wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/ssl
History
Ben Laurie 9c00a95060 Add and use a constant-time memcmp. 
This change adds CRYPTO_memcmp, which compares two vectors of bytes in
an amount of time that's independent of their contents. It also changes
several MAC compares in the code to use this over the standard memcmp,
which may leak information about the size of a matching prefix.
(cherry picked from commit 2ee798880a)

Conflicts:
	crypto/crypto.h
	ssl/t1_lib.c
2013-02-05 16:46:15 +00:00
..
.cvsignore
bio_ssl.c OPENSSL_NO_SOCK fixes [from HEAD]. 2012-04-16 17:43:28 +00:00
d1_both.c PR: 2755 2012-03-06 13:46:52 +00:00
d1_clnt.c PR: 2748 2012-03-06 13:22:57 +00:00
d1_enc.c Sanity check record length before skipping explicit IV in DTLS 2012-05-10 14:44:20 +00:00
d1_lib.c fix error code 2012-03-12 14:32:54 +00:00
d1_meth.c Let the TLSv1_method() etc. functions return a const SSL_METHOD 2005-08-14 21:48:33 +00:00
d1_pkt.c Add and use a constant-time memcmp. 2013-02-05 16:46:15 +00:00
d1_srvr.c PR: 2778(part) 2012-03-31 18:02:35 +00:00
dtls1.h PR: 2230 2010-04-14 00:17:29 +00:00
install-ssl.com Apply all the changes submitted by Steven M. Schweda <sms@antinode.info> 2011-03-19 09:44:53 +00:00
kssl.c Submitted by: Tomas Hoger <thoger@redhat.com> 2010-03-03 15:41:00 +00:00
kssl.h
kssl_lcl.h Some fixes for kerberos builds. 2009-04-21 22:20:12 +00:00
Makefile make update 2010-12-02 18:26:12 +00:00
s2_clnt.c Add and use a constant-time memcmp. 2013-02-05 16:46:15 +00:00
s2_enc.c Update ssl library to support EVP_PKEY MAC API. Include generic MAC support. 2007-06-04 17:04:40 +00:00
s2_lib.c Make no-ssl2 work including on Win32 builds. 2009-04-04 17:57:34 +00:00
s2_meth.c Type-checked (and modern C compliant) OBJ_bsearch. 2008-10-12 14:32:47 +00:00
s2_pkt.c Add and use a constant-time memcmp. 2013-02-05 16:46:15 +00:00
s2_srvr.c Assorted bugfixes: 2011-02-03 12:04:40 +00:00
s3_both.c Add and use a constant-time memcmp. 2013-02-05 16:46:15 +00:00
s3_clnt.c PR: 2888 2012-12-10 16:45:19 +00:00
s3_enc.c Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) [include source patch this time!] 2012-01-04 15:38:54 +00:00
s3_lib.c In ssl3_clear, preserve s3->init_extra along with s3->rbuf. 2011-10-13 13:05:12 +00:00
s3_meth.c Type-checked (and modern C compliant) OBJ_bsearch. 2008-10-12 14:32:47 +00:00
s3_pkt.c Add and use a constant-time memcmp. 2013-02-05 16:46:15 +00:00
s3_srvr.c Backport OCSP Stapling fix. 2012-10-04 15:16:12 +00:00
s23_clnt.c PR: 2171 2010-02-16 14:20:40 +00:00
s23_lib.c Fix warnings (From HEAD, original patch by Ben). 2010-06-15 17:25:15 +00:00
s23_meth.c recent changes from 0.9.8: fix cipher list order in s3_lib.c, 2006-01-15 17:35:28 +00:00
s23_pkt.c
s23_srvr.c PR: 2171 2010-02-16 14:20:40 +00:00
ssl-lib.com Corrections to the VMS build system. 2011-03-25 16:21:39 +00:00
ssl.h fix error code 2012-03-12 14:32:54 +00:00
ssl2.h
ssl3.h add missing part for SGC restart fix (CVE-2011-4619) 2012-01-04 16:46:10 +00:00
ssl23.h
ssl_algs.c Add SHA2 algorithms to SSL_library_init(). Although these aren't used 2010-04-07 13:18:30 +00:00
ssl_asn1.c Fix warnings (From HEAD, original patch by Ben). 2010-06-15 17:25:15 +00:00
ssl_cert.c PR: 1731 and maybe 2197 2010-03-24 23:16:49 +00:00
ssl_ciph.c Resolve a stack set-up race condition (if the list of compression 2011-12-02 12:51:05 +00:00
ssl_err.c fix error code 2012-03-12 14:32:54 +00:00
ssl_err2.c
ssl_lib.c backport OCSP fix enhancement 2012-10-05 13:00:18 +00:00
ssl_locl.h backport OCSP fix enhancement 2012-10-05 13:00:18 +00:00
ssl_rsa.c PR: 1411 2009-09-12 23:09:26 +00:00
ssl_sess.c PR: 2160 2010-02-01 16:49:42 +00:00
ssl_stat.c PR: 2133 2010-01-16 19:20:38 +00:00
ssl_task.c
ssl_txt.c Update from 0.9.8-stable. 2009-06-30 22:26:28 +00:00
ssltest.c Fix warnings (From HEAD, original patch by Ben). 2010-06-15 17:25:15 +00:00
t1_clnt.c Let the TLSv1_method() etc. functions return a const SSL_METHOD 2005-08-14 21:48:33 +00:00
t1_enc.c * ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately in 2012-09-21 13:08:26 +00:00
t1_lib.c Add and use a constant-time memcmp. 2013-02-05 16:46:15 +00:00
t1_meth.c Let the TLSv1_method() etc. functions return a const SSL_METHOD 2005-08-14 21:48:33 +00:00
t1_reneg.c Update RI to match latest spec. 2009-12-27 22:59:09 +00:00
t1_srvr.c Let the TLSv1_method() etc. functions return a const SSL_METHOD 2005-08-14 21:48:33 +00:00
tls1.h add missing parts of reneg port, fix apps patch 2009-11-11 14:51:29 +00:00