Dr. Stephen Henson [Thu, 19 Jul 2007 16:45:31 +0000 (16:45 +0000)]
Add error checking to script.
Dr. Stephen Henson [Thu, 19 Jul 2007 16:11:21 +0000 (16:11 +0000)]
Initial fips WIN32 compilation batch file.
Dr. Stephen Henson [Thu, 19 Jul 2007 12:24:01 +0000 (12:24 +0000)]
Use X9.31 keygen for signature test.
Dr. Stephen Henson [Thu, 19 Jul 2007 12:17:56 +0000 (12:17 +0000)]
Add SSE2 support to VC++ build. Update MASM script.
Andy Polyakov [Mon, 16 Jul 2007 14:02:52 +0000 (14:02 +0000)]
shlib_wrap.sh update [from HEAD].
Andy Polyakov [Mon, 16 Jul 2007 12:23:55 +0000 (12:23 +0000)]
Bourne shell portability fix.
Andy Polyakov [Mon, 16 Jul 2007 10:00:36 +0000 (10:00 +0000)]
Framework updates.
Dr. Stephen Henson [Mon, 16 Jul 2007 00:09:44 +0000 (00:09 +0000)]
Check return code properly in fputs (< 0 is error).
Dr. Stephen Henson [Sun, 15 Jul 2007 21:27:34 +0000 (21:27 +0000)]
Update test script generator for Win32.
Dr. Stephen Henson [Sun, 15 Jul 2007 16:50:34 +0000 (16:50 +0000)]
include openssl/fips.h in sha1dgst.c
Dr. Stephen Henson [Sun, 15 Jul 2007 16:12:29 +0000 (16:12 +0000)]
Update .cvsignore
Dr. Stephen Henson [Sun, 15 Jul 2007 16:10:46 +0000 (16:10 +0000)]
Tolerate DigestInfo with absent parameters in FIPS mode.
Dr. Stephen Henson [Sun, 15 Jul 2007 12:06:23 +0000 (12:06 +0000)]
Add selftest check to SHA1 routine.
Dr. Stephen Henson [Sun, 15 Jul 2007 12:01:54 +0000 (12:01 +0000)]
Enhance mkfipsscr.pl to handle different testvector paths and perform
sanity checks.
Make AES/TDES algorithm test programs quiet if VERBOSE is zero.
Dr. Stephen Henson [Thu, 12 Jul 2007 08:20:21 +0000 (08:20 +0000)]
Update Windows build system to use AES assembler and standard assembly
language routines in FIPS mode compiles.
Dr. Stephen Henson [Wed, 11 Jul 2007 11:53:20 +0000 (11:53 +0000)]
Updates to WIN32 build system to make FIPS build work again.
Dr. Stephen Henson [Wed, 11 Jul 2007 00:11:09 +0000 (00:11 +0000)]
Typo.
Dr. Stephen Henson [Tue, 10 Jul 2007 22:02:02 +0000 (22:02 +0000)]
Delete old duplicate files.
Dr. Stephen Henson [Tue, 10 Jul 2007 21:37:24 +0000 (21:37 +0000)]
Update dependencies.
Dr. Stephen Henson [Tue, 10 Jul 2007 21:24:32 +0000 (21:24 +0000)]
Use common source files for FIPS mode and utilize same optimizations.
Andy Polyakov [Sun, 8 Jul 2007 19:41:38 +0000 (19:41 +0000)]
Shut up memory debuggers complaining about AES x86 assembler module
[from stable].
PR: 1508,1320
Andy Polyakov [Sun, 8 Jul 2007 19:20:48 +0000 (19:20 +0000)]
EVP_*_cfb1 was broken [from HEAD].
PR: 1318
Andy Polyakov [Sun, 8 Jul 2007 18:55:51 +0000 (18:55 +0000)]
bn_mul_recursive doesn't handle all cases correctly, which results in
BN_mul failures at certain key-length mixes [from HEAD].
PR: 1427
Andy Polyakov [Sat, 7 Jul 2007 20:12:12 +0000 (20:12 +0000)]
Typo in str_lib.c [from HEAD].
PR: 1177
Dr. Stephen Henson [Mon, 2 Jul 2007 12:10:06 +0000 (12:10 +0000)]
Update ordinals.
