More secure storage of key material.
authorRich Salz <rsalz@akamai.com>
Fri, 24 Apr 2015 20:39:40 +0000 (16:39 -0400)
committerRich Salz <rsalz@openssl.org>
Tue, 23 Jun 2015 21:09:35 +0000 (17:09 -0400)
commit74924dcb3802640d7e2ae2e80ca6515d0a53de7a
tree6de4138b01d5f649bdaa32d858bd5fa20e9ad4b6
parentce7e647bc2c328404b1e3cdac6211773afdefe07
More secure storage of key material.

Add secure heap for storage of private keys (when possible).
Add BIO_s_secmem(), CBIGNUM, etc.
Add BIO_CTX_secure_new so all BIGNUM's in the context are secure.
Contributed by Akamai Technologies under the Corporate CLA.

Reviewed-by: Richard Levitte <levitte@openssl.org>
30 files changed:
CHANGES
crypto/Makefile
crypto/asn1/x_bignum.c
crypto/bio/bss_mem.c
crypto/bn/bn_ctx.c
crypto/bn/bn_lib.c
crypto/buffer/buffer.c
crypto/dh/dh_ameth.c
crypto/dh/dh_key.c
crypto/dsa/dsa_ameth.c
crypto/dsa/dsa_asn1.c
crypto/dsa/dsa_key.c
crypto/ec/ec_asn1.c
crypto/mem.c
crypto/rsa/rsa_asn1.c
crypto/rsa/rsa_gen.c
crypto/sec_mem.c [new file with mode: 0644]
doc/crypto/BIO_s_mem.pod
doc/crypto/BN_CTX_new.pod
doc/crypto/CRYPTO_secure_malloc.pod [new file with mode: 0644]
doc/crypto/bio.pod
doc/crypto/bn.pod
doc/crypto/buffer.pod
include/openssl/bio.h
include/openssl/bn.h
include/openssl/buffer.h
include/openssl/crypto.h
test/Makefile
test/secmemtest.c [new file with mode: 0644]
util/libeay.num