-This is a collection of those CVS change log entries for the 0.9.7
-branch (OpenSSL_0_9_7-stable) that do not appear similarly in
+This file, together with ChangeLog.0_9_7-stable_not-in-head_FIPS,
+provides a collection of those CVS change log entries for the
+0.9.7 branch (OpenSSL_0_9_7-stable) that do not appear similarly in
0.9.8-dev (CVS head).
+ChangeLog.0_9_7-stable_not-in-head_FIPS - "FIPS" related changes
+ChangeLog.0_9_7-stable_not-in-head - everything else
+
Some obvious false positives have been eliminated: e.g., we do not
care about a simple "make update"; and we don't care about changes
identified to the 0.9.7 branch that were explicitly identified as
backports from head.
-Eliminating all other entries (and finally this file), either as false
-positives or as things that should go into 0.9.8, remains to be done.
-Any additional changes to 0.9.7 that are not immediately put into 0.9.8,
-but belong there as well, should be added to the end of this file.
+Eliminating all other entries (and finally this file and its
+compantion), either as false positives or as things that should go
+into 0.9.8, remains to be done. Any additional changes to 0.9.7 that
+are not immediately put into 0.9.8, but belong there as well, should
+be added to the end of this file.
2002-02-14 03:43 levitte
Add untested CFB-r mode. Will be tested soon.
-2003-07-27 19:00 ben
-
- Changed:
- Configure (1.314.2.85), "Exp", lines: +2 -0
- Makefile.org (1.154.2.67), "Exp", lines: +12 -3
- crypto/cryptlib.c (1.32.2.9), "Exp", lines: +5 -0
- crypto/md32_common.h (1.22.2.4), "Exp", lines: +11 -0
- crypto/aes/Makefile.ssl (1.4.2.6), "Exp", lines: +2 -1
- crypto/aes/aes_core.c (1.1.2.4), "Exp", lines: +4 -0
- crypto/des/des.h (1.40.2.4), "Exp", lines: +1 -1
- crypto/des/des_old.c (1.11.2.4), "Exp", lines: +1 -1
- crypto/des/destest.c (1.30.2.6), "Exp", lines: +2 -2
- crypto/des/ecb3_enc.c (1.8.2.1), "Exp", lines: +1 -3
- crypto/dsa/Makefile.ssl (1.49.2.5), "Exp", lines: +7 -4
- crypto/dsa/dsa_ossl.c (1.12.2.4), "Exp", lines: +2 -0
- crypto/dsa/dsa_sign.c (1.10.2.3), "Exp", lines: +12 -0
- crypto/dsa/dsa_vrf.c (1.10.2.3), "Exp", lines: +8 -0
- crypto/engine/engine.h (1.36.2.6), "Exp", lines: +4 -0
- crypto/err/err.h (1.35.2.3), "Exp", lines: +2 -0
- crypto/err/err_all.c (1.17.2.2), "Exp", lines: +4 -0
- crypto/err/openssl.ec (1.11.2.1), "Exp", lines: +1 -0
- crypto/evp/Makefile.ssl (1.64.2.8), "Exp", lines: +8 -7
- crypto/evp/c_all.c (1.7.8.7), "Exp", lines: +1 -0
- crypto/evp/e_aes.c (1.6.2.4), "Exp", lines: +12 -4
- crypto/evp/e_des3.c (1.8.2.2), "Exp", lines: +1 -1
- crypto/evp/evp.h (1.86.2.10), "Exp", lines: +2 -0
- crypto/evp/evp_err.c (1.23.2.1), "Exp", lines: +3 -1
- crypto/md4/Makefile.ssl (1.6.2.4), "Exp", lines: +7 -4
- crypto/md5/Makefile.ssl (1.33.2.7), "Exp", lines: +7 -4
- crypto/rand/Makefile.ssl (1.56.2.4), "Exp", lines: +17 -15
- crypto/rand/md_rand.c (1.69.2.2), "Exp", lines: +9 -0
- crypto/rand/rand.h (1.26.2.5), "Exp", lines: +2 -0
- crypto/rand/rand_err.c (1.6.2.1), "Exp", lines: +3 -1
- crypto/rand/rand_lib.c (1.15.2.2), "Exp", lines: +11 -0
- crypto/ripemd/Makefile.ssl (1.25.2.5), "Exp", lines: +7 -2
- crypto/sha/Makefile.ssl (1.26.2.5), "Exp", lines: +16 -6
- fips/.cvsignore (1.1.2.1), "Exp", lines: +1 -0
- fips/Makefile.ssl (1.1.2.1), "Exp", lines: +155 -0
- fips/fingerprint.sha1 (1.1.2.1), "Exp", lines: +3 -0
- fips/fips.c (1.1.2.1), "Exp", lines: +74 -0
- fips/fips.h (1.1.2.1), "Exp", lines: +85 -0
- fips/fips_check_sha1 (1.1.2.1), "Exp", lines: +7 -0
- fips/fips_err.c (1.1.2.1), "Exp", lines: +96 -0
- fips/fips_make_sha1 (1.1.2.1), "Exp", lines: +21 -0
- fips/lib (1.1.2.1), "Exp", lines: +0 -0
- fips/aes/.cvsignore (1.1.2.1), "Exp", lines: +4 -0
- fips/aes/Makefile.ssl (1.1.2.1), "Exp", lines: +95 -0
- fips/aes/fingerprint.sha1 (1.1.2.1), "Exp", lines: +2 -0
- fips/aes/fips_aes_core.c (1.1.2.1), "Exp", lines: +1260 -0
- fips/aes/fips_aes_locl.h (1.1.2.1), "Exp", lines: +85 -0
- fips/aes/fips_aesavs.c (1.1.2.1), "Exp", lines: +896 -0
- fips/dsa/.cvsignore (1.1.2.1), "Exp", lines: +2 -0
- fips/dsa/Makefile.ssl (1.1.2.1), "Exp", lines: +95 -0
- fips/dsa/fingerprint.sha1 (1.1.2.1), "Exp", lines: +1 -0
- fips/dsa/fips_dsa_ossl.c (1.1.2.1), "Exp", lines: +366 -0
- fips/dsa/fips_dsatest.c (1.1.2.1), "Exp", lines: +252 -0
- fips/rand/.cvsignore (1.1.2.1), "Exp", lines: +2 -0
- fips/rand/Makefile.ssl (1.1.2.1), "Exp", lines: +94 -0
- fips/rand/fingerprint.sha1 (1.1.2.1), "Exp", lines: +2 -0
- fips/rand/fips_rand.c (1.1.2.1), "Exp", lines: +236 -0
- fips/rand/fips_rand.h (1.1.2.1), "Exp", lines: +55 -0
- fips/rand/fips_randtest.c (1.1.2.1), "Exp", lines: +348 -0
- fips/sha1/.cvsignore (1.1.2.1), "Exp", lines: +3 -0
- fips/sha1/Makefile.ssl (1.1.2.1), "Exp", lines: +94 -0
- fips/sha1/fingerprint.sha1 (1.1.2.1), "Exp", lines: +3 -0
- fips/sha1/fips_md32_common.h (1.1.2.1), "Exp", lines: +637 -0
- fips/sha1/fips_sha1dgst.c (1.1.2.1), "Exp", lines: +76 -0
- fips/sha1/fips_sha1test.c (1.1.2.1), "Exp", lines: +128 -0
- fips/sha1/fips_sha_locl.h (1.1.2.1), "Exp", lines: +472 -0
- fips/sha1/fips_standalone_sha1.c (1.1.2.1), "Exp", lines: +101 -0
- fips/sha1/standalone.sha1 (1.1.2.1), "Exp", lines: +4 -0
- test/Makefile.ssl (1.84.2.29), "Exp", lines: +81 -13
- util/mkerr.pl (1.18.2.4), "Exp", lines: +2 -1
-
- Unfinished FIPS stuff for review/improvement.
-
-2003-07-27 19:19 ben
-
- Changed:
- fips/fips_check_sha1 (1.1.2.2), "Exp", lines: +1 -1
-
- Use unified diff.
-
-2003-07-27 19:23 ben
-
- Changed:
- fips/Makefile.ssl (1.1.2.2), "Exp", lines: +3 -3
- fips/fingerprint.sha1 (1.1.2.2), "Exp", lines: +2 -1
- fips/fips_make_sha1 (1.1.2.2), "Exp", lines: +1 -1
-
- Build in non-FIPS mode.
-
-2003-07-27 23:13 ben
-
- Changed:
- Makefile.org (1.154.2.68), "Exp", lines: +1 -1
- fips/fips_check_sha1 (1.1.2.3), "Exp", lines: +2 -1
- fips/aes/fips_aesavs.c (1.1.2.2), "Exp", lines: +2 -0
- fips/dsa/fips_dsa_ossl.c (1.1.2.2), "Exp", lines: +8 -0
- fips/dsa/fips_dsatest.c (1.1.2.2), "Exp", lines: +2 -1
- fips/sha1/fingerprint.sha1 (1.1.2.2), "Exp", lines: +1 -1
- fips/sha1/fips_sha1dgst.c (1.1.2.2), "Exp", lines: +5 -1
- fips/sha1/fips_standalone_sha1.c (1.1.2.2), "Exp", lines: +2 -0
- fips/sha1/standalone.sha1 (1.1.2.2), "Exp", lines: +1 -1
-
- Build when not FIPS.
-
-2003-07-28 11:56 ben
-
- Changed:
- fips/dsa/fingerprint.sha1 (1.1.2.2), "Exp", lines: +1 -1
- fips/sha1/standalone.sha1 (1.1.2.3), "Exp", lines: +1 -1
-
- New fingerprints.
-
2003-07-28 17:07 ben
Changed:
The rest of the keysizes for CFB1, working AES AVS test for CFB1.
-2003-07-29 16:06 ben
-
- Changed:
- fips/aes/fips_aesavs.c (1.1.2.5), "Exp", lines: +295 -303
-
- Reformat.
-
-2003-07-29 16:34 ben
-
- Changed:
- fips/aes/fips_aesavs.c (1.1.2.6), "Exp", lines: +43 -17
-
- MMT for CFB1
-
-2003-07-29 17:17 ben
-
- Changed:
- fips/fips_err_wrapper.c (1.1.2.1), "Exp", lines: +5 -0
- fips/sha1/sha1hashes.txt (1.1.2.1), "Exp", lines: +342 -0
- fips/sha1/sha1vectors.txt (1.1.2.1), "Exp", lines: +2293 -0
-
- Missing files.
-
2003-07-29 19:05 ben
Changed:
If FDIRS is to be treated like SDIRS, let's not forget to
initialize it in Makefile.org.
-2003-07-31 23:41 levitte
-
- Changed:
- fips/sha1/fips_sha1test.c (1.1.2.2), "Exp", lines: +3 -3
-
- No C++ comments in C programs!
-
2003-08-01 12:25 ben
Changed:
DES CFB8 test.
-2003-08-01 15:07 steve
-
- Changed:
- fips/aes/fips_aesavs.c (1.1.2.8), "Exp", lines: +3 -3
-
- Replace C++ style comments.
-
2003-08-01 19:06 steve
Changed:
Make the EFB NIDs have empty OIDs aliased to the real EFB OID.
-2003-08-03 14:22 ben
-
- Changed:
- fips/des/fips_desmovs.c (1.1.2.2), "Exp", lines: +55 -37
-
- Make tests work (CFB1 still doesn't produce the right answers,
- strangely).
-
-2003-08-08 12:08 levitte
-
- Changed:
- fips/des/fips_des_enc.c (1.1.2.2), "Exp", lines: +9 -0
-
- Avoid clashing with the regular DES functions when not compiling
- with -DFIPS. This is basically only visible when building with
- shared library supoort...
-
-2003-08-11 11:36 levitte
-
- Deleted:
- fips/sha1/.cvsignore (1.1.2.2)
- fips/sha1/Makefile.ssl (1.1.2.3)
- fips/sha1/fingerprint.sha1 (1.1.2.3)
- fips/sha1/fips_md32_common.h (1.1.2.2)
- fips/sha1/fips_sha1dgst.c (1.1.2.3)
- fips/sha1/fips_sha1test.c (1.1.2.3)
- fips/sha1/fips_sha_locl.h (1.1.2.2)
- fips/sha1/fips_standalone_sha1.c (1.1.2.3)
- fips/sha1/sha1hashes.txt (1.1.2.2)
- fips/sha1/sha1vectors.txt (1.1.2.2)
- fips/sha1/standalone.sha1 (1.1.2.4)
- fips/dsa/.cvsignore (1.1.2.2)
- fips/dsa/Makefile.ssl (1.1.2.2)
- fips/dsa/fingerprint.sha1 (1.1.2.3)
- fips/dsa/fips_dsa_ossl.c (1.1.2.3)
- fips/dsa/fips_dsatest.c (1.1.2.3)
- fips/rand/.cvsignore (1.1.2.2)
- fips/rand/Makefile.ssl (1.1.2.2)
- fips/rand/fingerprint.sha1 (1.1.2.2)
- fips/rand/fips_rand.c (1.1.2.2)
- fips/rand/fips_rand.h (1.1.2.2)
- fips/rand/fips_randtest.c (1.1.2.2)
- fips/des/.cvsignore (1.1.2.2)
- fips/des/Makefile.ssl (1.1.2.3)
- fips/des/fingerprint.sha1 (1.1.2.2)
- fips/des/fips_des_enc.c (1.1.2.3)
- fips/des/fips_des_locl.h (1.1.2.2)
- fips/des/fips_desmovs.c (1.1.2.3)
- fips/aes/.cvsignore (1.1.2.2)
- fips/aes/Makefile.ssl (1.1.2.5)
- fips/aes/fingerprint.sha1 (1.1.2.2)
- fips/aes/fips_aes_core.c (1.1.2.2)
- fips/aes/fips_aes_locl.h (1.1.2.2)
- fips/aes/fips_aesavs.c (1.1.2.9)
- fips/.cvsignore (1.1.2.2)
- fips/Makefile.ssl (1.1.2.6)
- fips/fingerprint.sha1 (1.1.2.3)
- fips/fips.c (1.1.2.2)
- fips/fips.h (1.1.2.2)
- fips/fips_check_sha1 (1.1.2.4)
- fips/fips_err.c (1.1.2.2)
- fips/fips_err_wrapper.c (1.1.2.2)
- fips/fips_make_sha1 (1.1.2.4)
- fips/lib (1.1.2.2)
- Changed:
- util/libeay.num (1.173.2.16), "Exp", lines: +11 -38
- util/mkerr.pl (1.18.2.5), "Exp", lines: +1 -2
- test/Makefile.ssl (1.84.2.31), "Exp", lines: +54 -180
- crypto/ripemd/Makefile.ssl (1.25.2.6), "Exp", lines: +2 -7
- crypto/sha/Makefile.ssl (1.26.2.6), "Exp", lines: +6 -16
- crypto/rand/Makefile.ssl (1.56.2.5), "Exp", lines: +15 -17
- crypto/rand/md_rand.c (1.69.2.3), "Exp", lines: +0 -9
- crypto/rand/rand.h (1.26.2.6), "Exp", lines: +0 -2
- crypto/rand/rand_err.c (1.6.2.2), "Exp", lines: +1 -3
- crypto/rand/rand_lib.c (1.15.2.3), "Exp", lines: +0 -11
- crypto/objects/obj_dat.h (1.49.2.18), "Exp", lines: +3 -27
- crypto/objects/obj_mac.h (1.19.2.18), "Exp", lines: +0 -32
- crypto/objects/obj_mac.num (1.15.2.14), "Exp", lines: +0 -8
- crypto/objects/objects.txt (1.20.2.19), "Exp", lines: +0 -11
- crypto/md4/Makefile.ssl (1.6.2.5), "Exp", lines: +4 -7
- crypto/md5/Makefile.ssl (1.33.2.8), "Exp", lines: +4 -7
- crypto/evp/Makefile.ssl (1.64.2.9), "Exp", lines: +7 -8
- crypto/evp/c_allc.c (1.8.2.6), "Exp", lines: +0 -4
- crypto/evp/e_aes.c (1.6.2.9), "Exp", lines: +4 -22
- crypto/evp/e_des.c (1.5.2.5), "Exp", lines: +2 -43
- crypto/evp/e_des3.c (1.8.2.4), "Exp", lines: +3 -3
- crypto/evp/evp.h (1.86.2.13), "Exp", lines: +11 -36
- crypto/evp/evp_err.c (1.23.2.2), "Exp", lines: +1 -3
- crypto/evp/evp_lib.c (1.6.8.3), "Exp", lines: +0 -24
- crypto/evp/evp_locl.h (1.7.2.5), "Exp", lines: +2 -11
- crypto/evp/evp_test.c (1.14.2.12), "Exp", lines: +8 -17
- crypto/evp/evptests.txt (1.9.2.6), "Exp", lines: +1 -106
- crypto/dsa/Makefile.ssl (1.49.2.7), "Exp", lines: +6 -10
- crypto/dsa/dsa_ossl.c (1.12.2.5), "Exp", lines: +0 -2
- crypto/dsa/dsa_sign.c (1.10.2.4), "Exp", lines: +0 -12
- crypto/dsa/dsa_vrf.c (1.10.2.4), "Exp", lines: +0 -8
- crypto/err/Makefile.ssl (1.48.2.5), "Exp", lines: +16 -17
- crypto/err/err.h (1.35.2.4), "Exp", lines: +0 -2
- crypto/err/err_all.c (1.17.2.3), "Exp", lines: +0 -4
- crypto/err/openssl.ec (1.11.2.2), "Exp", lines: +0 -1
- crypto/des/des.h (1.40.2.5), "Exp", lines: +1 -1
- crypto/des/des_enc.c (1.11.2.3), "Exp", lines: +0 -4
- crypto/des/des_old.c (1.11.2.5), "Exp", lines: +1 -1
- crypto/des/destest.c (1.30.2.7), "Exp", lines: +2 -2
- crypto/des/ecb3_enc.c (1.8.2.2), "Exp", lines: +3 -1
- crypto/aes/Makefile.ssl (1.4.2.7), "Exp", lines: +1 -2
- crypto/aes/aes.h (1.1.2.8), "Exp", lines: +0 -9
- crypto/aes/aes_cfb.c (1.1.2.8), "Exp", lines: +0 -93
- crypto/aes/aes_core.c (1.1.2.5), "Exp", lines: +0 -4
- crypto/cryptlib.c (1.32.2.10), "Exp", lines: +0 -5
- crypto/md32_common.h (1.22.2.5), "Exp", lines: +0 -11
- Configure (1.314.2.86), "Exp", lines: +0 -2
- Makefile.org (1.154.2.72), "Exp", lines: +8 -34
- TABLE (1.99.2.30), "Exp", lines: +0 -50
-
- A new branch for FIPS-related changes has been created with the
- name OpenSSL-fips-0_9_7-stable.
-
- Since the 0.9.7-stable branch is supposed to be in freeze
- and should only contain bug corrections, this change removes the
- FIPS changes from that branch.
