wireguard-openbsd/lib/libcrypto/evp/evp_err.c, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libcrypto/evp/evp_err.c?h=jd%2Fqueueboosts 2020-04-27T19:31:02Z Disallow the use of zero length IVs in AES-GCM via 2020-04-27T19:31:02Z tb tb@openbsd.org 2020-04-27T19:31:02Z urn:sha1:539125b0baa78c5c019ab9e3bbeca4fa822d1bf7 EVP_AEAD_CTX_{open,seal}, as this leaks the authentication key. Issue reported and fix tested by Guido Vranken. ok beck, jsing This commit adds a constant to a public header despite library lock, as discussed with deraadt and sthen. Expand the ERR_PACK() macro to ERR_REASON() for consistency. 2019-03-18T05:34:29Z tb tb@openbsd.org 2019-03-18T05:34:29Z urn:sha1:cb50be8bac81bbf77c5226a05a0e6e58f594a0b7 No binary change. Provide EVP_PKEY_get0_hmac(). From OpenSSL 1.1.1 which is still 2019-03-17T18:17:44Z tb tb@openbsd.org 2019-03-17T18:17:44Z urn:sha1:30ffc4574f4d62548fcb4f1527d68e920de17b92 freely licensed. From jsing Provide EVP_aes_{128,192,256}_wrap(). This is a compatible 2019-03-17T18:07:41Z tb tb@openbsd.org 2019-03-17T18:07:41Z urn:sha1:7bd973386a5d471a9e204c92c4974e44058a6f1f implementation based on the one in OpenSSL 1.0.2r which is still freely licensed. The functions are undocumented in OpenSSL. To use them, one needs to set the undocumented EVP_CIPHER_CTX_FLAG_WRAP_ALLOW flag on the EVP_CIPHER_CTX. resolves #505 ok jsing Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:22Z beck beck@openbsd.org 2017-01-29T17:49:22Z urn:sha1:5067ae9f807f8af9e6350e51e6a54619386c06ba as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ Regen 2015-02-15T14:35:30Z miod miod@openbsd.org 2015-02-15T14:35:30Z urn:sha1:cd9e90e9db9aca4a76f15b6c2a6ceab6e44e419a Explicitly include <openssl/opensslconf.h> in every file that references 2014-07-10T22:45:56Z jsing jsing@openbsd.org 2014-07-10T22:45:56Z urn:sha1:8cf4d6a6f06280da23bb640b5f3f1330158a5205 an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers. tags as requested by miod and tedu 2014-06-12T15:49:27Z deraadt deraadt@openbsd.org 2014-06-12T15:49:27Z urn:sha1:c3d6a26af7455bccce87985ff78ef0efc39b65e1 Add a ChaCha20-Poly1305 AEAD EVP implementation to libcrypto, from Adam 2014-05-15T15:09:01Z jsing jsing@openbsd.org 2014-05-15T15:09:01Z urn:sha1:6727d7bedb98f803a4ec590cc2c97f6d2e7f1cd8 Langley's Chromium OpenSSL patches. ok miod@ Add an AEAD EVP interface to libcrypto, along with AES-GCM AEAD 2014-05-15T13:53:46Z jsing jsing@openbsd.org 2014-05-15T13:53:46Z urn:sha1:fc0ee2eb12cb7d038a2a1485d78d871a1a91193b implementations. This largely pulls in Adam Langley's AEAD patches from Chromium's OpenSSL. ok miod@