Andy Polyakov
a75a52a43e
bsaes-x86_64.pl: add CBC decrypt and engage it in e_aes.c.
2011-10-30 12:15:56 +00:00
Richard Levitte
ada35f9c2c
Add missing algorithms to disable, and in particular, disable
...
EC_NISTP_64_GCC_128 by default, as GCC isn't currently supported on
VMS. Synchronise with Unix.
2011-10-30 11:46:07 +00:00
Richard Levitte
6aaa942d53
Teach mkshared.com to have a look for disabled algorithms in opensslconf.h
2011-10-30 11:40:54 +00:00
Andy Polyakov
0933887112
bn_exp.c: fix corner case in new constant-time code.
...
Submitted by: Emilia Kasper
2011-10-29 19:25:13 +00:00
Andy Polyakov
b08259cdfe
bsaes-x86_64.pl: optimize InvMixColumns.
2011-10-29 11:56:21 +00:00
Andy Polyakov
28507577b1
bsaes-x86_64.pl: add decryption procedure (with unoptimized reference
...
InvMixColumns).
2011-10-29 11:47:20 +00:00
Dr. Stephen Henson
930e801214
PR: 2628
...
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve
Send alert instead of assertion failure for incorrectly formatted DTLS
fragments.
2011-10-27 13:06:52 +00:00
Dr. Stephen Henson
fe0e302dff
PR: 2628
...
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve
Fix for ECC keys and DTLS.
2011-10-27 13:01:33 +00:00
Dr. Stephen Henson
32cf5baeae
PR: 2632
...
Submitted by: emmanuel.azencot@bull.net
Reviewed by: steve
Return -1 immediately if not affine coordinates as BN_CTX has not been
set up.
2011-10-26 16:43:34 +00:00
Dr. Stephen Henson
45906fe63b
Use correct tag for SRP username.
2011-10-25 12:51:22 +00:00
Dr. Stephen Henson
482cdf2489
typo
2011-10-24 13:23:51 +00:00
Andy Polyakov
f2784994ec
e_aes.c: fold even aesni_ccm_cipher.
2011-10-24 06:00:06 +00:00
Andy Polyakov
507b0d9d38
e_aes.c: prevent potential DoS in aes_gcm_tls_cipher.
2011-10-23 22:58:40 +00:00
Andy Polyakov
181fbb77f3
cryptlib.c: remove stdio dependency in Windows fipscanister.lib.
2011-10-23 19:41:00 +00:00
Dr. Stephen Henson
f59a5d6079
No need for custom flag in XTS mode: block length is 1.
2011-10-23 17:06:28 +00:00
Andy Polyakov
005cdace99
fips_canister.c: harmonize fingerprinting for all Windows, CE or not.
2011-10-23 15:17:30 +00:00
Andy Polyakov
8b8d2dccf1
config: in cross-compile case interrogate cross-compiler, not host, work
...
around sub-shell limitation.
2011-10-23 15:12:37 +00:00
Dr. Stephen Henson
5fd722600b
Check for selftest failure in various places.
2011-10-22 17:24:27 +00:00
Andy Polyakov
5b198d5eea
x86gas.pl: relax .init segment alignment.
2011-10-22 10:49:52 +00:00
Andy Polyakov
16190a71ff
mk1mk.pl: cleanup engines' handling and make fips build work on WIN64I.
2011-10-21 19:34:48 +00:00
Dr. Stephen Henson
8d742dd561
Update error codes.
2011-10-21 11:46:16 +00:00
Andy Polyakov
0cde099f86
fips.c: remove preprocessor artefact.
2011-10-21 06:03:45 +00:00
Dr. Stephen Henson
dfe9a47519
fix (?) AVX clearing
2011-10-21 01:57:37 +00:00
Dr. Stephen Henson
af4bfa151c
Check for uninitialised DRBG_CTX and don't free up default DRBG_CTX.
2011-10-21 00:12:53 +00:00
Andy Polyakov
3b5930442d
fips.c: x86[_64] capability masking.