-
2003-08-11 11:56 levitte
Changed:
Typo. "pa-rics2W" corrected to "pa-risc2W". PR: 868
-2004-05-11 14:44 ben
-
- Deleted:
- apps/Makefile.ssl (1.100.2.27)
- crypto/Makefile.ssl (1.84.2.12)
- crypto/aes/Makefile.ssl (1.4.2.9)
- crypto/asn1/Makefile.ssl (1.77.2.7)
- crypto/bf/Makefile.ssl (1.25.2.6)
- crypto/bio/Makefile.ssl (1.52.2.4)
- crypto/bn/Makefile.ssl (1.65.2.9)
- crypto/buffer/Makefile.ssl (1.32.2.4)
- crypto/cast/Makefile.ssl (1.31.2.6)
- crypto/comp/Makefile.ssl (1.32.2.4)
- crypto/conf/Makefile.ssl (1.38.2.8)
- crypto/des/Makefile.ssl (1.61.2.13)
- crypto/dh/Makefile.ssl (1.43.2.5)
- crypto/dsa/Makefile.ssl (1.49.2.9)
- crypto/dso/Makefile.ssl (1.11.2.4)
- crypto/ec/Makefile.ssl (1.7.2.4)
- crypto/engine/Makefile.ssl (1.30.2.13)
- crypto/err/Makefile.ssl (1.48.2.7)
- crypto/evp/Makefile.ssl (1.64.2.12)
- crypto/hmac/Makefile.ssl (1.33.2.6)
- crypto/idea/Makefile.ssl (1.20.2.4)
- crypto/krb5/Makefile.ssl (1.5.2.6)
- crypto/lhash/Makefile.ssl (1.28.2.4)
- crypto/md2/Makefile.ssl (1.29.2.5)
- crypto/md4/Makefile.ssl (1.6.2.7)
- crypto/md5/Makefile.ssl (1.33.2.10)
- crypto/mdc2/Makefile.ssl (1.30.2.4)
- crypto/objects/Makefile.ssl (1.46.2.6)
- crypto/ocsp/Makefile.ssl (1.19.2.7)
- crypto/pem/Makefile.ssl (1.51.2.5)
- crypto/pkcs12/Makefile.ssl (1.37.2.5)
- crypto/pkcs7/Makefile.ssl (1.47.2.5)
- crypto/rand/Makefile.ssl (1.56.2.8)
- crypto/rc2/Makefile.ssl (1.20.2.4)
- crypto/rc4/Makefile.ssl (1.25.2.6)
- crypto/rc5/Makefile.ssl (1.22.2.6)
- crypto/ripemd/Makefile.ssl (1.25.2.9)
- crypto/rsa/Makefile.ssl (1.53.2.6)
- crypto/sha/Makefile.ssl (1.26.2.9)
- crypto/stack/Makefile.ssl (1.28.2.4)
- crypto/txt_db/Makefile.ssl (1.26.2.4)
- crypto/ui/Makefile.ssl (1.10.2.6)
- crypto/x509/Makefile.ssl (1.56.2.5)
- crypto/x509v3/Makefile.ssl (1.62.2.5)
- ssl/Makefile.ssl (1.53.2.11)
- test/Makefile.ssl (1.84.2.36)
- tools/Makefile.ssl (1.9.2.4)
- Changed:
- .cvsignore (1.7.6.2), "Exp", lines: +2 -1
- Configure (1.314.2.92), "Exp", lines: +38 -8
- FAQ (1.61.2.31), "Exp", lines: +1 -1
- INSTALL (1.45.2.9), "Exp", lines: +2 -2
- INSTALL.W32 (1.30.2.14), "Exp", lines: +9 -4
- Makefile.org (1.154.2.78), "Exp", lines: +51 -19
- PROBLEMS (1.4.2.10), "Exp", lines: +2 -2
- e_os.h (1.56.2.17), "Exp", lines: +20 -1
- apps/.cvsignore (1.5.8.1), "Exp", lines: +1 -0
- apps/Makefile (1.1.4.1), "Exp", lines: +1147 -0
- apps/apps.c (1.49.2.27), "Exp", lines: +0 -10
- apps/ca.c (1.102.2.31), "Exp", lines: +0 -10
- apps/dgst.c (1.23.2.10), "Exp", lines: +39 -11
- apps/openssl.c (1.48.2.9), "Exp", lines: +19 -0
- crypto/Makefile (1.1.4.1), "Exp", lines: +217 -0
- crypto/cryptlib.c (1.32.2.11), "Exp", lines: +5 -0
- crypto/crypto-lib.com (1.53.2.12), "Exp", lines: +1 -1
- crypto/md32_common.h (1.22.2.6), "Exp", lines: +12 -0
- crypto/aes/Makefile (1.1.4.1), "Exp", lines: +102 -0
- crypto/aes/aes.h (1.1.2.9), "Exp", lines: +9 -0
- crypto/aes/aes_cfb.c (1.1.2.9), "Exp", lines: +93 -0
- crypto/aes/aes_core.c (1.1.2.6), "Exp", lines: +4 -0
- crypto/asn1/Makefile (1.1.4.1), "Exp", lines: +1150 -0
- crypto/bf/Makefile (1.1.4.1), "Exp", lines: +113 -0
- crypto/bio/Makefile (1.1.4.1), "Exp", lines: +214 -0
- crypto/bio/bio.h (1.56.2.6), "Exp", lines: +1 -0
- crypto/bn/Makefile (1.1.4.1), "Exp", lines: +324 -0
- crypto/bn/bntest.c (1.55.2.4), "Exp", lines: +1 -1
- crypto/buffer/Makefile (1.1.4.1), "Exp", lines: +92 -0
- crypto/cast/Makefile (1.1.4.1), "Exp", lines: +118 -0
- crypto/cast/asm/.cvsignore (1.2.8.1), "Exp", lines: +1 -0
- crypto/comp/Makefile (1.1.4.1), "Exp", lines: +112 -0
- crypto/conf/Makefile (1.1.4.1), "Exp", lines: +181 -0
- crypto/des/Makefile (1.1.4.1), "Exp", lines: +314 -0
- crypto/des/cfb64ede.c (1.6.2.4), "Exp", lines: +111 -0
- crypto/des/des.h (1.40.2.6), "Exp", lines: +5 -1
- crypto/des/des_enc.c (1.11.2.4), "Exp", lines: +8 -0
- crypto/des/des_old.c (1.11.2.6), "Exp", lines: +1 -1
- crypto/des/destest.c (1.30.2.8), "Exp", lines: +2 -2
- crypto/des/ecb3_enc.c (1.8.2.3), "Exp", lines: +1 -3
- crypto/des/set_key.c (1.18.2.2), "Exp", lines: +4 -0
- crypto/dh/Makefile (1.1.4.1), "Exp", lines: +131 -0
- crypto/dsa/Makefile (1.1.4.1), "Exp", lines: +173 -0
- crypto/dsa/dsa_gen.c (1.19.2.1), "Exp", lines: +4 -1
- crypto/dsa/dsa_key.c (1.9.2.1), "Exp", lines: +2 -0
- crypto/dsa/dsa_ossl.c (1.12.2.6), "Exp", lines: +2 -0
- crypto/dsa/dsa_sign.c (1.10.2.5), "Exp", lines: +12 -0
- crypto/dsa/dsa_vrf.c (1.10.2.5), "Exp", lines: +8 -0
- crypto/dso/Makefile (1.1.4.1), "Exp", lines: +140 -0
- crypto/ec/Makefile (1.1.4.1), "Exp", lines: +126 -0
- crypto/engine/Makefile (1.1.4.1), "Exp", lines: +536 -0
- crypto/engine/hw_cryptodev.c (1.1.2.6), "Exp", lines: +6 -2
- crypto/err/Makefile (1.1.4.1), "Exp", lines: +118 -0
- crypto/err/err.h (1.35.2.6), "Exp", lines: +2 -0
- crypto/err/err_all.c (1.17.2.4), "Exp", lines: +4 -0
- crypto/err/openssl.ec (1.11.2.3), "Exp", lines: +1 -0
- crypto/evp/Makefile (1.1.4.1), "Exp", lines: +1057 -0
- crypto/evp/bio_md.c (1.11.2.1), "Exp", lines: +6 -0
- crypto/evp/c_allc.c (1.8.2.7), "Exp", lines: +8 -0
- crypto/evp/e_aes.c (1.6.2.10), "Exp", lines: +22 -4
- crypto/evp/e_des.c (1.5.2.8), "Exp", lines: +36 -3
- crypto/evp/e_des3.c (1.8.2.7), "Exp", lines: +43 -4
- crypto/evp/evp.h (1.86.2.15), "Exp", lines: +39 -11
- crypto/evp/evp_err.c (1.23.2.3), "Exp", lines: +3 -1
- crypto/evp/evp_lib.c (1.6.8.4), "Exp", lines: +24 -0
- crypto/evp/evp_locl.h (1.7.2.6), "Exp", lines: +11 -2
- crypto/evp/evp_test.c (1.14.2.13), "Exp", lines: +17 -8
- crypto/evp/evptests.txt (1.9.2.7), "Exp", lines: +106 -1
- crypto/hmac/Makefile (1.1.4.1), "Exp", lines: +99 -0
- crypto/idea/Makefile (1.1.4.1), "Exp", lines: +89 -0
- crypto/krb5/Makefile (1.1.4.1), "Exp", lines: +88 -0
- crypto/lhash/Makefile (1.1.4.1), "Exp", lines: +91 -0
- crypto/md2/Makefile (1.1.4.1), "Exp", lines: +91 -0
- crypto/md4/Makefile (1.1.4.1), "Exp", lines: +93 -0
- crypto/md5/Makefile (1.1.4.1), "Exp", lines: +129 -0
- crypto/mdc2/Makefile (1.1.4.1), "Exp", lines: +96 -0
- crypto/objects/Makefile (1.1.4.1), "Exp", lines: +121 -0
- crypto/objects/obj_dat.h (1.49.2.19), "Exp", lines: +33 -3
- crypto/objects/obj_mac.h (1.19.2.19), "Exp", lines: +40 -0
- crypto/objects/obj_mac.num (1.15.2.15), "Exp", lines: +10 -0
- crypto/objects/objects.txt (1.20.2.20), "Exp", lines: +13 -0
- crypto/ocsp/Makefile (1.1.4.1), "Exp", lines: +291 -0
- crypto/pem/Makefile (1.1.4.1), "Exp", lines: +334 -0
- crypto/pkcs12/Makefile (1.1.4.1), "Exp", lines: +415 -0
- crypto/pkcs7/Makefile (1.1.4.1), "Exp", lines: +241 -0
- crypto/rand/Makefile (1.1.4.1), "Exp", lines: +196 -0
- crypto/rand/md_rand.c (1.69.2.4), "Exp", lines: +9 -0
- crypto/rand/rand.h (1.26.2.7), "Exp", lines: +3 -0
- crypto/rand/rand_err.c (1.6.2.3), "Exp", lines: +4 -1
- crypto/rand/rand_lib.c (1.15.2.4), "Exp", lines: +11 -0
- crypto/rc2/Makefile (1.1.4.1), "Exp", lines: +89 -0
- crypto/rc4/Makefile (1.1.4.1), "Exp", lines: +108 -0
- crypto/rc5/Makefile (1.1.4.1), "Exp", lines: +106 -0
- crypto/ripemd/Makefile (1.1.4.1), "Exp", lines: +111 -0
- crypto/rsa/Makefile (1.1.4.1), "Exp", lines: +239 -0
- crypto/rsa/rsa_eay.c (1.28.2.9), "Exp", lines: +1 -1
- crypto/rsa/rsa_gen.c (1.8.6.1), "Exp", lines: +3 -0
- crypto/sha/Makefile (1.1.4.1), "Exp", lines: +118 -0
- crypto/sha/sha1dgst.c (1.21.2.1), "Exp", lines: +8 -0
- crypto/stack/Makefile (1.1.4.1), "Exp", lines: +86 -0
- crypto/txt_db/Makefile (1.1.4.1), "Exp", lines: +86 -0
- crypto/ui/Makefile (1.1.4.1), "Exp", lines: +115 -0
- crypto/x509/Makefile (1.1.4.1), "Exp", lines: +592 -0
- crypto/x509v3/Makefile (1.1.4.1), "Exp", lines: +601 -0
- fips/Makefile (1.1.4.1), "Exp", lines: +202 -0
- fips/fingerprint.sha1 (1.1.2.4), "Exp", lines: +4 -4
- fips/fips.c (1.1.2.3), "Exp", lines: +120 -5
- fips/fips.h (1.1.2.3), "Exp", lines: +42 -2
- fips/fips_check_sha1 (1.1.2.5), "Exp", lines: +2 -2
- fips/fips_err.h (1.1.4.1), "Exp", lines: +117 -0
- fips/fips_err_wrapper.c (1.1.2.3), "Exp", lines: +4 -2
- fips/fips_locl.h (1.1.4.1), "Exp", lines: +62 -0
- fips/fips_make_sha1 (1.1.2.5), "Exp", lines: +9 -6
- fips/fips_test_suite.c (1.1.4.1), "Exp", lines: +302 -0
- fips/openssl_fips_fingerprint (1.1.4.1), "Exp", lines: +25 -0
- fips/aes/Makefile (1.1.4.1), "Exp", lines: +131 -0
- fips/aes/fingerprint.sha1 (1.1.2.3), "Exp", lines: +3 -2
- fips/aes/fips_aes_core.c (1.1.2.3), "Exp", lines: +5 -2
- fips/aes/fips_aes_locl.h (1.1.2.3), "Exp", lines: +0 -0
- fips/aes/fips_aes_selftest.c (1.1.4.1), "Exp", lines: +112 -0
- fips/aes/fips_aesavs.c (1.1.2.10), "Exp", lines: +12 -6
- fips/des/Makefile (1.1.4.1), "Exp", lines: +155 -0
- fips/des/fingerprint.sha1 (1.1.2.3), "Exp", lines: +5 -2
- fips/des/fips_des_enc.c (1.1.2.4), "Exp", lines: +16 -3
- fips/des/fips_des_locl.h (1.1.2.3), "Exp", lines: +1 -1
- fips/des/fips_des_selftest.c (1.1.4.1), "Exp", lines: +200 -0
- fips/des/fips_desmovs.c (1.1.2.4), "Exp", lines: +186 -79
- fips/des/fips_set_key.c (1.1.4.1), "Exp", lines: +415 -0
- fips/des/asm/fips-dx86-elf.s (1.1.4.1), "Exp", lines: +2697 -0
- fips/dsa/Makefile (1.1.4.1), "Exp", lines: +159 -0
- fips/dsa/fingerprint.sha1 (1.1.2.4), "Exp", lines: +3 -1
- fips/dsa/fips_dsa_gen.c (1.1.4.1), "Exp", lines: +373 -0
- fips/dsa/fips_dsa_ossl.c (1.1.2.4), "Exp", lines: +16 -3
- fips/dsa/fips_dsa_selftest.c (1.1.4.1), "Exp", lines: +168 -0
- fips/dsa/fips_dsatest.c (1.1.2.4), "Exp", lines: +10 -6
- fips/dsa/fips_dssvs.c (1.1.4.1), "Exp", lines: +306 -0
- fips/rand/Makefile (1.1.4.1), "Exp", lines: +104 -0
- fips/rand/fingerprint.sha1 (1.1.2.3), "Exp", lines: +2 -2
- fips/rand/fips_rand.c (1.1.2.3), "Exp", lines: +60 -10
- fips/rand/fips_rand.h (1.1.2.3), "Exp", lines: +19 -1
- fips/rand/fips_randtest.c (1.1.2.3), "Exp", lines: +31 -10
- fips/rsa/Makefile (1.1.4.1), "Exp", lines: +112 -0
- fips/rsa/fingerprint.sha1 (1.1.4.1), "Exp", lines: +3 -0
- fips/rsa/fips_rsa_eay.c (1.1.4.1), "Exp", lines: +735 -0
- fips/rsa/fips_rsa_gen.c (1.1.4.1), "Exp", lines: +249 -0
- fips/rsa/fips_rsa_selftest.c (1.1.4.1), "Exp", lines: +207 -0
- fips/sha1/.cvsignore (1.1.2.3), "Exp", lines: +1 -2
- fips/sha1/Makefile (1.1.4.1), "Exp", lines: +158 -0
- fips/sha1/fingerprint.sha1 (1.1.2.4), "Exp", lines: +5 -3
- fips/sha1/fips_md32_common.h (1.1.2.3), "Exp", lines: +0 -0
- fips/sha1/fips_sha1_selftest.c (1.1.4.1), "Exp", lines: +97 -0
- fips/sha1/fips_sha1dgst.c (1.1.2.4), "Exp", lines: +4 -4
- fips/sha1/fips_sha1test.c (1.1.2.4), "Exp", lines: +17 -0
- fips/sha1/fips_sha_locl.h (1.1.2.3), "Exp", lines: +7 -0
- fips/sha1/fips_standalone_sha1.c (1.1.2.4), "Exp", lines: +60 -7
- fips/sha1/sha1hashes.txt (1.1.2.3), "Exp", lines: +0 -0
- fips/sha1/sha1vectors.txt (1.1.2.3), "Exp", lines: +0 -0
- fips/sha1/standalone.sha1 (1.1.2.5), "Exp", lines: +6 -4
- fips/sha1/asm/sx86-elf.s (1.1.4.1), "Exp", lines: +1568 -0
- ms/do_masm.bat (1.1.8.2), "Exp", lines: +12 -10
- ms/do_ms.bat (1.4.8.2), "Exp", lines: +11 -11
- ms/do_nasm.bat (1.1.8.2), "Exp", lines: +12 -11
- ms/do_nt.bat (1.2.8.1), "Exp", lines: +4 -4
- shlib/hpux10-cc.sh (1.3.2.2), "Exp", lines: +3 -3
- ssl/Makefile (1.1.4.1), "Exp", lines: +1019 -0
- ssl/s3_clnt.c (1.53.2.16), "Exp", lines: +10 -0
- ssl/s3_srvr.c (1.85.2.21), "Exp", lines: +9 -0
- ssl/ssl_cert.c (1.48.2.7), "Exp", lines: +9 -0
- ssl/ssl_lib.c (1.110.2.12), "Exp", lines: +13 -1
- ssl/ssltest.c (1.53.2.23), "Exp", lines: +33 -1
- ssl/t1_enc.c (1.27.2.8), "Exp", lines: +19 -1
- test/.cvsignore (1.4.8.1), "Exp", lines: +4 -0
- test/Makefile (1.1.4.1), "Exp", lines: +941 -0
- test/bctest (1.14.2.1), "Exp", lines: +1 -1
- test/testenc (1.3.8.1), "Exp", lines: +1 -1
- test/testfipsssl (1.1.4.1), "Exp", lines: +113 -0
- tools/Makefile (1.1.4.1), "Exp", lines: +61 -0
- util/cygwin.sh (1.1.2.5), "Exp", lines: +3 -3
- util/domd (1.6.2.3), "Exp", lines: +5 -5
- util/fixNT.sh (1.1.1.2.8.1), "Exp", lines: +3 -3
- util/libeay.num (1.173.2.19), "Exp", lines: +55 -11
- util/mk1mf.pl (1.41.2.10), "Exp", lines: +6 -4
- util/mkdef.pl (1.67.2.7), "Exp", lines: +11 -4
- util/mkerr.pl (1.18.2.6), "Exp", lines: +2 -1
- util/mkfiles.pl (1.12.2.1), "Exp", lines: +8 -1
- util/pod2mantest (1.1.2.7), "Exp", lines: +1 -1
- util/selftest.pl (1.18.2.1), "Exp", lines: +2 -2
- util/pl/BC-16.pl (1.2.2.1), "Exp", lines: +1 -1
- util/pl/BC-32.pl (1.11.2.4), "Exp", lines: +1 -1
- util/pl/Mingw32.pl (1.12.6.5), "Exp", lines: +1 -1
- util/pl/OS2-EMX.pl (1.1.2.3), "Exp", lines: +1 -1
- util/pl/VC-16.pl (1.3.2.1), "Exp", lines: +2 -2
- util/pl/VC-32.pl (1.11.2.3), "Exp", lines: +2 -2
- util/pl/VC-CE.pl (1.1.2.5), "Exp", lines: +1 -1
- util/pl/ultrix.pl (1.2.8.1), "Exp", lines: +1 -1
-
- Pull FIPS back into stable.
-
-2004-05-12 10:27 levitte
-
- Changed:
- apps/Makefile (1.1.4.2), "Exp", lines: +3 -1
-
- Only check for FIPS signatures when FIPS is enabled.
-
-2004-05-12 10:28 levitte
-
- Changed:
- crypto/des/FILES0 (1.1.4.2), "Exp", lines: +1 -1
-
- Makefile.ssl changed name to Makefile.
