aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/dsa
Commit message (Collapse)AuthorAgeFilesLines
...
* "make update"Lutz Jänicke2002-07-301-38/+37
|
* Replace 'ecdsaparam' commandline utility by 'ecparam'Bodo Möller2002-07-141-9/+17
| | | | | | | | | | | | | | (the same keys can be used for ECC schemes other than ECDSA) and add some new options. Similarly, use string "EC PARAMETERS" instead of "ECDSA PARAMETERS" in 'PEM' format. Fix ec_asn1.c (take into account the desired conversion form). 'make update'. Submitted by: Nils Larsch
* Pass CFLAG to dependency makers, so non-standard system include paths areRichard Levitte2002-06-271-1/+1
| | | | | handled properly. Part of PR 75
* Make {RSA,DSA,DH}_new_method obtain and release an ENGINEDr. Stephen Henson2002-03-093-6/+17
| | | | functional reference in all cases.
* Make sure the type accessed by the LONG and ZLONG ASN1 typeDr. Stephen Henson2002-03-051-1/+1
| | | | | is really a long, to avoid problems on platforms where sizeof(int) != sizeof(long).
* ECDSA supportBodo Möller2002-02-131-33/+38
| | | | Submitted by: Nils Larsch <nla@trustcenter.de>
* remove redundant ERR_load_... declarationsBodo Möller2001-12-171-2/+0
|
* Retain compatibility of EVP_DigestInit() and EVP_DigestFinal()Dr. Stephen Henson2001-10-161-3/+3
| | | | | | with existing code. Modify library to use digest *_ex() functions.
* 'make update'Richard Levitte2001-10-041-26/+26
|
* Because there's chances we clash with the system's types.h, rename ourRichard Levitte2001-10-041-1/+1
| | | | types.h to ossl_typ.h.
* "make update".Geoff Thorpe2001-09-251-2/+4
|
* This commits changes to various parts of libcrypto required by the recentGeoff Thorpe2001-09-256-100/+60
| | | | | | | | | | | ENGINE surgery. DH, DSA, RAND, and RSA now use *both* "method" and ENGINE pointers to manage their hooking with ENGINE. Previously their use of "method" pointers was replaced by use of ENGINE references. See crypto/engine/README for details. Also, remove the ENGINE iterations from evp_test - even when the cipher/digest code is committed in, this functionality would require a different set of API calls.
* Rename recently introduced functions for improved code clarity:Bodo Möller2001-09-032-3/+3
| | | | [DR]SA_up => [DR]SA_up_ref
* Make the necessary changes to work with the recent "ex_data" overhaul.Geoff Thorpe2001-09-012-9/+6
| | | | | | | | | | | See the commit log message for that for more information. NB: X509_STORE_CTX's use of "ex_data" support was actually misimplemented (initialisation by "memset" won't/can't/doesn't work). This fixes that but requires that X509_STORE_CTX_init() be able to handle errors - so its prototype has been changed to return 'int' rather than 'void'. All uses of that function throughout the source code have been tracked down and adjusted.
* Give DH, DSA, and RSA functions to "up" their reference counts. Otherwise,Geoff Thorpe2001-08-252-1/+19
| | | | | | | dependant code has to directly increment the "references" value of each such structure using the corresponding lock. Apart from code duplication, this provided no "REF_CHECK/REF_PRINT" checking and violated encapsulation.
* The indexes returned by ***_get_ex_new_index() functions are used whenGeoff Thorpe2001-08-121-3/+4
| | | | | | | | setting stack (actually, array) values in ex_data. So only increment the global counters if the underlying CRYPTO_get_ex_new_index() call succeeds. This change doesn't make "ex_data" right (see the comment at the head of ex_data.c to know why), but at least makes the source code marginally less frustrating.
* Start to reduce some of the header bloat.Ben Laurie2001-08-051-37/+24
|
* Header bloat reduction for EVP_PKEY.Ben Laurie2001-08-031-4/+3
|
* make updateRichard Levitte2001-07-311-8/+8
|
* Really add the EVP and all of the DES changes.Ben Laurie2001-07-302-75/+41
|
* Fix problem occuring when used from OpenSSH on Solaris 8.Lutz Jänicke2001-07-261-1/+1
|
* DSA verification should insist that r and s are in the allowed range.Bodo Möller2001-06-261-0/+11
|
* In {RSA,DSA,DH}_new_method(x) need to increase the referenceDr. Stephen Henson2001-06-231-8/+15
| | | | | count of the ENGINE is x is not NULL since it will be freed in {RSA,DSA,DH}_free().
* make updateRichard Levitte2001-06-231-17/+27
|
* Change all calls to low level digest routines in the library andDr. Stephen Henson2001-06-192-7/+6
| | | | | | | | | | applications to use EVP. Add missing calls to HMAC_cleanup() and don't assume HMAC_CTX can be copied using memcpy(). Note: this is almost identical to the patch submitted to openssl-dev by Verdon Walker <VWalker@novell.com> except some redundant EVP_add_digest_()/EVP_cleanup() calls were removed and some changes made to avoid compiler warnings.
