wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/crypto/evp
History
Dr. Stephen Henson d0edffc7da FIPS algorithm blocking. 
Non FIPS algorithms are not normally allowed in FIPS mode.

Any attempt to use them via high level functions will return an error.

The low level non-FIPS algorithm functions cannot return errors so they
produce assertion failures. HMAC also has to give an assertion error because
it (erroneously) can't return an error either.

There are exceptions (such as MD5 in TLS and non cryptographic use of
algorithms) and applications can override the blocking and use non FIPS
algorithms anyway.

For low level functions the override is perfomed by prefixing the algorithm
initalization function with "private_" for example private_MD5_Init().

For high level functions an override is performed by setting a flag in
the context.
2005-01-26 20:00:40 +00:00
..
.cvsignore Ignore Makefile.save 1999-04-29 16:04:54 +00:00
bio_b64.c Move the base64 BIO fixes to 0.9.7-stable 2003-06-03 00:11:37 +00:00
bio_enc.c Encryption BIOs misbehave when used with non blocking I/O. 2003-02-27 14:08:44 +00:00
bio_md.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
bio_ok.c Correct documentation typos. 2003-12-27 15:05:26 +00:00
c_all.c Inclusion of openssl/engine.h should always be wrapped with a check that 2003-08-04 10:12:38 +00:00
c_allc.c Pull FIPS back into stable. 2004-05-11 12:46:24 +00:00
c_alld.c Allow for ./config no-sha0. 2005-01-09 17:58:18 +00:00
digest.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
e_aes.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
e_bf.c The AES modes OFB and CFB are defined with 128 feedback bits. This 2002-02-16 12:39:58 +00:00
e_cast.c The AES modes OFB and CFB are defined with 128 feedback bits. This 2002-02-16 12:39:58 +00:00
e_des.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
e_des3.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
e_dsa.c Change #include filenames from <foo.h> to <openssl.h>. 1999-04-23 22:13:45 +00:00
e_idea.c Cleanse memory using the new OPENSSL_cleanse() function. 2002-11-28 08:09:03 +00:00
e_null.c Really add the EVP and all of the DES changes. 2001-07-30 23:57:25 +00:00
e_old.c PR: 959 2004-11-13 13:52:34 +00:00
e_rc2.c Many security improvements (CHATS) and a warning fix. 2002-11-12 13:23:40 +00:00
e_rc4.c Many security improvements (CHATS) and a warning fix. 2002-11-12 13:23:40 +00:00
e_rc5.c The AES modes OFB and CFB are defined with 128 feedback bits. This 2002-02-16 12:39:58 +00:00
e_xcbc_d.c Due to an increasing number of clashes between modern OpenSSL and 2001-10-24 21:21:12 +00:00
encode.c Many security improvements (CHATS) and a warning fix. 2002-11-12 13:23:40 +00:00
evp.h FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
evp_acnf.c We seem to carry some rests of the 0.9.6 [engine] ENGINE framework in form 2003-04-08 06:00:17 +00:00
evp_enc.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
evp_err.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
evp_key.c Cleanse memory using the new OPENSSL_cleanse() function. 2002-11-28 08:09:03 +00:00
evp_lib.c Return an error if an attempt is made to encode or decode 2004-06-24 12:31:48 +00:00
evp_locl.h FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
evp_pbe.c Use BUF_strlcpy() instead of strcpy(). 2003-12-27 14:40:57 +00:00
evp_pkey.c Add lots of checks for memory allocation failure, error codes to indicate 2004-12-05 01:04:44 +00:00
evp_test.c I think it could be a good thing to know what went wrong with the tests... 2004-07-12 12:25:56 +00:00
evptests.txt Pull FIPS back into stable. 2004-05-11 12:46:24 +00:00
m_dss.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
m_dss1.c Add a cleanup function for MDs. 2001-09-07 12:03:24 +00:00
m_md2.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
m_md4.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
m_md5.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
m_mdc2.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
m_null.c Add a cleanup function for MDs. 2001-09-07 12:03:24 +00:00
m_ripemd.c Add a cleanup function for MDs. 2001-09-07 12:03:24 +00:00
m_sha.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
m_sha1.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
Makefile Don't use $(EXHEADER) directly in for loops, as most shells will break 2004-11-02 23:53:31 +00:00
names.c FIPS algorithm blocking. 2005-01-26 20:00:40 +00:00
openbsd_hw.c This changes EVP's cipher and digest code to hook via the ENGINE support. 2001-09-25 21:37:02 +00:00
p5_crpt.c Cleanse memory using the new OPENSSL_cleanse() function. 2002-11-28 08:09:03 +00:00
p5_crpt2.c Cleanse memory using the new OPENSSL_cleanse() function. 2002-11-28 08:09:03 +00:00
p_dec.c Make all configuration macros available for application by making 2001-02-19 16:06:34 +00:00
p_enc.c Make all configuration macros available for application by making 2001-02-19 16:06:34 +00:00
p_lib.c ECDSA support 2002-02-13 18:21:51 +00:00
p_open.c Cleanse memory using the new OPENSSL_cleanse() function. 2002-11-28 08:09:03 +00:00
p_seal.c EVP_SealFinal should return a value. 2002-05-11 17:33:01 +00:00
p_sign.c Retain compatibility of EVP_DigestInit() and EVP_DigestFinal() 2001-10-16 01:24:29 +00:00
p_verify.c Retain compatibility of EVP_DigestInit() and EVP_DigestFinal() 2001-10-16 01:24:29 +00:00