-
-2004-05-12 10:28 levitte
-
- Changed:
- fips/rand/fips_rand.c (1.1.2.4), "Exp", lines: +5 -1
-
- Only really build this file when OPENSSL_FIPS is defined. And oh,
- let's keep internal variables static.
-
-2004-05-12 10:42 levitte
-
- Changed:
- fips/rand/fingerprint.sha1 (1.1.2.4), "Exp", lines: +1 -1
-
- I forgot to modify the signature for fips_rand.c...
-
-2004-05-12 10:46 levitte
-
- Changed:
- fips/rsa/.cvsignore (1.1.4.1), "Exp", lines: +1 -0
- fips/.cvsignore (1.1.2.3), "Exp", lines: +1 -1
- fips/aes/.cvsignore (1.1.2.3), "Exp", lines: +0 -3
- fips/des/.cvsignore (1.1.2.3), "Exp", lines: +0 -2
- fips/dsa/.cvsignore (1.1.2.3), "Exp", lines: +0 -1
- fips/rand/.cvsignore (1.1.2.3), "Exp", lines: +0 -1
-
- Ignore the 'lib' timestamp file.
-
-2004-05-12 12:07 levitte
-
- Changed:
- fips/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
- fips/aes/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
- fips/des/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
- fips/dsa/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
- fips/rand/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
- fips/rsa/.cvsignore (1.1.4.2), "Exp", lines: +1 -0
- fips/sha1/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
-
- Ignore 'Makefile.save'
-
2004-05-12 12:09 levitte
Changed:
Typo corretced.
-2004-05-19 16:16 levitte
-
- Changed:
- fips/rsa/fingerprint.sha1 (1.1.4.2), "Exp", lines: +2 -2
- fips/rsa/fips_rsa_eay.c (1.1.4.2), "Exp", lines: +8 -8
- fips/rsa/fips_rsa_gen.c (1.1.4.2), "Exp", lines: +1 -1
- fips/dsa/fingerprint.sha1 (1.1.2.5), "Exp", lines: +2 -2
- fips/dsa/fips_dsa_gen.c (1.1.4.2), "Exp", lines: +2 -2
- fips/dsa/fips_dsa_ossl.c (1.1.2.5), "Exp", lines: +4 -4
- fips/aes/fingerprint.sha1 (1.1.2.4), "Exp", lines: +1 -1
- fips/aes/fips_aes_core.c (1.1.2.4), "Exp", lines: +5 -5
- crypto/rsa/rsa.h (1.36.2.11), "Exp", lines: +4 -0
- crypto/aes/aes.h (1.1.2.10), "Exp", lines: +6 -0
- crypto/dsa/dsa.h (1.26.2.5), "Exp", lines: +4 -0
-
- Define FIPS_*_SIZE_T for AES, DSA and RSA as well, in preparation
- for size_t-ification of those algorithms in future version of
- OpenSSL...
-
-2004-05-27 11:33 levitte
-
- Changed:
- makevms.com (1.35.2.3), "Exp", lines: +27 -0
-
- Copy the FIPS files to the temporary openssl include directory.
-
-2004-05-27 12:04 levitte
-
- Changed:
- fips/fips-lib.com (1.1.2.1), "Exp", lines: +1179 -0
- makevms.com (1.35.2.4), "Exp", lines: +8 -0
-
- Compile the FIPS directory on VMS as well. fips-lib.com is
- essentially a copy of crypto-lib.com, with just a few edits.
-
-2004-05-27 12:07 levitte
-
- Changed:
- fips/install.com (1.1.2.1), "Exp", lines: +55 -0
- install.com (1.4.2.2), "Exp", lines: +6 -6
-
- Run an installation of FIPS stuff as well.
-
-2004-05-27 12:19 levitte
-
- Changed:
- test/maketests.com (1.13.2.5), "Exp", lines: +3 -3
- apps/makeapps.com (1.18.2.5), "Exp", lines: +3 -3
-
- Make sure o_str.h is reachable.
-
-2004-06-19 15:15 ben
-
- Changed:
- Makefile.org (1.154.2.80), "Exp", lines: +1 -1
- crypto/dh/dh.h (1.23.2.7), "Exp", lines: +0 -1
- crypto/dh/dh_check.c (1.6.2.1), "Exp", lines: +4 -0
- crypto/dh/dh_err.c (1.6.2.4), "Exp", lines: +0 -1
- crypto/dh/dh_gen.c (1.8.8.3), "Exp", lines: +5 -9
- crypto/dh/dh_key.c (1.16.2.3), "Exp", lines: +4 -0
- fips/Makefile (1.1.4.2), "Exp", lines: +13 -14
- fips/fingerprint.sha1 (1.1.2.6), "Exp", lines: +2 -2
- fips/fips.h (1.1.2.4), "Exp", lines: +1 -0
- fips/fips_err.h (1.1.4.2), "Exp", lines: +1 -0
- fips/fips_make_sha1 (1.1.2.6), "Exp", lines: +3 -0
- fips/fips_test_suite.c (1.1.4.3), "Exp", lines: +13 -9
- fips/openssl_fips_fingerprint (1.1.4.2), "Exp", lines: +1 -2
-
- The version that was actually submitted for FIPS testing.
-
-2004-06-19 15:16 ben
-
- Changed:
- fips/dh/Makefile (1.1.2.1), "Exp", lines: +92 -0
- fips/dh/fingerprint.sha1 (1.1.2.1), "Exp", lines: +3 -0
- fips/dh/fips_dh_check.c (1.1.2.1), "Exp", lines: +119 -0
- fips/dh/fips_dh_gen.c (1.1.2.1), "Exp", lines: +182 -0
- fips/dh/fips_dh_key.c (1.1.2.1), "Exp", lines: +222 -0
-
- Add Diffie-Hellman to FIPS.
-
-2004-06-19 15:18 ben
-
- Changed:
- fips/.cvsignore (1.1.2.5), "Exp", lines: +2 -0
- fips/dh/.cvsignore (1.1.2.1), "Exp", lines: +1 -0
-
- Update ignores.
-
2004-06-19 15:32 ben
Changed:
Add primality tester.
-2004-06-21 11:07 levitte
-
- Changed:
- fips/aes/Makefile (1.1.4.2), "Exp", lines: +7 -5
- fips/des/Makefile (1.1.4.2), "Exp", lines: +7 -5
- fips/dh/Makefile (1.1.2.2), "Exp", lines: +7 -6
- fips/dsa/Makefile (1.1.4.2), "Exp", lines: +7 -6
- fips/rsa/Makefile (1.1.4.2), "Exp", lines: +7 -6
- fips/sha1/Makefile (1.1.4.2), "Exp", lines: +7 -5
-
- Make sure we don't try to loop over an empty EXHEADER. In the
- Makefiles where this was fixed by commenting away code, change it
- to check for an empty EXHEADER instead, so we have less hassle in a
- future where EXHEADER changes.
-
- PR: 900
-
2004-06-21 20:05 levitte
Changed:
Return an error if an attempt is made to encode or decode cipher
ASN1 parameters and the cipher doesn't support it.
-2004-06-28 22:33 levitte
-
- Changed:
- fips/dh/fips_dh_check.c (1.1.2.2), "Exp", lines: +6 -0
- fips/dh/fips_dh_gen.c (1.1.2.2), "Exp", lines: +6 -2
- fips/dh/fips_dh_key.c (1.1.2.2), "Exp", lines: +8 -0
-
- Make sure the FIPS stuff is only really compiled when in FIPS mode.
-
2004-07-04 18:36 steve
Changed:
Fix memory leak.
-2004-07-12 19:59 ben
-
- Changed:
- fips/fips_test_suite.c (1.1.4.4), "Exp", lines: +39 -6
- fips/dh/fingerprint.sha1 (1.1.2.2), "Exp", lines: +3 -3
-
- Corrected test program.
-
-2004-07-17 14:48 appro
-
- Changed:
- fips/des/Makefile (1.1.4.3), "Exp", lines: +1 -1
-
- Eliminate enforced -g from CFLAGS. It switches off optimization
- with some compilers, e.g. DEC C.
-
-2004-07-21 19:35 steve
-
- Changed:
- fips/fingerprint.sha1 (1.1.2.7), "Exp", lines: +1 -1
- fips/fips.c (1.1.2.5), "Exp", lines: +3 -3
- fips/rsa/fingerprint.sha1 (1.1.4.3), "Exp", lines: +1 -1
- fips/rsa/fips_rsa_selftest.c (1.1.4.2), "Exp", lines: +8 -8
-
- Avoid compiler warnings.
-
2004-07-21 19:41 steve
Changed:
is that compiler first parses code, then optimizes, not both at
once...
-2004-07-27 02:17 steve
-
- Changed:
- fips/fips_test_suite.c (1.1.4.5), "Exp", lines: +9 -8
-
- Stop compiler warnings.
-
-2004-07-27 02:20 steve
-
- Changed:
- crypto/err/err.c (1.51.2.6), "Exp", lines: +1 -0
-
- Add FIPS name to error library.
-
-2004-07-27 14:22 steve
-
- Changed:
- Makefile.org (1.154.2.84), "Exp", lines: +3 -3
- fips/fips_check_sha1 (1.1.2.6), "Exp", lines: +1 -1
- fips/openssl_fips_fingerprint (1.1.4.3), "Exp", lines: +1 -1
-
- Rename libcrypto.sha1 to libcrypto.a.sha1
-
2004-07-27 16:09 levitte
Changed:
Typo
-2004-07-27 20:28 steve
-
- Changed:
- ssl/s3_lib.c (1.57.2.11), "Exp", lines: +33 -33
- ssl/ssl.h (1.126.2.20), "Exp", lines: +1 -0
- ssl/ssl_ciph.c (1.33.2.9), "Exp", lines: +11 -0
- ssl/ssl_locl.h (1.47.2.3), "Exp", lines: +2 -1
-
- New cipher "strength" FIPS which specifies that a cipher suite is
- FIPS compatible.
-
- New cipherstring "FIPS" is all FIPS compatible ciphersuites
- except eNULL.
-
- Only allow FIPS ciphersuites in FIPS mode.
-
-2004-07-28 04:24 levitte
-
- Changed:
- makevms.com (1.35.2.6), "Exp", lines: +2 -2
-
- From the FIPS directory, darnit!
-
-2004-07-28 15:47 levitte
-
- Changed:
- makevms.com (1.35.2.7), "Exp", lines: +5 -1
-
- Define OPENSSL_FIPS in opensslconf.h if a logical name with the
- same name is defined.
-
- Go up one directory level before dealing with FIPS stuff.
-
-2004-07-30 00:26 levitte
-
- Changed:
- fips/fips-lib.com (1.1.2.2), "Exp", lines: +3 -3
-
- We're building crypto stuff, not ssl stuff. Additionally, we're in
- the fips subdirectory, not the crypto one...
-
-2004-07-30 16:37 levitte
-
- Changed:
- fips/sha1/fingerprint.sha1 (1.1.2.7), "Exp", lines: +2 -2
- fips/sha1/fips_md32_common.h (1.1.2.6), "Exp", lines: +1 -1
- fips/sha1/fips_sha_locl.h (1.1.2.5), "Exp", lines: +2 -2
- fips/sha1/fips_standalone_sha1.c (1.1.2.5), "Exp", lines: +1 -1
- fips/sha1/standalone.sha1 (1.1.2.8), "Exp", lines: +3 -3
- ssl/ssl_ciph.c (1.33.2.10), "Exp", lines: +2 -2
- fips/rsa/fingerprint.sha1 (1.1.4.4), "Exp", lines: +2 -2
- fips/rsa/fips_rsa_eay.c (1.1.4.3), "Exp", lines: +1 -1
- fips/rsa/fips_rsa_gen.c (1.1.4.3), "Exp", lines: +1 -1
- fips/dh/fingerprint.sha1 (1.1.2.3), "Exp", lines: +1 -1
- fips/dh/fips_dh_gen.c (1.1.2.3), "Exp", lines: +1 -1
- fips/dsa/fingerprint.sha1 (1.1.2.6), "Exp", lines: +2 -2
- fips/dsa/fips_dsa_gen.c (1.1.4.3), "Exp", lines: +4 -3
- fips/dsa/fips_dsa_ossl.c (1.1.2.6), "Exp", lines: +2 -2
- fips/des/fingerprint.sha1 (1.1.2.5), "Exp", lines: +2 -2
- fips/des/fips_des_enc.c (1.1.2.5), "Exp", lines: +2 -2
- fips/des/fips_set_key.c (1.1.4.3), "Exp", lines: +3 -3
- fips/fingerprint.sha1 (1.1.2.8), "Exp", lines: +2 -2
- fips/fips.c (1.1.2.6), "Exp", lines: +76 -23
- fips/fips.h (1.1.2.5), "Exp", lines: +2 -3
- fips/fips_locl.h (1.1.4.2), "Exp", lines: +7 -2
- fips/aes/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
- fips/aes/fips_aes_core.c (1.1.2.5), "Exp", lines: +1 -1
- crypto/rand/md_rand.c (1.69.2.5), "Exp", lines: +1 -1
- crypto/rand/rand_lib.c (1.15.2.5), "Exp", lines: +2 -1
- crypto/dsa/dsa_sign.c (1.10.2.6), "Exp", lines: +2 -2
- crypto/dsa/dsa_vrf.c (1.10.2.6), "Exp", lines: +1 -1
- crypto/pem/pem_all.c (1.20.2.2), "Exp", lines: +2 -2
- crypto/cryptlib.c (1.32.2.12), "Exp", lines: +122 -6
- crypto/crypto.h (1.62.2.8), "Exp", lines: +8 -1
- crypto/md32_common.h (1.22.2.7), "Exp", lines: +2 -2
-
- To protect FIPS-related global variables, add locking mechanisms
- around them.
-
- NOTE: because two new locks are added, this adds potential
- binary incompatibility with earlier versions in the 0.9.7 series.
- However, those locks will only ever be touched when FIPS_mode_set()
- is called and after, thanks to a variable that's only changed from
- 0 to 1 once (when FIPS_mode_set() is called). So basically, as
- long as FIPS mode hasn't been engaged explicitely by the calling
- application, the new locks are treated as if they didn't exist at
- all, thus not becoming a problem. Applications that are built or
- rebuilt to use FIPS functionality will need to be recompiled in any
- case, thus not being a problem either.
-
2004-08-02 16:15 levitte
Changed:
Thanks to Dr Stephen Henson <shenson@drh-consultancy.co.uk>
for making me aware of this error.
-2004-08-05 20:11 steve
-
- Changed:
- fips/fingerprint.sha1 (1.1.2.9), "Exp", lines: +1 -1
- fips/fips.c (1.1.2.7), "Exp", lines: +1 -1
-
- Stop compiler giving bogus shadow warning.
-
2004-08-09 14:13 levitte
Changed:
In the fips directory, we use FIPS-LIB.COM, not CRYPTO-LIB.COM...
-2004-08-09 14:14 levitte
-
- Changed:
- fips/fips-lib.com (1.1.2.3), "Exp", lines: +4 -4
-
- Correct typos and include directory specifications.
-
-2004-08-10 11:11 levitte
-
- Changed:
- fips/fips-lib.com (1.1.2.4), "Exp", lines: +2 -1
-
- Update the VMS fips library builder with the DH library.
-
-2004-08-10 12:04 levitte
-
- Changed:
- fips/rand/fingerprint.sha1 (1.1.2.8), "Exp", lines: +1 -1
- fips/rand/fips_rand.c (1.1.2.8), "Exp", lines: +7 -1
-
- With DEC C in ANSI C mode, we need to define _XOPEN_SOURCE_EXTENDED
- to get struct timeval and gettimeofday().
-
2004-08-11 22:34 levitte
Changed:
Another missing module in the VMS build files. I believe this is
the last, though...
-2004-09-06 16:19 levitte
-
- Changed:
- fips/fips.c (1.1.2.8), "Exp", lines: +5 -4
-
- Replace the bogus checks of n with proper uses of feof(), ferror()
- and clearerr().
-
-2004-09-06 16:21 levitte
-
- Changed:
- fips/sha1/fips_sha_locl.h (1.1.2.6), "Exp", lines: +2 -2
-
- num is an unsigned long, but since it was transfered from
- crypto/sha/sha_locl.h, where it is in fact an int, we need to check
- for less-than-zero as if it was an int...
-
2004-09-10 22:27 steve
Changed:
Oops, forgot to reorder extension request nids.
-2004-10-08 12:03 ben
-
- Changed:
- fips/fingerprint.sha1 (1.1.2.10), "Exp", lines: +1 -1
- fips/sha1/fingerprint.sha1 (1.1.2.8), "Exp", lines: +1 -1
- fips/sha1/standalone.sha1 (1.1.2.9), "Exp", lines: +1 -1
-
- Update fingerprints.
-
2004-10-14 07:51 levitte
Changed:
Add fips/dh directory to mkfiles.pl
-2004-10-26 14:17 levitte
-
- Changed:
- fips/sha1/Makefile (1.1.4.4), "Exp", lines: +3 -1
- util/mkfiles.pl (1.12.2.3), "Exp", lines: +1 -0
- fips/Makefile (1.1.4.5), "Exp", lines: +7 -1
- crypto/sha/Makefile (1.1.4.4), "Exp", lines: +1 -7
-
- fips/dh was missing in mkfiles.pl. make update
-
-2004-10-26 15:01 steve
-
- Changed:
- util/mkfiles.pl (1.12.2.4), "Exp", lines: +0 -1
-
- Only add fips/dh once...
-
-2004-11-01 09:20 levitte
-
- Changed:
- fips/rand/fingerprint.sha1 (1.1.2.9), "Exp", lines: +1 -1
- fips/rand/fips_rand.c (1.1.2.9), "Exp", lines: +3 -1
-
- Make sure _XOPEN_SOURCE_EXTENDED is correctly defined, and only if
- not already defined.
-
2004-11-11 02:18 steve
Changed:
Eliminate dependency on UNICODE macro.
-2004-12-09 19:03 appro
-
- vChanged:
- crypto/Makefile (1.1.4.4), "Exp", lines: +2 -0
-
- Postpone linking of shared libcrypto in FIPS build.
-
-2004-12-09 19:13 appro
-
- Changed:
- fips/fingerprint.sha1 (1.1.2.11), "Exp", lines: +1 -1
- fips/fips.c (1.1.2.9), "Exp", lines: +13 -1
- fips/openssl_fips_fingerprint (1.1.4.4), "Exp", lines: +4 -2
-
- Cygwin specific FIPS fix-ups.
-
-2004-12-09 23:43 appro
-
- Changed:
- Configure (1.314.2.100), "Exp", lines: +2 -3
- crypto/des/des_enc.c (1.11.2.5), "Exp", lines: +2 -2
-
- Eliminate false dependency on 386 config option is FIPS context.
- At the same time limit assembler support to ELF platforms [that's
- what is there, ELF modules].
-
-2004-12-10 12:37 appro
-
- Changed:
- Configure (1.314.2.101), "Exp", lines: +10 -3
- crypto/des/des_enc.c (1.11.2.6), "Exp", lines: +2 -2
-
- Respect no-asm with fips option and disable FIPS DES assembler in
- shared context [because it's not PIC].
-
-2004-12-10 14:15 appro
-
- Changed:
- fips/sha1/fingerprint.sha1 (1.1.2.10), "Exp", lines: +1 -1
- fips/sha1/standalone.sha1 (1.1.2.11), "Exp", lines: +1 -1
- fips/sha1/asm/sx86-elf.s (1.1.4.3), "Exp", lines: +32 -32
-
- Solaris x86 assembler update.
-
-2004-12-10 17:30 appro
-
- Changed:
- fips/fips_check_sha1 (1.1.2.7), "Exp", lines: +1 -1
- fips/openssl_fips_fingerprint (1.1.4.5), "Exp", lines: +1 -1
- fips/sha1/Makefile (1.1.4.6), "Exp", lines: +1 -1
-
- Adapt FIPS sub-tree for mingw.
