openssl/crypto/evp
Shane Lontis f0efeea29e PBKDF2 updates to conform to SP800-132
The existing code used PKCS5 specifications.
SP800-132 adds the following additional constraints for:
  - the range of the key length.
  - the minimum iteration count (1000 recommended).
  - salt length (at least 128 bits).
These additional constraints may cause errors (in scrypt, and
some PKCS5 related test vectors). To disable the new
constraints use the new ctrl string "pkcs5".
For backwards compatability, the checks are only enabled by
default for fips mode.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/8868)
2019-06-11 20:40:07 +10:00
..
bio_b64.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
bio_enc.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
bio_md.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
bio_ok.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
build.info Make some EVP code available from within the FIPS module 2019-05-23 11:02:04 +01:00
c_allc.c Add RFC5297 AES-SIV support 2018-12-12 08:16:10 +10:00
c_alld.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
c_allkdf.c Added X963KDF API 2019-05-16 11:43:41 +10:00
c_allm.c blake2: backport changes to blake2s 2019-02-06 09:18:43 +00:00
cmeth_lib.c Make EVP_Encrypt*/EVP_Decrypt* and EVP_Cipher* provider aware 2019-04-19 09:31:54 +01:00
digest.c Make EVP_MD_CTX_ctrl() work for legacy use cases (ssl3). 2019-06-11 20:25:33 +10:00
e_aes.c s390x assembly pack: allow specifying the tag after aad in aes-ccm 2019-05-22 10:57:50 +02:00
e_aes_cbc_hmac_sha1.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_aes_cbc_hmac_sha256.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_aria.c Structure alignment macro. 2019-05-01 08:37:11 +10:00
e_bf.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_camellia.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_cast.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_chacha20_poly1305.c Structure alignment macro. 2019-05-01 08:37:11 +10:00
e_des.c Structure alignment macro. 2019-05-01 08:37:11 +10:00
e_des3.c Coverity CID 1444956: Integer handling issues 2019-05-08 09:52:58 +10:00
e_idea.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_null.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_old.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_rc2.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_rc4.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_rc4_hmac_md5.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_rc5.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_seed.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_sm4.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
e_xcbc_d.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
encode.c constify *_dup() and *i2d_*() and related functions as far as possible, introducing DECLARE_ASN1_DUP_FUNCTION 2019-03-06 16:10:09 +00:00
evp_cnf.c EVP configuration section: add 'default_properties' command 2019-04-05 15:43:37 +02:00
evp_enc.c Fix input checks wrt legacy code 2019-05-27 08:05:36 +10:00
evp_err.c Replace EVP_MAC_CTX_copy() by EVP_MAC_CTX_dup() 2019-06-06 17:41:41 +02:00
evp_fetch.c EVP fetching: make operation_id part of the method identity 2019-06-10 08:01:19 +02:00
evp_key.c crypto/evp/evp_key.c: #define BUFSIZ if <stdio.h> doesn't #define it 2019-05-27 08:01:50 +10:00
evp_lib.c Make some EVP code available from within the FIPS module 2019-05-23 11:02:04 +01:00
evp_locl.h EVP_FETCH: remove the need to transport the legacy NID through construction 2019-05-12 13:43:38 -07:00
evp_pbe.c Added new EVP/KDF API. 2019-02-13 12:11:49 +01:00
evp_pkey.c constify *_dup() and *i2d_*() and related functions as far as possible, introducing DECLARE_ASN1_DUP_FUNCTION 2019-03-06 16:10:09 +00:00
kdf_lib.c Added X963KDF API 2019-05-16 11:43:41 +10:00
m_md2.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
m_md4.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
m_md5.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
m_md5_sha1.c Move digests to providers 2019-06-04 12:09:50 +10:00
m_mdc2.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
m_null.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
m_ripemd.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
m_sha1.c Move digests to providers 2019-06-04 12:09:50 +10:00
m_sha3.c Fix Keccak structure name reference in S390 legacy code 2019-06-11 20:16:35 +10:00
m_sigver.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
m_wp.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
mac_lib.c Change EVP_MAC method from copy to dup 2019-06-06 17:41:42 +02:00
names.c Added EVP_KDF (similiar to the EVP_MAC) 2019-05-03 17:52:50 +02:00
p5_crpt.c Coverity CID 1444960: Error handling issues 2019-05-08 09:52:58 +10:00
p5_crpt2.c PBKDF2 updates to conform to SP800-132 2019-06-11 20:40:07 +10:00
p_dec.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
p_enc.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
p_lib.c Providing missing accessor to EVP_PKEY.engine 2019-03-19 10:42:33 +00:00
p_open.c Fix the allocation size in EVP_OpenInit and PEM_SignFinal 2019-04-06 10:17:19 +02:00
p_seal.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
p_sign.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
p_verify.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
pbe_scrypt.c EVP_PBE_scrypt() handles salt=NULL as salt="" 2019-03-17 19:27:37 +10:00
pkey_kdf.c The use of the likes of UINT32_MAX requires internal/numbers.h 2019-02-28 10:31:20 +01:00
pkey_mac.c Replace EVP_MAC_CTX_copy() by EVP_MAC_CTX_dup() 2019-06-06 17:41:41 +02:00
pmeth_fn.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
pmeth_gn.c Following the license change, modify the boilerplates in crypto/evp/ 2018-12-06 14:54:57 +01:00
pmeth_lib.c constify *_dup() and *i2d_*() and related functions as far as possible, introducing DECLARE_ASN1_DUP_FUNCTION 2019-03-06 16:10:09 +00:00