aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Initial untested CCM support via EVP.Dr. Stephen Henson2011-04-186-11/+233
|
* Compile ccm128.c, move some structures to modes_lcl.h add prototypes.Dr. Stephen Henson2011-04-184-10/+27
|
* Don't need separate tag buffer for GCM mode: use EVP_CIPHER_CTX bufDr. Stephen Henson2011-04-181-6/+4
| | | | field which is not unused for custom ciphers.
* Remove shlib_wrap.sh as it is not needed (all algorithm tests areDr. Stephen Henson2011-04-171-40/+98
| | | | | | staticly linked to fipscanister.o). Add option to generate a shell script to run all tests: this is useful for platforms that don't have perl.
* Multiple assembler packs: add experimental memory bus instrumentation.Andy Polyakov2011-04-1710-12/+724
|
* Remove PSS salt length detection hack from fipslagtest.pl by allowing a regexpDr. Stephen Henson2011-04-161-36/+46
| | | | | search of the file to determine its type. This will be needed for other tests later...
* ccm128.c: minor optimization and bugfix in CRYPTO_ccm128_[en|de]crypt.Andy Polyakov2011-04-161-51/+63
|
* Add "post" option to fips_test_suite to run the POST only and exit.Dr. Stephen Henson2011-04-151-0/+2
|
* Add length limitation from SP800-38E.Dr. Stephen Henson2011-04-153-0/+12
|
* Add XTS selftest, include in fips_test_suite.Dr. Stephen Henson2011-04-156-5/+79
|
* Add algorithm driver for XTS mode. Fix several bugs in EVP XTS implementation.Dr. Stephen Henson2011-04-153-11/+100
|
* Add new POST support to X9.31 PRNG.Dr. Stephen Henson2011-04-143-18/+26
|
* Report each cipher used with CMAC tests.Dr. Stephen Henson2011-04-143-20/+52
| | | | Only add one error to error queue if a specific test type fails.
* Revise fips_test_suite to use table of IDs for human readable strings.Dr. Stephen Henson2011-04-143-60/+67
| | | | Modify HMAC selftest callbacks to notify each digest type used.
* Update CMAC, HMAC, GCM to use new POST system.Dr. Stephen Henson2011-04-146-66/+121
| | | | Fix crash if callback not set.
* Remove several of the old obsolete FIPS_corrupt_*() functions.Dr. Stephen Henson2011-04-1411-104/+10
|
* Initial incomplete POST overhaul: add support for POST callback toDr. Stephen Henson2011-04-1417-246/+681
| | | | allow status of POST to be monitored and/or failures induced.
* Remove duplicate flag.Dr. Stephen Henson2011-04-131-6/+3
|
* Use consistent FIPS tarball name.Dr. Stephen Henson2011-04-123-1/+6
| | | | | | Add XTS to FIPS build. Hide XTS symbol names.
* Provisional AES XTS support.Dr. Stephen Henson2011-04-1211-21/+146
|
* Update fips_pkey_signature_test: use fixed string if supplies tbs isDr. Stephen Henson2011-04-124-59/+94
| | | | | | | NULL. Always allocate signature buffer. Update ECDSA selftest to use fips_pkey_signature_test. Add copyright notice to file.
* Complete rewrite of FIPS_selftest_dsa(). Use hardcoded 2048 bit DSA keyDr. Stephen Henson2011-04-121-136/+157
| | | | and SHA384. Use fips_pkey_signature_test().
* Update RSA selftest code to use a 2048 bit RSA and only a single KATDr. Stephen Henson2011-04-123-345/+172
| | | | for PSS+SHA256
* Fix memory leaks: uninstantiate DRBG during health checks. Cleanup md_ctxDr. Stephen Henson2011-04-124-0/+19
| | | | when performing ECDSA selftest.
* Stop warning and fix memory leaks.Dr. Stephen Henson2011-04-121-5/+8
|
* No need to disable leak checking for FIPS builds now we use internalDr. Stephen Henson2011-04-121-1/+1
| | | | memory callbacks.
* Update ECDSA selftest to use hard coded private keys. Include tests forDr. Stephen Henson2011-04-121-45/+140
| | | | prime and binary fields.
* Update fips_premain.c fingerprint.Dr. Stephen Henson2011-04-121-1/+1
|
* Update copyright year.Dr. Stephen Henson2011-04-111-4/+7
| | | | | | Zero ciphertext and plaintext temporary buffers. Check FIPS_cipher() return value.
* Use correct version number.Dr. Stephen Henson2011-04-111-1/+1
|
* Add mem_clr.c explicity for no-asm builds.Dr. Stephen Henson2011-04-111-0/+1
|
* Fix warning.Dr. Stephen Henson2011-04-111-0/+1
|
* Set length to 41 (40 hex characters + null).Dr. Stephen Henson2011-04-111-1/+1
|
* Reorder headers to get definitions before they are used.Dr. Stephen Henson2011-04-111-2/+4
|
* Don't give dependency warning for fips builds.Dr. Stephen Henson2011-04-113-2/+24
| | | | | | Give error for "make depend" in restricted tarball builds. Document how restricted tarballs work.
* Typo: fix duplicate call.Dr. Stephen Henson2011-04-101-2/+0
|
* fix fipscanisteronly autodetectDr. Stephen Henson2011-04-101-1/+2
|
* Auto detect no-ec2m add option to make no-ec2m tarball.Dr. Stephen Henson2011-04-102-0/+11
|
* set OPENSSL_FIPSSYMS for restricted buils and auto detect no-ec2mDr. Stephen Henson2011-04-101-11/+21
|
* Clarify README.FIPS.Dr. Stephen Henson2011-04-101-0/+6
|
* Auto configure for fips is from restricted tarball.Dr. Stephen Henson2011-04-103-3/+35
| | | | Remove more unnecessary files form fips tarball.
* Remove unused build targets from Makefile.fips, add cmac to dist list.Dr. Stephen Henson2011-04-101-116/+2
|
* remove ENGINE dependency from ecdhDr. Stephen Henson2011-04-102-14/+5
|
* Add error for health check failure.Dr. Stephen Henson2011-04-093-108/+88
| | | | Rebuild all FIPS error codes to clean out old obsolete codes.
* Before initalising a live DRBG (i.e. not in test mode) run a complete healthDr. Stephen Henson2011-04-091-0/+12
| | | | check on a DRBG of the same type.
* New function to return security strength of PRNG.Dr. Stephen Henson2011-04-092-0/+24
|
* DH keys have an (until now) unused 'q' parameter. When creatingDr. Stephen Henson2011-04-072-3/+21
| | | | | from DSA copy q across and if q present generate DH key in the correct range.
* Only use fake rand once per operation. This stops the ECDr. Stephen Henson2011-04-061-1/+8
| | | | pairwise consistency test interfering with the test.
* Update CHANGES.Dr. Stephen Henson2011-04-061-1/+1
|
* Add fips hmac key to dgst utility.Dr. Stephen Henson2011-04-061-0/+2
|