Dr. Stephen Henson [Mon, 2 Jul 2007 11:27:52 +0000 (11:27 +0000)]
Check selftest in rand too.
Dr. Stephen Henson [Mon, 2 Jul 2007 11:22:50 +0000 (11:22 +0000)]
Check selftest status in all crypto operations and abort with
a fatal error on failure.
Dr. Stephen Henson [Sun, 1 Jul 2007 23:19:15 +0000 (23:19 +0000)]
Modify AES and 3DES selftests to use EVP.
Dr. Stephen Henson [Sun, 1 Jul 2007 17:58:15 +0000 (17:58 +0000)]
Move 3DES EVP inside FIPS module and modify algorithm tests to use it.
Dr. Stephen Henson [Sun, 1 Jul 2007 12:53:10 +0000 (12:53 +0000)]
Changes to make AES algorithm test work via EVP.
Dr. Stephen Henson [Sun, 1 Jul 2007 00:08:42 +0000 (00:08 +0000)]
Add enc_min.c file.
Dr. Stephen Henson [Sun, 1 Jul 2007 00:07:25 +0000 (00:07 +0000)]
Move minimal EVP_CIPHER implementation into FIPS library. Not used by
any FIPS applications yet.
Andy Polyakov [Fri, 29 Jun 2007 13:15:33 +0000 (13:15 +0000)]
bn_mont.c fix [from HEAD].
Dr. Stephen Henson [Sat, 23 Jun 2007 00:02:25 +0000 (00:02 +0000)]
Make fips test suite script halt on errors.
Dr. Stephen Henson [Fri, 22 Jun 2007 12:17:52 +0000 (12:17 +0000)]
Avoid warnings. Fix fips_dssvs program.
Dr. Stephen Henson [Wed, 20 Jun 2007 17:49:42 +0000 (17:49 +0000)]
Fix warnings.
Dr. Stephen Henson [Tue, 19 Jun 2007 16:10:19 +0000 (16:10 +0000)]
Remove deleted function from headers.
Dr. Stephen Henson [Tue, 19 Jun 2007 15:44:44 +0000 (15:44 +0000)]
Fix from stable branch.
Andy Polyakov [Mon, 11 Jun 2007 16:43:29 +0000 (16:43 +0000)]
Updates from stable branch: BN_*_no_branch privatization and elimination of
conditional final subtraction in Montgomery multiplication.
Dr. Stephen Henson [Tue, 5 Jun 2007 17:28:00 +0000 (17:28 +0000)]
Increment counter after use.
Dr. Stephen Henson [Mon, 21 May 2007 12:45:10 +0000 (12:45 +0000)]
Disable DES in FIPS mode.
Dr. Stephen Henson [Mon, 21 May 2007 12:40:07 +0000 (12:40 +0000)]
Update from stable branch.
Andy Polyakov [Sun, 20 May 2007 07:14:30 +0000 (07:14 +0000)]
Padlock engine fails to compile with -O0 -fPIC [from HEAD].
Andy Polyakov [Sat, 19 May 2007 20:12:46 +0000 (20:12 +0000)]
Type cast fixes in aes-586.pl [from 098-stable].
Andy Polyakov [Sat, 19 May 2007 19:41:28 +0000 (19:41 +0000)]
cygwin shared rules update [from HEAD].
PR: 1517
Andy Polyakov [Sat, 19 May 2007 18:05:33 +0000 (18:05 +0000)]
Typo in x509_txt.c [from HEAD].
Andy Polyakov [Fri, 4 May 2007 13:08:00 +0000 (13:08 +0000)]
Detect UltraSPARC T1 in ./config [from HEAD].
Andy Polyakov [Mon, 30 Apr 2007 12:06:30 +0000 (12:06 +0000)]
Fix s390x detection in ./config [from 098].
Dr. Stephen Henson [Wed, 25 Apr 2007 13:24:56 +0000 (13:24 +0000)]
Make ordinals consistent across branches.
Dr. Stephen Henson [Wed, 25 Apr 2007 13:15:51 +0000 (13:15 +0000)]
Merge from 0.9.8-stable.
