aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/dsa
Commit message (Collapse)AuthorAgeFilesLines
* DSA verification should insist that r and s are in the allowed range.Bodo Möller2001-06-261-0/+11
|
* In {RSA,DSA,DH}_new_method(x) need to increase the referenceDr. Stephen Henson2001-06-231-8/+15
| | | | | count of the ENGINE is x is not NULL since it will be freed in {RSA,DSA,DH}_free().
* make updateRichard Levitte2001-06-231-17/+27
|
* Change all calls to low level digest routines in the library andDr. Stephen Henson2001-06-192-7/+6
| | | | | | | | | | applications to use EVP. Add missing calls to HMAC_cleanup() and don't assume HMAC_CTX can be copied using memcpy(). Note: this is almost identical to the patch submitted to openssl-dev by Verdon Walker <VWalker@novell.com> except some redundant EVP_add_digest_()/EVP_cleanup() calls were removed and some changes made to avoid compiler warnings.
* 'make update'Richard Levitte2001-06-051-28/+39
|
* In RSA, DSA, DH, and RAND - if the "***_new()" function fails because theGeoff Thorpe2001-04-301-0/+1
| | | | ENGINE code does not return a default, set an error.
* Fix ASN1 bug when decoding OTHER type.Dr. Stephen Henson2001-04-213-1/+18
| | | | Various S/MIME DSA related fixes.
* Forcibly enable memory leak checking during "make test"Bodo Möller2001-03-111-0/+2
|
* Instead of telling both 'make' and the user that ranlibBodo Möller2001-03-091-2/+1
| | | | | | errors can be tolerated, hide the error from 'make'. This gives shorter output both if ranlib fails and if it works.
* Get rid of ASN1_ITEM_FUNCTIONS dummy functionDr. Stephen Henson2001-02-231-5/+5
| | | | | | prototype hack. This unfortunately means that every ASN1_*_END construct cannot have a trailing ;
* e_os.h does not belong with the exported headers. Do not put it thereRichard Levitte2001-02-221-44/+44
| | | | | | | | and make all files the depend on it include it without prefixing it with openssl/. This means that all Makefiles will have $(TOP) as one of the include directories.
* Use new-style system-id macros everywhere possible. I hope I haven'tRichard Levitte2001-02-201-2/+2
| | | | | | | missed any. This compiles and runs on Linux, and external applications have no problems with it. The definite test will be to build this on VMS.
* Use BN_rand_range().Ulf Möller2001-02-201-10/+3
|
* Make all configuration macros available for application by makingRichard Levitte2001-02-197-70/+69
| | | | | | | | | | | | sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
* Simplify BN_rand_rangeBodo Möller2001-02-101-1/+1
|
* Integrate my implementation of a countermeasure againstBodo Möller2001-02-081-1/+3
| | | | | | | | | | | | | | Bleichenbacher's DSA attack. With this implementation, the expected number of iterations never exceeds 2. New semantics for BN_rand_range(): BN_rand_range(r, min, range) now generates r such that min <= r < min+range. (Previously, BN_rand_range(r, min, max) generated r such that min <= r < max. It is more convenient to have the range; also the previous prototype was misleading because max was larger than the actual maximum.)
* Bleichenbacher's DSA attackUlf Möller2001-02-071-7/+1
|
* Make depend.Ben Laurie2001-02-041-45/+48
|
* Merge from the ASN1 branch of new ASN1 codeDr. Stephen Henson2000-12-084-80/+125
| | | | | | to main trunk. Lets see if the makes it to openssl-cvs :-)
* Do to DH and DSA what has already been done to RSA. This involves movingGeoff Thorpe2000-11-291-4/+4
| | | | | the initialisation and cleanup of "ex_data" elements to before an init() handler and after a finish() handler respectively.
* Make sure bs is assigned NULL when it's free'd, or there will be anRichard Levitte2000-11-191-0/+1
| | | | (incorrect) attempt to free it once more...
* in some new file names the first 8 characters were not uniqueUlf Möller2000-11-121-10/+8
|
* Constify DSA-related code.Richard Levitte2000-11-076-33/+35
|
* Merge the engine branch into the main trunk. All conflicts resolved.Richard Levitte2000-10-266-43/+151
| | | | At the same time, add VMS support for Rijndael.
* 'ranlib' doesn't always run on some systems. That's actuallyRichard Levitte2000-09-251-1/+2
| | | | | acceptable, since all that happens if it fails is a library with an index, which makes linking slower, but still working correctly.
