wireguard-openbsd/lib/libcrypto/gost, branch jd/simplify-queueing

Add a few more errors to help debugging.

2020-06-05T17:17:22Z

Diff from Dmitry Baryshkov Sponsored by ROSA Linux. ok inoguchi@ tb@

Add support for additional GOST curves.

2020-06-05T17:12:09Z

These GOST curves are defined in RFC 7836 and draft-deremin-rfc4491-bis. Add aliases for 256-bit GOST curves (see draft-smyshlyaev-tls12-gost-suites) and rename the 512-bit curve ids to follow names defined in tc26 OID registry. Diff from Dmitry Baryshkov Sponsored by ROSA Linux. ok inoguchi@

Apply some style(9).

2020-06-05T15:51:49Z

Fix incorrect carry operation in 512 bit addition: in the case

2019-05-09T22:54:28Z

that there is already a carry and Sigma[i-1] == -1, the carry must be kept. From Dmitry Eremin-Solenik. Fixes incorrect Streebog result reported by Guido Vranken.

Add consts to EVP_PKEY_asn1_set_private()

2018-08-24T20:22:15Z

Requires adding a const to the priv_decode() member of EVP_PKEY_ASN1_METHOD and adjusting all *_priv_decode() functions. All this is already documented this way. tested in a bulk build by sthen ok jsing

After removing support for broken PKCS#8 formats (it was high time),

2018-08-24T20:17:33Z

we can add const to PKCS8_pkey_get0(). In order for this to work, we need to sprinkle a few consts here and there. tested in a bulk by sthen ok jsing

Remove a handrolled GOST_le2bn().

2018-06-10T14:39:49Z

From Dmitry Eremin-Solenikov .

Convert a handful of X509_*() functions to take const as in OpenSSL.

2018-05-01T19:01:27Z

tested in a bulk by sthen ok jsing

use freezero() instead of memset/explicit_bzero + free. Substantially

2017-05-02T03:59:44Z

reduces conditional logic (-218, +82). MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH cache alignment calculation bn/bn_exp.c wasn'tt quite right. Two other tricky bits with ASN1_STRING_FLAG_NDEF and BN_FLG_STATIC_DATA where the condition cannot be collapsed completely. Passes regress. ok beck

Send the function codes from the error functions to the bit bucket,

2017-01-29T17:49:22Z

as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@