Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Related: CVE-2022-29242
|
|
Resolves: CVE-2022-29242
|
|
Resolves: CVE-2022-29242
|
|
|
|
It's not right to have segmentation faults.
|
|
|
|
add new 'tls13' openssl patch
CI: .cirrus, GitHub Actions
|
|
|
|
|
|
two new modes (long and short) per MGM algorithm (magma and kuznyechik).
|
|
reverse byte order
|
|
|
|
|
|
add new patch to update OpenSSL objects database
|
|
|
|
without any speedup math calculation
|
|
revert commit 4108e77e0eb091fdd9b9c4174374a6ac0cc0abd0:
remove "const" in pub_decode_gost_ec().
First commited on master branch on May 26, 2020 (see https://github.com/openssl/openssl/commit/7674e92324648b59786d86d8e9014bbaed4e6d07).
partially revert commit dbc8f4780fa78d66a68174f78f9ae9aa9cdad53c:
OpenSSL v.1.1.1 API has no function EC_GROUP_get0_field().
First commited on master branch on Feb 15, 2019 (see https://github.com/openssl/openssl/commit/fa1f03061037cbdac5369849a885c1191a2550d9).
checks OpenSSL v.3.0 API function calls:
OSSL_STORE_attach(), PEM_write_bio_X509_PUBKEY()/i2d_X509_PUBKEY_bio().
First commited on master branch on May 13, 2020 (see https://github.com/openssl/openssl/commit/6ab6ecfd6d2d659326f427dceb1b65ae1b4b012b).
First commited on master branch on Nov 29, 2019 (see https://github.com/openssl/openssl/commit/cb58d81e68c72ab0128e0a5fc6faa007f8632acd).
|
|
|
|
If at the input of the encryption function in the CFB mode we have
an integer number of blocks, then in the main loop all blocks will be
processed, except for the last one due to an incorrect border check.
The last block will be fully processed as a "partial" remainder, but
the initialization vector will not be updated. And, thus, the value
of IV will always be incorrect in this case.
This breaks stateless protocols due to an invalid initialization vector:
all messages except the first cannot be decrypted. (Naturally, we are
talking about a case with disabled key meshing, which does not allow
context recovery due to an erroneous implementation.)
It is worth noting here that the code for processing partial blocks
(both at the input of the encryption functions and at the output) is
a historically unnecessary artifact, since we do not set the
EVP_CIPH_FLAG_CUSTOM_CIPHER flag and, as a result, OpenSSL processes
partial blocks for us.
This patch corrects the checking of the main loop boundary.
A similar error is present in the code for the CNT mode, but there it
does not manifest itself in any way, because the restoration of the
state in this mode is impossible: even after disabling key meshing, we
still have the state-dependent transformation of the IV.
As an extra result of this fix, the code for processing partial blocks
can be completely removed now.
(cherry picked from commit cf402dd4d89271d5b1ca4ea938ce7a2f13a44d58)
|
|
Fixed bug when acpkm key meshing didn't apply at appropriate time
during TLS secure exchange.
Unify usage of 'num' variable of EVP_CIPHER_CTX for kuznetchik and
magma.
(cherry picked from commit 2dd3a2f2e9a6286fab4dd80f7f127ce8289bc77e)
|
|
(cherry picked from commit 447f1be1ca0e61348f7fe627d95ab0298d27b624)
|
|
(cherry picked from commit e1afd2a137a0a4cab89260202fdc1828263d098d)
|
|
|
|
(cherry picked from commit 47be42da87cb9bf9bad6f415c442b586ce0752ef)
|
|
(cherry picked from commit 1997dd99db27383a89d1f91bd4d7091b553ca6ee)
|
|
This is based on AX_CHECK_ALIGNED_ACCESS_REQUIRED from autoconf-archive.
Note, that on some arches unaligned access behavior could be changed at
runtime via prctl(1). Also, unaligned memory access is still slower (and
very slow on some arches) even if it's not strictly required.
(cherry picked from commit d2810d23a9f30ae885f9bf0783f0847a12972ff3)
|
|
(cherry picked from commit f1f47c6c7710291157aa863768d9048aaeaa9530)
|
|
This branch is created for experiments with the patched OpenSSL version.
The patch implements Russian GOST TLS 1.2 and TLS 1.3 support in
OpenSSL.
Some parts of the patch are already included in OpenSSL 3.0, some are
not and possibly, will never be.
This branch is recommended for ditribution builders and those who want
make experiments. It MUST NOT be used instead of system OpenSSL.
|
|
|
|
|
|
|
|
Plus some minor style fix
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
ECCKiila Changes from
https://gitlab.com/nisec/ecckiila/-/issues/2
https://gitlab.com/nisec/ecckiila/-/commit/7445ecabef77965743e0ae8d39d7433b07820be6
* X3 -> X1
* eliminate a temp variable
X3 = X1 as pointers is the reason this was still passing unit tests.
But that might not hold in future versions of ECCKiila, so fix it now.
|