wireguard-openbsd/lib/libcrypto/engine/engine.h, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libcrypto/engine/engine.h?h=jd%2Fqueueboosts 2019-01-19T01:07:00Z Partial port of EC_KEY_METHOD from OpenSSL 1.1. 2019-01-19T01:07:00Z tb tb@openbsd.org 2019-01-19T01:07:00Z urn:sha1:95bbafee923fa6de163e3661c2a57ce6eb7f740e This commit adds init/free, support for signing, setting and getting the method, engine support as well as extra data. from markus Add automatic threading initialization for libcrypto. 2018-11-11T06:41:28Z bcook bcook@openbsd.org 2018-11-11T06:41:28Z urn:sha1:3938ed1ebd7560655156b4463ed629b56b149c35 This implements automatic thread support initialization in libcrypto. This does not remove any functions from the ABI, but does turn them into no-ops. Stub implementations of pthread_mutex_(init|lock|unlock) are provided for ramdisks. This does not implement the new OpenSSL 1.1 thread API internally, keeping the original CRYTPO_lock / CRYPTO_add_lock functions for library locking. For -portable, crypto_lock.c can be reimplemented with OS-specific primitives as needed. ok beck@, tb@, looks sane guenther@ Remove OpenSSL engine RSAX. 2015-07-19T22:34:27Z doug doug@openbsd.org 2015-07-19T22:34:27Z urn:sha1:e0b59b947f56e491de73f679a8bd70d2b62efabc OpenSSL stopped building it last year and removed it this year. Based on OpenSSL commit c436e05bdc7f49985a750df64122c960240b3ae1. Also cranked major version in libcrypto, libssl and libtls. "fine with me" bcook@ miod@ None of these need to include <openssl/rand.h> 2014-10-18T17:20:40Z jsing jsing@openbsd.org 2014-10-18T17:20:40Z urn:sha1:03a67d2e0111543f3e797b69c5453e90bcf52908 KNF. 2014-06-22T12:16:28Z jsing jsing@openbsd.org 2014-06-22T12:16:28Z urn:sha1:556a7e845eee0d3723b3f67537bb9d933cf1bfbb tags as requested by miod and tedu 2014-06-12T15:49:27Z deraadt deraadt@openbsd.org 2014-06-12T15:49:27Z urn:sha1:c3d6a26af7455bccce87985ff78ef0efc39b65e1 Abandon the auto-ENGINE /dev/crypto interface. VIA 3des cbc receives 2014-06-10T16:15:19Z deraadt deraadt@openbsd.org 2014-06-10T16:15:19Z urn:sha1:7a59c9a977d3d1b29bad28f3f13f7bebe5e18a9e collateral damage. The syncronous nature of this mechanism has hampered performance for symmetric crypto relative to brute-force cpu. The assymetric crypto support never really materialized in drivers. So abandon the complexity. ok tedu beck mikeb some disagrement from djm but if he wants to test /dev/crypto ciphers he should do it without this this gigantic API in the way A few months back there was a big community fuss regarding direct-use 2014-06-02T15:08:37Z deraadt deraadt@openbsd.org 2014-06-02T15:08:37Z urn:sha1:1cdc2ead0725c40cbbda34f52f4a488f09f52669 of the intel RDRAND instruction. Consensus was RDRAND should probably only be used as an additional source of entropy in a mixer. Guess which library bends over backwards to provide easy access to RDRAND? Yep. Guess which applications are using this support? Not even one... but still, this is being placed as a trap for someone. Send this support straight to the abyss. ok kettenis Expand the OPENSSL_{GLOBAL,EXPORT,IMPORT,EXTERN} macros - this rids the 2014-05-22T17:53:00Z jsing jsing@openbsd.org 2014-05-22T17:53:00Z urn:sha1:1d21c530edfb4524553d1ac24403f503f1d6b314 libssl tree from all uses of these defines. ok miod@ Remove the GOST engine: It is not compiled or used and depends on the 2014-04-15T18:02:05Z reyk reyk@openbsd.org 2014-04-15T18:02:05Z urn:sha1:d97b0cd353daffa7b3d02944955badafa0b5b581 "dynamic engine" feature that is not enabled in our build. People who need it can still pull it out of the Attic; if it is to have a Russian engine just because it's a Russian engine. OK deraadt@ beck@