wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/crypto
History
Dr. Stephen Henson 8186c00ef3 Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and 
continue with symmetric decryption process to avoid leaking timing
information to an attacker.

Thanks to Ivan Nestlerode <inestlerode@us.ibm.com> for discovering
this issue. (CVE-2012-0884)
2012-03-12 16:27:50 +00:00
..
aes aes-sparcv9.pl: clean up regexp [from HEAD]. 2012-01-11 15:32:08 +00:00
asn1 PR: 2742 2012-02-29 14:01:53 +00:00
bf Remove hard coded ecdsaWithSHA1 hack in ssl routines and check for RSA 2011-08-14 13:47:30 +00:00
bio PR: 2755 2012-03-06 13:47:27 +00:00
bn bn_nist.c: make new optimized code dependent on BN_LLONG [from HEAD]. 2012-02-02 07:46:19 +00:00
buffer make update (1.0.1-stable) 2011-03-23 00:06:04 +00:00
camellia make depend 2011-09-16 23:15:22 +00:00
cast make depend 2011-09-16 23:15:22 +00:00
cmac Backport PSS signature support from HEAD. 2011-10-09 23:13:50 +00:00
cms Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and 2012-03-12 16:27:50 +00:00
comp Assorted bugfixes: 2011-02-03 12:03:57 +00:00
conf make depend 2011-09-16 23:15:22 +00:00
des Remove hard coded ecdsaWithSHA1 hack in ssl routines and check for RSA 2011-08-14 13:47:30 +00:00
dh DH keys have an (until now) unused 'q' parameter. When creating from DSA copy 2011-11-14 14:16:09 +00:00
dsa DH keys have an (until now) unused 'q' parameter. When creating from DSA copy 2011-11-14 14:16:09 +00:00
dso PR: 2589 2011-09-01 13:52:38 +00:00
ec For OpenVMS, use inttypes.h instead of stdint.h 2012-03-01 21:29:16 +00:00
ecdh Don't set default public key methods in FIPS mode so applications 2011-06-20 19:41:13 +00:00
ecdsa Fix warning. 2011-12-09 20:15:48 +00:00
engine PR: 2735 2012-02-27 16:33:25 +00:00
err Add FIPS error codes. 2011-06-21 16:58:10 +00:00
evp only cleanup ctx if we need to, save ctx flags when we do 2012-02-10 16:54:56 +00:00
hmac Backport PSS signature support from HEAD. 2011-10-09 23:13:50 +00:00
idea Remove hard coded ecdsaWithSHA1 hack in ssl routines and check for RSA 2011-08-14 13:47:30 +00:00
jpake apply J-PKAKE fix to HEAD (original by Ben) 2010-11-29 18:33:28 +00:00
krb5
lhash Revert lhash patch for PR#2124 2009-12-09 15:00:20 +00:00
md2 Prohibit use of low level digest APIs in FIPS mode. 2011-06-01 13:39:45 +00:00
md4 Remove hard coded ecdsaWithSHA1 hack in ssl routines and check for RSA 2011-08-14 13:47:30 +00:00
md5 Remove hard coded ecdsaWithSHA1 hack in ssl routines and check for RSA 2011-08-14 13:47:30 +00:00
mdc2 Remove hard coded ecdsaWithSHA1 hack in ssl routines and check for RSA 2011-08-14 13:47:30 +00:00
modes ghash-x86.pl: engage original MMX version in no-sse2 builds [from HEAD]. 2012-01-25 17:56:25 +00:00
objects incomplete provisional OAEP CMS decrypt support 2012-01-02 18:16:40 +00:00
ocsp Backport libcrypto audit: check return values of EVP functions instead 2011-06-03 20:53:00 +00:00
pem Backport libcrypto audit: check return values of EVP functions instead 2011-06-03 20:53:00 +00:00
perlasm x86_64-xlate.pl: 1.0.1-specific typo. 2012-01-25 17:50:23 +00:00
pkcs7 Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and 2012-03-12 16:27:50 +00:00
pkcs12 PR: 2737 2012-02-27 16:46:45 +00:00
pqueue Fix warnings (From HEAD, original patch by Ben). 2010-06-15 17:25:15 +00:00
rand Fix OPNESSL vs. OPENSSL typos [from HEAD]. 2012-01-15 13:40:21 +00:00
rc2 Remove hard coded ecdsaWithSHA1 hack in ssl routines and check for RSA 2011-08-14 13:47:30 +00:00
rc4 hpux-parisc2-*: engage assembler [from HEAD] and make it link. 2012-02-02 07:42:31 +00:00
rc5 Make inline assembler clang-friendly [from HEAD]. 2010-08-02 21:54:48 +00:00
ripemd Remove hard coded ecdsaWithSHA1 hack in ssl routines and check for RSA 2011-08-14 13:47:30 +00:00
rsa Additional compatibility fix for MDC2 signature format. 2012-02-15 14:14:01 +00:00