2011-10-20 21:03:09 +00:00
Andy Polyakov
033a25cef5
armcap.c: auto-setup processor capability vector.
2011-10-20 20:52:26 +00:00
Dr. Stephen Henson
43760a2cf0
Fix error codes.
2011-10-20 13:56:01 +00:00
Andy Polyakov
5f132a0356
fips/fips_[canister|premain].c: make it work with VC6 and add sentinels
...
even to code segments.
2011-10-20 12:09:13 +00:00
Andy Polyakov
d528caa725
sha1-mips.pl: fix typo.
2011-10-20 08:39:29 +00:00
Andy Polyakov
d22870bc00
Drain unused MacOS directory.
2011-10-20 08:28:06 +00:00
Dr. Stephen Henson
4ff2999e88
Add "nopass" for empty password too.
2011-10-19 23:23:35 +00:00
Dr. Stephen Henson
5e4eb9954b
add authentication parameter to FIPS_module_mode_set
2011-10-19 22:34:53 +00:00
Andy Polyakov
227a822ab6
vxworks-mips: unify and add assembler.
2011-10-19 21:49:20 +00:00
Andy Polyakov
a9cf0b81fa
Remove superseded MIPS assembler modules.
2011-10-19 21:42:21 +00:00
Andy Polyakov
552e412abc
fips_canister.c: more cross-compiler platfroms verified.
2011-10-19 21:05:53 +00:00
Andy Polyakov
3ee4d41fe1
arm_arch.h: add missing pre-defined macro, __ARM_ARCH_5TEJ__.
2011-10-19 18:57:03 +00:00
Bodo Möller
f391750205
"make update" (partial)
2011-10-19 15:29:14 +00:00
Bodo Möller
e5641d7f05
BN_BLINDING multi-threading fix.
...
Submitted by: Emilia Kasper (Google)
2011-10-19 14:59:27 +00:00
Dr. Stephen Henson
6d4c65835d
Typo (?)
2011-10-19 12:05:08 +00:00
Dr. Stephen Henson
0a7fcce8df
Build fipscanister.o only by default. Utility build now needs
...
make build_tests
2011-10-19 11:47:21 +00:00
Dr. Stephen Henson
6b0ac883d0
Recognise new option.
2011-10-19 11:44:25 +00:00
Bodo Möller
7d8bb91233
Fix indentation
2011-10-19 09:24:22 +00:00
Bodo Möller
e0d6132b8c
Fix warnings.
...
Also, use the common Configure mechanism for enabling/disabling the 64-bit ECC code.
2011-10-19 08:59:53 +00:00
Dr. Stephen Henson
e3fed9f41e
Update premain fingerprint.
2011-10-18 22:11:11 +00:00
Bodo Möller
3e00b4c9db
Improve optional 64-bit NIST-P224 implementation, and add NIST-P256 and
...
NIST-P521. (Now -DEC_NISTP_64_GCC_128 enables all three of these;
-DEC_NISTP224_64_GCC_128 no longer works.)
Submitted by: Google Inc.
2011-10-18 19:43:16 +00:00
Andy Polyakov
4c3a7a0263
fipssyms.h: assign alias to newly introduced bn_gather5.
2011-10-18 18:59:33 +00:00
Andy Polyakov
10db9f9f48
fips/*: extend fipsro segmenting to all _MSC_VER builds (including WinCE).
2011-10-18 18:56:09 +00:00
Andy Polyakov
9f0d2e1464
fips_enc.c: assign minimal block size to bad_cipher [to avoid arithmetic
...
exceptions in TLS layer].
2011-10-18 18:52:05 +00:00
Andy Polyakov
5d77cdc591
engines/.cvsignore: stop whining about e_padlock-*.s.
2011-10-18 13:39:47 +00:00
Andy Polyakov
07904e0c6c
evp/e_aes.c: fold AES-NI modes that heavily rely on indirect calls
...
(trade 2% small-block performance), engage bit-sliced AES in GCM.
2011-10-18 13:37:26 +00:00