aboutsummaryrefslogtreecommitdiff
path: root/crypto/bn
AgeCommit message (Collapse)AuthorFilesLines
2001-03-09Bug fixes.Richard Levitte1-7/+8
2001-03-08Implement EC_GFp_mont_method.Bodo Möller1-3/+3
2001-03-08CommentBodo Möller1-0/+2
2001-03-08Hide BN_CTX structure details.Bodo Möller4-18/+29
Incease the number of BIGNUMs in a BN_CTX.
2001-03-08Constify BN_value_one.Bodo Möller2-2/+2
2001-03-08More method functions for EC_GFp_simple_method.Bodo Möller1-1/+0
2001-03-07Code for better build under Darwin (MacOS X).Richard Levitte2-2/+2
Submitted by Brad Dominy <jdominy@darwinuser.org>
2001-02-28Fix a bug which caused BN_div to produce theDr. Stephen Henson1-1/+5
wrong result if rm==num and num < 0.
2001-02-22e_os.h does not belong with the exported headers. Do not put it thereRichard Levitte2-123/+118
and make all files the depend on it include it without prefixing it with openssl/. This means that all Makefiles will have $(TOP) as one of the include directories.
2001-02-22Use e_os2.h rather than opensslconf.h, since some needed macros areRichard Levitte1-1/+1
defined there.
2001-02-20Use new-style system-id macros everywhere possible. I hope I haven'tRichard Levitte5-7/+7
missed any. This compiles and runs on Linux, and external applications have no problems with it. The definite test will be to build this on VMS.
2001-02-20Fix BN_[pseudo_]rand: 'mask' must be used even if top=-1.Bodo Möller1-4/+3
Mention BN_[pseudo_]rand with top=-1 in CHANGES.
2001-02-20Use new-style system-id macros.Richard Levitte1-1/+1
2001-02-20BN_rand_range() needs a BN_rand() variant that doesn't set the MSB.Ulf Möller1-12/+15
2001-02-19Make all configuration macros available for application by makingRichard Levitte9-44/+49
sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
2001-02-10Simplify BN_rand_rangeBodo Möller2-8/+4
2001-02-08Another comment change. (Previous comment does not applyBodo Möller1-2/+2
for range = 11000000... or range = 100000...)
2001-02-08Change comments. (The expected number of iterations in BN_rand_rangeBodo Möller1-2/+2
never exceeds 1.333...).
2001-02-08oops -- remove observation codeBodo Möller1-4/+0
2001-02-08Integrate my implementation of a countermeasure againstBodo Möller3-7/+60
Bleichenbacher's DSA attack. With this implementation, the expected number of iterations never exceeds 2. New semantics for BN_rand_range(): BN_rand_range(r, min, range) now generates r such that min <= r < min+range. (Previously, BN_rand_range(r, min, max) generated r such that min <= r < max. It is more convenient to have the range; also the previous prototype was misleading because max was larger than the actual maximum.)
2001-02-07Bleichenbacher's DSA attackUlf Möller2-0/+12
2001-01-23There is no C version of bn_div_3_wordsUlf Möller1-1/+1
2000-12-15The C version of bn_sub_part_words is needed not onlyBodo Möller1-1/+1
in NO_ASM configurations
2000-12-15Very few in the "README" is up-to-dateBodo Möller1-0/+4
2000-12-14The BN_mul bug test apparently is no longer neededBodo Möller1-37/+0
2000-12-13Problem: bn_mul_normal() misbehaves if the size of b is 0.Richard Levitte1-1/+7
Solution: multiply a with 0, putting the result in r, and return.
2000-12-13In bn_mul_recursive(), make sure the comba routines are only calledRichard Levitte1-4/+7
when both a and b are of the exact right size. This may change to something better later.
2000-12-13Rewrite the extension code to use an ASN1_ITEM structureDr. Stephen Henson1-1/+1
for its ASN1 operations as well as the old style function pointers (i2d, d2i, new, free). Change standard extensions to support this. Fix a warning in BN_mul(), bn_mul.c about uninitialised 'j'.
2000-12-08bn_part_sub_word prototype.Ulf Möller1-0/+2
2000-12-07Fix some things that look like bugs.Bodo Möller5-47/+111
One problem that looked like a problem in bn_recp.c at first turned out to be a BN_mul bug. An example is given in bn_recp.c; finding the bug responsible for this is left as an exercise.
2000-12-07TEST_MUL and TEST_SQR added.Bodo Möller1-2/+24
2000-12-07Sign-related fixes (and tests).Bodo Möller3-17/+30
BN_mod_exp_mont does not work properly yet if modulus m is negative (we want computations to be carried out modulo |m|).
2000-12-07Move 'q->neg = 0' to those places where it is neededBodo Möller1-1/+5
(just in cases someone uses a negative modulus)
2000-12-06BN_mod_sqrt documentation/commentBodo Möller1-1/+1
2000-12-06remove a comment that shouldn't have been there any moreUlf Möller1-1/+1
2000-12-06Faster BN_mod_sqrt algorithm for p == 5 (8).Bodo Möller1-5/+79
2000-12-06Use bc's "print" feature whenever it is available,Bodo Möller1-2/+0
not just on certain platforms.
2000-12-06remove useless instructionUlf Möller1-2/+0
2000-12-06Intel assembler version for bn_sub_part_words(). I haven't gotUlf Möller2-2/+215
reliable timings yet, please try it out!
2000-12-06test_mod_mul is useful, let's run it more often.Ulf Möller1-1/+3
2000-12-05Use assert as in the rest of the BN library.Ulf Möller1-0/+5
2000-12-04Remove the last bn_wexpand()s that made us break constness. OfRichard Levitte2-54/+94
course, that means we need to handle the cases where the two arrays to bn_mul_recursive() and bn_mul_part_recursive() differ in size. I haven't yet changed the comments that describe bn_mul_recursive() and bn_mul_part_recursive(). I want this to be tested by more people before I consider this change final. Please test away!
2000-12-04Change error message to "bignum too long"Bodo Möller3-3/+3
2000-12-03include <limits.h>Bodo Möller1-0/+1
2000-12-03Don't allow BIGNUMs to become so large that computations with dmaxBodo Möller3-0/+8
might overflow.
2000-12-02Add a comment to explain the purpose of bn_cmp_part_words().Richard Levitte1-0/+7
2000-12-02last commit was wrong. Now it works. :)Ulf Möller1-2/+2
2000-12-02arglUlf Möller1-1/+1
2000-12-02forgot to remove the loop variableUlf Möller1-8/+0
2000-12-02Loops like this one:Ulf Möller1-28/+0
if (bp == NULL) for (j=0; j<10000; j++) BN_add(&c,&a,&b); seem to be pretty useless, and bp never is NULL anyway.