openssl/crypto/ec
Matt Caswell f3243f2229 Disallow Ed25519 signature maleability
Check that s is less than the order before attempting to verify the
signature as per RFC8032 5.1.7

Fixes #7693

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/7697)

(cherry picked from commit 0ac8f35c04)
2018-12-03 14:25:20 +00:00
..
asm Update copyright year 2018-09-11 13:45:17 +01:00
curve448 Fix some undefined behaviour in the Curve448 code (2nd attempt) 2018-08-03 12:02:14 +02:00
build.info Add ec/asm/x25519-ppc64.pl module. 2018-07-26 14:01:49 +02:00
curve25519.c Disallow Ed25519 signature maleability 2018-12-03 14:25:20 +00:00
ec2_oct.c Update copyright year 2018-09-11 13:45:17 +01:00
ec2_smpl.c Use the new non-curve type specific EC functions internally 2018-07-31 09:08:38 +01:00
ec_ameth.c Stop marking default digest for EC keys as mandatory 2018-11-24 08:49:32 +02:00
ec_asn1.c Use the new non-curve type specific EC functions internally 2018-07-31 09:08:38 +01:00
ec_check.c Copyright consolidation 06/10 2016-05-17 14:51:04 -04:00
ec_curve.c Use the new non-curve type specific EC functions internally 2018-07-31 09:08:38 +01:00
ec_cvt.c Update copyright year 2018-09-11 13:45:17 +01:00
ec_err.c Provide EC functions that are not curve type specific 2018-07-31 09:08:38 +01:00
ec_key.c Fix segfault in RSA_free() (and DSA/DH/EC_KEY) 2018-09-05 15:22:35 +03:00
ec_kmeth.c Update copyright year 2018-09-11 13:45:17 +01:00
ec_lcl.h Use the new non-curve type specific EC functions internally 2018-07-31 09:08:38 +01:00
ec_lib.c [test] throw error from wrapper function instead of an EC_METHOD specific one 2018-09-03 20:25:41 +02:00
ec_mult.c Timing vulnerability in ECDSA signature generation (CVE-2018-0735) 2018-10-29 07:59:23 +10:00
ec_oct.c Deprecate the EC curve type specific functions in 1.2.0 2018-07-31 09:08:50 +01:00
ec_pmeth.c EVP module documentation pass 2018-10-17 13:31:59 +03:00
ec_print.c Update copyright year 2018-04-17 15:18:40 +02:00
ecdh_kdf.c EVP module documentation pass 2018-10-17 13:31:59 +03:00
ecdh_ossl.c Use the new non-curve type specific EC functions internally 2018-07-31 09:08:38 +01:00
ecdsa_ossl.c Use the new non-curve type specific EC functions internally 2018-07-31 09:08:38 +01:00
ecdsa_sign.c Useless includes 2016-06-18 16:30:24 -04:00
ecdsa_vrf.c Useless includes 2016-06-18 16:30:24 -04:00
eck_prn.c Update copyright year 2018-09-11 13:45:17 +01:00
ecp_mont.c EC GFp ladder 2018-07-26 19:41:16 +02:00
ecp_nist.c EC GFp ladder 2018-07-26 19:41:16 +02:00
ecp_nistp224.c Use the new non-curve type specific EC functions internally 2018-07-31 09:08:38 +01:00
ecp_nistp256.c Use the new non-curve type specific EC functions internally 2018-07-31 09:08:38 +01:00
ecp_nistp521.c Use the new non-curve type specific EC functions internally 2018-07-31 09:08:38 +01:00
ecp_nistputil.c Copyright consolidation 06/10 2016-05-17 14:51:04 -04:00
ecp_nistz256.c ec/ecp_nistz256.c: fix Coverity nit. 2018-07-25 15:45:18 +02:00
ecp_nistz256_table.c Copyright consolidation 05/10 2016-05-17 15:38:09 -04:00
ecp_oct.c Update copyright year 2018-09-11 13:45:17 +01:00
ecp_smpl.c Replace GFp ladder implementation with ladd-2002-it-4 from EFD 2018-08-21 09:51:18 +01:00
ecx_meth.c Improve the usability of the ca app using EdDSA 2018-08-22 16:35:54 +01:00