openssl/crypto
Ben Laurie 7c770d572a Add and use a constant-time memcmp.
This change adds CRYPTO_memcmp, which compares two vectors of bytes in
an amount of time that's independent of their contents. It also changes
several MAC compares in the code to use this over the standard memcmp,
which may leak information about the size of a matching prefix.
(cherry picked from commit 2ee798880a)
2013-02-06 14:16:55 +00:00
..
aes x86_64 assembly pack: make Windows build more robust. 2013-01-22 22:27:28 +01:00
asn1 Make "make depend" work on MacOS out of the box. 2013-01-19 14:14:30 +00:00
bf
bio Improve WINCE support. 2013-01-19 21:23:13 +01:00
bn x86_64 assembly pack: keep making Windows build more robust. 2013-02-02 19:54:59 +01:00
buffer correct error code 2012-04-22 13:31:09 +00:00
camellia x86_64 assembly pack: make Windows build more robust. 2013-01-22 22:27:28 +01:00
cast
cmac fix reset fix 2012-04-11 15:05:07 +00:00
cms Don't include comp.h in cmd_cd.c if OPENSSL_NO_COMP set 2013-01-23 01:09:38 +00:00
comp
conf New config module for string tables. This can be used to add new 2012-10-22 13:05:54 +00:00
des Update support for Intel compiler: add linux-x86_64-icc and fix problems. 2012-11-28 13:05:13 +00:00
dh Version skew reduction: trivia (I hope). 2012-06-03 22:00:21 +00:00
dsa Version skew reduction: trivia (I hope). 2012-06-03 22:00:21 +00:00
dso dso/dso_win32.c: fix compiler warning. 2012-12-18 18:19:54 +00:00
ec Fix EC_KEY initialization race. 2012-10-05 20:50:11 +00:00
ecdh Fix EC_KEY initialization race. 2012-10-05 20:50:11 +00:00
ecdsa Fix EC_KEY initialization race. 2012-10-05 20:50:11 +00:00
engine make depend 2012-11-19 13:18:09 +00:00
err Don't include comp.h if no-comp set. 2013-01-20 02:34:25 +00:00
evp Make "make depend" work on MacOS out of the box. 2013-01-19 14:14:30 +00:00
hmac Fix some warnings caused by __owur. Temporarily (I hope) remove the more 2011-11-14 00:36:10 +00:00
idea
jpake
krb5
lhash
md2
md4 Fix some clang warnings. 2013-01-13 21:04:39 +00:00
md5 x86_64 assembly pack: make Windows build more robust. 2013-01-22 22:27:28 +01:00
mdc2
modes x86_64 assembly pack: make Windows build more robust. 2013-01-22 22:27:28 +01:00
objects Fix some clang warnings. 2013-01-13 21:04:39 +00:00
ocsp revert OCSP_basic_verify changes: they aren't needed now we support partial chain verification and can pass verify options to ocsp utility 2012-12-20 18:51:00 +00:00
pem make update 2011-12-27 14:46:03 +00:00
perlasm AES for SPARC T4: add XTS, reorder subroutines to improve TLB locality. 2012-11-24 21:55:23 +00:00
pkcs7 Submitted by: Markus Friedl <mfriedl@gmail.com> 2012-03-22 15:44:51 +00:00
pkcs12 Version skew reduction: trivia (I hope). 2012-06-03 22:00:21 +00:00
pqueue
rand PR: 2786 2012-08-22 22:43:23 +00:00
rc2
rc4 x86_64 assembly pack: make Windows build more robust. 2013-01-22 22:27:28 +01:00
rc5 Update support for Intel compiler: add linux-x86_64-icc and fix problems. 2012-11-28 13:05:13 +00:00
ripemd Fix some clang warnings. 2013-01-13 21:04:39 +00:00
rsa Add and use a constant-time memcmp. 2013-02-06 14:16:55 +00:00