-
2004-12-20 14:18 appro
Changed:
Cosmetic mingw update. PR: 924
-2005-01-03 18:46 steve
-
- Changed:
- fips/rsa/fingerprint.sha1 (1.1.4.5), "Exp", lines: +1 -1
- fips/rsa/fips_rsa_selftest.c (1.1.4.3), "Exp", lines: +55 -11
-
- RSA KAT.
-
2005-01-09 18:58 appro
Changed:
Remove VMS_strcasecmp() from apps.c, it's not used any more. And
besides, the implementation is bogus.
-2005-01-11 17:54 levitte
-
- Changed:
- fips/rsa/fingerprint.sha1 (1.1.4.6), "Exp", lines: +1 -1
- fips/rsa/fips_rsa_selftest.c (1.1.4.4), "Exp", lines: +2 -2
-
- Clear signed vs. unsigned conflicts. Change the fingerprint
- accordingly.
-
-2005-01-11 19:25 levitte
-
- Changed:
- ssl/ssltest.c (1.53.2.24), "Exp", lines: +2 -2
- fips/rand/fips_randtest.c (1.1.2.6), "Exp", lines: +3 -3
- fips/sha1/fips_sha1test.c (1.1.2.5), "Exp", lines: +10 -4
- fips/des/fips_desmovs.c (1.1.2.6), "Exp", lines: +8 -7
- fips/dsa/fips_dsatest.c (1.1.2.5), "Exp", lines: +2 -2
- apps/openssl.c (1.48.2.12), "Exp", lines: +1 -1
- fips/aes/fips_aesavs.c (1.1.2.12), "Exp", lines: +8 -7
-
- Use EXIT() instead of exit().
-
-2005-01-26 21:00 steve
-
- Changed:
- apps/dgst.c (1.23.2.13), "Exp", lines: +10 -0
- apps/pkcs12.c (1.60.2.13), "Exp", lines: +8 -1
- crypto/crypto.h (1.62.2.9), "Exp", lines: +49 -0
- crypto/md32_common.h (1.22.2.9), "Exp", lines: +1 -1
- crypto/bf/bf_skey.c (1.6.2.1), "Exp", lines: +2 -1
- crypto/bf/blowfish.h (1.9.2.1), "Exp", lines: +4 -1
- crypto/cast/c_skey.c (1.5.6.1), "Exp", lines: +3 -1
- crypto/cast/cast.h (1.7.2.1), "Exp", lines: +4 -1
- crypto/evp/bio_md.c (1.11.2.3), "Exp", lines: +2 -7
- crypto/evp/digest.c (1.21.2.7), "Exp", lines: +11 -0
- crypto/evp/e_aes.c (1.6.2.11), "Exp", lines: +11 -11
- crypto/evp/e_des.c (1.5.2.9), "Exp", lines: +5 -3
- crypto/evp/e_des3.c (1.8.2.8), "Exp", lines: +6 -6
- crypto/evp/evp.h (1.86.2.16), "Exp", lines: +17 -0
- crypto/evp/evp_enc.c (1.28.2.11), "Exp", lines: +15 -1
- crypto/evp/evp_err.c (1.23.2.4), "Exp", lines: +6 -1
- crypto/evp/evp_locl.h (1.7.2.7), "Exp", lines: +17 -2
- crypto/evp/m_dss.c (1.8.2.1), "Exp", lines: +1 -1
- crypto/evp/m_md2.c (1.9.2.1), "Exp", lines: +1 -0
- crypto/evp/m_md4.c (1.8.2.1), "Exp", lines: +1 -0
- crypto/evp/m_md5.c (1.9.2.1), "Exp", lines: +1 -0
- crypto/evp/m_mdc2.c (1.9.2.1), "Exp", lines: +1 -0
- crypto/evp/m_sha.c (1.8.2.2), "Exp", lines: +1 -0
- crypto/evp/m_sha1.c (1.8.2.1), "Exp", lines: +1 -1
- crypto/evp/names.c (1.7.2.1), "Exp", lines: +3 -0
- crypto/hmac/hmac.c (1.12.2.3), "Exp", lines: +7 -0
- crypto/hmac/hmac.h (1.14.2.2), "Exp", lines: +1 -0
- crypto/idea/i_skey.c (1.5.6.1), "Exp", lines: +13 -0
- crypto/idea/idea.h (1.10.2.1), "Exp", lines: +4 -0
- crypto/md2/md2.h (1.11.2.1), "Exp", lines: +3 -0
- crypto/md2/md2_dgst.c (1.13.2.4), "Exp", lines: +3 -1
- crypto/md4/md4.h (1.3.2.1), "Exp", lines: +3 -0
- crypto/md4/md4_dgst.c (1.2.2.2), "Exp", lines: +1 -1
- crypto/md5/md5.h (1.10.2.3), "Exp", lines: +3 -0
- crypto/md5/md5_dgst.c (1.16.2.2), "Exp", lines: +1 -1
- crypto/mdc2/mdc2.h (1.9.2.1), "Exp", lines: +3 -1
- crypto/mdc2/mdc2dgst.c (1.13.2.1), "Exp", lines: +3 -1
- crypto/rc2/rc2.h (1.10.2.1), "Exp", lines: +4 -1
- crypto/rc2/rc2_skey.c (1.4.6.1), "Exp", lines: +13 -0
- crypto/rc4/rc4.h (1.10.2.2), "Exp", lines: +3 -0
- crypto/rc4/rc4_skey.c (1.10.8.2), "Exp", lines: +2 -1
- crypto/rc5/rc5.h (1.5.2.1), "Exp", lines: +4 -1
- crypto/rc5/rc5_skey.c (1.4.6.1), "Exp", lines: +14 -0
- crypto/ripemd/ripemd.h (1.8.2.1), "Exp", lines: +3 -0
- crypto/ripemd/rmd_dgst.c (1.13.2.2), "Exp", lines: +2 -1
- crypto/sha/sha.h (1.11.2.2), "Exp", lines: +3 -0
- crypto/sha/sha_locl.h (1.16.2.3), "Exp", lines: +4 -0
- crypto/x509/x509_cmp.c (1.22.2.4), "Exp", lines: +7 -1
- crypto/x509/x509_vfy.c (1.56.2.13), "Exp", lines: +1 -1
- ssl/s3_clnt.c (1.53.2.18), "Exp", lines: +2 -0
- ssl/s3_enc.c (1.31.2.9), "Exp", lines: +3 -0
- ssl/s3_srvr.c (1.85.2.23), "Exp", lines: +2 -0
- ssl/t1_enc.c (1.27.2.9), "Exp", lines: +2 -0
-
- FIPS algorithm blocking.
-
- Non FIPS algorithms are not normally allowed in FIPS mode.
-
- Any attempt to use them via high level functions will
- return an error.
-
- The low level non-FIPS algorithm functions cannot return
- errors so they produce assertion failures. HMAC also has to give an
- assertion error because it (erroneously) can't return an error
- either.
-
- There are exceptions (such as MD5 in TLS and non
- cryptographic use of algorithms) and applications can override the
- blocking and use non FIPS algorithms anyway.
-
- For low level functions the override is perfomed by
- prefixing the algorithm initalization function with "private_" for
- example private_MD5_Init().
-
- For high level functions an override is performed by
- setting a flag in the context.
-
-2005-01-26 21:05 steve
-
- Changed:
- crypto/bf/Makefile (1.1.4.3), "Exp", lines: +5 -2
- crypto/cast/Makefile (1.1.4.3), "Exp", lines: +4 -2
- crypto/des/Makefile (1.1.4.6), "Exp", lines: +1 -1
- crypto/evp/Makefile (1.1.4.5), "Exp", lines: +5 -5
- crypto/idea/Makefile (1.1.4.3), "Exp", lines: +3 -0
- crypto/md2/Makefile (1.1.4.3), "Exp", lines: +3 -1
- crypto/mdc2/Makefile (1.1.4.3), "Exp", lines: +4 -2
- crypto/rc2/Makefile (1.1.4.3), "Exp", lines: +5 -2
- crypto/rc5/Makefile (1.1.4.3), "Exp", lines: +5 -1
- crypto/sha/Makefile (1.1.4.7), "Exp", lines: +7 -1
- fips/Makefile (1.1.4.7), "Exp", lines: +1 -7
- fips/sha1/Makefile (1.1.4.8), "Exp", lines: +1 -3
- util/libeay.num (1.173.2.24), "Exp", lines: +13 -0
-
- make update
-
-2005-01-27 02:49 steve
-
- Changed:
- apps/dgst.c (1.23.2.14), "Exp", lines: +9 -5
- crypto/crypto.h (1.62.2.10), "Exp", lines: +3 -0
- crypto/evp/digest.c (1.21.2.8), "Exp", lines: +34 -0
- crypto/hmac/hmac.c (1.12.2.4), "Exp", lines: +9 -0
-
- More FIPS algorithm blocking.
-
- Catch attempted use of non FIPS algorithms with HMAC.
-
- Give an assertion error for applications that ignore FIPS
- digest errors.
-
- Make -non-fips-allow work with dgst and HMAC.
-
-2005-01-28 15:03 steve
-
- Changed:
- apps/dgst.c (1.23.2.15), "Exp", lines: +2 -1
- apps/enc.c (1.35.2.13), "Exp", lines: +38 -4
- crypto/evp/e_rc4.c (1.11.2.2), "Exp", lines: +1 -0
- crypto/evp/evp.h (1.86.2.17), "Exp", lines: +3 -0
- crypto/evp/evp_enc.c (1.28.2.12), "Exp", lines: +60 -15
- crypto/evp/evp_locl.h (1.7.2.8), "Exp", lines: +1 -0
- test/testenc (1.3.8.2), "Exp", lines: +8 -8
-
- Further FIPS algorithm blocking.
-
- Fixes to cipher blocking and enabling code.
-
- Add option -non-fips-allow to 'enc' and update testenc.
-
-2005-01-31 02:33 steve
-
- Changed:
- ssl/s23_clnt.c (1.20.2.7), "Exp", lines: +16 -0
- ssl/s23_srvr.c (1.41.2.6), "Exp", lines: +9 -0
- ssl/s3_clnt.c (1.53.2.19), "Exp", lines: +0 -8
- ssl/s3_enc.c (1.31.2.10), "Exp", lines: +1 -0
- ssl/s3_srvr.c (1.85.2.24), "Exp", lines: +0 -8
- ssl/ssl.h (1.126.2.21), "Exp", lines: +1 -0
- ssl/ssl_cert.c (1.48.2.10), "Exp", lines: +0 -8
- ssl/ssl_err.c (1.41.2.4), "Exp", lines: +2 -1
- ssl/ssl_lib.c (1.110.2.13), "Exp", lines: +8 -9
- ssl/t1_enc.c (1.27.2.10), "Exp", lines: +0 -18
-
- Only allow TLS is FIPS mode.
-
- Remove old FIPS_allow_md5() calls.
-
2005-01-31 02:40 steve
Changed:
Final HP-UX specific touches to "cope with run-time linker on
multi-ABI platforms."
-2005-02-05 19:24 steve
-
- Changed:
- apps/req.c (1.88.2.18), "Exp", lines: +8 -1
- apps/x509.c (1.67.2.20), "Exp", lines: +8 -1
-
- In FIPS mode use SHA1 as default digest in x509 and req utilities.
-
2005-03-12 10:28 appro
Changed:
in crypto/Makefile and make Makefile.org and fips/Makefile more
discreet.
-2005-03-22 18:29 steve
-
- Changed:
- fips/fingerprint.sha1 (1.1.2.12), "Exp", lines: +1 -1
- fips/fips.c (1.1.2.10), "Exp", lines: +1 -0
-
- Fix memory leak.
-
2005-03-26 20:32 appro
Changed:
Resolve "operation size not specified" in NASM modules.
-2005-03-27 05:36 steve
-
- Changed:
- crypto/evp/e_null.c (1.9.2.1), "Exp", lines: +1 -1
- ssl/s3_lib.c (1.57.2.13), "Exp", lines: +3 -3
-
- Allow 'null' cipher and appropriate Kerberos ciphersuites in FIPS
- mode.
-
2005-04-03 21:16 appro
Changed:
Move cygcrypto.dll above cygwin.dll.
-2005-04-14 14:44 steve
-
- Changed:
- fips/fipshashes.sha1 (1.1.2.1), "Exp", lines: +29 -0
- util/checkhash.pl (1.1.2.1), "Exp", lines: +181 -0
-
- Perl script that checks or rebuilds FIPS hash files. This works on
- both Unix and Windows.
-
- Merge all FIPS hash files into a single hash file
- fips/fips.sha1
-
-2005-04-15 05:27 steve
-
- Changed:
- fips/Makefile (1.1.4.9), "Exp", lines: +1 -1
- fips/aes/Makefile (1.1.4.4), "Exp", lines: +1 -4
- fips/des/Makefile (1.1.4.6), "Exp", lines: +1 -4
- fips/dh/Makefile (1.1.2.5), "Exp", lines: +1 -4
- fips/dsa/Makefile (1.1.4.4), "Exp", lines: +1 -4
- fips/rand/Makefile (1.1.4.3), "Exp", lines: +1 -4
- fips/rsa/Makefile (1.1.4.5), "Exp", lines: +1 -4
- fips/sha1/Makefile (1.1.4.9), "Exp", lines: +1 -7
-
- Update hash checking in makefiles to use new perl script.
-
2005-04-15 10:00 nils
Changed:
Include user32.lib to import MessageBoxIndirect
-2005-04-17 06:37 steve
-
- Changed:
- util/checkhash.pl (1.1.2.2), "Exp", lines: +163 -127
-
- Modify checkhash.pl so it can be run standalone or included as a
- funtion in another perl script.
-
-2005-04-17 16:00 appro
-
- Changed:
- fips/sha1/Makefile (1.1.4.10), "Exp", lines: +9 -5
-
- Bring back fips_standalone_sha1.
-
-2005-04-17 16:17 appro
-
- Deleted:
- fips/sha1/asm/sx86-elf.s (1.1.4.4)
- Changed:
- Configure (1.314.2.114), "Exp", lines: +1 -1
- fips/fipshashes.sha1 (1.1.2.2), "Exp", lines: +1 -1
- fips/sha1/Makefile (1.1.4.11), "Exp", lines: +1 -1
- fips/sha1/standalone.sha1 (1.1.2.13), "Exp", lines: +1 -1
- fips/sha1/asm/fips-sx86-elf.s (1.1.2.1), "Exp", lines: +1568 -0
-
- Rename fips/sha1/sx86-elf.s to fips/sha1/fips-sx86-elf.s.
-
-2005-04-17 16:21 steve
-
- Changed:
- util/checkhash.pl (1.1.2.3), "Exp", lines: +2 -0
-
- Return 0 for successful hash check.
-
-2005-04-17 16:35 appro
-
- Changed:
- Configure (1.314.2.115), "Exp", lines: +1 -1
- fips/fipshashes.sha1 (1.1.2.3), "Exp", lines: +1 -1
- fips/des/asm/fips-dx86-elf.s (1.1.4.2), "Exp", lines: +108 -98
-
- Regenerate fips/des/asm/fips-dx86-elf.s with -fPIC flag.
-
-2005-04-17 16:54 appro
-
- Changed:
- Configure (1.314.2.116), "Exp", lines: +8 -1
- Makefile.org (1.154.2.99), "Exp", lines: +3 -2
- crypto/aes/aes_cbc.c (1.1.2.11), "Exp", lines: +2 -0
- fips/fipshashes.sha1 (1.1.2.4), "Exp", lines: +1 -0
- fips/aes/Makefile (1.1.4.5), "Exp", lines: +4 -2
- fips/aes/asm/fips-ax86-elf.s (1.1.2.1), "Exp", lines: +1822 -0
-
- Throw in fips/aes/asm/fips-ax86-elf.s.
-
-2005-04-17 17:26 appro
-
- Changed:
- crypto/cryptlib.c (1.32.2.18), "Exp", lines: +6 -55
- crypto/crypto.h (1.62.2.11), "Exp", lines: +0 -3
- fips/fips.c (1.1.2.11), "Exp", lines: +62 -8
- fips/fips.h (1.1.2.7), "Exp", lines: +2 -3
- fips/fips_locl.h (1.1.4.3), "Exp", lines: +6 -3
- fips/fipshashes.sha1 (1.1.2.5), "Exp", lines: +4 -4
- fips/rand/fips_rand.c (1.1.2.10), "Exp", lines: +3 -1
- fips/rsa/fips_rsa_gen.c (1.1.4.4), "Exp", lines: +4 -2
-
- Resolve minor binary compatibility issues in fips.
-
-2005-04-17 18:22 appro
-
- Changed:
- fips/fipshashes.sha1 (1.1.2.6), "Exp", lines: +12 -12
- fips/des/fips_des_locl.h (1.1.2.4), "Exp", lines: +1 -1
- fips/des/fips_set_key.c (1.1.4.4), "Exp", lines: +2 -2
- fips/dh/fips_dh_key.c (1.1.2.3), "Exp", lines: +1 -1
- fips/dsa/fips_dsa_ossl.c (1.1.2.7), "Exp", lines: +1 -1
- fips/dsa/fips_dsa_selftest.c (1.1.4.2), "Exp", lines: +3 -3
- fips/rand/fips_rand.c (1.1.2.11), "Exp", lines: +2 -2
- fips/rand/fips_rand.h (1.1.2.5), "Exp", lines: +1 -1
- fips/rsa/fips_rsa_eay.c (1.1.4.4), "Exp", lines: +1 -1
- fips/rsa/fips_rsa_gen.c (1.1.4.5), "Exp", lines: +1 -1
- fips/rsa/fips_rsa_selftest.c (1.1.4.5), "Exp", lines: +11 -11
- fips/sha1/fips_sha1_selftest.c (1.1.4.2), "Exp", lines: +1 -1
- fips/sha1/fips_sha1dgst.c (1.1.2.5), "Exp", lines: +1 -1
- fips/sha1/standalone.sha1 (1.1.2.14), "Exp", lines: +2 -2
-
- Minor fips const-ification.
-
-2005-04-18 07:02 steve
-
- Changed:
- crypto/bf/bf_skey.c (1.6.2.2), "Exp", lines: +1 -0
- crypto/cast/c_skey.c (1.5.6.2), "Exp", lines: +1 -0
- crypto/idea/i_skey.c (1.5.6.2), "Exp", lines: +1 -0
- crypto/rc2/rc2_skey.c (1.4.6.2), "Exp", lines: +1 -0
- crypto/rc4/rc4_skey.c (1.10.8.3), "Exp", lines: +1 -0
- crypto/rc5/rc5_skey.c (1.4.6.2), "Exp", lines: +1 -0
-
- Pick up definition of FIPS_mode() in fips.h to avoid warnings.
-
-2005-04-18 10:34 steve
-
- Deleted:
- fips/fingerprint.sha1 (1.1.2.14)
- fips/fips_check_sha1 (1.1.2.8)
- fips/fips_make_sha1 (1.1.2.7)
- fips/aes/fingerprint.sha1 (1.1.2.7)
- fips/des/fingerprint.sha1 (1.1.2.6)
- fips/dh/fingerprint.sha1 (1.1.2.4)
- fips/dsa/fingerprint.sha1 (1.1.2.7)
- fips/rand/fingerprint.sha1 (1.1.2.10)
- fips/rsa/fingerprint.sha1 (1.1.4.7)
- fips/sha1/fingerprint.sha1 (1.1.2.12)
- Changed:
- fips/sha1/Makefile (1.1.4.12), "Exp", lines: +1 -4
-
- Remove obsolete fingerprint.sha1 files and associated scripts.
- Delete test in fips/sha1/Makefile: the top level test checks the
- same files.
-
-2005-04-19 09:11 appro
-
- Deleted:
- fips/fipshashes.sha1 (1.1.2.7)
- fips/sha1/standalone.sha1 (1.1.2.15)
- Changed:
- fips/fipshashes.c (1.1.2.1), "Exp", lines: +32 -0
- util/checkhash.pl (1.1.2.4), "Exp", lines: +7 -4
-
- Maintain fingerprint hashes as C source.
