aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/dh
Commit message (Collapse)AuthorAgeFilesLines
* free NULL cleanupRich Salz2015-03-281-4/+2
| | | | | | | | | EVP_.*free; this gets: EVP_CIPHER_CTX_free EVP_PKEY_CTX_free EVP_PKEY_asn1_free EVP_PKEY_asn1_set_free EVP_PKEY_free EVP_PKEY_free_it EVP_PKEY_meth_free; and also EVP_CIPHER_CTX_cleanup Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* free NULL cleanupRich Salz2015-03-244-10/+6
| | | | | | | | Start ensuring all OpenSSL "free" routines allow NULL, and remove any if check before calling them. This gets DH_free, DSA_free, RSA_free Reviewed-by: Matt Caswell <matt@openssl.org>
* make dependDr. Stephen Henson2015-03-241-4/+4
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Move some EVP internals to evp_int.hDr. Stephen Henson2015-03-241-1/+1
| | | | | | Move EVP internals to evp_int.h, remove -Ievp hack from crypto/Makefile Reviewed-by: Matt Caswell <matt@openssl.org>
* Move some ASN.1 internals to asn1_int.hDr. Stephen Henson2015-03-241-1/+1
| | | | | | | | Move ASN.1 internals used across multiple directories into new internal header file asn1_int.h remove crypto/Makefile hack which allowed other directories to include "asn1_locl.h" Reviewed-by: Matt Caswell <matt@openssl.org>
* free NULL cleanupRich Salz2015-03-242-8/+4
| | | | | | | | Start ensuring all OpenSSL "free" routines allow NULL, and remove any if check before calling them. This gets ASN1_OBJECT_free and ASN1_STRING_free. Reviewed-by: Matt Caswell <matt@openssl.org>
* Fix dh_pub_encodeMatt Caswell2015-03-121-5/+7
| | | | | | | | The return value from ASN1_STRING_new() was not being checked which could lead to a NULL deref in the event of a malloc failure. Also fixed a mem leak in the error path. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Cleanse PKCS#8 private key components.Dr. Stephen Henson2015-03-081-4/+4
| | | | | | | | | New function ASN1_STRING_clear_free which cleanses an ASN1_STRING structure before freeing it. Call ASN1_STRING_clear_free on PKCS#8 private key components. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Unchecked malloc fixesMatt Caswell2015-03-051-0/+3
| | | | | | | Miscellaneous unchecked malloc fixes. Also fixed some mem leaks on error paths as I spotted them along the way. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Fix memory leakKurt Roeckx2015-02-221-0/+1
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Avoid a double-free in an error path.Doug Hogan2015-02-221-0/+1
| | | | | Signed-off-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Matt Caswell <matt@openssl.org>
* Dead code: crypto/dh,modes,pkcs12,ripemd,rsa,srpRich Salz2015-02-032-20/+2
| | | | | | | And an uncompiled C++ test file. Also remove srp_lcl.h, with help from Richard. Reviewed-by: Richard Levitte <levitte@openssl.org>
* clang on Linux x86_64 complains about unreachable code.Richard Levitte2015-01-291-1/+0
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* OPENSSL_NO_xxx cleanup: many removalsRich Salz2015-01-271-7/+1
| | | | | | | | | | | | The following compile options (#ifdef's) are removed: OPENSSL_NO_BIO OPENSSL_NO_BUFFER OPENSSL_NO_CHAIN_VERIFY OPENSSL_NO_EVP OPENSSL_NO_FIPS_ERR OPENSSL_NO_HASH_COMP OPENSSL_NO_LHASH OPENSSL_NO_OBJECT OPENSSL_NO_SPEED OPENSSL_NO_STACK OPENSSL_NO_X509 OPENSSL_NO_X509_VERIFY This diff is big because of updating the indents on preprocessor lines. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Run util/openssl-format-source -v -c .Matt Caswell2015-01-2214-2882/+2831
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* indent has problems with comments that are on the right hand side of a line.Matt Caswell2015-01-221-7/+10
| | | | | | | Sometimes it fails to format them very well, and sometimes it corrupts them! This commit moves some particularly problematic ones. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Fix source where indent will not be able to copeMatt Caswell2015-01-221-1/+3
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Cleanup OPENSSL_NO_xxx, part 1master-pre-reformatRich Salz2015-01-142-2/+2