seed seed.c: Solaris portability fix from HEAD. 2012-02-26 21:53:28 +00:00
sha x86 assembler pack update from HEAD. 2011-11-14 21:06:50 +00:00
srp PR: 2727 2012-02-23 13:49:22 +00:00
stack Add DTLS-SRTP. 2011-11-15 23:02:16 +00:00
store
threads Functional VMS changes submitted by sms@antinode.info (Steven M. Schweda). 2009-05-15 16:37:08 +00:00
ts only include evp.h once 2012-01-24 22:59:46 +00:00
txt_db Change STRING to OPENSSL_STRING etc as common words such 2009-07-27 21:08:53 +00:00
ui PR: 2717 2012-02-11 23:38:49 +00:00
whrlpool Remove hard coded ecdsaWithSHA1 hack in ssl routines and check for RSA 2011-08-14 13:47:30 +00:00
x509 Backport PSS signature support from HEAD. 2011-10-09 23:13:50 +00:00
x509v3 PR: 2696 2012-02-23 21:31:22 +00:00
.cvsignore
alphacpuid.pl Alpha assembler fixed from HEAD. 2011-08-12 12:31:08 +00:00
arm_arch.h ARM assembler pack update from HEAD. 2011-11-14 20:58:01 +00:00
armcap.c ARM assembler pack update from HEAD. 2011-11-14 20:58:01 +00:00
armv4cpuid.S ARM assembler pack update from HEAD. 2011-11-14 20:58:01 +00:00
cpt_err.c Implement FIPS_mode and FIPS_mode_set 2011-05-19 18:19:07 +00:00
cryptlib.c cryptlib.c: make even non-Windows builds "strtoull-agnostic" [from HEAD]. 2012-01-21 12:18:29 +00:00
cryptlib.h Expand OPENSSL_ia32cap_P to 64 bits. It might appear controversial, because 2011-06-28 13:31:58 +00:00
crypto-lib.com Add missing algorithms to disable, and in particular, disable 2011-10-30 11:45:30 +00:00
crypto.h Prohibit low level cipher APIs in FIPS mode. 2011-06-01 16:54:06 +00:00
cversion.c
ebcdic.c
ebcdic.h
ex_data.c
fips_err.h Update error codes for FIPS. 2011-10-21 13:04:27 +00:00
fips_ers.c Add FIPS error codes. 2011-06-21 16:58:10 +00:00
ia64cpuid.S IA64 assembler pack update from HEAD. 2011-11-14 20:45:57 +00:00
install-crypto.com Apply all the changes submitted by Steven M. Schweda <sms@antinode.info> 2011-03-19 09:47:47 +00:00
LPdir_nyi.c
LPdir_unix.c
LPdir_vms.c Apply all the changes submitted by Steven M. Schweda <sms@antinode.info> 2011-03-19 09:47:47 +00:00
LPdir_win.c
LPdir_win32.c
LPdir_wince.c
Makefile typo 2011-12-10 01:37:55 +00:00
md32_common.h Make inline assembler clang-friendly [from HEAD]. 2010-08-02 21:54:48 +00:00
mem.c Call OPENSSL_init after we've checked to see if customisation is permissible. 2011-11-14 14:15:29 +00:00
mem_clr.c
mem_dbg.c PR: 1894 2009-04-16 17:22:51 +00:00
o_dir.c
o_dir.h
o_dir_test.c
o_fips.c Update error codes for FIPS. 2011-10-21 13:04:27 +00:00
o_init.c The first of many changes to make OpenSSL 1.0.1 FIPS capable. 2011-05-26 14:19:19 +00:00
o_str.c Update from HEAD. 2009-06-01 12:14:15 +00:00
o_str.h
o_time.c Apply all the changes submitted by Steven M. Schweda <sms@antinode.info> 2011-03-19 09:47:47 +00:00
o_time.h
opensslconf.h.in
opensslv.h correct CHANGES 2012-02-23 22:13:59 +00:00
ossl_typ.h Backport PSS signature support from HEAD. 2011-10-09 23:13:50 +00:00
pariscid.pl PA-RISC assembler pack update from HEAD. 2011-11-14 20:50:15 +00:00
ppccap.c PPC assembler pack update from HEAD. 2011-11-14 20:54:17 +00:00
ppccpuid.pl PPC assembler pack update from HEAD. 2011-11-14 20:54:17 +00:00
s390xcap.c s390x assembler pack update from HEAD. 2011-11-14 20:47:22 +00:00
s390xcpuid.S s390x assembler pack update from HEAD. 2011-11-14 20:47:22 +00:00
sparccpuid.S sparcv9cap.c: disengange Solaris-specific CPU detection routine in favour 2010-09-05 19:48:19 +00:00
sparcv9cap.c sparcv9cap.c: omit unused variable. 2012-01-12 14:19:52 +00:00
symhacks.h PR: 2652 2012-01-05 14:30:08 +00:00
uid.c
vms_rms.h Apply all the changes submitted by Steven M. Schweda <sms@antinode.info> 2011-03-19 09:47:47 +00:00
x86_64cpuid.pl x86_64 assembler pack update from HEAD. 2011-11-14 21:01:21 +00:00
x86cpuid.pl x86cpuid.pl: fix processor capability detection on pre-586 [from HEAD]. 2012-02-28 14:20:34 +00:00