-
-2005-04-19 09:17 appro
-
- Changed:
- util/checkhash.pl (1.1.2.5), "Exp", lines: +1 -1
-
- Complete the transition C-code hashes.
-
2005-04-19 16:21 appro
Changed:
Don't use kerberos library locations on windows.
-2005-04-21 19:06 steve
-
- Changed:
- apps/openssl.c (1.48.2.13), "Exp", lines: +0 -2
- fips/fips.c (1.1.2.12), "Exp", lines: +0 -27
- fips/fips.h (1.1.2.8), "Exp", lines: +0 -2
- fips/fipshashes.c (1.1.2.2), "Exp", lines: +2 -2
-
- Remove defunct FIPS_allow_md5() and related functions.
-
-2005-04-22 06:15 appro
-
- Changed:
- fips/fips.c (1.1.2.13), "Exp", lines: +3 -3
- fips/fips_err.h (1.1.4.4), "Exp", lines: +3 -3
- fips/fipshashes.c (1.1.2.4), "Exp", lines: +2 -2
-
- Move some variables to .bss.
-
2005-04-22 07:17 steve
Changed:
--- /dev/null
+See file ChangeLog.0_9_7-stable_not-in-head for explanations.
+This is the "FIPS"-related part.
+
+
+
+2003-07-27 19:00 ben
+
+ Changed:
+ Configure (1.314.2.85), "Exp", lines: +2 -0
+ Makefile.org (1.154.2.67), "Exp", lines: +12 -3
+ crypto/cryptlib.c (1.32.2.9), "Exp", lines: +5 -0
+ crypto/md32_common.h (1.22.2.4), "Exp", lines: +11 -0
+ crypto/aes/Makefile.ssl (1.4.2.6), "Exp", lines: +2 -1
+ crypto/aes/aes_core.c (1.1.2.4), "Exp", lines: +4 -0
+ crypto/des/des.h (1.40.2.4), "Exp", lines: +1 -1
+ crypto/des/des_old.c (1.11.2.4), "Exp", lines: +1 -1
+ crypto/des/destest.c (1.30.2.6), "Exp", lines: +2 -2
+ crypto/des/ecb3_enc.c (1.8.2.1), "Exp", lines: +1 -3
+ crypto/dsa/Makefile.ssl (1.49.2.5), "Exp", lines: +7 -4
+ crypto/dsa/dsa_ossl.c (1.12.2.4), "Exp", lines: +2 -0
+ crypto/dsa/dsa_sign.c (1.10.2.3), "Exp", lines: +12 -0
+ crypto/dsa/dsa_vrf.c (1.10.2.3), "Exp", lines: +8 -0
+ crypto/engine/engine.h (1.36.2.6), "Exp", lines: +4 -0
+ crypto/err/err.h (1.35.2.3), "Exp", lines: +2 -0
+ crypto/err/err_all.c (1.17.2.2), "Exp", lines: +4 -0
+ crypto/err/openssl.ec (1.11.2.1), "Exp", lines: +1 -0
+ crypto/evp/Makefile.ssl (1.64.2.8), "Exp", lines: +8 -7
+ crypto/evp/c_all.c (1.7.8.7), "Exp", lines: +1 -0
+ crypto/evp/e_aes.c (1.6.2.4), "Exp", lines: +12 -4
+ crypto/evp/e_des3.c (1.8.2.2), "Exp", lines: +1 -1
+ crypto/evp/evp.h (1.86.2.10), "Exp", lines: +2 -0
+ crypto/evp/evp_err.c (1.23.2.1), "Exp", lines: +3 -1
+ crypto/md4/Makefile.ssl (1.6.2.4), "Exp", lines: +7 -4
+ crypto/md5/Makefile.ssl (1.33.2.7), "Exp", lines: +7 -4
+ crypto/rand/Makefile.ssl (1.56.2.4), "Exp", lines: +17 -15
+ crypto/rand/md_rand.c (1.69.2.2), "Exp", lines: +9 -0
+ crypto/rand/rand.h (1.26.2.5), "Exp", lines: +2 -0
+ crypto/rand/rand_err.c (1.6.2.1), "Exp", lines: +3 -1
+ crypto/rand/rand_lib.c (1.15.2.2), "Exp", lines: +11 -0
+ crypto/ripemd/Makefile.ssl (1.25.2.5), "Exp", lines: +7 -2
+ crypto/sha/Makefile.ssl (1.26.2.5), "Exp", lines: +16 -6
+ fips/.cvsignore (1.1.2.1), "Exp", lines: +1 -0
+ fips/Makefile.ssl (1.1.2.1), "Exp", lines: +155 -0
+ fips/fingerprint.sha1 (1.1.2.1), "Exp", lines: +3 -0
+ fips/fips.c (1.1.2.1), "Exp", lines: +74 -0
+ fips/fips.h (1.1.2.1), "Exp", lines: +85 -0
+ fips/fips_check_sha1 (1.1.2.1), "Exp", lines: +7 -0
+ fips/fips_err.c (1.1.2.1), "Exp", lines: +96 -0
+ fips/fips_make_sha1 (1.1.2.1), "Exp", lines: +21 -0
+ fips/lib (1.1.2.1), "Exp", lines: +0 -0
+ fips/aes/.cvsignore (1.1.2.1), "Exp", lines: +4 -0
+ fips/aes/Makefile.ssl (1.1.2.1), "Exp", lines: +95 -0
+ fips/aes/fingerprint.sha1 (1.1.2.1), "Exp", lines: +2 -0
+ fips/aes/fips_aes_core.c (1.1.2.1), "Exp", lines: +1260 -0
+ fips/aes/fips_aes_locl.h (1.1.2.1), "Exp", lines: +85 -0
+ fips/aes/fips_aesavs.c (1.1.2.1), "Exp", lines: +896 -0
+ fips/dsa/.cvsignore (1.1.2.1), "Exp", lines: +2 -0
+ fips/dsa/Makefile.ssl (1.1.2.1), "Exp", lines: +95 -0
+ fips/dsa/fingerprint.sha1 (1.1.2.1), "Exp", lines: +1 -0
+ fips/dsa/fips_dsa_ossl.c (1.1.2.1), "Exp", lines: +366 -0
+ fips/dsa/fips_dsatest.c (1.1.2.1), "Exp", lines: +252 -0
+ fips/rand/.cvsignore (1.1.2.1), "Exp", lines: +2 -0
+ fips/rand/Makefile.ssl (1.1.2.1), "Exp", lines: +94 -0
+ fips/rand/fingerprint.sha1 (1.1.2.1), "Exp", lines: +2 -0
+ fips/rand/fips_rand.c (1.1.2.1), "Exp", lines: +236 -0
+ fips/rand/fips_rand.h (1.1.2.1), "Exp", lines: +55 -0
+ fips/rand/fips_randtest.c (1.1.2.1), "Exp", lines: +348 -0
+ fips/sha1/.cvsignore (1.1.2.1), "Exp", lines: +3 -0
+ fips/sha1/Makefile.ssl (1.1.2.1), "Exp", lines: +94 -0
+ fips/sha1/fingerprint.sha1 (1.1.2.1), "Exp", lines: +3 -0
+ fips/sha1/fips_md32_common.h (1.1.2.1), "Exp", lines: +637 -0
+ fips/sha1/fips_sha1dgst.c (1.1.2.1), "Exp", lines: +76 -0
+ fips/sha1/fips_sha1test.c (1.1.2.1), "Exp", lines: +128 -0
+ fips/sha1/fips_sha_locl.h (1.1.2.1), "Exp", lines: +472 -0
+ fips/sha1/fips_standalone_sha1.c (1.1.2.1), "Exp", lines: +101 -0
+ fips/sha1/standalone.sha1 (1.1.2.1), "Exp", lines: +4 -0
+ test/Makefile.ssl (1.84.2.29), "Exp", lines: +81 -13
+ util/mkerr.pl (1.18.2.4), "Exp", lines: +2 -1
+
+ Unfinished FIPS stuff for review/improvement.
+
+2003-07-27 19:19 ben
+
+ Changed:
+ fips/fips_check_sha1 (1.1.2.2), "Exp", lines: +1 -1
+
+ Use unified diff.
+
+2003-07-27 19:23 ben
+
+ Changed:
+ fips/Makefile.ssl (1.1.2.2), "Exp", lines: +3 -3
+ fips/fingerprint.sha1 (1.1.2.2), "Exp", lines: +2 -1
+ fips/fips_make_sha1 (1.1.2.2), "Exp", lines: +1 -1
+
+ Build in non-FIPS mode.
+
+2003-07-27 23:13 ben
+
+ Changed:
+ Makefile.org (1.154.2.68), "Exp", lines: +1 -1
+ fips/fips_check_sha1 (1.1.2.3), "Exp", lines: +2 -1
+ fips/aes/fips_aesavs.c (1.1.2.2), "Exp", lines: +2 -0
+ fips/dsa/fips_dsa_ossl.c (1.1.2.2), "Exp", lines: +8 -0
+ fips/dsa/fips_dsatest.c (1.1.2.2), "Exp", lines: +2 -1
+ fips/sha1/fingerprint.sha1 (1.1.2.2), "Exp", lines: +1 -1
+ fips/sha1/fips_sha1dgst.c (1.1.2.2), "Exp", lines: +5 -1
+ fips/sha1/fips_standalone_sha1.c (1.1.2.2), "Exp", lines: +2 -0
+ fips/sha1/standalone.sha1 (1.1.2.2), "Exp", lines: +1 -1
+
+ Build when not FIPS.
+
+2003-07-28 11:56 ben
+
+ Changed:
+ fips/dsa/fingerprint.sha1 (1.1.2.2), "Exp", lines: +1 -1
+ fips/sha1/standalone.sha1 (1.1.2.3), "Exp", lines: +1 -1
+
+ New fingerprints.
+
+2003-07-29 16:06 ben
+
+ Changed:
+ fips/aes/fips_aesavs.c (1.1.2.5), "Exp", lines: +295 -303
+
+ Reformat.
+
+2003-07-29 16:34 ben
+
+ Changed:
+ fips/aes/fips_aesavs.c (1.1.2.6), "Exp", lines: +43 -17
+
+ MMT for CFB1
+
+2003-07-29 17:17 ben
+
+ Changed:
+ fips/fips_err_wrapper.c (1.1.2.1), "Exp", lines: +5 -0
+ fips/sha1/sha1hashes.txt (1.1.2.1), "Exp", lines: +342 -0
+ fips/sha1/sha1vectors.txt (1.1.2.1), "Exp", lines: +2293 -0
+
+ Missing files.
+
+2003-07-31 23:41 levitte
+
+ Changed:
+ fips/sha1/fips_sha1test.c (1.1.2.2), "Exp", lines: +3 -3
+
+ No C++ comments in C programs!
+
+2003-08-01 15:07 steve
+
+ Changed:
+ fips/aes/fips_aesavs.c (1.1.2.8), "Exp", lines: +3 -3
+
+ Replace C++ style comments.
+
+2003-08-03 14:22 ben
+
+ Changed:
+ fips/des/fips_desmovs.c (1.1.2.2), "Exp", lines: +55 -37
+
+ Make tests work (CFB1 still doesn't produce the right answers,
+ strangely).
+
+2003-08-08 12:08 levitte
+
+ Changed:
+ fips/des/fips_des_enc.c (1.1.2.2), "Exp", lines: +9 -0
+
+ Avoid clashing with the regular DES functions when not compiling
+ with -DFIPS. This is basically only visible when building with
+ shared library supoort...
+
+2003-08-11 11:36 levitte
+
+ Deleted:
+ fips/sha1/.cvsignore (1.1.2.2)
+ fips/sha1/Makefile.ssl (1.1.2.3)
+ fips/sha1/fingerprint.sha1 (1.1.2.3)
+ fips/sha1/fips_md32_common.h (1.1.2.2)
+ fips/sha1/fips_sha1dgst.c (1.1.2.3)
+ fips/sha1/fips_sha1test.c (1.1.2.3)
+ fips/sha1/fips_sha_locl.h (1.1.2.2)
+ fips/sha1/fips_standalone_sha1.c (1.1.2.3)
+ fips/sha1/sha1hashes.txt (1.1.2.2)
+ fips/sha1/sha1vectors.txt (1.1.2.2)
+ fips/sha1/standalone.sha1 (1.1.2.4)
+ fips/dsa/.cvsignore (1.1.2.2)
+ fips/dsa/Makefile.ssl (1.1.2.2)
+ fips/dsa/fingerprint.sha1 (1.1.2.3)
+ fips/dsa/fips_dsa_ossl.c (1.1.2.3)
+ fips/dsa/fips_dsatest.c (1.1.2.3)
+ fips/rand/.cvsignore (1.1.2.2)
+ fips/rand/Makefile.ssl (1.1.2.2)
+ fips/rand/fingerprint.sha1 (1.1.2.2)
+ fips/rand/fips_rand.c (1.1.2.2)
+ fips/rand/fips_rand.h (1.1.2.2)
+ fips/rand/fips_randtest.c (1.1.2.2)
+ fips/des/.cvsignore (1.1.2.2)
+ fips/des/Makefile.ssl (1.1.2.3)
+ fips/des/fingerprint.sha1 (1.1.2.2)
+ fips/des/fips_des_enc.c (1.1.2.3)
+ fips/des/fips_des_locl.h (1.1.2.2)
+ fips/des/fips_desmovs.c (1.1.2.3)
+ fips/aes/.cvsignore (1.1.2.2)
+ fips/aes/Makefile.ssl (1.1.2.5)
+ fips/aes/fingerprint.sha1 (1.1.2.2)
+ fips/aes/fips_aes_core.c (1.1.2.2)
+ fips/aes/fips_aes_locl.h (1.1.2.2)
+ fips/aes/fips_aesavs.c (1.1.2.9)
+ fips/.cvsignore (1.1.2.2)
+ fips/Makefile.ssl (1.1.2.6)
+ fips/fingerprint.sha1 (1.1.2.3)
+ fips/fips.c (1.1.2.2)
+ fips/fips.h (1.1.2.2)
+ fips/fips_check_sha1 (1.1.2.4)
+ fips/fips_err.c (1.1.2.2)
+ fips/fips_err_wrapper.c (1.1.2.2)
+ fips/fips_make_sha1 (1.1.2.4)
+ fips/lib (1.1.2.2)
+ Changed:
+ util/libeay.num (1.173.2.16), "Exp", lines: +11 -38
+ util/mkerr.pl (1.18.2.5), "Exp", lines: +1 -2
+ test/Makefile.ssl (1.84.2.31), "Exp", lines: +54 -180
+ crypto/ripemd/Makefile.ssl (1.25.2.6), "Exp", lines: +2 -7
+ crypto/sha/Makefile.ssl (1.26.2.6), "Exp", lines: +6 -16
+ crypto/rand/Makefile.ssl (1.56.2.5), "Exp", lines: +15 -17
+ crypto/rand/md_rand.c (1.69.2.3), "Exp", lines: +0 -9
+ crypto/rand/rand.h (1.26.2.6), "Exp", lines: +0 -2
+ crypto/rand/rand_err.c (1.6.2.2), "Exp", lines: +1 -3
+ crypto/rand/rand_lib.c (1.15.2.3), "Exp", lines: +0 -11
+ crypto/objects/obj_dat.h (1.49.2.18), "Exp", lines: +3 -27
+ crypto/objects/obj_mac.h (1.19.2.18), "Exp", lines: +0 -32
+ crypto/objects/obj_mac.num (1.15.2.14), "Exp", lines: +0 -8
+ crypto/objects/objects.txt (1.20.2.19), "Exp", lines: +0 -11
+ crypto/md4/Makefile.ssl (1.6.2.5), "Exp", lines: +4 -7
+ crypto/md5/Makefile.ssl (1.33.2.8), "Exp", lines: +4 -7
+ crypto/evp/Makefile.ssl (1.64.2.9), "Exp", lines: +7 -8
+ crypto/evp/c_allc.c (1.8.2.6), "Exp", lines: +0 -4
+ crypto/evp/e_aes.c (1.6.2.9), "Exp", lines: +4 -22
+ crypto/evp/e_des.c (1.5.2.5), "Exp", lines: +2 -43
+ crypto/evp/e_des3.c (1.8.2.4), "Exp", lines: +3 -3
+ crypto/evp/evp.h (1.86.2.13), "Exp", lines: +11 -36
+ crypto/evp/evp_err.c (1.23.2.2), "Exp", lines: +1 -3
+ crypto/evp/evp_lib.c (1.6.8.3), "Exp", lines: +0 -24
+ crypto/evp/evp_locl.h (1.7.2.5), "Exp", lines: +2 -11
+ crypto/evp/evp_test.c (1.14.2.12), "Exp", lines: +8 -17
+ crypto/evp/evptests.txt (1.9.2.6), "Exp", lines: +1 -106
+ crypto/dsa/Makefile.ssl (1.49.2.7), "Exp", lines: +6 -10
+ crypto/dsa/dsa_ossl.c (1.12.2.5), "Exp", lines: +0 -2
+ crypto/dsa/dsa_sign.c (1.10.2.4), "Exp", lines: +0 -12
+ crypto/dsa/dsa_vrf.c (1.10.2.4), "Exp", lines: +0 -8
+ crypto/err/Makefile.ssl (1.48.2.5), "Exp", lines: +16 -17
+ crypto/err/err.h (1.35.2.4), "Exp", lines: +0 -2
+ crypto/err/err_all.c (1.17.2.3), "Exp", lines: +0 -4
+ crypto/err/openssl.ec (1.11.2.2), "Exp", lines: +0 -1
+ crypto/des/des.h (1.40.2.5), "Exp", lines: +1 -1
+ crypto/des/des_enc.c (1.11.2.3), "Exp", lines: +0 -4
+ crypto/des/des_old.c (1.11.2.5), "Exp", lines: +1 -1
+ crypto/des/destest.c (1.30.2.7), "Exp", lines: +2 -2
+ crypto/des/ecb3_enc.c (1.8.2.2), "Exp", lines: +3 -1
+ crypto/aes/Makefile.ssl (1.4.2.7), "Exp", lines: +1 -2
+ crypto/aes/aes.h (1.1.2.8), "Exp", lines: +0 -9
+ crypto/aes/aes_cfb.c (1.1.2.8), "Exp", lines: +0 -93
+ crypto/aes/aes_core.c (1.1.2.5), "Exp", lines: +0 -4
+ crypto/cryptlib.c (1.32.2.10), "Exp", lines: +0 -5
+ crypto/md32_common.h (1.22.2.5), "Exp", lines: +0 -11
+ Configure (1.314.2.86), "Exp", lines: +0 -2
+ Makefile.org (1.154.2.72), "Exp", lines: +8 -34
+ TABLE (1.99.2.30), "Exp", lines: +0 -50
+
+ A new branch for FIPS-related changes has been created with the
+ name OpenSSL-fips-0_9_7-stable.
+
+ Since the 0.9.7-stable branch is supposed to be in freeze
+ and should only contain bug corrections, this change removes the
+ FIPS changes from that branch.