* 'make update'Richard Levitte2001-06-051-28/+39
|
* In RSA, DSA, DH, and RAND - if the "***_new()" function fails because theGeoff Thorpe2001-04-301-0/+1
| | | | ENGINE code does not return a default, set an error.
* Fix ASN1 bug when decoding OTHER type.Dr. Stephen Henson2001-04-213-1/+18
| | | | Various S/MIME DSA related fixes.
* Forcibly enable memory leak checking during "make test"Bodo Möller2001-03-111-0/+2
|
* Instead of telling both 'make' and the user that ranlibBodo Möller2001-03-091-2/+1
| | | | | | errors can be tolerated, hide the error from 'make'. This gives shorter output both if ranlib fails and if it works.
* Get rid of ASN1_ITEM_FUNCTIONS dummy functionDr. Stephen Henson2001-02-231-5/+5
| | | | | | prototype hack. This unfortunately means that every ASN1_*_END construct cannot have a trailing ;
* e_os.h does not belong with the exported headers. Do not put it thereRichard Levitte2001-02-221-44/+44
| | | | | | | | and make all files the depend on it include it without prefixing it with openssl/. This means that all Makefiles will have $(TOP) as one of the include directories.
* Use new-style system-id macros everywhere possible. I hope I haven'tRichard Levitte2001-02-201-2/+2
| | | | | | | missed any. This compiles and runs on Linux, and external applications have no problems with it. The definite test will be to build this on VMS.
* Use BN_rand_range().Ulf Möller2001-02-201-10/+3
|
* Make all configuration macros available for application by makingRichard Levitte2001-02-197-70/+69
| | | | | | | | | | | | sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
* Simplify BN_rand_rangeBodo Möller2001-02-101-1/+1
|
* Integrate my implementation of a countermeasure againstBodo Möller2001-02-081-1/+3
| | | | | | | | | | | | | | Bleichenbacher's DSA attack. With this implementation, the expected number of iterations never exceeds 2. New semantics for BN_rand_range(): BN_rand_range(r, min, range) now generates r such that min <= r < min+range. (Previously, BN_rand_range(r, min, max) generated r such that min <= r < max. It is more convenient to have the range; also the previous prototype was misleading because max was larger than the actual maximum.)
* Bleichenbacher's DSA attackUlf Möller2001-02-071-7/+1
|
* Make depend.Ben Laurie2001-02-041-45/+48
|
* Merge from the ASN1 branch of new ASN1 codeDr. Stephen Henson2000-12-084-80/+125
| | | | | | to main trunk. Lets see if the makes it to openssl-cvs :-)
* Do to DH and DSA what has already been done to RSA. This involves movingGeoff Thorpe2000-11-291-4/+4
| | | | | the initialisation and cleanup of "ex_data" elements to before an init() handler and after a finish() handler respectively.
* Make sure bs is assigned NULL when it's free'd, or there will be anRichard Levitte2000-11-191-0/+1
| | | | (incorrect) attempt to free it once more...
* in some new file names the first 8 characters were not uniqueUlf Möller2000-11-121-10/+8
|
* Constify DSA-related code.Richard Levitte2000-11-076-33/+35
|
* Merge the engine branch into the main trunk. All conflicts resolved.Richard Levitte2000-10-266-43/+151
| | | | At the same time, add VMS support for Rijndael.
* 'ranlib' doesn't always run on some systems. That's actuallyRichard Levitte2000-09-251-1/+2
| | | | | acceptable, since all that happens if it fails is a library with an index, which makes linking slower, but still working correctly.
* Don't set the two top bits to one when generating a random number < q.:wqUlf Möller2000-09-132-2/+2
|
* 'make update'Richard Levitte2000-09-071-8/+11
|
* Enable DSO support on alpha (OSF1), cc and gcc.Geoff Thorpe2000-06-131-21/+25
| | | | | | Also, "make update" has added some missing functions to libeay.num, updated the TABLE for the alpha changes, and updated thousands of dependancies that have changed from recent commits.
* Using checks of the existence of HEADER_{foo}_H in other header filesRichard Levitte2000-06-091-1/+4
| | | | | | | | | | | | | | | | | | | | was a really bad idea. For example, the following: #include <x509.h> #include <bio.h> #include <asn1.h> would make sure that things like ASN1_UTCTIME_print() wasn't defined unless you moved the inclusion of bio.h to above the inclusion of x509.h. The reason is that x509.h includes asn1.h, and the declaration of ASN1_UTCTIME_print() depended on the definition of HEADER_BIO_H. That's what I call an obscure bug. Instead, this change makes sure that whatever header files are needed for the correct process of one header file are included automagically, and that the definitions of, for example, BIO-related things are dependent on the absence of the NO_{foo} macros. This is also consistent with the way parts of OpenSSL can be excluded at will.