wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/crypto
History
Geoff Thorpe 81d1998e09 Currently, RSA code, when using no padding scheme, simply checks that input 
does not contain more bytes than the RSA modulus 'n' - it does not check
that the input is strictly *less* than 'n'. Whether this should be the
case or not is open to debate - however, due to security problems with
returning miscalculated CRT results, the 'rsa_mod_exp' implementation in
rsa_eay.c now performs a public-key exponentiation to verify the CRT result
and in the event of an error will instead recalculate and return a non-CRT
(more expensive) mod_exp calculation. As the mod_exp of 'I' is equivalent
to the mod_exp of 'I mod n', and the verify result is automatically between
0 and n-1 inclusive, the verify only matches the input if 'I' was less than
'n', otherwise even a correct CRT calculation is only congruent to 'I' (ie.
they differ by a multiple of 'n'). Rather than rejecting correct
calculations and doing redundant and slower ones instead, this changes the
equality check in the verification code to a congruence check.
2001-07-20 15:16:10 +00:00
..
asn1 Patches from Vern Staats <staatsvr@asc.hpc.mil> to get Kerberos 5 in 2001-07-09 21:46:58 +00:00
bf Remove unnecessary casts. 2001-07-06 22:06:08 +00:00
bio Let's include cryptlib.h *before* things like NO_SYSLOG are tested or 2001-07-02 20:43:01 +00:00
bn This fixes "Spurious test failures on IRIX?" reported in April. Apparently 2001-06-22 19:17:42 +00:00
buffer Instead of telling both 'make' and the user that ranlib 2001-03-09 14:01:42 +00:00
cast Make sure OPENSSL_SYS_... is defined when we need it. 2001-04-03 14:03:19 +00:00
comp Instead of telling both 'make' and the user that ranlib 2001-03-09 14:01:42 +00:00
conf Modify apps to use NCONF code instead of old CONF code. 2001-06-28 11:41:50 +00:00
des Use ui_compat.h to get the password reading functions. 2001-05-14 11:54:36 +00:00
dh In {RSA,DSA,DH}_new_method(x) need to increase the reference 2001-06-23 23:07:34 +00:00
dsa DSA verification should insist that r and s are in the allowed range. 2001-06-26 09:48:17 +00:00
dso Use one address consistently. 2001-07-05 10:20:07 +00:00
ec For consistency with the terminology used in my SAC2001 paper, avoid 2001-07-10 11:41:29 +00:00
engine Update nCipher header with more liberal licence. 2001-07-04 12:26:39 +00:00
err Translate into valid C (don't call functions with wrong prototypes). 2001-06-25 10:09:55 +00:00
evp A better compromise between encrypt and decrypt (but why isn't it as fast 2001-07-09 21:00:36 +00:00
hmac Instead of telling both 'make' and the user that ranlib 2001-03-09 14:01:42 +00:00
idea Instead of telling both 'make' and the user that ranlib 2001-03-09 14:01:42 +00:00
krb5 Delete extra ; 2001-07-11 22:54:24 +00:00
lhash Correct const-ness. 2001-07-08 11:42:38 +00:00
md2 Change all calls to low level digest routines in the library and 2001-06-19 22:30:40 +00:00
md4 Change all calls to low level digest routines in the library and 2001-06-19 22:30:40 +00:00
md5 Change all calls to low level digest routines in the library and 2001-06-19 22:30:40 +00:00
mdc2 Change all calls to low level digest routines in the library and 2001-06-19 22:30:40 +00:00
objects Add support for MS CSP Name PKCS#12 attribute. 2001-06-11 00:43:20 +00:00
ocsp In ocsp_match_issuerid() we are passed the CA that signed the responder 2001-07-11 22:42:20 +00:00