+
+2004-05-11 14:44 ben
+
+ Deleted:
+ apps/Makefile.ssl (1.100.2.27)
+ crypto/Makefile.ssl (1.84.2.12)
+ crypto/aes/Makefile.ssl (1.4.2.9)
+ crypto/asn1/Makefile.ssl (1.77.2.7)
+ crypto/bf/Makefile.ssl (1.25.2.6)
+ crypto/bio/Makefile.ssl (1.52.2.4)
+ crypto/bn/Makefile.ssl (1.65.2.9)
+ crypto/buffer/Makefile.ssl (1.32.2.4)
+ crypto/cast/Makefile.ssl (1.31.2.6)
+ crypto/comp/Makefile.ssl (1.32.2.4)
+ crypto/conf/Makefile.ssl (1.38.2.8)
+ crypto/des/Makefile.ssl (1.61.2.13)
+ crypto/dh/Makefile.ssl (1.43.2.5)
+ crypto/dsa/Makefile.ssl (1.49.2.9)
+ crypto/dso/Makefile.ssl (1.11.2.4)
+ crypto/ec/Makefile.ssl (1.7.2.4)
+ crypto/engine/Makefile.ssl (1.30.2.13)
+ crypto/err/Makefile.ssl (1.48.2.7)
+ crypto/evp/Makefile.ssl (1.64.2.12)
+ crypto/hmac/Makefile.ssl (1.33.2.6)
+ crypto/idea/Makefile.ssl (1.20.2.4)
+ crypto/krb5/Makefile.ssl (1.5.2.6)
+ crypto/lhash/Makefile.ssl (1.28.2.4)
+ crypto/md2/Makefile.ssl (1.29.2.5)
+ crypto/md4/Makefile.ssl (1.6.2.7)
+ crypto/md5/Makefile.ssl (1.33.2.10)
+ crypto/mdc2/Makefile.ssl (1.30.2.4)
+ crypto/objects/Makefile.ssl (1.46.2.6)
+ crypto/ocsp/Makefile.ssl (1.19.2.7)
+ crypto/pem/Makefile.ssl (1.51.2.5)
+ crypto/pkcs12/Makefile.ssl (1.37.2.5)
+ crypto/pkcs7/Makefile.ssl (1.47.2.5)
+ crypto/rand/Makefile.ssl (1.56.2.8)
+ crypto/rc2/Makefile.ssl (1.20.2.4)
+ crypto/rc4/Makefile.ssl (1.25.2.6)
+ crypto/rc5/Makefile.ssl (1.22.2.6)
+ crypto/ripemd/Makefile.ssl (1.25.2.9)
+ crypto/rsa/Makefile.ssl (1.53.2.6)
+ crypto/sha/Makefile.ssl (1.26.2.9)
+ crypto/stack/Makefile.ssl (1.28.2.4)
+ crypto/txt_db/Makefile.ssl (1.26.2.4)
+ crypto/ui/Makefile.ssl (1.10.2.6)
+ crypto/x509/Makefile.ssl (1.56.2.5)
+ crypto/x509v3/Makefile.ssl (1.62.2.5)
+ ssl/Makefile.ssl (1.53.2.11)
+ test/Makefile.ssl (1.84.2.36)
+ tools/Makefile.ssl (1.9.2.4)
+ Changed:
+ .cvsignore (1.7.6.2), "Exp", lines: +2 -1
+ Configure (1.314.2.92), "Exp", lines: +38 -8
+ FAQ (1.61.2.31), "Exp", lines: +1 -1
+ INSTALL (1.45.2.9), "Exp", lines: +2 -2
+ INSTALL.W32 (1.30.2.14), "Exp", lines: +9 -4
+ Makefile.org (1.154.2.78), "Exp", lines: +51 -19
+ PROBLEMS (1.4.2.10), "Exp", lines: +2 -2
+ e_os.h (1.56.2.17), "Exp", lines: +20 -1
+ apps/.cvsignore (1.5.8.1), "Exp", lines: +1 -0
+ apps/Makefile (1.1.4.1), "Exp", lines: +1147 -0
+ apps/apps.c (1.49.2.27), "Exp", lines: +0 -10
+ apps/ca.c (1.102.2.31), "Exp", lines: +0 -10
+ apps/dgst.c (1.23.2.10), "Exp", lines: +39 -11
+ apps/openssl.c (1.48.2.9), "Exp", lines: +19 -0
+ crypto/Makefile (1.1.4.1), "Exp", lines: +217 -0
+ crypto/cryptlib.c (1.32.2.11), "Exp", lines: +5 -0
+ crypto/crypto-lib.com (1.53.2.12), "Exp", lines: +1 -1
+ crypto/md32_common.h (1.22.2.6), "Exp", lines: +12 -0
+ crypto/aes/Makefile (1.1.4.1), "Exp", lines: +102 -0
+ crypto/aes/aes.h (1.1.2.9), "Exp", lines: +9 -0
+ crypto/aes/aes_cfb.c (1.1.2.9), "Exp", lines: +93 -0
+ crypto/aes/aes_core.c (1.1.2.6), "Exp", lines: +4 -0
+ crypto/asn1/Makefile (1.1.4.1), "Exp", lines: +1150 -0
+ crypto/bf/Makefile (1.1.4.1), "Exp", lines: +113 -0
+ crypto/bio/Makefile (1.1.4.1), "Exp", lines: +214 -0
+ crypto/bio/bio.h (1.56.2.6), "Exp", lines: +1 -0
+ crypto/bn/Makefile (1.1.4.1), "Exp", lines: +324 -0
+ crypto/bn/bntest.c (1.55.2.4), "Exp", lines: +1 -1
+ crypto/buffer/Makefile (1.1.4.1), "Exp", lines: +92 -0
+ crypto/cast/Makefile (1.1.4.1), "Exp", lines: +118 -0
+ crypto/cast/asm/.cvsignore (1.2.8.1), "Exp", lines: +1 -0
+ crypto/comp/Makefile (1.1.4.1), "Exp", lines: +112 -0
+ crypto/conf/Makefile (1.1.4.1), "Exp", lines: +181 -0
+ crypto/des/Makefile (1.1.4.1), "Exp", lines: +314 -0
+ crypto/des/cfb64ede.c (1.6.2.4), "Exp", lines: +111 -0
+ crypto/des/des.h (1.40.2.6), "Exp", lines: +5 -1
+ crypto/des/des_enc.c (1.11.2.4), "Exp", lines: +8 -0
+ crypto/des/des_old.c (1.11.2.6), "Exp", lines: +1 -1
+ crypto/des/destest.c (1.30.2.8), "Exp", lines: +2 -2
+ crypto/des/ecb3_enc.c (1.8.2.3), "Exp", lines: +1 -3
+ crypto/des/set_key.c (1.18.2.2), "Exp", lines: +4 -0
+ crypto/dh/Makefile (1.1.4.1), "Exp", lines: +131 -0
+ crypto/dsa/Makefile (1.1.4.1), "Exp", lines: +173 -0
+ crypto/dsa/dsa_gen.c (1.19.2.1), "Exp", lines: +4 -1
+ crypto/dsa/dsa_key.c (1.9.2.1), "Exp", lines: +2 -0
+ crypto/dsa/dsa_ossl.c (1.12.2.6), "Exp", lines: +2 -0
+ crypto/dsa/dsa_sign.c (1.10.2.5), "Exp", lines: +12 -0
+ crypto/dsa/dsa_vrf.c (1.10.2.5), "Exp", lines: +8 -0
+ crypto/dso/Makefile (1.1.4.1), "Exp", lines: +140 -0
+ crypto/ec/Makefile (1.1.4.1), "Exp", lines: +126 -0
+ crypto/engine/Makefile (1.1.4.1), "Exp", lines: +536 -0
+ crypto/engine/hw_cryptodev.c (1.1.2.6), "Exp", lines: +6 -2
+ crypto/err/Makefile (1.1.4.1), "Exp", lines: +118 -0
+ crypto/err/err.h (1.35.2.6), "Exp", lines: +2 -0
+ crypto/err/err_all.c (1.17.2.4), "Exp", lines: +4 -0
+ crypto/err/openssl.ec (1.11.2.3), "Exp", lines: +1 -0
+ crypto/evp/Makefile (1.1.4.1), "Exp", lines: +1057 -0
+ crypto/evp/bio_md.c (1.11.2.1), "Exp", lines: +6 -0
+ crypto/evp/c_allc.c (1.8.2.7), "Exp", lines: +8 -0
+ crypto/evp/e_aes.c (1.6.2.10), "Exp", lines: +22 -4
+ crypto/evp/e_des.c (1.5.2.8), "Exp", lines: +36 -3
+ crypto/evp/e_des3.c (1.8.2.7), "Exp", lines: +43 -4
+ crypto/evp/evp.h (1.86.2.15), "Exp", lines: +39 -11
+ crypto/evp/evp_err.c (1.23.2.3), "Exp", lines: +3 -1
+ crypto/evp/evp_lib.c (1.6.8.4), "Exp", lines: +24 -0
+ crypto/evp/evp_locl.h (1.7.2.6), "Exp", lines: +11 -2
+ crypto/evp/evp_test.c (1.14.2.13), "Exp", lines: +17 -8
+ crypto/evp/evptests.txt (1.9.2.7), "Exp", lines: +106 -1
+ crypto/hmac/Makefile (1.1.4.1), "Exp", lines: +99 -0
+ crypto/idea/Makefile (1.1.4.1), "Exp", lines: +89 -0
+ crypto/krb5/Makefile (1.1.4.1), "Exp", lines: +88 -0
+ crypto/lhash/Makefile (1.1.4.1), "Exp", lines: +91 -0
+ crypto/md2/Makefile (1.1.4.1), "Exp", lines: +91 -0
+ crypto/md4/Makefile (1.1.4.1), "Exp", lines: +93 -0
+ crypto/md5/Makefile (1.1.4.1), "Exp", lines: +129 -0
+ crypto/mdc2/Makefile (1.1.4.1), "Exp", lines: +96 -0
+ crypto/objects/Makefile (1.1.4.1), "Exp", lines: +121 -0
+ crypto/objects/obj_dat.h (1.49.2.19), "Exp", lines: +33 -3
+ crypto/objects/obj_mac.h (1.19.2.19), "Exp", lines: +40 -0
+ crypto/objects/obj_mac.num (1.15.2.15), "Exp", lines: +10 -0
+ crypto/objects/objects.txt (1.20.2.20), "Exp", lines: +13 -0
+ crypto/ocsp/Makefile (1.1.4.1), "Exp", lines: +291 -0
+ crypto/pem/Makefile (1.1.4.1), "Exp", lines: +334 -0
+ crypto/pkcs12/Makefile (1.1.4.1), "Exp", lines: +415 -0
+ crypto/pkcs7/Makefile (1.1.4.1), "Exp", lines: +241 -0
+ crypto/rand/Makefile (1.1.4.1), "Exp", lines: +196 -0
+ crypto/rand/md_rand.c (1.69.2.4), "Exp", lines: +9 -0
+ crypto/rand/rand.h (1.26.2.7), "Exp", lines: +3 -0
+ crypto/rand/rand_err.c (1.6.2.3), "Exp", lines: +4 -1
+ crypto/rand/rand_lib.c (1.15.2.4), "Exp", lines: +11 -0
+ crypto/rc2/Makefile (1.1.4.1), "Exp", lines: +89 -0
+ crypto/rc4/Makefile (1.1.4.1), "Exp", lines: +108 -0
+ crypto/rc5/Makefile (1.1.4.1), "Exp", lines: +106 -0
+ crypto/ripemd/Makefile (1.1.4.1), "Exp", lines: +111 -0
+ crypto/rsa/Makefile (1.1.4.1), "Exp", lines: +239 -0
+ crypto/rsa/rsa_eay.c (1.28.2.9), "Exp", lines: +1 -1
+ crypto/rsa/rsa_gen.c (1.8.6.1), "Exp", lines: +3 -0
+ crypto/sha/Makefile (1.1.4.1), "Exp", lines: +118 -0
+ crypto/sha/sha1dgst.c (1.21.2.1), "Exp", lines: +8 -0
+ crypto/stack/Makefile (1.1.4.1), "Exp", lines: +86 -0
+ crypto/txt_db/Makefile (1.1.4.1), "Exp", lines: +86 -0
+ crypto/ui/Makefile (1.1.4.1), "Exp", lines: +115 -0
+ crypto/x509/Makefile (1.1.4.1), "Exp", lines: +592 -0
+ crypto/x509v3/Makefile (1.1.4.1), "Exp", lines: +601 -0
+ fips/Makefile (1.1.4.1), "Exp", lines: +202 -0
+ fips/fingerprint.sha1 (1.1.2.4), "Exp", lines: +4 -4
+ fips/fips.c (1.1.2.3), "Exp", lines: +120 -5
+ fips/fips.h (1.1.2.3), "Exp", lines: +42 -2
+ fips/fips_check_sha1 (1.1.2.5), "Exp", lines: +2 -2
+ fips/fips_err.h (1.1.4.1), "Exp", lines: +117 -0
+ fips/fips_err_wrapper.c (1.1.2.3), "Exp", lines: +4 -2
+ fips/fips_locl.h (1.1.4.1), "Exp", lines: +62 -0
+ fips/fips_make_sha1 (1.1.2.5), "Exp", lines: +9 -6
+ fips/fips_test_suite.c (1.1.4.1), "Exp", lines: +302 -0
+ fips/openssl_fips_fingerprint (1.1.4.1), "Exp", lines: +25 -0
+ fips/aes/Makefile (1.1.4.1), "Exp", lines: +131 -0
+ fips/aes/fingerprint.sha1 (1.1.2.3), "Exp", lines: +3 -2
+ fips/aes/fips_aes_core.c (1.1.2.3), "Exp", lines: +5 -2
+ fips/aes/fips_aes_locl.h (1.1.2.3), "Exp", lines: +0 -0
+ fips/aes/fips_aes_selftest.c (1.1.4.1), "Exp", lines: +112 -0
+ fips/aes/fips_aesavs.c (1.1.2.10), "Exp", lines: +12 -6
+ fips/des/Makefile (1.1.4.1), "Exp", lines: +155 -0
+ fips/des/fingerprint.sha1 (1.1.2.3), "Exp", lines: +5 -2
+ fips/des/fips_des_enc.c (1.1.2.4), "Exp", lines: +16 -3
+ fips/des/fips_des_locl.h (1.1.2.3), "Exp", lines: +1 -1
+ fips/des/fips_des_selftest.c (1.1.4.1), "Exp", lines: +200 -0
+ fips/des/fips_desmovs.c (1.1.2.4), "Exp", lines: +186 -79
+ fips/des/fips_set_key.c (1.1.4.1), "Exp", lines: +415 -0
+ fips/des/asm/fips-dx86-elf.s (1.1.4.1), "Exp", lines: +2697 -0
+ fips/dsa/Makefile (1.1.4.1), "Exp", lines: +159 -0
+ fips/dsa/fingerprint.sha1 (1.1.2.4), "Exp", lines: +3 -1
+ fips/dsa/fips_dsa_gen.c (1.1.4.1), "Exp", lines: +373 -0
+ fips/dsa/fips_dsa_ossl.c (1.1.2.4), "Exp", lines: +16 -3
+ fips/dsa/fips_dsa_selftest.c (1.1.4.1), "Exp", lines: +168 -0
+ fips/dsa/fips_dsatest.c (1.1.2.4), "Exp", lines: +10 -6
+ fips/dsa/fips_dssvs.c (1.1.4.1), "Exp", lines: +306 -0
+ fips/rand/Makefile (1.1.4.1), "Exp", lines: +104 -0
+ fips/rand/fingerprint.sha1 (1.1.2.3), "Exp", lines: +2 -2
+ fips/rand/fips_rand.c (1.1.2.3), "Exp", lines: +60 -10
+ fips/rand/fips_rand.h (1.1.2.3), "Exp", lines: +19 -1
+ fips/rand/fips_randtest.c (1.1.2.3), "Exp", lines: +31 -10
+ fips/rsa/Makefile (1.1.4.1), "Exp", lines: +112 -0
+ fips/rsa/fingerprint.sha1 (1.1.4.1), "Exp", lines: +3 -0
+ fips/rsa/fips_rsa_eay.c (1.1.4.1), "Exp", lines: +735 -0
+ fips/rsa/fips_rsa_gen.c (1.1.4.1), "Exp", lines: +249 -0
+ fips/rsa/fips_rsa_selftest.c (1.1.4.1), "Exp", lines: +207 -0
+ fips/sha1/.cvsignore (1.1.2.3), "Exp", lines: +1 -2
+ fips/sha1/Makefile (1.1.4.1), "Exp", lines: +158 -0
+ fips/sha1/fingerprint.sha1 (1.1.2.4), "Exp", lines: +5 -3
+ fips/sha1/fips_md32_common.h (1.1.2.3), "Exp", lines: +0 -0
+ fips/sha1/fips_sha1_selftest.c (1.1.4.1), "Exp", lines: +97 -0
+ fips/sha1/fips_sha1dgst.c (1.1.2.4), "Exp", lines: +4 -4
+ fips/sha1/fips_sha1test.c (1.1.2.4), "Exp", lines: +17 -0
+ fips/sha1/fips_sha_locl.h (1.1.2.3), "Exp", lines: +7 -0
+ fips/sha1/fips_standalone_sha1.c (1.1.2.4), "Exp", lines: +60 -7
+ fips/sha1/sha1hashes.txt (1.1.2.3), "Exp", lines: +0 -0
+ fips/sha1/sha1vectors.txt (1.1.2.3), "Exp", lines: +0 -0
+ fips/sha1/standalone.sha1 (1.1.2.5), "Exp", lines: +6 -4
+ fips/sha1/asm/sx86-elf.s (1.1.4.1), "Exp", lines: +1568 -0
+ ms/do_masm.bat (1.1.8.2), "Exp", lines: +12 -10
+ ms/do_ms.bat (1.4.8.2), "Exp", lines: +11 -11
+ ms/do_nasm.bat (1.1.8.2), "Exp", lines: +12 -11
+ ms/do_nt.bat (1.2.8.1), "Exp", lines: +4 -4
+ shlib/hpux10-cc.sh (1.3.2.2), "Exp", lines: +3 -3
+ ssl/Makefile (1.1.4.1), "Exp", lines: +1019 -0
+ ssl/s3_clnt.c (1.53.2.16), "Exp", lines: +10 -0
+ ssl/s3_srvr.c (1.85.2.21), "Exp", lines: +9 -0
+ ssl/ssl_cert.c (1.48.2.7), "Exp", lines: +9 -0
+ ssl/ssl_lib.c (1.110.2.12), "Exp", lines: +13 -1
+ ssl/ssltest.c (1.53.2.23), "Exp", lines: +33 -1
+ ssl/t1_enc.c (1.27.2.8), "Exp", lines: +19 -1
+ test/.cvsignore (1.4.8.1), "Exp", lines: +4 -0
+ test/Makefile (1.1.4.1), "Exp", lines: +941 -0
+ test/bctest (1.14.2.1), "Exp", lines: +1 -1
+ test/testenc (1.3.8.1), "Exp", lines: +1 -1
+ test/testfipsssl (1.1.4.1), "Exp", lines: +113 -0
+ tools/Makefile (1.1.4.1), "Exp", lines: +61 -0
+ util/cygwin.sh (1.1.2.5), "Exp", lines: +3 -3
+ util/domd (1.6.2.3), "Exp", lines: +5 -5
+ util/fixNT.sh (1.1.1.2.8.1), "Exp", lines: +3 -3
+ util/libeay.num (1.173.2.19), "Exp", lines: +55 -11
+ util/mk1mf.pl (1.41.2.10), "Exp", lines: +6 -4
+ util/mkdef.pl (1.67.2.7), "Exp", lines: +11 -4
+ util/mkerr.pl (1.18.2.6), "Exp", lines: +2 -1
+ util/mkfiles.pl (1.12.2.1), "Exp", lines: +8 -1
+ util/pod2mantest (1.1.2.7), "Exp", lines: +1 -1
+ util/selftest.pl (1.18.2.1), "Exp", lines: +2 -2
+ util/pl/BC-16.pl (1.2.2.1), "Exp", lines: +1 -1
+ util/pl/BC-32.pl (1.11.2.4), "Exp", lines: +1 -1
+ util/pl/Mingw32.pl (1.12.6.5), "Exp", lines: +1 -1
+ util/pl/OS2-EMX.pl (1.1.2.3), "Exp", lines: +1 -1
+ util/pl/VC-16.pl (1.3.2.1), "Exp", lines: +2 -2
+ util/pl/VC-32.pl (1.11.2.3), "Exp", lines: +2 -2
+ util/pl/VC-CE.pl (1.1.2.5), "Exp", lines: +1 -1
+ util/pl/ultrix.pl (1.2.8.1), "Exp", lines: +1 -1
+
+ Pull FIPS back into stable.
