wireguard-openbsd/lib/libcrypto/ecdsa, branch master WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libcrypto/ecdsa?h=master 2019-06-04T18:15:27Z Readability tweak in a comment. 2019-06-04T18:15:27Z tb tb@openbsd.org 2019-06-04T18:15:27Z urn:sha1:759317bf8c074545ab9a48c6d2e234e34b86080e Remove the blinding later to avoid leaking information on the length 2019-06-04T18:13:44Z tb tb@openbsd.org 2019-06-04T18:13:44Z urn:sha1:eb2dca2073870073536057ba5bdbe19cb230cf52 of ckinv. Pointed out and fix suggested by David Schrammel and Samuel Weiser ok jsing Partial port of EC_KEY_METHOD from OpenSSL 1.1. 2019-01-19T01:17:41Z tb tb@openbsd.org 2019-01-19T01:17:41Z urn:sha1:f834e5a48e732ca548b7679601cc2d82a675d55a Pass const method to EC_KEY_METHOD_get_*() to get rid of an XXX. from markus Partial port of EC_KEY_METHOD from OpenSSL 1.1. 2019-01-19T01:12:47Z tb tb@openbsd.org 2019-01-19T01:12:47Z urn:sha1:88d962f5758cb3c0e0415ce7b30e4428ae620f74 This commit adds missing API for ECDH/ECDSA_verify. from markus Partial port of EC_KEY_METHOD from OpenSSL 1.1. 2019-01-19T01:07:00Z tb tb@openbsd.org 2019-01-19T01:07:00Z urn:sha1:95bbafee923fa6de163e3661c2a57ce6eb7f740e This commit adds init/free, support for signing, setting and getting the method, engine support as well as extra data. from markus Factor out a bit of ugly code that truncates the digest to the order_bits 2018-07-10T21:36:02Z tb tb@openbsd.org 2018-07-10T21:36:02Z urn:sha1:d661569b5a4512d635997b6d03a657b043a8171b leftmost bits of a longer digest, according to FIPS 183-6, 6.4. Eliminate a microoptimization that only converts the relevant part of the digest to a bignum. ok beck, jsing Tiny tweak to the blinding comment. 2018-06-16T08:11:33Z tb tb@openbsd.org 2018-06-16T08:11:33Z urn:sha1:59f6aa454b52e0a931201ed927872e65a7e43d2c Basic cleanup. Handle the possibly NULL ctx_in in ecdsa_sign_setup() with 2018-06-15T19:24:13Z tb tb@openbsd.org 2018-06-15T19:24:13Z urn:sha1:09a30a4d0856c98c8300dac283f8d103ec69eaaf the usual idiom. All the allocations are now handled inside conditionals as is usually done in this part of the tree. Turn a few comments into actual sentences and remove a few self-evident ones. Change outdated or cryptic comments into more helpful annotations. In ecdsa_do_verify(), start calculating only after properly truncating the message digest. More consistent variable names: prefer 'order_bits' and 'point' over 'i' and 'tmp_point'. ok jsing Clean up some whitespace and polish a few comments. Reduces noise in 2018-06-15T05:00:41Z tb tb@openbsd.org 2018-06-15T05:00:41Z urn:sha1:9acdb37a080317e14748ec08266823302380203f an upcoming diff. Use a blinding value when generating an ECDSA signature, in order to 2018-06-14T18:51:01Z tb tb@openbsd.org 2018-06-14T18:51:01Z urn:sha1:8e59251b6f9e729cd3f6bd34d1a68c1468ac4c56 reduce the possibility of a side-channel attack leaking the private key. Suggested by Keegan Ryan at NCC Group. With input from and ok jsing