wireguard-openbsd/lib/libcrypto/hmac, branch master WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libcrypto/hmac?h=master 2018-02-17T14:53:58Z Provide HMAC_CTX_new(), HMAC_CTX_free(), HMAC_CTX_reset() and 2018-02-17T14:53:58Z jsing jsing@openbsd.org 2018-02-17T14:53:58Z urn:sha1:c29f4739ceb69343c92c3f24d2a16b609747e5a9 HMAC_CTX_get_md(). use freezero() instead of memset/explicit_bzero + free. Substantially 2017-05-02T03:59:44Z deraadt deraadt@openbsd.org 2017-05-02T03:59:44Z urn:sha1:7de8a6843ca16b4f1c9d2a7eab4c71e8af96a4e6 reduces conditional logic (-218, +82). MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH cache alignment calculation bn/bn_exp.c wasn'tt quite right. Two other tricky bits with ASN1_STRING_FLAG_NDEF and BN_FLG_STATIC_DATA where the condition cannot be collapsed completely. Passes regress. ok beck Ensure MD and key initialized before processing HMAC 2017-03-03T10:39:07Z inoguchi inoguchi@openbsd.org 2017-03-03T10:39:07Z urn:sha1:145d9b3ffec68be00a360e30c3bb41a6e0bfdd00 Ensure both MD and key have been initialized before processing HMAC. Releasing HMAC_CTX in error path of HMAC(). In regress test, added test 4,5,6 and cleaned up the code. ok jsing@ Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:22Z beck beck@openbsd.org 2017-01-29T17:49:22Z urn:sha1:5067ae9f807f8af9e6350e51e6a54619386c06ba as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ Correct spelling of OPENSSL_cleanse. 2015-09-10T15:56:24Z jsing jsing@openbsd.org 2015-09-10T15:56:24Z urn:sha1:0f777b12ad023193791105beba95cb4fa7d67201 ok miod@ Various memory leaks upon error or unchecked allocations. 2015-07-20T15:45:29Z miod miod@openbsd.org 2015-07-20T15:45:29Z urn:sha1:70b6d53a25b4b976b8b119cd3518845e43bcc844 ok doug@ Replace assert() and OPENSSL_assert() calls with proper error return paths. 2015-02-10T09:52:35Z miod miod@openbsd.org 2015-02-10T09:52:35Z urn:sha1:8ad85bf285ce705d205f8dba3343f60dcaff0145 Careful review, feedback & ok doug@ jsing@ Only import cryptlib.h in the four source files that actually need it. 2014-07-11T08:44:47Z jsing jsing@openbsd.org 2014-07-11T08:44:47Z urn:sha1:b6ab114e77db2581d5bda2ca4b0aa0d68b2e0f90 Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@ Stop including standard headers via cryptlib.h - pull in the headers that 2014-07-10T13:58:21Z jsing jsing@openbsd.org 2014-07-10T13:58:21Z urn:sha1:a8913c44aee6c78b4770e56ab6afb429afabee6d are needed in the source files that actually require them. ok beck@ miod@ More KNF. 2014-06-21T13:39:46Z jsing jsing@openbsd.org 2014-06-21T13:39:46Z urn:sha1:55fb30ec7d7bb0e211634969763cf1c80c62bedc