Commits · e990b4f838eaa649a1849d25db5be2236632fe34 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Feb 13, 2011
- Remove dependency of dsa_sign.o and dsa_vrf.o: new functions FIPS_dsa_sig_new · e990b4f8
  Dr. Stephen Henson authored Feb 13, 2011
```
and FIPS_dsa_sig_free, reimplment DSA_SIG_new and DSA_SIG_free from ASN1
library.
```
  e990b4f8
Feb 12, 2011
- Change FIPS source and utilities to use the "FIPS_" names directly · e47af46c
  Dr. Stephen Henson authored Feb 12, 2011
```
instead of using regular OpenSSL API names.
```
  e47af46c
- Make no-ec2m work on Win32 build. Add nexprotoneg support too. · 36246be9
  Dr. Stephen Henson authored Feb 12, 2011
  
  36246be9
- Disable some functions in headers with no-ec2m · c9a90645
  Dr. Stephen Henson authored Feb 12, 2011
  
  c9a90645
- New option to disable characteristic two fields in EC code. · b3310161
  Dr. Stephen Henson authored Feb 12, 2011
  
  b3310161
- dso_dlfcn.c: make it work on Tru64 4.0. · afb41913
  Andy Polyakov authored Feb 12, 2011
```
PR: 2316
```
  afb41913
- Configure: engage assembler in Android target. · 874b0bd9
  Andy Polyakov authored Feb 12, 2011
  
  874b0bd9
- gcm128.c: make it work with no-sse2. · a6d915e0
  Andy Polyakov authored Feb 12, 2011
  
  a6d915e0
Feb 11, 2011
- Add Makefile.fips. · 975138ed
  Dr. Stephen Henson authored Feb 11, 2011
  
  975138ed
- New "fispcanisteronly" build option: only build fipscanister.o and · 30b56225
  Dr. Stephen Henson authored Feb 11, 2011
```
associated utilities. This functionality will be used by the validated
tarball.
```
  30b56225
- Make Windows build work with GCM. · dc527a62
  Dr. Stephen Henson authored Feb 11, 2011
  
  dc527a62
- In FIPS mode only use "Generation by Testing Candidates" equivalent. · ed12c2f7
  Dr. Stephen Henson authored Feb 11, 2011
  
  ed12c2f7
- Return security strength for supported DSA parameters: will be used · 16a7fcc4
  Dr. Stephen Henson authored Feb 11, 2011
```
later.
```
  16a7fcc4
- Free keys if DSA pairwise error. · a1a5885b
  Dr. Stephen Henson authored Feb 11, 2011
  
  a1a5885b
Feb 10, 2011
- x86gas.pl: make data_short work on legacy systems. · f84a8ea5
  Andy Polyakov authored Feb 10, 2011
  
  f84a8ea5
- xts128.c: initial draft. · 01be5db6
  Andy Polyakov authored Feb 10, 2011
  
  01be5db6
- Disable FIPS restrictions when doing GCM testing. · a4113c52
  Dr. Stephen Henson authored Feb 10, 2011
  
  a4113c52
Feb 09, 2011
- Add GCM IV generator. Add some FIPS restrictions to GCM. Update fips_gcmtest. · b3d8022e
  Dr. Stephen Henson authored Feb 09, 2011
  
  b3d8022e
Feb 08, 2011
- ccm128.c: initialize ctx->block (what I was smoking?). · 632d83f0
  Andy Polyakov authored Feb 08, 2011
  
  632d83f0
- ccm128.c: initial draft. · d3fad7cb
  Andy Polyakov authored Feb 08, 2011
  
  d3fad7cb
- Equally experimental encrypt side for fips_gcmtest. Currently this uses IVs · f4bfe97f
  Dr. Stephen Henson authored Feb 08, 2011
```
in the request file need to update it to generate IVs once we have an IV
generator in place.
```
  f4bfe97f
- Sync with 1.0.1 branch. · c415adc2
  Bodo Möller authored Feb 08, 2011
```
(CVE-2011-0014 OCSP stapling fix has been applied to HEAD as well.)
```
  c415adc2
- Set values to NULL after freeing them. · 9afe9509
  Dr. Stephen Henson authored Feb 08, 2011
  
  9afe9509
- Experimental incomplete AES GCM algorithm test program. · 9dd346c9
  Dr. Stephen Henson authored Feb 08, 2011
  
  9dd346c9
- OCSP stapling fix (OpenSSL 0.9.8r/1.0.0d) · 9770924f
  Bodo Möller authored Feb 08, 2011
```
Submitted by: Neel Mehta, Adam Langley, Bodo Moeller
```
  9770924f
- Link GCM into FIPS module. Check return value in EVP gcm. · f4001a0d
  Dr. Stephen Henson authored Feb 08, 2011
  
  f4001a0d
- Synchronize with 1.0.0 branch · cea73f9d
  Bodo Möller authored Feb 08, 2011
  
  cea73f9d
Feb 07, 2011
- gcm128.c: add boundary condition checks. · 1f2502eb
  Andy Polyakov authored Feb 07, 2011
  
  1f2502eb
- Initial *very* experimental EVP support for AES-GCM. Note: probably very · bdaa5415
  Dr. Stephen Henson authored Feb 07, 2011
```
broken and subject to change.
```
  bdaa5415
- Add CRYPTO_gcm128_tag() function to retrieve the tag. · fd3dbc1d
  Dr. Stephen Henson authored Feb 07, 2011
  
  fd3dbc1d
- Use 0 not -1 (since type is size_t) for finalisation argument to do_cipher: · d45087c6
  Dr. Stephen Henson authored Feb 07, 2011
```
the NULL value for the input buffer is sufficient to notice this case.
```
  d45087c6
- Typo. · 634b6618
  Dr. Stephen Henson authored Feb 07, 2011
  
  634b6618
- New flags EVP_CIPH_FLAG_CUSTOM_CIPHER in cipher structures if an underlying · 3da0ca79
  Dr. Stephen Henson authored Feb 07, 2011
```
cipher handles all cipher symantics itself.
```
  3da0ca79
- Fix memory leak. · f9678b8b
  Dr. Stephen Henson authored Feb 07, 2011
  
  f9678b8b
- Use default ASN1 if flag set. · 83e9c362
  Dr. Stephen Henson authored Feb 07, 2011
  
  83e9c362
Feb 06, 2011
- gcm128.c: allow multiple calls to CRYPTO_gcm128_aad. · b68c1315
  Andy Polyakov authored Feb 06, 2011
  
  b68c1315
- gcm128.c: fix bug in OPENSSL_SMALL_FOOTPRINT decrypt. · 68e2586b
  Andy Polyakov authored Feb 06, 2011
```
PR: 2432
Submitted by: Michael Heyman
```
  68e2586b
- Fix duplicate code and typo. · 61f477f4
  Dr. Stephen Henson authored Feb 06, 2011
  
  61f477f4
Feb 04, 2011
- Remove unneeded functions, make some functions and variables static. · 7e951160
  Dr. Stephen Henson authored Feb 04, 2011
  
  7e951160
Feb 03, 2011
- Add FIPS support to the WIN32 build system. · 06b433ac
  Dr. Stephen Henson authored Feb 03, 2011
  
  06b433ac