| | | | | | | | | | OPENSSL_NO_RIPEMD160, OPENSSL_NO_RIPEMD merged into OPENSSL_NO_RMD160 OPENSSL_NO_FP_API merged into OPENSSL_NO_STDIO Two typo's on #endif comments fixed: OPENSSL_NO_ECB fixed to OPENSSL_NO_OCB OPENSSL_NO_HW_SureWare fixed to OPENSSL_NO_HW_SUREWARE Reviewed-by: Richard Levitte <levitte@openssl.org>
* RT3548: Remove unsupported platformsRich Salz2015-01-121-8/+2
| | | | | | | This last one for this ticket. Removes WIN16. So long, MS_CALLBACK and MS_FAR. We won't miss you. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix irix-cc build.Andy Polyakov2015-01-071-1/+1
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* mark all block comments that need format preserving so thatTim Hudson2014-12-302-2/+4
| | | | | | | indent will not alter them when reformatting comments Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Change all instances of OPENSSL_NO_DEPRECATED to OPENSSL_USE_DEPRECATEDMatt Caswell2014-12-181-5/+5
| | | | | | Introduce use of DECLARE_DEPRECATED Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove redundant OPENSSL_NO_DEPRECATED suppressionMatt Caswell2014-12-181-6/+0
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* RT3543: Remove #ifdef LINTRich Salz2014-12-101-3/+0
| | | | | | | I also replaced some exit/return wrappers in various programs (from main) to standardize on return. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Implement internally opaque bn access from dhMatt Caswell2014-12-086-203/+51
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* remove OPENSSL_FIPSAPIDr. Stephen Henson2014-12-082-2/+2
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Remove FIPS module code from crypto/dhDr. Stephen Henson2014-12-083-49/+0
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Remove fipscanister build functionality from makefiles.Dr. Stephen Henson2014-12-081-1/+1
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Remove all .cvsignore filesRich Salz2014-11-281-4/+0
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* RT3549: Remove obsolete files in cryptoRich Salz2014-10-013-257/+0
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* Add functions returning security bits.Dr. Stephen Henson2014-03-283-0/+20
| | | | | Add functions to return the "bits of security" for various public key algorithms. Based on SP800-57.
* dh_check.c: check BN_CTX_get's return value.Andy Polyakov2014-03-061-0/+1
|
* make dependDr. Stephen Henson2014-02-191-12/+26
|
* misspellings fixes by https://github.com/vlajos/misspell_fixerVeres Lajos2013-09-051-1/+1
|
* Fix compile errors.Ben Laurie2013-08-211-3/+4
|
* CMS RFC2631 X9.42 DH enveloped data support.Dr. Stephen Henson2013-08-054-9/+565
|
* Add KDF for DH.Dr. Stephen Henson2013-08-053-2/+206
| | | | | | | | Add X9.42 DH KDF. Move sharedinfo generation code to CMS library as the same structure is used by DH and ECDH. Move ASN1_OBJECT typedef to ossl_typ.h so it can be picked up by dh headers without the need to use ASN1.
* Extend DH parameter generation support.Dr. Stephen Henson2013-08-052-2/+121
| | | | | Add support for DH parameter generation using DSA methods including FIPS 186-3.
* Enhance DH dup functions.Dr. Stephen Henson2013-08-052-22/+60
| | | | Make DHparams_dup work properly with X9.42 DH parameters.
* If present print j, seed and counter values for DHDr. Stephen Henson2013-08-051-0/+25
|
* Version skew reduction: trivia (I hope).Ben Laurie2012-06-031-0/+1
|
* make updateDr. Stephen Henson2011-12-271-0/+8
|
* Initial experimental support for X9.42 DH parameter format to handleDr. Stephen Henson2011-12-074-17/+277
| | | | RFC5114 parameters and X9.42 DH public and private keys.
* Update DH_check() to peform sensible checks when q parameter is present.Dr. Stephen Henson2011-12-012-9/+42
|
* Correct some parameter values.Dr. Stephen Henson2011-12-011-3/+3
|
* Add RFC5114 DH parameters to OpenSSL. Add test data to dhtest.Dr. Stephen Henson2011-11-134-2/+591
|
* print out subgroup order if presentDr. Stephen Henson2011-10-111-0/+2
|
* make updateBodo Möller2011-09-051-11/+10
|
* Add flags for DH FIPS method.Dr. Stephen Henson2011-06-082-1/+16
| | | | Update/fix prototypes in fips.h
* Rename FIPS_mode_set and FIPS_mode. Theses symbols will be defined inDr. Stephen Henson2011-05-112-3/+3
| | | | the FIPS capable OpenSSL.