Dr. Stephen Henson [Tue, 24 Apr 2007 11:34:19 +0000 (11:34 +0000)]
Merge from stable branch.
Dr. Stephen Henson [Tue, 24 Apr 2007 11:30:51 +0000 (11:30 +0000)]
Merge from 0.9.8 stable branch.
Dr. Stephen Henson [Mon, 9 Apr 2007 23:51:50 +0000 (23:51 +0000)]
Fix from HEAD.
Dr. Stephen Henson [Mon, 9 Apr 2007 12:15:31 +0000 (12:15 +0000)]
Update ordinals. Use gap for EVP_add_alg_module to keep values consistent
across versions.
Dr. Stephen Henson [Mon, 9 Apr 2007 12:06:26 +0000 (12:06 +0000)]
If config file tries to enter FIPS mode in a non FIPS capable library
return an error.
Dr. Stephen Henson [Mon, 9 Apr 2007 11:47:59 +0000 (11:47 +0000)]
Update from HEAD.
Dr. Stephen Henson [Sun, 8 Apr 2007 17:51:02 +0000 (17:51 +0000)]
Add algorithm configuration module.
Dr. Stephen Henson [Fri, 6 Apr 2007 00:30:24 +0000 (00:30 +0000)]
Block low level public key signature operations in FIPS mode.
Update self tests for all modes and use EVP.
Update pairwise consistency checks.
Dr. Stephen Henson [Wed, 4 Apr 2007 00:33:23 +0000 (00:33 +0000)]
Fix Win32 warning. Update ordinals.
Dr. Stephen Henson [Tue, 3 Apr 2007 21:01:29 +0000 (21:01 +0000)]
New EVP sign and verify functionality.
Dr. Stephen Henson [Tue, 3 Apr 2007 18:24:22 +0000 (18:24 +0000)]
Don't process any of kssl.c if krb5 option not set.
Dr. Stephen Henson [Tue, 3 Apr 2007 02:13:20 +0000 (02:13 +0000)]
Add new file.
Dr. Stephen Henson [Mon, 2 Apr 2007 23:59:47 +0000 (23:59 +0000)]
Add tiny ASN1 code for DSA signatures.
Make DSA tests, selftests and algorithm tests use EVP.
Dr. Stephen Henson [Wed, 28 Mar 2007 22:09:56 +0000 (22:09 +0000)]
Make ordinals consistent with 0.9.8-stable.
Dr. Stephen Henson [Wed, 28 Mar 2007 22:00:48 +0000 (22:00 +0000)]
Update from stable branch.
Dr. Stephen Henson [Wed, 28 Mar 2007 12:38:55 +0000 (12:38 +0000)]
Update from 0.9.8-stable with patches also applied to equivalent FIPS
sources.
Dr. Stephen Henson [Tue, 27 Mar 2007 00:04:55 +0000 (00:04 +0000)]
Perl script to rename sections in MS COFF binaries.
Submitted by: Andy Polyakov
Dr. Stephen Henson [Tue, 27 Mar 2007 00:03:42 +0000 (00:03 +0000)]
Use perl script instead of editbin to rename object file sections.
Dr. Stephen Henson [Mon, 26 Mar 2007 12:06:44 +0000 (12:06 +0000)]
Modify VC++ build sytem to use fipscanister.lib instead of fipscanister.o
and avoid the need for ld.exe.
Andy Polyakov [Sun, 25 Mar 2007 15:42:13 +0000 (15:42 +0000)]
Oops! Revert to previous version and [re-]apply diff.
Andy Polyakov [Sun, 25 Mar 2007 15:37:26 +0000 (15:37 +0000)]
aix updates from HEAD.
Andy Polyakov [Sun, 25 Mar 2007 14:40:33 +0000 (14:40 +0000)]
Typos in Makefiles.
Dr. Stephen Henson [Sat, 24 Mar 2007 18:47:54 +0000 (18:47 +0000)]
Make sure fipscanister.o is built and installed for static WIN32 builds.
Dr. Stephen Henson [Thu, 22 Mar 2007 19:24:34 +0000 (19:24 +0000)]
Add some version info and comments to WIN32 FIPS DLL.
Dr. Stephen Henson [Thu, 22 Mar 2007 19:07:31 +0000 (19:07 +0000)]
Add version info to FIPS DLL.
