aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/dh
Commit message (Collapse)AuthorAgeFilesLines
* More type-checking.Ben Laurie2008-06-041-7/+13
|
* Update dependencies.Dr. Stephen Henson2008-03-221-8/+10
|
* Fix a variety of warnings generated by some elevated compiler-fascism,Geoff Thorpe2008-03-162-0/+3
| | | | OPENSSL_NO_DEPRECATED, etc. Steve, please double-check the CMS stuff...
* TyposLutz Jänicke2007-09-241-1/+1
| | | | | PR: 1578 Submitted by: Charles Longeau <chl@tuxfamily.org>
* check correct pointer before freeing it (Coverity CID 79,86)Nils Larsch2007-04-021-1/+1
|
* Change to mitigate branch prediction attacksBodo Möller2007-03-281-2/+2
| | | | | Submitted by: Matthew D Wood Reviewed by: Bodo Moeller
* Constify version strings and some structures.Dr. Stephen Henson2007-01-211-1/+1
|
* Update from 0.9.8 stable. Eliminate duplicate error codes.Dr. Stephen Henson2006-11-212-8/+5
|
* Initialise ctx to NULL to avoid uninitialized free, noticed byMark J. Cox2006-09-291-1/+1
| | | | Steve Kiernan
* Introduce limits to prevent malicious keys being able toBodo Möller2006-09-283-1/+13
| | | | | cause a denial of service. (CVE-2006-2940) [Steve Henson, Bodo Moeller]
* Fix various error codes to match functions.Dr. Stephen Henson2006-07-173-3/+3
|
* New function to dup EVP_PKEY_CTX. This will be needed to make new signingDr. Stephen Henson2006-05-241-0/+14
| | | | functions and EVP_MD_CTX_copy work properly.
* Use size_t for new crypto size parameters.Dr. Stephen Henson2006-05-241-1/+1
|
* Fix (most) WIN32 warnings and errors.Dr. Stephen Henson2006-04-171-1/+1
|
* Use more flexible method of determining output length, by setting &outlenDr. Stephen Henson2006-04-151-1/+1
| | | | | | | | value of the passed output buffer is NULL. The old method of using EVP_PKEY_size(pkey) isn't flexible enough to cover all cases where the output length may depend on the operation or the parameters associated with it.
* Complete key derivation support.Dr. Stephen Henson2006-04-134-8/+41
|
* Update dependencies.Dr. Stephen Henson2006-04-131-0/+14
|
* Add key derivation support.Dr. Stephen Henson2006-04-131-0/+2
|
* Typo.Dr. Stephen Henson2006-04-133-1/+3
|
* Extend DH ASN1 method, add DH EVP_PKEY_METHOD.Dr. Stephen Henson2006-04-125-8/+235
|
* PKCS#3 DH PKCS#8 ASN1 support.Dr. Stephen Henson2006-04-123-2/+121
|
* Extend DH ASN1 method to support public key encode/decode and parameterDr. Stephen Henson2006-04-123-21/+237
| | | | utilities.
* New function to retrieve ASN1 info on public key algorithms. New commandDr. Stephen Henson2006-04-041-1/+1
| | | | line option to print out info.
* New utility pkeyparam. Enhance and bugfix algorithm specific parameterDr. Stephen Henson2006-03-284-47/+84
| | | | functions to support it.
* Add information and pem strings. Update dependencies.Dr. Stephen Henson2006-03-232-0/+26
|
* Make EVP_PKEY_ASN1_METHOD opaque. Add application level functions toDr. Stephen Henson2006-03-221-0/+1
| | | | initialize it. Initial support for application added public key ASN1.
* Move algorithm specific print code from crypto/asn1/t_pkey.c to separateDr. Stephen Henson2006-03-222-2/+126
| | | | *_prn.c files in each algorithm directory.