* Don't set the two top bits to one when generating a random number < q.:wqUlf Möller2000-09-132-2/+2
|
* 'make update'Richard Levitte2000-09-071-8/+11
|
* Enable DSO support on alpha (OSF1), cc and gcc.Geoff Thorpe2000-06-131-21/+25
| | | | | | Also, "make update" has added some missing functions to libeay.num, updated the TABLE for the alpha changes, and updated thousands of dependancies that have changed from recent commits.
* Using checks of the existence of HEADER_{foo}_H in other header filesRichard Levitte2000-06-091-1/+4
| | | | | | | | | | | | | | | | | | | | was a really bad idea. For example, the following: #include <x509.h> #include <bio.h> #include <asn1.h> would make sure that things like ASN1_UTCTIME_print() wasn't defined unless you moved the inclusion of bio.h to above the inclusion of x509.h. The reason is that x509.h includes asn1.h, and the declaration of ASN1_UTCTIME_print() depended on the definition of HEADER_BIO_H. That's what I call an obscure bug. Instead, this change makes sure that whatever header files are needed for the correct process of one header file are included automagically, and that the definitions of, for example, BIO-related things are dependent on the absence of the NO_{foo} macros. This is also consistent with the way parts of OpenSSL can be excluded at will.
* There have been a number of complaints from a number of sources that namesRichard Levitte2000-06-012-10/+10
| | | | | | | | | like Malloc, Realloc and especially Free conflict with already existing names on some operating systems or other packages. That is reason enough to change the names of the OpenSSL memory allocation macros to something that has a better chance of being unique, like prepending them with OPENSSL_. This change includes all the name changes needed throughout all C files.
* In Message-ID: <003201bfb332$14a07520$0801a8c0@janm.transactionsite.com>,Richard Levitte2000-05-021-4/+4
| | | | | | "Jan Mikkelsen" <janm@transactionsite.com> correctly states that the OpenSSL header files have #include's and extern "C"'s in an incorrect order. Thusly fixed.
* The handling of DSA_METHOD and DH_METHOD wasn't quite as problematic asGeoff Thorpe2000-04-201-2/+1
| | | | | | with RSA_METHOD (the **_get_default_methods do set the default value if it's not set). However, the code had some duplication and was a bit conter-intuitive.
* Preserve reason strings in automatically build tables.Bodo Möller2000-03-051-1/+2
|
* Check BN_rand return value.Bodo Möller2000-02-291-1/+2
| | | | "make update".
* Cosmetic changes.Bodo Möller2000-02-051-0/+2
|
* New functions BN_CTX_start(), BN_CTX_get(), BN_CTX_end() to accessUlf Möller2000-02-051-11/+14
| | | | | temporary BIGNUMs. BN_CTX still uses a fixed number of BIGNUMs, but the BN_CTX implementation could now easily be changed.
* Add new -notext option to 'ca', -pubkey option to spkac.Dr. Stephen Henson2000-02-033-7/+8
| | | | | | | | Remove some "WTF??" casts from applications. Fixes to keep VC++ happy and avoid warnings. Docs tidy.
* Tolerate negative numbers in BN_is_prime.Bodo Möller2000-02-021-2/+4
|
* rndsort{Miller, Rabin} primality test.Bodo Möller2000-02-021-5/+3
|
* Tiny changes to previous patch (the log message was meant to beBodo Möller2000-01-301-3/+5
| | | | "Make DSA_generate_parameters faster").
* Make DSA_generate_parameters, and fix a couple of bugBodo Möller2000-01-304-100/+56
| | | | (including another problem in the s3_srvr.c state machine).
* Document DSA and SHA.Ulf Möller2000-01-273-13/+16
| | | | | | New function BN_pseudo_rand(). Use BN_prime_checks_size(BN_num_bits(w)) rounds of Miller-Rabin when generating DSA primes (why not use BN_is_prime()?)
* Tidy up CRYPTO_EX_DATA structures.Dr. Stephen Henson2000-01-233-16/+17
|
* Check RAND_bytes() return value or use RAND_pseudo_bytes().Ulf Möller2000-01-211-1/+1
|
* add "randomness"Bodo Möller2000-01-151-0/+4
|
* Allow additional information to be attached to aDr. Stephen Henson1999-11-041-2/+2
| | | | | certificate: currently this includes trust settings and a "friendly name".
* Improve support for running everything as a monolithic application.Bodo Möller1999-10-251-1/+5
| | | | Submitted by: Lennart Bång, Bodo Möller
* Replace the macros in asn1.h with function equivalents. Also make UTF8StringsDr. Stephen Henson1999-10-201-2/+2
| | | | tolerated in certificates.
* Add prototypes for new DSA functions Steve added recently.Ralf S. Engelschall1999-10-041-0/+4
|
* make update.Ulf Möller1999-08-241-3/+13
|
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-27 23:45:12 +0000