored
Reviewed-by:
-
- 23 Jan, 2018 1 commit
-
-
Pauli authored
Support added for these two digests, available only via the EVP interface. Reviewed-by:
-
- 07 Jan, 2018 2 commits
-
-
Richard Levitte authored
Reviewed-by:
-
Rich Salz authored
Reviewed-by:
-
- 02 Jan, 2018 1 commit
-
-
Daniel Bevenius authored
Similar to commit 17b60280 ( "Remove extra `the` in SSL_SESSION_set1_id.pod"), this commit removes typos where additional 'the' have been added. Reviewed-by:
-
- 12 Dec, 2017 1 commit
-
-
Richard Levitte authored
Reviewed-by:
-
- 07 Dec, 2017 1 commit
-
-
Richard Levitte authored
Reviewed-by:
-
- 06 Dec, 2017 1 commit
-
-
Matt Caswell authored
Reviewed-by:
-
- 21 Nov, 2017 1 commit
-
-
Paul Yang authored
* Introduce RSA_generate_multi_prime_key to generate multi-prime RSA private key. As well as the following functions: RSA_get_multi_prime_extra_count RSA_get0_multi_prime_factors RSA_get0_multi_prime_crt_params RSA_set0_multi_prime_params RSA_get_version * Support EVP operations for multi-prime RSA * Support ASN.1 operations for multi-prime RSA * Support multi-prime check in RSA_check_key_ex * Support multi-prime RSA in apps/genrsa and apps/speed * Support multi-prime RSA manipulation functions * Test cases and documentation are added * CHANGES is updated Reviewed-by:Bernd Edlinger <bernd.edlinger@hotmail.de> (Merged from https://github.com/openssl/openssl/pull/4241)
-
- 12 Nov, 2017 1 commit
-
-
Josh Soref authored
Around 138 distinct errors found and fixed; thanks! Reviewed-by:
-
