Skip to content
  1. Feb 05, 2013
    • Ben Laurie's avatar
      Make CBC decoding constant time. · e5420be6
      Ben Laurie authored
      This patch makes the decoding of SSLv3 and TLS CBC records constant
      time. Without this, a timing side-channel can be used to build a padding
      oracle and mount Vaudenay's attack.
      
      This patch also disables the stitched AESNI+SHA mode pending a similar
      fix to that code.
      
      In order to be easy to backport, this change is implemented in ssl/,
      rather than as a generic AEAD mode. In the future this should be changed
      around so that HMAC isn't in ssl/, but crypto/ as FIPS expects.
      (cherry picked from commit e130841b)
      
      Conflicts:
      	crypto/evp/c_allc.c
      	ssl/ssl_algs.c
      	ssl/ssl_locl.h
      	ssl/t1_enc.c
      e5420be6
    • Ben Laurie's avatar
      Add and use a constant-time memcmp. · 9c00a950
      Ben Laurie authored
      This change adds CRYPTO_memcmp, which compares two vectors of bytes in
      an amount of time that's independent of their contents. It also changes
      several MAC compares in the code to use this over the standard memcmp,
      which may leak information about the size of a matching prefix.
      (cherry picked from commit 2ee79888)
      
      Conflicts:
      	crypto/crypto.h
      	ssl/t1_lib.c
      9c00a950
    • Dr. Stephen Henson's avatar
      Don't try and verify signatures if key is NULL (CVE-2013-0166) · ebc71865
      Dr. Stephen Henson authored
      Add additional check to catch this in ASN1_item_verify too.
      ebc71865
  2. Jan 23, 2013
  3. Jan 22, 2013
  4. Jan 20, 2013
  5. Jan 19, 2013
  6. Jan 13, 2013
  7. Dec 30, 2012
  8. Dec 23, 2012
  9. Dec 10, 2012
    • Dr. Stephen Henson's avatar
      PR: 2888 · 8dad8bc4
      Dr. Stephen Henson authored
      Reported by: Daniel Black <daniel.black@openquery.com>
      
      Support renewing session tickets (backport from HEAD).
      8dad8bc4
  10. Dec 06, 2012
  11. Dec 04, 2012
  12. Dec 03, 2012
  13. Nov 29, 2012
    • Dr. Stephen Henson's avatar
      PR: 2803 · 77ada38d
      Dr. Stephen Henson authored
      Submitted by: jean-etienne.schwartz@bull.net
      
      In OCSP_basic_varify return an error if X509_STORE_CTX_init fails.
      77ada38d
  14. Nov 22, 2012
  15. Nov 21, 2012
    • Dr. Stephen Henson's avatar
      PR: 2908 · 04fde202
      Dr. Stephen Henson authored
      Submitted by: Dmitry Belyavsky <beldmit@gmail.com>
      
      Fix DH double free if parameter generation fails.
      04fde202
  16. Nov 20, 2012
  17. Nov 19, 2012
  18. Nov 18, 2012
    • Dr. Stephen Henson's avatar
      PR: 2880 · fb81e6d3
      Dr. Stephen Henson authored
      Submitted by: "Florian Rüchel" <florian.ruechel@ruhr-uni-bochum.de>
      
      Correctly handle local machine keys in the capi ENGINE.
      fb81e6d3
  19. Oct 16, 2012
  20. Oct 05, 2012
  21. Oct 04, 2012
  22. Sep 24, 2012
  23. Sep 21, 2012
  24. Sep 17, 2012
  25. Sep 11, 2012
  26. Sep 01, 2012
    • Dr. Stephen Henson's avatar
      Don't load GOST ENGINE if it is already loaded. · 0ad9fe2d
      Dr. Stephen Henson authored
      Multiple copies of the ENGINE will cause problems when it is cleaned up as
      the methods are stored in static structures which will be overwritten and
      freed up more than once.
      
      Set static methods to NULL when the ENGINE is freed so it can be reloaded.
      0ad9fe2d
  27. Aug 17, 2012
  28. Aug 13, 2012
  29. Jul 05, 2012
  30. Jul 04, 2012
  31. Jul 01, 2012