seed seed.c: incredibly enough seed.c can fail to compile on Solaris with certain 2012-02-26 21:52:43 +00:00
sha x86_64 assembly pack: make Windows build more robust. 2013-01-22 22:27:28 +01:00
srp Version skew reduction: trivia (I hope). 2012-06-03 22:00:21 +00:00
stack Add DTLS-SRTP. 2011-11-15 22:59:20 +00:00
store
threads
ts Rename Suite B functions for consistency. 2012-08-03 15:58:15 +00:00
txt_db
ui PR: 2717 2012-02-11 23:41:19 +00:00
whrlpool x86_64 assembly pack: make Windows build more robust. 2013-01-22 22:27:28 +01:00
x509 Make "make depend" work on MacOS out of the box. 2013-01-19 14:14:30 +00:00
x509v3 Portability fix: use BIO_snprintf and pick up strcasecmp alternative 2012-12-26 23:51:56 +00:00
.cvsignore
alphacpuid.pl
arm_arch.h arm_arch.h: allow to specify __ARM_ARCH__ elsewhere. 2011-11-09 20:08:44 +00:00
armcap.c typo 2011-10-24 13:23:51 +00:00
armv4cpuid.S armv4cpuid.S, armv4-gf2m.pl: make newest code compilable by older assembler. 2011-11-05 13:07:18 +00:00
c64xpluscpuid.pl C64x+ assembly pack: improve EABI support. 2012-11-28 13:19:10 +00:00
cpt_err.c
cryptlib.c Add and use a constant-time memcmp. 2013-02-06 14:16:55 +00:00
cryptlib.h
crypto-lib.com Add the missing modules for Camellia, as well as dh_rfc5114 and evp_cnf. 2012-07-05 13:19:06 +00:00
crypto.h Add and use a constant-time memcmp. 2013-02-06 14:16:55 +00:00
cversion.c
ebcdic.c
ebcdic.h
ex_data.c
fips_err.h Check for selftest failure in various places. 2011-10-22 17:24:27 +00:00
fips_ers.c
ia64cpuid.S
install-crypto.com
lock.c
LPdir_nyi.c
LPdir_unix.c
LPdir_vms.c
LPdir_win.c
LPdir_win32.c
LPdir_wince.c
Makefile Remove o_init.o special case from Makefile: this doesn't work. 2011-10-12 17:27:08 +00:00
md32_common.h Update support for Intel compiler: add linux-x86_64-icc and fix problems. 2012-11-28 13:05:13 +00:00
mem.c Version skew reduction: trivia (I hope). 2012-06-03 22:00:21 +00:00
mem_clr.c
mem_dbg.c
o_dir.c
o_dir.h
o_dir_test.c
o_fips.c
o_init.c remove unnecessary attempt to automatically call OPENSSL_init 2012-07-01 22:25:04 +00:00
o_str.c Improve WINCE support. 2013-01-19 21:23:13 +01:00
o_str.h
o_time.c Reorganise parameters for OPENSSL_gmtime_diff. 2012-11-21 14:13:20 +00:00
o_time.h Reorganise parameters for OPENSSL_gmtime_diff. 2012-11-21 14:13:20 +00:00
opensslconf.h.in
opensslv.h
ossl_typ.h
pariscid.pl
ppccap.c ppccap.c: fix typo. 2012-11-10 20:27:18 +00:00
ppccpuid.pl ppccpuid.pl: branch hints in OPENSSL_cleanse impact small block performance 2012-04-27 20:17:45 +00:00
s390xcap.c
s390xcpuid.S
sparc_arch.h Support for SPARC T4 MONT[MUL|SQR] instructions. 2012-11-17 10:34:11 +00:00
sparccpuid.S sparcv9cap.c: add SPARC-T4 feature detection. 2012-09-23 20:29:03 +00:00
sparcv9cap.c Support for SPARC T4 MONT[MUL|SQR] instructions. 2012-11-17 10:34:11 +00:00
symhacks.h Harmonise symhacks.h in this branch with lower versions. 2012-07-05 13:17:44 +00:00
thr_id.c Fix warning. 2012-09-17 17:21:58 +00:00
uid.c
vms_rms.h
x86_64cpuid.pl x86_64 assembly pack: make Windows build more robust. 2013-01-22 22:27:28 +01:00
x86cpuid.pl Extend OPENSSL_ia32cap_P with extra word to accomodate AVX2 capability. 2012-11-17 19:04:15 +00:00