+
+2004-05-12 10:27 levitte
+
+ Changed:
+ apps/Makefile (1.1.4.2), "Exp", lines: +3 -1
+
+ Only check for FIPS signatures when FIPS is enabled.
+
+2004-05-12 10:28 levitte
+
+ Changed:
+ crypto/des/FILES0 (1.1.4.2), "Exp", lines: +1 -1
+
+ Makefile.ssl changed name to Makefile.
+
+2004-05-12 10:28 levitte
+
+ Changed:
+ fips/rand/fips_rand.c (1.1.2.4), "Exp", lines: +5 -1
+
+ Only really build this file when OPENSSL_FIPS is defined. And oh,
+ let's keep internal variables static.
+
+2004-05-12 10:42 levitte
+
+ Changed:
+ fips/rand/fingerprint.sha1 (1.1.2.4), "Exp", lines: +1 -1
+
+ I forgot to modify the signature for fips_rand.c...
+
+2004-05-12 10:46 levitte
+
+ Changed:
+ fips/rsa/.cvsignore (1.1.4.1), "Exp", lines: +1 -0
+ fips/.cvsignore (1.1.2.3), "Exp", lines: +1 -1
+ fips/aes/.cvsignore (1.1.2.3), "Exp", lines: +0 -3
+ fips/des/.cvsignore (1.1.2.3), "Exp", lines: +0 -2
+ fips/dsa/.cvsignore (1.1.2.3), "Exp", lines: +0 -1
+ fips/rand/.cvsignore (1.1.2.3), "Exp", lines: +0 -1
+
+ Ignore the 'lib' timestamp file.
+
+2004-05-12 12:07 levitte
+
+ Changed:
+ fips/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
+ fips/aes/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
+ fips/des/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
+ fips/dsa/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
+ fips/rand/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
+ fips/rsa/.cvsignore (1.1.4.2), "Exp", lines: +1 -0
+ fips/sha1/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
+
+ Ignore 'Makefile.save'
+
+2004-05-19 16:16 levitte
+
+ Changed:
+ fips/rsa/fingerprint.sha1 (1.1.4.2), "Exp", lines: +2 -2
+ fips/rsa/fips_rsa_eay.c (1.1.4.2), "Exp", lines: +8 -8
+ fips/rsa/fips_rsa_gen.c (1.1.4.2), "Exp", lines: +1 -1
+ fips/dsa/fingerprint.sha1 (1.1.2.5), "Exp", lines: +2 -2
+ fips/dsa/fips_dsa_gen.c (1.1.4.2), "Exp", lines: +2 -2
+ fips/dsa/fips_dsa_ossl.c (1.1.2.5), "Exp", lines: +4 -4
+ fips/aes/fingerprint.sha1 (1.1.2.4), "Exp", lines: +1 -1
+ fips/aes/fips_aes_core.c (1.1.2.4), "Exp", lines: +5 -5
+ crypto/rsa/rsa.h (1.36.2.11), "Exp", lines: +4 -0
+ crypto/aes/aes.h (1.1.2.10), "Exp", lines: +6 -0
+ crypto/dsa/dsa.h (1.26.2.5), "Exp", lines: +4 -0
+
+ Define FIPS_*_SIZE_T for AES, DSA and RSA as well, in preparation
+ for size_t-ification of those algorithms in future version of
+ OpenSSL...
+
+2004-05-27 11:33 levitte
+
+ Changed:
+ makevms.com (1.35.2.3), "Exp", lines: +27 -0
+
+ Copy the FIPS files to the temporary openssl include directory.
+
+2004-05-27 12:04 levitte
+
+ Changed:
+ fips/fips-lib.com (1.1.2.1), "Exp", lines: +1179 -0
+ makevms.com (1.35.2.4), "Exp", lines: +8 -0
+
+ Compile the FIPS directory on VMS as well. fips-lib.com is
+ essentially a copy of crypto-lib.com, with just a few edits.
+
+2004-05-27 12:07 levitte
+
+ Changed:
+ fips/install.com (1.1.2.1), "Exp", lines: +55 -0
+ install.com (1.4.2.2), "Exp", lines: +6 -6
+
+ Run an installation of FIPS stuff as well.
+
+2004-05-27 12:19 levitte
+
+ Changed:
+ test/maketests.com (1.13.2.5), "Exp", lines: +3 -3
+ apps/makeapps.com (1.18.2.5), "Exp", lines: +3 -3
+
+ Make sure o_str.h is reachable.
+
+2004-06-19 15:15 ben
+
+ Changed:
+ Makefile.org (1.154.2.80), "Exp", lines: +1 -1
+ crypto/dh/dh.h (1.23.2.7), "Exp", lines: +0 -1
+ crypto/dh/dh_check.c (1.6.2.1), "Exp", lines: +4 -0
+ crypto/dh/dh_err.c (1.6.2.4), "Exp", lines: +0 -1
+ crypto/dh/dh_gen.c (1.8.8.3), "Exp", lines: +5 -9
+ crypto/dh/dh_key.c (1.16.2.3), "Exp", lines: +4 -0
+ fips/Makefile (1.1.4.2), "Exp", lines: +13 -14
+ fips/fingerprint.sha1 (1.1.2.6), "Exp", lines: +2 -2
+ fips/fips.h (1.1.2.4), "Exp", lines: +1 -0
+ fips/fips_err.h (1.1.4.2), "Exp", lines: +1 -0
+ fips/fips_make_sha1 (1.1.2.6), "Exp", lines: +3 -0
+ fips/fips_test_suite.c (1.1.4.3), "Exp", lines: +13 -9
+ fips/openssl_fips_fingerprint (1.1.4.2), "Exp", lines: +1 -2
+
+ The version that was actually submitted for FIPS testing.
+
+2004-06-19 15:16 ben
+
+ Changed:
+ fips/dh/Makefile (1.1.2.1), "Exp", lines: +92 -0
+ fips/dh/fingerprint.sha1 (1.1.2.1), "Exp", lines: +3 -0
+ fips/dh/fips_dh_check.c (1.1.2.1), "Exp", lines: +119 -0
+ fips/dh/fips_dh_gen.c (1.1.2.1), "Exp", lines: +182 -0
+ fips/dh/fips_dh_key.c (1.1.2.1), "Exp", lines: +222 -0
+
+ Add Diffie-Hellman to FIPS.
+
+2004-06-19 15:18 ben
+
+ Changed:
+ fips/.cvsignore (1.1.2.5), "Exp", lines: +2 -0
+ fips/dh/.cvsignore (1.1.2.1), "Exp", lines: +1 -0
+
+ Update ignores.
+
+2004-06-21 11:07 levitte
+
+ Changed:
+ fips/aes/Makefile (1.1.4.2), "Exp", lines: +7 -5
+ fips/des/Makefile (1.1.4.2), "Exp", lines: +7 -5
+ fips/dh/Makefile (1.1.2.2), "Exp", lines: +7 -6
+ fips/dsa/Makefile (1.1.4.2), "Exp", lines: +7 -6
+ fips/rsa/Makefile (1.1.4.2), "Exp", lines: +7 -6
+ fips/sha1/Makefile (1.1.4.2), "Exp", lines: +7 -5
+
+ Make sure we don't try to loop over an empty EXHEADER. In the
+ Makefiles where this was fixed by commenting away code, change it
+ to check for an empty EXHEADER instead, so we have less hassle in a
+ future where EXHEADER changes.
+
+ PR: 900
+
+2004-06-28 22:33 levitte
+
+ Changed:
+ fips/dh/fips_dh_check.c (1.1.2.2), "Exp", lines: +6 -0
+ fips/dh/fips_dh_gen.c (1.1.2.2), "Exp", lines: +6 -2
+ fips/dh/fips_dh_key.c (1.1.2.2), "Exp", lines: +8 -0
+
+ Make sure the FIPS stuff is only really compiled when in FIPS mode.
+
+2004-07-12 19:59 ben
+
+ Changed:
+ fips/fips_test_suite.c (1.1.4.4), "Exp", lines: +39 -6
+ fips/dh/fingerprint.sha1 (1.1.2.2), "Exp", lines: +3 -3
+
+ Corrected test program.
+
+2004-07-17 14:48 appro
+
+ Changed:
+ fips/des/Makefile (1.1.4.3), "Exp", lines: +1 -1
+
+ Eliminate enforced -g from CFLAGS. It switches off optimization
+ with some compilers, e.g. DEC C.
+
+2004-07-21 19:35 steve
+
+ Changed:
+ fips/fingerprint.sha1 (1.1.2.7), "Exp", lines: +1 -1
+ fips/fips.c (1.1.2.5), "Exp", lines: +3 -3
+ fips/rsa/fingerprint.sha1 (1.1.4.3), "Exp", lines: +1 -1
+ fips/rsa/fips_rsa_selftest.c (1.1.4.2), "Exp", lines: +8 -8
+
+ Avoid compiler warnings.
+
+2004-07-27 02:17 steve
+
+ Changed:
+ fips/fips_test_suite.c (1.1.4.5), "Exp", lines: +9 -8
+
+ Stop compiler warnings.
+
+2004-07-27 02:20 steve
+
+ Changed:
+ crypto/err/err.c (1.51.2.6), "Exp", lines: +1 -0
+
+ Add FIPS name to error library.
+
+2004-07-27 14:22 steve
+
+ Changed:
+ Makefile.org (1.154.2.84), "Exp", lines: +3 -3
+ fips/fips_check_sha1 (1.1.2.6), "Exp", lines: +1 -1
+ fips/openssl_fips_fingerprint (1.1.4.3), "Exp", lines: +1 -1
+
+ Rename libcrypto.sha1 to libcrypto.a.sha1
+
+2004-07-27 20:28 steve
+
+ Changed:
+ ssl/s3_lib.c (1.57.2.11), "Exp", lines: +33 -33
+ ssl/ssl.h (1.126.2.20), "Exp", lines: +1 -0
+ ssl/ssl_ciph.c (1.33.2.9), "Exp", lines: +11 -0
+ ssl/ssl_locl.h (1.47.2.3), "Exp", lines: +2 -1
+
+ New cipher "strength" FIPS which specifies that a cipher suite is
+ FIPS compatible.
+
+ New cipherstring "FIPS" is all FIPS compatible ciphersuites
+ except eNULL.
+
+ Only allow FIPS ciphersuites in FIPS mode.
+
+2004-07-28 04:24 levitte
+
+ Changed:
+ makevms.com (1.35.2.6), "Exp", lines: +2 -2
+
+ From the FIPS directory, darnit!
+
+2004-07-28 15:47 levitte
+
+ Changed:
+ makevms.com (1.35.2.7), "Exp", lines: +5 -1
+
+ Define OPENSSL_FIPS in opensslconf.h if a logical name with the
+ same name is defined.
+
+ Go up one directory level before dealing with FIPS stuff.
+
+2004-07-30 00:26 levitte
+
+ Changed:
+ fips/fips-lib.com (1.1.2.2), "Exp", lines: +3 -3
+
+ We're building crypto stuff, not ssl stuff. Additionally, we're in
+ the fips subdirectory, not the crypto one...
+
+2004-07-30 16:37 levitte
+
+ Changed:
+ fips/sha1/fingerprint.sha1 (1.1.2.7), "Exp", lines: +2 -2
+ fips/sha1/fips_md32_common.h (1.1.2.6), "Exp", lines: +1 -1
+ fips/sha1/fips_sha_locl.h (1.1.2.5), "Exp", lines: +2 -2
+ fips/sha1/fips_standalone_sha1.c (1.1.2.5), "Exp", lines: +1 -1
+ fips/sha1/standalone.sha1 (1.1.2.8), "Exp", lines: +3 -3
+ ssl/ssl_ciph.c (1.33.2.10), "Exp", lines: +2 -2
+ fips/rsa/fingerprint.sha1 (1.1.4.4), "Exp", lines: +2 -2
+ fips/rsa/fips_rsa_eay.c (1.1.4.3), "Exp", lines: +1 -1
+ fips/rsa/fips_rsa_gen.c (1.1.4.3), "Exp", lines: +1 -1
+ fips/dh/fingerprint.sha1 (1.1.2.3), "Exp", lines: +1 -1
+ fips/dh/fips_dh_gen.c (1.1.2.3), "Exp", lines: +1 -1
+ fips/dsa/fingerprint.sha1 (1.1.2.6), "Exp", lines: +2 -2
+ fips/dsa/fips_dsa_gen.c (1.1.4.3), "Exp", lines: +4 -3
+ fips/dsa/fips_dsa_ossl.c (1.1.2.6), "Exp", lines: +2 -2
+ fips/des/fingerprint.sha1 (1.1.2.5), "Exp", lines: +2 -2
+ fips/des/fips_des_enc.c (1.1.2.5), "Exp", lines: +2 -2
+ fips/des/fips_set_key.c (1.1.4.3), "Exp", lines: +3 -3
+ fips/fingerprint.sha1 (1.1.2.8), "Exp", lines: +2 -2
+ fips/fips.c (1.1.2.6), "Exp", lines: +76 -23
+ fips/fips.h (1.1.2.5), "Exp", lines: +2 -3
+ fips/fips_locl.h (1.1.4.2), "Exp", lines: +7 -2
+ fips/aes/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
+ fips/aes/fips_aes_core.c (1.1.2.5), "Exp", lines: +1 -1
+ crypto/rand/md_rand.c (1.69.2.5), "Exp", lines: +1 -1
+ crypto/rand/rand_lib.c (1.15.2.5), "Exp", lines: +2 -1
+ crypto/dsa/dsa_sign.c (1.10.2.6), "Exp", lines: +2 -2
+ crypto/dsa/dsa_vrf.c (1.10.2.6), "Exp", lines: +1 -1
+ crypto/pem/pem_all.c (1.20.2.2), "Exp", lines: +2 -2
+ crypto/cryptlib.c (1.32.2.12), "Exp", lines: +122 -6
+ crypto/crypto.h (1.62.2.8), "Exp", lines: +8 -1
+ crypto/md32_common.h (1.22.2.7), "Exp", lines: +2 -2
+
+ To protect FIPS-related global variables, add locking mechanisms
+ around them.
+
+ NOTE: because two new locks are added, this adds potential
+ binary incompatibility with earlier versions in the 0.9.7 series.
+ However, those locks will only ever be touched when FIPS_mode_set()
+ is called and after, thanks to a variable that's only changed from
+ 0 to 1 once (when FIPS_mode_set() is called). So basically, as
+ long as FIPS mode hasn't been engaged explicitely by the calling
+ application, the new locks are treated as if they didn't exist at
+ all, thus not becoming a problem. Applications that are built or
+ rebuilt to use FIPS functionality will need to be recompiled in any
+ case, thus not being a problem either.
+
+2004-08-05 20:11 steve
+
+ Changed:
+ fips/fingerprint.sha1 (1.1.2.9), "Exp", lines: +1 -1
+ fips/fips.c (1.1.2.7), "Exp", lines: +1 -1
+
+ Stop compiler giving bogus shadow warning.
+
+2004-08-09 14:14 levitte
+
+ Changed:
+ fips/fips-lib.com (1.1.2.3), "Exp", lines: +4 -4
+
+ Correct typos and include directory specifications.
+
+2004-08-10 11:11 levitte
+
+ Changed:
+ fips/fips-lib.com (1.1.2.4), "Exp", lines: +2 -1
+
+ Update the VMS fips library builder with the DH library.
+
+2004-08-10 12:04 levitte
+
+ Changed:
+ fips/rand/fingerprint.sha1 (1.1.2.8), "Exp", lines: +1 -1
+ fips/rand/fips_rand.c (1.1.2.8), "Exp", lines: +7 -1
+
+ With DEC C in ANSI C mode, we need to define _XOPEN_SOURCE_EXTENDED
+ to get struct timeval and gettimeofday().
+
+2004-09-06 16:19 levitte
+
+ Changed:
+ fips/fips.c (1.1.2.8), "Exp", lines: +5 -4
+
+ Replace the bogus checks of n with proper uses of feof(), ferror()
+ and clearerr().
+
+2004-09-06 16:21 levitte
+
+ Changed:
+ fips/sha1/fips_sha_locl.h (1.1.2.6), "Exp", lines: +2 -2
+
+ num is an unsigned long, but since it was transfered from
+ crypto/sha/sha_locl.h, where it is in fact an int, we need to check
+ for less-than-zero as if it was an int...
+
+2004-10-08 12:03 ben
+
+ Changed:
+ fips/fingerprint.sha1 (1.1.2.10), "Exp", lines: +1 -1
+ fips/sha1/fingerprint.sha1 (1.1.2.8), "Exp", lines: +1 -1
+ fips/sha1/standalone.sha1 (1.1.2.9), "Exp", lines: +1 -1
+
+ Update fingerprints.
+
+2004-10-26 14:17 levitte
+
+ Changed:
+ fips/sha1/Makefile (1.1.4.4), "Exp", lines: +3 -1
+ util/mkfiles.pl (1.12.2.3), "Exp", lines: +1 -0
+ fips/Makefile (1.1.4.5), "Exp", lines: +7 -1
+ crypto/sha/Makefile (1.1.4.4), "Exp", lines: +1 -7
+
+ fips/dh was missing in mkfiles.pl. make update
+
+2004-10-26 15:01 steve
+
+ Changed:
+ util/mkfiles.pl (1.12.2.4), "Exp", lines: +0 -1
+
+ Only add fips/dh once...
+
+2004-11-01 09:20 levitte
+
+ Changed:
+ fips/rand/fingerprint.sha1 (1.1.2.9), "Exp", lines: +1 -1
+ fips/rand/fips_rand.c (1.1.2.9), "Exp", lines: +3 -1
+
+ Make sure _XOPEN_SOURCE_EXTENDED is correctly defined, and only if
+ not already defined.
+
+2004-12-09 19:03 appro
+
+ vChanged:
+ crypto/Makefile (1.1.4.4), "Exp", lines: +2 -0
+
+ Postpone linking of shared libcrypto in FIPS build.
+
+2004-12-09 19:13 appro
+
+ Changed:
+ fips/fingerprint.sha1 (1.1.2.11), "Exp", lines: +1 -1
+ fips/fips.c (1.1.2.9), "Exp", lines: +13 -1
+ fips/openssl_fips_fingerprint (1.1.4.4), "Exp", lines: +4 -2
+
+ Cygwin specific FIPS fix-ups.
+
+2004-12-09 23:43 appro
+
+ Changed:
+ Configure (1.314.2.100), "Exp", lines: +2 -3
+ crypto/des/des_enc.c (1.11.2.5), "Exp", lines: +2 -2
+
+ Eliminate false dependency on 386 config option is FIPS context.
+ At the same time limit assembler support to ELF platforms [that's
+ what is there, ELF modules].
+
+2004-12-10 12:37 appro
+
+ Changed:
+ Configure (1.314.2.101), "Exp", lines: +10 -3
+ crypto/des/des_enc.c (1.11.2.6), "Exp", lines: +2 -2
+
+ Respect no-asm with fips option and disable FIPS DES assembler in
+ shared context [because it's not PIC].
+
+2004-12-10 14:15 appro
+
+ Changed:
+ fips/sha1/fingerprint.sha1 (1.1.2.10), "Exp", lines: +1 -1
+ fips/sha1/standalone.sha1 (1.1.2.11), "Exp", lines: +1 -1
+ fips/sha1/asm/sx86-elf.s (1.1.4.3), "Exp", lines: +32 -32
+
+ Solaris x86 assembler update.
+
+2004-12-10 17:30 appro
+
+ Changed:
+ fips/fips_check_sha1 (1.1.2.7), "Exp", lines: +1 -1
+ fips/openssl_fips_fingerprint (1.1.4.5), "Exp", lines: +1 -1
+ fips/sha1/Makefile (1.1.4.6), "Exp", lines: +1 -1
+
+ Adapt FIPS sub-tree for mingw.
