Andy Polyakov
84c9b6edb1
Throw in SHAmix test vectors.
2005-05-26 22:17:55 +00:00
Andy Polyakov
e609c04994
Rename fips/sha1 to fips/sha.
2005-05-26 21:29:10 +00:00
Dr. Stephen Henson
53cfa36d37
Allow zero length messages and make format look more like samples.
2005-05-26 18:48:24 +00:00
Dr. Stephen Henson
b10bd63df3
FIPS SHA* test for new format.
2005-05-26 18:31:53 +00:00
Bodo Möller
44a287747f
make sure DSA signing exponentiations really are constant-time
2005-05-26 04:40:42 +00:00
Richard Levitte
20a413620c
Synchronise with Unix build.
2005-05-24 03:50:47 +00:00
Richard Levitte
e99b588f1b
Typo correction
2005-05-24 03:27:18 +00:00
Richard Levitte
48a3f2818e
When _XOPEN_SOURCE is defined, make sure it's defined to 500. Required in
...
http://www.opengroup.org/onlinepubs/007908799/xsh/compilation.html .
Notified by David Wolfe <dwolfe5272@yahoo.com>
2005-05-21 17:39:48 +00:00
Andy Polyakov
fc0e014ca3
fips_check_rsa update.
2005-05-19 22:29:55 +00:00
Dr. Stephen Henson
8baaeba881
Place #ifdef OPENSSL_FIPS round the SHA-XXX functions in evp.h so mkdef.pl
...
knows about it.
2005-05-17 19:48:42 +00:00
Andy Polyakov
150ebacd8a
SHA-XXX are available in FIPS context only in 0.9.7.
2005-05-17 06:57:14 +00:00
Bodo Möller
bedcd5c0bb
fix memory leak (BIO_free_all needs pointer to first BIO)
...
PR: 1070
2005-05-17 05:52:18 +00:00
Bodo Möller
fd86c390eb
Change wording for BN_mod_exp_mont_consttime() entry
2005-05-16 19:14:38 +00:00
Dr. Stephen Henson
63453c025f
Remove redundant test. Add new SHAXXX algorithms to mkdef.pl, update
...
symbol info.
2005-05-16 17:52:32 +00:00
Bodo Möller
ecb1445ce2
Implement fixed-window exponentiation to mitigate hyper-threading
...
timing attacks.
BN_FLG_EXP_CONSTTIME requests this algorithm, and this done by default for
RSA/DSA/DH private key computations unless
RSA_FLAG_NO_EXP_CONSTTIME/DSA_FLAG_NO_EXP_CONSTTIME/
DH_FLAG_NO_EXP_CONSTTIME is set.
Submitted by: Matthew D Wood
Reviewed by: Bodo Moeller
2005-05-16 01:26:08 +00:00
Richard Levitte
64c32bf9eb
Synchronise with the Unixly build.
2005-05-15 09:20:15 +00:00
Dr. Stephen Henson
775e82c58d
Fix from HEAD.
2005-05-14 12:59:05 +00:00
Dr. Stephen Henson
db5cbd8954
Fixes from HEAD.
2005-05-13 00:23:02 +00:00
Dr. Stephen Henson
c6012b252d
Fix from HEAD.
2005-05-12 23:13:40 +00:00
Dr. Stephen Henson
e1ff593dcb
Typo.
2005-05-12 17:27:48 +00:00
Bodo Möller
c4d9c13a31
fix msg_callback() arguments for SSL 2.0 compatible client hello
...
(previous revision got this wrong)
2005-05-12 06:24:26 +00:00
Bodo Möller
00c1c6cb28
PR:Don't use the SSL 2.0 Client Hello format if SSL 2.0 is disabled
...
with the SSL_OP_NO_SSLv2 option.
2005-05-11 18:26:08 +00:00
Bodo Möller
973fbfe3a3
make update
2005-05-11 17:49:50 +00:00
Dr. Stephen Henson
9fc1d3f4c4
Allow AES CFB1 ciphers in FIPS mode.
