aboutsummaryrefslogtreecommitdiff
path: root/crypto/dh
AgeCommit message (Collapse)AuthorFilesLines
2005-09-01Extend callback function to support print customization.Dr. Stephen Henson1-2/+3
2005-08-21Make D-H safer, include well-known primes.Ben Laurie4-0/+36
2005-05-27Use BN_with_flags() in a cleaner way.Bodo Möller1-0/+1
2005-05-16Further BUILDENV refinement, further fool-proofing of Makefiles andAndy Polyakov1-2/+1
[most importantly] put back dependencies accidentaly eliminated in check-in #13342.
2005-05-16Implement fixed-window exponentiation to mitigate hyper-threadingBodo Möller3-4/+36
timing attacks. BN_FLG_EXP_CONSTTIME requests this algorithm, and this done by default for RSA/DSA/DH private key computations unless RSA_FLAG_NO_EXP_CONSTTIME/DSA_FLAG_NO_EXP_CONSTTIME/ DH_FLAG_NO_EXP_CONSTTIME is set. Submitted by: Matthew D Wood Reviewed by: Bodo Moeller
2005-05-15Fool-proofing MakefilesAndy Polyakov1-4/+1
2005-04-28Pointer to BN_MONT_CTX could be used uninitialized.Andy Polyakov1-2/+2
2005-04-27Change method_mont_p from (char *) to (BN_MONT_CTX *) and remove severalDr. Stephen Henson2-6/+4
casts.
2005-04-26Port BN_MONT_CTX_set_locked() from stable branch.Dr. Stephen Henson1-10/+14
The function rsa_eay_mont_helper() has been removed because it is no longer needed after this change.
2005-04-26Fix various incorrect error function codes.Bodo Möller4-11/+13
("perl util/ck_errf.pl */*.c */*/*.c" still reports many more.)
2005-04-12Rebuild error codes.Dr. Stephen Henson1-12/+15
2005-04-11Add emacs cache files to .cvsignore.Richard Levitte1-0/+2
2005-03-31Give everything prototypes (well, everything that's actually used).Ben Laurie1-11/+3
2005-03-30Blow away Makefile.ssl.Ben Laurie1-4/+3
2004-11-02Don't use $(EXHEADER) directly in for loops, as most shells will breakRichard Levitte1-1/+1
if $(EXHEADER) is empty. Notified by many, solution suggested by Carson Gaspar <carson@taltos.org>
2004-05-17After the latest round of header-hacking, regenerate the dependencies inGeoff Thorpe1-7/+7
the Makefiles. NB: this commit is probably going to generate a huge posting and it is highly uninteresting to read.
2004-05-17Deprecate the recursive includes of bn.h from various API headers (asn1.h,Geoff Thorpe1-2/+3
dh.h, dsa.h, ec.h, ecdh.h, ecdsa.h, rsa.h), as the opaque bignum types are already declared in ossl_typ.h. Add explicit includes for bn.h in those C files that need access to structure internals or API functions+macros.
2004-04-19make updateGeoff Thorpe1-15/+7
2004-04-19Reduce header interdependencies, initially in engine.h (the rest of theGeoff Thorpe1-3/+6
changes are the fallout). As this could break source code that doesn't directly include headers for interfaces it uses, changes to recursive includes are covered by the OPENSSL_NO_DEPRECATED symbol. It's better to define this when building and using openssl, and then adapt code where necessary - this is how to stay current. However the mechanism exists for the lethargic.
2003-12-27Use sh explicitely to run point.shRichard Levitte1-1/+1
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-11-28Netware-specific changes,Richard Levitte1-3/+3
PR: 780 Submitted by: Verdon Walker <VWalker@novell.com> Reviewed by: Richard Levitte
2003-10-29Update any code that was using deprecated functions so that everything buildsGeoff Thorpe1-6/+10
and links with OPENSSL_NO_DEPRECATED defined.
2003-10-29When OPENSSL_NO_DEPRECATED is defined, deprecated functions are (or shouldGeoff Thorpe1-0/+4
be) precompiled out in the API headers. This change is to ensure that if it is defined when compiling openssl, the deprecated functions aren't implemented either.
2003-05-01make updateRichard Levitte1-5/+9
2003-04-10make updateRichard Levitte1-9/+5
2003-04-08We seem to carry some rests of the 0.9.6 [engine] ENGINE framework in formRichard Levitte1-3/+0
of unneeded includes of openssl/engine.h.