Dr. Stephen Henson [Thu, 22 Mar 2007 18:31:35 +0000 (18:31 +0000)]
Forward FIPS DLL implementations from libcrypto DLL under Win32.
Dr. Stephen Henson [Thu, 22 Mar 2007 13:42:05 +0000 (13:42 +0000)]
Add missing #ifdef
Dr. Stephen Henson [Thu, 22 Mar 2007 13:19:46 +0000 (13:19 +0000)]
Update from stable branch.
Dr. Stephen Henson [Thu, 22 Mar 2007 00:39:24 +0000 (00:39 +0000)]
And so it begins...
cvs2svn [Wed, 21 Mar 2007 14:33:02 +0000 (14:33 +0000)]
This commit was manufactured by cvs2svn to create branch 'OpenSSL-fips-
0_9_8-stable'.
Bodo Möller [Wed, 21 Mar 2007 14:33:01 +0000 (14:33 +0000)]
stricter session ID context matching
Bodo Möller [Wed, 21 Mar 2007 14:18:27 +0000 (14:18 +0000)]
oops -- this should have been in 0.9.8e
Bodo Möller [Wed, 21 Mar 2007 10:58:32 +0000 (10:58 +0000)]
clarification regarding libdes files
Andy Polyakov [Tue, 20 Mar 2007 09:06:52 +0000 (09:06 +0000)]
PowerPC config updates from HEAD.
Dr. Stephen Henson [Fri, 9 Mar 2007 14:06:34 +0000 (14:06 +0000)]
Fix kerberos ciphersuite bugs introduced with PR:1336.
Ben Laurie [Thu, 8 Mar 2007 15:52:04 +0000 (15:52 +0000)]
Make local function static.
Dr. Stephen Henson [Mon, 5 Mar 2007 00:06:47 +0000 (00:06 +0000)]
Stop memory leak.
Lutz Jänicke [Fri, 2 Mar 2007 17:54:31 +0000 (17:54 +0000)]
Initialize "buf" to 0 to make valgrind happy :-)
Note: the RAND_bytes() manual page says:
RAND_bytes() puts num cryptographically strong pseudo-random bytes into buf.
It does not talk about using the previous contents of buf so we are working
as documented.
Lutz Jänicke [Fri, 2 Mar 2007 17:44:55 +0000 (17:44 +0000)]
Do not use uninitialized memory to seed the PRNG as it may confuse
code checking tools.
PR: 1499
Dr. Stephen Henson [Tue, 27 Feb 2007 18:42:52 +0000 (18:42 +0000)]
EVP_CIPHER_CTX_key_length() should return the set key length in the
EVP_CIPHER_CTX structure which may not be the same as the underlying
cipher key length for variable length ciphers.
Lutz Jänicke [Tue, 27 Feb 2007 08:26:51 +0000 (08:26 +0000)]
Merge from HEAD
Bodo Möller [Mon, 26 Feb 2007 10:48:56 +0000 (10:48 +0000)]
include complete 0.9.7 history
Bodo Möller [Mon, 26 Feb 2007 10:47:49 +0000 (10:47 +0000)]
use 2007 copyright for generated files
Dr. Stephen Henson [Fri, 23 Feb 2007 12:50:54 +0000 (12:50 +0000)]
Prepare for next version.
Dr. Stephen Henson [Fri, 23 Feb 2007 12:38:11 +0000 (12:38 +0000)]
Add L to version number
Dr. Stephen Henson [Fri, 23 Feb 2007 12:12:28 +0000 (12:12 +0000)]
Prepare for release.
Dr. Stephen Henson [Fri, 23 Feb 2007 01:01:08 +0000 (01:01 +0000)]
Make update.
Lutz Jänicke [Thu, 22 Feb 2007 17:39:50 +0000 (17:39 +0000)]
Fix problem with multi line responses in -starttls by using a buffering
BIO and BIO_gets().
Dr. Stephen Henson [Thu, 22 Feb 2007 02:00:39 +0000 (02:00 +0000)]
Don't use deprecated -mcpu option.
Dr. Stephen Henson [Thu, 22 Feb 2007 01:35:24 +0000 (01:35 +0000)]
Update NEWS file.