openssl/crypto/cms
Dr. Stephen Henson 4f2fc3c2dd Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and
continue with symmetric decryption process to avoid leaking timing
information to an attacker.

Thanks to Ivan Nestlerode <inestlerode@us.ibm.com> for discovering
this issue. (CVE-2012-0884)
2012-03-12 14:51:45 +00:00
..
cms.h Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and 2012-03-12 14:51:45 +00:00
cms_asn1.c Fix CVE-2010-0742 2010-06-01 14:39:57 +00:00
cms_att.c Backport of CMS code to 0.9.8-stable branch. Disabled by default. 2008-04-03 23:03:56 +00:00
cms_cd.c Backport of CMS code to 0.9.8-stable branch. Disabled by default. 2008-04-03 23:03:56 +00:00
cms_dd.c Backport of CMS code to 0.9.8-stable branch. Disabled by default. 2008-04-03 23:03:56 +00:00
cms_enc.c Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and 2012-03-12 14:51:45 +00:00
cms_env.c Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and 2012-03-12 14:51:45 +00:00
cms_err.c Fix from HEAD. 2008-04-06 15:57:44 +00:00
cms_ess.c Submitted by: Julia Lawall <julia@diku.dk> 2009-09-13 11:20:38 +00:00
cms_io.c return failure code if I/O error 2012-03-06 19:08:30 +00:00
cms_lcl.h Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and 2012-03-12 14:51:45 +00:00
cms_lib.c tolerate broken CMS/PKCS7 implementations using signature OID instead of digest 2010-02-02 14:19:54 +00:00
cms_sd.c Properly check EVP_VerifyFinal() and similar return values 2009-01-07 10:48:23 +00:00
cms_smime.c Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and 2012-03-12 14:51:45 +00:00
Makefile Merge changes to build system from fips branch. 2008-09-16 21:44:57 +00:00