2005-05-11 16:28:33 +00:00
Dr. Stephen Henson
765863f0bf
Stop warnings.
2005-05-11 00:35:55 +00:00
Andy Polyakov
cbd72088ec
Tidy up an error code.
2005-05-10 22:57:21 +00:00
Andy Polyakov
8aabdf3505
Fix fips_hmactest.c.
2005-05-10 22:54:44 +00:00
Nils Larsch
fcec494072
use 'p' as conversion specifier for printf to avoid truncation of
...
pointers on 64 bit platforms. Patch supplied by Daniel Gryniewicz
via Mike Frysinger <vapier@gentoo.org>.
PR: 1064
2005-05-10 11:57:19 +00:00
Nils Larsch
88f62fb98a
improve command line argument checking
...
PR: 1061
2005-05-10 09:52:39 +00:00
Andy Polyakov
69488fa929
Add algorithm selection command-line option to fips_hmactest
...
[and fix typo in fips.h].
2005-05-09 22:35:35 +00:00
Andy Polyakov
b0367dde56
Comply with optimization manual (no data should share cache-line with code).
2005-05-09 21:41:47 +00:00
Andy Polyakov
ad93095f16
Missing declaration.
2005-05-09 20:47:42 +00:00
Andy Polyakov
82b47955fc
Void new FIPS tests if configured without FIPS.
2005-05-09 19:34:34 +00:00
Andy Polyakov
95477d36f6
Add FIPS HMAC power-up test.
2005-05-09 19:22:14 +00:00
Dr. Stephen Henson
eb798944b3
Stop warnings in asserts.
...
Add support for SHA-XXX in RSA tests.
Make fips_check_rsa work for key lengths > 2048 bits.
2005-05-08 23:48:18 +00:00
Andy Polyakov
b1ca6f2f3d
Eliminate "statement with no effect" warning when OPENSSL_assert macro
...
is used with constant assertion.
2005-05-08 19:52:13 +00:00
Andy Polyakov
102e6481ae
Remove SSE2 option from fips sha512 [for now].
2005-05-08 08:25:14 +00:00
Andy Polyakov
97949ccfc8
Move SHA1 selftest input vectors to writable segment.
2005-05-07 22:33:29 +00:00
Andy Polyakov
44e9bc81eb
Add FIPS RNG tests.
...
Submitted by: Steve Marquess
2005-05-07 22:06:40 +00:00
Andy Polyakov
4b27a9feb3
Backport SHA-[224|256|384|512] from HEAD to FIPS.
2005-05-07 17:21:34 +00:00
Dr. Stephen Henson
0649b6f0f2
Add FIPS rsa sign test program.
2005-05-07 12:50:28 +00:00
Dr. Stephen Henson
389ff2e01f
FIPS RSA sign test.
2005-05-07 12:11:37 +00:00
Andy Polyakov
8cf1846857
Downsync from HEAD.
...
PR: 1059
2005-05-07 08:53:06 +00:00
Dr. Stephen Henson
2dab26339d
FIPS RSA verify test.
2005-05-05 21:46:30 +00:00
Richard Levitte
239e31f896
A few more fingerprints...
2005-05-05 06:39:10 +00:00
Dr. Stephen Henson
4bf3222d96
Delete unused variables.
2005-05-04 22:02:32 +00:00
Andy Polyakov
3380c4561e
Backport of rc4-x86_64 from HEAD.
2005-05-04 16:12:07 +00:00
cvs2svn
3f2f0c8892
This commit was manufactured by cvs2svn to create branch
...
'OpenSSL_0_9_7-stable'.
2005-05-04 14:51:39 +00:00
Andy Polyakov
0ee883650d
Commentary update motivating code update in 0.9.7.
2005-05-04 14:51:38 +00:00
Andy Polyakov
70cf309517
x86_64 assembler translator update.
2005-05-04 08:42:47 +00:00