aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2018-03-29Fix typo in point_add.chromium-3359David Benjamin3-102/+110
2018-02-28Record whether dummy PQ padding was used.Adam Langley9-8/+53
2018-02-27Remove redundant assertion in fe_mul_121666_impl.Daniel Hirche1-4/+0
2018-02-27Update dummy PQ extension for round two.Adam Langley6-17/+82
2018-02-27third_party: re-format METATADA filesMartin Kreichgauer2-4/+3
2018-02-26Update link to CMVP certificate.Adam Langley1-1/+1
2018-02-26Remove trailing whitespace from ssl/.Adam Langley6-31/+31
2018-02-22Always use adr with __thumb2__.David Benjamin2-6/+6
2018-02-21Remove redundant length-check in |ec_wNAF_mul|.Daniel Hirche1-1/+6
2018-02-20Delete |pthread_key_t| on dlclose.Fred Gylys-Colwell1-5/+35
2018-02-20Merge NIAP and FIPS test suites.Adam Langley1-10/+1
2018-02-16Actually use the u64 cast.David Benjamin1-14/+14
2018-02-16Add AES_128_CCM AEAD.Steven Valdez10-0/+532
2018-02-15Document RSAZ slightly better.David Benjamin1-6/+13
2018-02-15Remove SSLv3_method and friends.David Benjamin4-61/+2
2018-02-15Reject compressed ECDH coordinates in TLS.David Benjamin6-71/+122
2018-02-14Remove unused strings.h #include from crypto/mem.cAaron Green1-2/+0
2018-02-13clang-format RSAZ C code.David Benjamin2-189/+193
2018-02-13Adjust comment on potential R^3 optimization.David Benjamin1-1/+4
2018-02-13Add cpu-aarch64-fuchsia.cAaron Green4-2/+59
2018-02-12Add a tuned variable-time P-256 multiplication function.David Benjamin3-22/+105
2018-02-12Merge Intel copyright notice into standardDavid Benjamin7-231/+93
2018-02-11Sync up AES assembly.David Benjamin4-18/+282
2018-02-11Sync up some perlasm license headers and easy fixes.David Benjamin18-65/+160
2018-02-11p256-x86_64.pl: add CFI directives.David Benjamin1-0/+91
2018-02-11p256-x86_64-asm.pl: Win64 SEH face-lift.David Benjamin1-63/+368
2018-02-11p256-x86_64-asm.pl: Add OpenSSL copyrightDavid Benjamin1-1/+7
2018-02-11p256-x86_64.pl: update commentary with before-after performance data.David Benjamin1-12/+16
2018-02-10Return NULL instead of zero in |bn_resized_from_ctx|.Daniel Hirche1-1/+1
2018-02-09Fix threading issues with RSA freeze_private_key.David Benjamin3-31/+66
2018-02-07Don't crash when failing to set affine coordinates when the generator is miss...Adam Langley1-1/+7
2018-02-06Add BN_count_low_zero_bits.David Benjamin3-0/+63
2018-02-06Make BN_cmp constant-time.David Benjamin5-112/+41
2018-02-06Simplify bn_mul_part_recursive.David Benjamin1-40/+24
2018-02-06Fix over-allocated bounds on bn_mul_part_recursive.David Benjamin1-3/+1
2018-02-06Make bn_mul_part_recursive constant-time.David Benjamin3-152/+92
2018-02-06Don't allocate oversized arrays for bn_mul_recursive.David Benjamin1-31/+24
2018-02-06Make bn_mul_recursive constant-time.David Benjamin2-107/+149
2018-02-06Make bn_sqr_recursive constant-time.David Benjamin5-95/+69
2018-02-06Simplify BN_bn2bin_padded.David Benjamin2-75/+32
2018-02-06Make the rest of RSA CRT constant-time.David Benjamin3-97/+100
2018-02-06Split BN_uadd into a bn_uadd_fixed.David Benjamin2-44/+25
2018-02-06Compute mont->RR in constant-time.David Benjamin3-37/+26
2018-02-06Make BN_mod_*_quick constant-time.David Benjamin6-103/+211
2018-02-06Remove DSA k+q kludge.David Benjamin1-47/+13
2018-02-05Normalize RSA private component widths.David Benjamin2-19/+100
2018-02-05Don't leak widths in bn_mod_mul_montgomery_fallback.David Benjamin3-6/+66
2018-02-05Remove some easy bn_set_minimal_width calls.David Benjamin5-24/+3
2018-02-05Rename bn->top to bn->width.David Benjamin23-233/+252
2018-02-05Tidy BN_bn2hex and BN_print with non-minimal inputs.David Benjamin2-5/+34