2003-03-20Make sure we get the definition of OPENSSL_NO_DH.Richard Levitte1-0/+2
2003-03-20Make sure we get the definition of OPENSSL_NO_ERR.Richard Levitte1-0/+1
2003-02-22more mingw related cleanups.Ulf Möller1-7/+0
2003-01-30The OPENSSL_NO_ENGINE has small problem: it changes certain structures. That'sRichard Levitte1-2/+0
bad, so let's not check OPENSSL_NO_ENGINE in those places. Fortunately, all the header files where the problem existed include ossl_typ.h, which makes a 'forward declaration' of the ENGINE type.
2003-01-30Add the possibility to build without the ENGINE framework.Richard Levitte3-0/+14
PR: 287
2003-01-15As with RSA, which was modified recently, this change makes it possible toGeoff Thorpe3-1/+13
override key-generation implementations by placing handlers in the methods for DSA and DH. Also, parameter generation for DSA and DH is possible by another new handler for each method.
2002-12-09make updateRichard Levitte1-0/+8
2002-12-08Nils Larsch submitted;Geoff Thorpe1-3/+1
- a patch to fix a memory leak in rsa_gen.c - a note about compiler warnings with unions - a note about improving structure element names This applies his patch and implements a solution to the notes.
2002-12-08This is a first-cut at improving the callback mechanisms used inGeoff Thorpe6-21/+113
key-generation and prime-checking functions. Rather than explicitly passing callback functions and caller-defined context data for the callbacks, a new structure BN_GENCB is defined that encapsulates this; a pointer to the structure is passed to all such functions instead. This wrapper structure allows the encapsulation of "old" and "new" style callbacks - "new" callbacks return a boolean result on the understanding that returning FALSE should terminate keygen/primality processing. The BN_GENCB abstraction will allow future callback modifications without needing to break binary compatibility nor change the API function prototypes. The new API functions have been given names ending in "_ex" and the old functions are implemented as wrappers to the new ones. The OPENSSL_NO_DEPRECATED symbol has been introduced so that, if defined, declaration of the older functions will be skipped. NB: Some openssl-internal code will stick with the older callbacks for now, so appropriate "#undef" logic will be put in place - this is in case the user is *building* openssl (rather than *including* its headers) with this symbol defined. There is another change in the new _ex functions; the key-generation functions do not return key structures but operate on structures passed by the caller, the return value is a boolean. This will allow for a smoother transition to having key-generation as "virtual function" in the various ***_METHOD tables.
2002-11-28Have all tests use EXIT() to exit rather than exit(), since the latter doesn'tRichard Levitte1-2/+5
always give the expected result on some platforms.
2002-10-09Use double dashes so makedepend doesn't misunderstand the flags weRichard Levitte1-1/+1
give it. For 0.9.7 and up, that means util/domd needs to remove those double dashes from the argument list when gcc is used to find the dependencies.
2002-08-09make updateBodo Möller1-16/+16
2002-07-30"make update"Lutz Jänicke1-4/+2
2002-06-27Pass CFLAG to dependency makers, so non-standard system include paths areRichard Levitte1-1/+1
handled properly. Part of PR 75
2002-03-20fix DH_generate_parameters for general 'generator'Bodo Möller4-9/+39
2002-03-16Ensure EVP_CipherInit() uses the correct encode/decode parameter ifDr. Stephen Henson1-1/+1
enc == -1 [Reported by Markus Friedl <markus@openbsd.org>] Fix typo in dh_lib.c (use of DSAerr instead of DHerr).
2002-03-09Make {RSA,DSA,DH}_new_method obtain and release an ENGINEDr. Stephen Henson3-6/+17
functional reference in all cases.
2002-03-05Make sure the type accessed by the LONG and ZLONG ASN1 typeDr. Stephen Henson1-1/+1
is really a long, to avoid problems on platforms where sizeof(int) != sizeof(long).
2002-02-13ECDSA supportBodo Möller1-2/+6
Submitted by: Nils Larsch <nla@trustcenter.de>
2001-12-17remove redundant ERR_load_... declarationsBodo Möller1-1/+0
2001-11-15make updateRichard Levitte1-1/+1
perl util/mkerr.pl -recurse -write -rebuild
2001-10-04'make update'Richard Levitte1-19/+19
2001-10-04Because there's chances we clash with the system's types.h, rename ourRichard Levitte1-1/+1
types.h to ossl_typ.h.
2001-09-25indentation.Geoff Thorpe1-1/+1
generated by cgit v1.1 at 2024-07-13 19:55:52 +0000