pem Instead of telling both 'make' and the user that ranlib 2001-03-09 14:01:42 +00:00
perlasm Accept digits in symbol names. Spotted by Brian Havard <brianh@kheldar.apana.org.au> 2001-06-04 16:34:31 +00:00
pkcs7 Fix couple of memory leaks in PKCS7_dataDecode(). 2001-04-05 10:19:12 +00:00
pkcs12 Change all calls to low level digest routines in the library and 2001-06-19 22:30:40 +00:00
rand make update 2001-07-10 21:00:37 +00:00
rc2 Instead of telling both 'make' and the user that ranlib 2001-03-09 14:01:42 +00:00
rc4 Change all calls to low level digest routines in the library and 2001-06-19 22:30:40 +00:00
rc5 Constification. 2001-07-06 21:35:00 +00:00
rijndael Add yet another (still empty) source code file that I forgot. 2001-03-05 20:31:49 +00:00
ripemd Change all calls to low level digest routines in the library and 2001-06-19 22:30:40 +00:00
rsa Currently, RSA code, when using no padding scheme, simply checks that input 2001-07-20 15:16:10 +00:00
sha Change all calls to low level digest routines in the library and 2001-06-19 22:30:40 +00:00
stack make update 2001-07-10 21:00:37 +00:00
threads Use new-style system-id macros everywhere possible. I hope I haven't 2001-02-20 08:13:47 +00:00
txt_db Instead of telling both 'make' and the user that ranlib 2001-03-09 14:01:42 +00:00
ui One forgotten function. 2001-07-11 07:10:43 +00:00
x509 Handle empty X509_NAME in printing routines. 2001-06-26 12:04:35 +00:00
x509v3 Modify apps to use NCONF code instead of old CONF code. 2001-06-28 11:41:50 +00:00
.cvsignore Always use buildinf.h, which now includes the mk1mfinf.h data. 1999-07-29 12:57:23 +00:00
cpt_err.c Make all configuration macros available for application by making 2001-02-19 16:06:34 +00:00
cryptlib.c Don't set pointer if add_lock_callback used. 2001-06-19 00:04:57 +00:00
cryptlib.h e_os.h does not belong with the exported headers. Do not put it there 2001-02-22 14:45:02 +00:00
crypto-lib.com New internal function OPENSSL_gmtime, which is intended to do the same 2001-05-16 08:44:09 +00:00
crypto.h Add a general user interface API. This is designed to replace things 2001-05-06 23:19:37 +00:00
cversion.c Add SSLEAY_DIR argument code for SSLeay_version. 2001-01-10 15:15:36 +00:00
ebcdic.c DEC C on VMS is pedantic by definition. 2001-02-20 13:24:23 +00:00
ebcdic.h EBCDIC support. 2000-02-01 02:21:16 +00:00
ex_data.c Comment correction. 2000-12-18 09:18:22 +00:00
install.com ui was forgotten when installing libcrypto and it's headers. 2001-05-14 12:22:27 +00:00
Makefile.ssl 'make update' 2001-06-05 20:32:36 +00:00
md32_common.h Make EVP_Digest*() routines return a value. 2001-03-08 14:04:22 +00:00
mem.c No functional change, but slightly improved code clarity. 2001-01-10 19:26:34 +00:00
mem_dbg.c Correct const-ness. 2001-07-08 11:42:38 +00:00
o_time.c Use one address consistently. 2001-07-05 10:20:07 +00:00
o_time.h Use one address consistently. 2001-07-05 10:20:07 +00:00
opensslconf.h.in Spelling corrected. 2001-03-02 10:57:54 +00:00
opensslv.h In version numbers, there is just one "M" nybble. 2001-07-10 10:04:26 +00:00
symhacks.h Make more short aliases for symbols that are longer than 31 2001-05-14 11:58:08 +00:00
tmdiff.c Code for better build under Darwin (MacOS X). 2001-03-07 10:04:00 +00:00
tmdiff.h Remove NOPROTO definitions and error code comments. 1999-04-26 16:43:10 +00:00
uid.c User OPENSSL_UNISTD instead of <unistd.h>. 2001-04-26 08:26:18 +00:00