+
+2005-01-03 18:46 steve
+
+ Changed:
+ fips/rsa/fingerprint.sha1 (1.1.4.5), "Exp", lines: +1 -1
+ fips/rsa/fips_rsa_selftest.c (1.1.4.3), "Exp", lines: +55 -11
+
+ RSA KAT.
+
+2005-01-11 17:54 levitte
+
+ Changed:
+ fips/rsa/fingerprint.sha1 (1.1.4.6), "Exp", lines: +1 -1
+ fips/rsa/fips_rsa_selftest.c (1.1.4.4), "Exp", lines: +2 -2
+
+ Clear signed vs. unsigned conflicts. Change the fingerprint
+ accordingly.
+
+2005-01-11 19:25 levitte
+
+ Changed:
+ ssl/ssltest.c (1.53.2.24), "Exp", lines: +2 -2
+ fips/rand/fips_randtest.c (1.1.2.6), "Exp", lines: +3 -3
+ fips/sha1/fips_sha1test.c (1.1.2.5), "Exp", lines: +10 -4
+ fips/des/fips_desmovs.c (1.1.2.6), "Exp", lines: +8 -7
+ fips/dsa/fips_dsatest.c (1.1.2.5), "Exp", lines: +2 -2
+ apps/openssl.c (1.48.2.12), "Exp", lines: +1 -1
+ fips/aes/fips_aesavs.c (1.1.2.12), "Exp", lines: +8 -7
+
+ Use EXIT() instead of exit().
+
+2005-01-26 21:00 steve
+
+ Changed:
+ apps/dgst.c (1.23.2.13), "Exp", lines: +10 -0
+ apps/pkcs12.c (1.60.2.13), "Exp", lines: +8 -1
+ crypto/crypto.h (1.62.2.9), "Exp", lines: +49 -0
+ crypto/md32_common.h (1.22.2.9), "Exp", lines: +1 -1
+ crypto/bf/bf_skey.c (1.6.2.1), "Exp", lines: +2 -1
+ crypto/bf/blowfish.h (1.9.2.1), "Exp", lines: +4 -1
+ crypto/cast/c_skey.c (1.5.6.1), "Exp", lines: +3 -1
+ crypto/cast/cast.h (1.7.2.1), "Exp", lines: +4 -1
+ crypto/evp/bio_md.c (1.11.2.3), "Exp", lines: +2 -7
+ crypto/evp/digest.c (1.21.2.7), "Exp", lines: +11 -0
+ crypto/evp/e_aes.c (1.6.2.11), "Exp", lines: +11 -11
+ crypto/evp/e_des.c (1.5.2.9), "Exp", lines: +5 -3
+ crypto/evp/e_des3.c (1.8.2.8), "Exp", lines: +6 -6
+ crypto/evp/evp.h (1.86.2.16), "Exp", lines: +17 -0
+ crypto/evp/evp_enc.c (1.28.2.11), "Exp", lines: +15 -1
+ crypto/evp/evp_err.c (1.23.2.4), "Exp", lines: +6 -1
+ crypto/evp/evp_locl.h (1.7.2.7), "Exp", lines: +17 -2
+ crypto/evp/m_dss.c (1.8.2.1), "Exp", lines: +1 -1
+ crypto/evp/m_md2.c (1.9.2.1), "Exp", lines: +1 -0
+ crypto/evp/m_md4.c (1.8.2.1), "Exp", lines: +1 -0
+ crypto/evp/m_md5.c (1.9.2.1), "Exp", lines: +1 -0
+ crypto/evp/m_mdc2.c (1.9.2.1), "Exp", lines: +1 -0
+ crypto/evp/m_sha.c (1.8.2.2), "Exp", lines: +1 -0
+ crypto/evp/m_sha1.c (1.8.2.1), "Exp", lines: +1 -1
+ crypto/evp/names.c (1.7.2.1), "Exp", lines: +3 -0
+ crypto/hmac/hmac.c (1.12.2.3), "Exp", lines: +7 -0
+ crypto/hmac/hmac.h (1.14.2.2), "Exp", lines: +1 -0
+ crypto/idea/i_skey.c (1.5.6.1), "Exp", lines: +13 -0
+ crypto/idea/idea.h (1.10.2.1), "Exp", lines: +4 -0
+ crypto/md2/md2.h (1.11.2.1), "Exp", lines: +3 -0
+ crypto/md2/md2_dgst.c (1.13.2.4), "Exp", lines: +3 -1
+ crypto/md4/md4.h (1.3.2.1), "Exp", lines: +3 -0
+ crypto/md4/md4_dgst.c (1.2.2.2), "Exp", lines: +1 -1
+ crypto/md5/md5.h (1.10.2.3), "Exp", lines: +3 -0
+ crypto/md5/md5_dgst.c (1.16.2.2), "Exp", lines: +1 -1
+ crypto/mdc2/mdc2.h (1.9.2.1), "Exp", lines: +3 -1
+ crypto/mdc2/mdc2dgst.c (1.13.2.1), "Exp", lines: +3 -1
+ crypto/rc2/rc2.h (1.10.2.1), "Exp", lines: +4 -1
+ crypto/rc2/rc2_skey.c (1.4.6.1), "Exp", lines: +13 -0
+ crypto/rc4/rc4.h (1.10.2.2), "Exp", lines: +3 -0
+ crypto/rc4/rc4_skey.c (1.10.8.2), "Exp", lines: +2 -1
+ crypto/rc5/rc5.h (1.5.2.1), "Exp", lines: +4 -1
+ crypto/rc5/rc5_skey.c (1.4.6.1), "Exp", lines: +14 -0
+ crypto/ripemd/ripemd.h (1.8.2.1), "Exp", lines: +3 -0
+ crypto/ripemd/rmd_dgst.c (1.13.2.2), "Exp", lines: +2 -1
+ crypto/sha/sha.h (1.11.2.2), "Exp", lines: +3 -0
+ crypto/sha/sha_locl.h (1.16.2.3), "Exp", lines: +4 -0
+ crypto/x509/x509_cmp.c (1.22.2.4), "Exp", lines: +7 -1
+ crypto/x509/x509_vfy.c (1.56.2.13), "Exp", lines: +1 -1
+ ssl/s3_clnt.c (1.53.2.18), "Exp", lines: +2 -0
+ ssl/s3_enc.c (1.31.2.9), "Exp", lines: +3 -0
+ ssl/s3_srvr.c (1.85.2.23), "Exp", lines: +2 -0
+ ssl/t1_enc.c (1.27.2.9), "Exp", lines: +2 -0
+
+ FIPS algorithm blocking.
+
+ Non FIPS algorithms are not normally allowed in FIPS mode.
+
+ Any attempt to use them via high level functions will
+ return an error.
+
+ The low level non-FIPS algorithm functions cannot return
+ errors so they produce assertion failures. HMAC also has to give an
+ assertion error because it (erroneously) can't return an error
+ either.
+
+ There are exceptions (such as MD5 in TLS and non
+ cryptographic use of algorithms) and applications can override the
+ blocking and use non FIPS algorithms anyway.
+
+ For low level functions the override is perfomed by
+ prefixing the algorithm initalization function with "private_" for
+ example private_MD5_Init().
+
+ For high level functions an override is performed by
+ setting a flag in the context.
+
+2005-01-27 02:49 steve
+
+ Changed:
+ apps/dgst.c (1.23.2.14), "Exp", lines: +9 -5
+ crypto/crypto.h (1.62.2.10), "Exp", lines: +3 -0
+ crypto/evp/digest.c (1.21.2.8), "Exp", lines: +34 -0
+ crypto/hmac/hmac.c (1.12.2.4), "Exp", lines: +9 -0
+
+ More FIPS algorithm blocking.
+
+ Catch attempted use of non FIPS algorithms with HMAC.
+
+ Give an assertion error for applications that ignore FIPS
+ digest errors.
+
+ Make -non-fips-allow work with dgst and HMAC.
+
+2005-01-28 15:03 steve
+
+ Changed:
+ apps/dgst.c (1.23.2.15), "Exp", lines: +2 -1
+ apps/enc.c (1.35.2.13), "Exp", lines: +38 -4
+ crypto/evp/e_rc4.c (1.11.2.2), "Exp", lines: +1 -0
+ crypto/evp/evp.h (1.86.2.17), "Exp", lines: +3 -0
+ crypto/evp/evp_enc.c (1.28.2.12), "Exp", lines: +60 -15
+ crypto/evp/evp_locl.h (1.7.2.8), "Exp", lines: +1 -0
+ test/testenc (1.3.8.2), "Exp", lines: +8 -8
+
+ Further FIPS algorithm blocking.
+
+ Fixes to cipher blocking and enabling code.
+
+ Add option -non-fips-allow to 'enc' and update testenc.
+
+2005-01-31 02:33 steve
+
+ Changed:
+ ssl/s23_clnt.c (1.20.2.7), "Exp", lines: +16 -0
+ ssl/s23_srvr.c (1.41.2.6), "Exp", lines: +9 -0
+ ssl/s3_clnt.c (1.53.2.19), "Exp", lines: +0 -8
+ ssl/s3_enc.c (1.31.2.10), "Exp", lines: +1 -0
+ ssl/s3_srvr.c (1.85.2.24), "Exp", lines: +0 -8
+ ssl/ssl.h (1.126.2.21), "Exp", lines: +1 -0
+ ssl/ssl_cert.c (1.48.2.10), "Exp", lines: +0 -8
+ ssl/ssl_err.c (1.41.2.4), "Exp", lines: +2 -1
+ ssl/ssl_lib.c (1.110.2.13), "Exp", lines: +8 -9
+ ssl/t1_enc.c (1.27.2.10), "Exp", lines: +0 -18
+
+ Only allow TLS is FIPS mode.
+
+ Remove old FIPS_allow_md5() calls.
+
+2005-02-05 19:24 steve
+
+ Changed:
+ apps/req.c (1.88.2.18), "Exp", lines: +8 -1
+ apps/x509.c (1.67.2.20), "Exp", lines: +8 -1
+
+ In FIPS mode use SHA1 as default digest in x509 and req utilities.
+
+2005-03-22 18:29 steve
+
+ Changed:
+ fips/fingerprint.sha1 (1.1.2.12), "Exp", lines: +1 -1
+ fips/fips.c (1.1.2.10), "Exp", lines: +1 -0
+
+ Fix memory leak.
+
+2005-03-27 05:36 steve
+
+ Changed:
+ crypto/evp/e_null.c (1.9.2.1), "Exp", lines: +1 -1
+ ssl/s3_lib.c (1.57.2.13), "Exp", lines: +3 -3
+
+ Allow 'null' cipher and appropriate Kerberos ciphersuites in FIPS
+ mode.
+
+2005-04-14 14:44 steve
+
+ Changed:
+ fips/fipshashes.sha1 (1.1.2.1), "Exp", lines: +29 -0
+ util/checkhash.pl (1.1.2.1), "Exp", lines: +181 -0
+
+ Perl script that checks or rebuilds FIPS hash files. This works on
+ both Unix and Windows.
+
+ Merge all FIPS hash files into a single hash file
+ fips/fips.sha1
+
+2005-04-15 05:27 steve
+
+ Changed:
+ fips/Makefile (1.1.4.9), "Exp", lines: +1 -1
+ fips/aes/Makefile (1.1.4.4), "Exp", lines: +1 -4
+ fips/des/Makefile (1.1.4.6), "Exp", lines: +1 -4
+ fips/dh/Makefile (1.1.2.5), "Exp", lines: +1 -4
+ fips/dsa/Makefile (1.1.4.4), "Exp", lines: +1 -4
+ fips/rand/Makefile (1.1.4.3), "Exp", lines: +1 -4
+ fips/rsa/Makefile (1.1.4.5), "Exp", lines: +1 -4
+ fips/sha1/Makefile (1.1.4.9), "Exp", lines: +1 -7
+
+ Update hash checking in makefiles to use new perl script.
+
+2005-04-17 06:37 steve
+
+ Changed:
+ util/checkhash.pl (1.1.2.2), "Exp", lines: +163 -127
+
+ Modify checkhash.pl so it can be run standalone or included as a
+ funtion in another perl script.
+
+2005-04-17 16:00 appro
+
+ Changed:
+ fips/sha1/Makefile (1.1.4.10), "Exp", lines: +9 -5
+
+ Bring back fips_standalone_sha1.
+
+2005-04-17 16:17 appro
+
+ Deleted:
+ fips/sha1/asm/sx86-elf.s (1.1.4.4)
+ Changed:
+ Configure (1.314.2.114), "Exp", lines: +1 -1
+ fips/fipshashes.sha1 (1.1.2.2), "Exp", lines: +1 -1
+ fips/sha1/Makefile (1.1.4.11), "Exp", lines: +1 -1
+ fips/sha1/standalone.sha1 (1.1.2.13), "Exp", lines: +1 -1
+ fips/sha1/asm/fips-sx86-elf.s (1.1.2.1), "Exp", lines: +1568 -0
+
+ Rename fips/sha1/sx86-elf.s to fips/sha1/fips-sx86-elf.s.
+
+2005-04-17 16:21 steve
+
+ Changed:
+ util/checkhash.pl (1.1.2.3), "Exp", lines: +2 -0
+
+ Return 0 for successful hash check.
+
+2005-04-17 16:54 appro
+
+ Changed:
+ Configure (1.314.2.116), "Exp", lines: +8 -1
+ Makefile.org (1.154.2.99), "Exp", lines: +3 -2
+ crypto/aes/aes_cbc.c (1.1.2.11), "Exp", lines: +2 -0
+ fips/fipshashes.sha1 (1.1.2.4), "Exp", lines: +1 -0
+ fips/aes/Makefile (1.1.4.5), "Exp", lines: +4 -2
+ fips/aes/asm/fips-ax86-elf.s (1.1.2.1), "Exp", lines: +1822 -0
+
+ Throw in fips/aes/asm/fips-ax86-elf.s.
+
+2005-04-17 16:35 appro
+
+ Changed:
+ Configure (1.314.2.115), "Exp", lines: +1 -1
+ fips/fipshashes.sha1 (1.1.2.3), "Exp", lines: +1 -1
+ fips/des/asm/fips-dx86-elf.s (1.1.4.2), "Exp", lines: +108 -98
+
+ Regenerate fips/des/asm/fips-dx86-elf.s with -fPIC flag.
+
+2005-04-17 17:26 appro
+
+ Changed:
+ crypto/cryptlib.c (1.32.2.18), "Exp", lines: +6 -55
+ crypto/crypto.h (1.62.2.11), "Exp", lines: +0 -3
+ fips/fips.c (1.1.2.11), "Exp", lines: +62 -8
+ fips/fips.h (1.1.2.7), "Exp", lines: +2 -3
+ fips/fips_locl.h (1.1.4.3), "Exp", lines: +6 -3
+ fips/fipshashes.sha1 (1.1.2.5), "Exp", lines: +4 -4
+ fips/rand/fips_rand.c (1.1.2.10), "Exp", lines: +3 -1
+ fips/rsa/fips_rsa_gen.c (1.1.4.4), "Exp", lines: +4 -2
+
+ Resolve minor binary compatibility issues in fips.
+
+2005-04-17 18:22 appro
+
+ Changed:
+ fips/fipshashes.sha1 (1.1.2.6), "Exp", lines: +12 -12
+ fips/des/fips_des_locl.h (1.1.2.4), "Exp", lines: +1 -1
+ fips/des/fips_set_key.c (1.1.4.4), "Exp", lines: +2 -2
+ fips/dh/fips_dh_key.c (1.1.2.3), "Exp", lines: +1 -1
+ fips/dsa/fips_dsa_ossl.c (1.1.2.7), "Exp", lines: +1 -1
+ fips/dsa/fips_dsa_selftest.c (1.1.4.2), "Exp", lines: +3 -3
+ fips/rand/fips_rand.c (1.1.2.11), "Exp", lines: +2 -2
+ fips/rand/fips_rand.h (1.1.2.5), "Exp", lines: +1 -1
+ fips/rsa/fips_rsa_eay.c (1.1.4.4), "Exp", lines: +1 -1
+ fips/rsa/fips_rsa_gen.c (1.1.4.5), "Exp", lines: +1 -1
+ fips/rsa/fips_rsa_selftest.c (1.1.4.5), "Exp", lines: +11 -11
+ fips/sha1/fips_sha1_selftest.c (1.1.4.2), "Exp", lines: +1 -1
+ fips/sha1/fips_sha1dgst.c (1.1.2.5), "Exp", lines: +1 -1
+ fips/sha1/standalone.sha1 (1.1.2.14), "Exp", lines: +2 -2
+
+ Minor fips const-ification.
+
+2005-04-18 07:02 steve
+
+ Changed:
+ crypto/bf/bf_skey.c (1.6.2.2), "Exp", lines: +1 -0
+ crypto/cast/c_skey.c (1.5.6.2), "Exp", lines: +1 -0
+ crypto/idea/i_skey.c (1.5.6.2), "Exp", lines: +1 -0
+ crypto/rc2/rc2_skey.c (1.4.6.2), "Exp", lines: +1 -0
+ crypto/rc4/rc4_skey.c (1.10.8.3), "Exp", lines: +1 -0
+ crypto/rc5/rc5_skey.c (1.4.6.2), "Exp", lines: +1 -0
+
+ Pick up definition of FIPS_mode() in fips.h to avoid warnings.
+
+2005-04-18 10:34 steve
+
+ Deleted:
+ fips/fingerprint.sha1 (1.1.2.14)
+ fips/fips_check_sha1 (1.1.2.8)
+ fips/fips_make_sha1 (1.1.2.7)
+ fips/aes/fingerprint.sha1 (1.1.2.7)
+ fips/des/fingerprint.sha1 (1.1.2.6)
+ fips/dh/fingerprint.sha1 (1.1.2.4)
+ fips/dsa/fingerprint.sha1 (1.1.2.7)
+ fips/rand/fingerprint.sha1 (1.1.2.10)
+ fips/rsa/fingerprint.sha1 (1.1.4.7)
+ fips/sha1/fingerprint.sha1 (1.1.2.12)
+ Changed:
+ fips/sha1/Makefile (1.1.4.12), "Exp", lines: +1 -4
+
+ Remove obsolete fingerprint.sha1 files and associated scripts.
+ Delete test in fips/sha1/Makefile: the top level test checks the
+ same files.
+
+2005-04-19 09:11 appro
+
+ Deleted:
+ fips/fipshashes.sha1 (1.1.2.7)
+ fips/sha1/standalone.sha1 (1.1.2.15)
+ Changed:
+ fips/fipshashes.c (1.1.2.1), "Exp", lines: +32 -0
+ util/checkhash.pl (1.1.2.4), "Exp", lines: +7 -4
+
+ Maintain fingerprint hashes as C source.
+
+2005-04-19 09:17 appro
+
+ Changed:
+ util/checkhash.pl (1.1.2.5), "Exp", lines: +1 -1
+
+ Complete the transition C-code hashes.
+
+2005-04-21 19:06 steve
+
+ Changed:
+ apps/openssl.c (1.48.2.13), "Exp", lines: +0 -2
+ fips/fips.c (1.1.2.12), "Exp", lines: +0 -27
+ fips/fips.h (1.1.2.8), "Exp", lines: +0 -2
+ fips/fipshashes.c (1.1.2.2), "Exp", lines: +2 -2
+
+ Remove defunct FIPS_allow_md5() and related functions.
+
+2005-04-22 06:15 appro
+
+ Changed:
+ fips/fips.c (1.1.2.13), "Exp", lines: +3 -3
+ fips/fips_err.h (1.1.4.4), "Exp", lines: +3 -3
+ fips/fipshashes.c (1.1.2.4), "Exp", lines: +2 -2
+
+ Move some variables to .bss.
+
projects / oweals / openssl.git / commitdiff