wireguard-openbsd/lib/libcrypto/evp/evp.h, branch jd/queueboostsWireGuard implementation for the OpenBSD kernelhttps://git.zx2c4.com/wireguard-openbsd/atom/lib/libcrypto/evp/evp.h?h=jd%2Fqueueboosts2020-04-27T19:31:02ZDisallow the use of zero length IVs in AES-GCM via2020-04-27T19:31:02Ztbtb@openbsd.org2020-04-27T19:31:02Zurn:sha1:539125b0baa78c5c019ab9e3bbeca4fa822d1bf7
EVP_AEAD_CTX_{open,seal}, as this leaks the authentication key.
Issue reported and fix tested by Guido Vranken.
ok beck, jsing
This commit adds a constant to a public header despite library lock,
as discussed with deraadt and sthen.
Add EVP_PKEY_RSA_PSS.2019-10-24T15:43:09Zjsingjsing@openbsd.org2019-10-24T15:43:09Zurn:sha1:544516afaacd5fba3478576a8f10eeb31162235a
ok tb@
Provide EVP_PKEY_CTX_get_signature_md() macro and implement the2019-09-09T18:06:25Zjsingjsing@openbsd.org2019-09-09T18:06:25Zurn:sha1:6627381b8986c9f830d9d0204dc2d3ccf2b8493f
EVP_PKEY_CTRL_GET_MD control for DSA, EC and RSA.
This is used by the upcoming RSA CMS code.
ok inoguchi@ tb@
Provide ASN1_PKEY_CTRL_CMS_RI_TYPE.2019-08-11T14:11:28Zjsingjsing@openbsd.org2019-08-11T14:11:28Zurn:sha1:d08d979fa55edea99f1f19f2162379e9ae7ffd82Provide EVP_PKEY_get0_hmac(). From OpenSSL 1.1.1 which is still2019-03-17T18:17:44Ztbtb@openbsd.org2019-03-17T18:17:44Zurn:sha1:30ffc4574f4d62548fcb4f1527d68e920de17b92
freely licensed.
From jsing
Provide EVP_aes_{128,192,256}_wrap(). This is a compatible2019-03-17T18:07:41Ztbtb@openbsd.org2019-03-17T18:07:41Zurn:sha1:7bd973386a5d471a9e204c92c4974e44058a6f1f
implementation based on the one in OpenSSL 1.0.2r which is
still freely licensed.
The functions are undocumented in OpenSSL. To use them, one
needs to set the undocumented EVP_CIPHER_CTX_FLAG_WRAP_ALLOW
flag on the EVP_CIPHER_CTX.
resolves #505
ok jsing
Add the SM4 block cipher from the Chinese standard GB/T 32907-2016.2019-03-17T17:42:37Ztbtb@openbsd.org2019-03-17T17:42:37Zurn:sha1:858242597841f188cc4b5c95c1b6466abed759bf
This is an ISC licensed version based on the sources by Ribose Inc
that were ported to OpenSSL in 2017.
Patch from Daniel Wyatt with minor tweaks.
ok inoguchi, jsing
add support for xchacha20 and xchacha20-poly13052019-01-22T00:59:21Zdlgdlg@openbsd.org2019-01-22T00:59:21Zurn:sha1:64bf23976d44f1dec50f86a3ac43a0945d6605be
xchacha is a chacha stream that allows for an extended nonce, which
in turn makes it feasible to use random nonces.
ok tb@
provide EVP_ENCODE_CTX_{new,free}().2019-01-19T01:24:18Ztbtb@openbsd.org2019-01-19T01:24:18Zurn:sha1:73295cba5b0c5bbc886a38a354632df40446c5b3
ok jsing
Add Ribose Inc's implementation of the SM3 hashing function with2018-11-11T06:53:31Ztbtb@openbsd.org2018-11-11T06:53:31Zurn:sha1:43f505455e9fc5856f69641b8a4fd4a118808f62
tweaks from jsing and myself. The SM2/SM3/SM4 algorithms are mandatory
for legal use of cryptography within China and [are] widely applied in
the country, covering identification/financial cards, contactless,
TPM 2.0 and PKI.
ok beck inoguchi jsing