* DH EVP_PKEY_ASN1_METHOD, doesn't do much (yet?).Dr. Stephen Henson2006-03-201-0/+92
|
* Transfer parameter handling and key comparison to algorithm methods.Dr. Stephen Henson2006-03-201-2/+4
|
* fix error found by coverity: check if ctx is != NULL before calling BN_CTX_end()Nils Larsch2006-03-131-2/+5
|
* Update filenames in makefiles.Dr. Stephen Henson2006-02-041-1/+1
|
* Extend callback function to support print customization.Dr. Stephen Henson2005-09-011-2/+3
|
* Make D-H safer, include well-known primes.Ben Laurie2005-08-214-0/+36
|
* Use BN_with_flags() in a cleaner way.Bodo Möller2005-05-271-0/+1
|
* Further BUILDENV refinement, further fool-proofing of Makefiles andAndy Polyakov2005-05-161-2/+1
| | | | | [most importantly] put back dependencies accidentaly eliminated in check-in #13342.
* Implement fixed-window exponentiation to mitigate hyper-threadingBodo Möller2005-05-163-4/+36
| | | | | | | | | | | | timing attacks. BN_FLG_EXP_CONSTTIME requests this algorithm, and this done by default for RSA/DSA/DH private key computations unless RSA_FLAG_NO_EXP_CONSTTIME/DSA_FLAG_NO_EXP_CONSTTIME/ DH_FLAG_NO_EXP_CONSTTIME is set. Submitted by: Matthew D Wood Reviewed by: Bodo Moeller
* Fool-proofing MakefilesAndy Polyakov2005-05-151-4/+1
|
* Pointer to BN_MONT_CTX could be used uninitialized.Andy Polyakov2005-04-281-2/+2
|
* Change method_mont_p from (char *) to (BN_MONT_CTX *) and remove severalDr. Stephen Henson2005-04-272-6/+4
| | | | casts.
* Port BN_MONT_CTX_set_locked() from stable branch.Dr. Stephen Henson2005-04-261-10/+14
| | | | | The function rsa_eay_mont_helper() has been removed because it is no longer needed after this change.
* Fix various incorrect error function codes.Bodo Möller2005-04-264-11/+13
| | | | ("perl util/ck_errf.pl */*.c */*/*.c" still reports many more.)
* Rebuild error codes.Dr. Stephen Henson2005-04-121-12/+15
|
* Add emacs cache files to .cvsignore.Richard Levitte2005-04-111-0/+2
|
* Give everything prototypes (well, everything that's actually used).Ben Laurie2005-03-311-11/+3
|
* Blow away Makefile.ssl.Ben Laurie2005-03-301-4/+3
|
* Don't use $(EXHEADER) directly in for loops, as most shells will breakRichard Levitte2004-11-021-1/+1
| | | | | | if $(EXHEADER) is empty. Notified by many, solution suggested by Carson Gaspar <carson@taltos.org>
* After the latest round of header-hacking, regenerate the dependencies inGeoff Thorpe2004-05-171-7/+7
| | | | | the Makefiles. NB: this commit is probably going to generate a huge posting and it is highly uninteresting to read.
* Deprecate the recursive includes of bn.h from various API headers (asn1.h,Geoff Thorpe2004-05-171-2/+3
| | | | | | dh.h, dsa.h, ec.h, ecdh.h, ecdsa.h, rsa.h), as the opaque bignum types are already declared in ossl_typ.h. Add explicit includes for bn.h in those C files that need access to structure internals or API functions+macros.
* make updateGeoff Thorpe2004-04-191-15/+7
|
* Reduce header interdependencies, initially in engine.h (the rest of theGeoff Thorpe2004-04-191-3/+6
| | | | | | | | | changes are the fallout). As this could break source code that doesn't directly include headers for interfaces it uses, changes to recursive includes are covered by the OPENSSL_NO_DEPRECATED symbol. It's better to define this when building and using openssl, and then adapt code where necessary - this is how to stay current. However the mechanism exists for the lethargic.