Andy Polyakov [Sun, 16 Dec 2012 19:42:44 +0000 (19:42 +0000)]
VC-32.pl: fix typo [from HEAD].
Submitted by: Pierre Delaage
Andy Polyakov [Mon, 29 Oct 2012 22:26:27 +0000 (22:26 +0000)]
Cumulative updates from HEAD.
Dr. Stephen Henson [Fri, 19 Oct 2012 20:53:35 +0000 (20:53 +0000)]
update DRBG to handle new file format
Dr. Stephen Henson [Tue, 16 Oct 2012 22:47:44 +0000 (22:47 +0000)]
aix[64]-cc: get MT support right (gcc targets are not affected).
(backport from HEAD)
Dr. Stephen Henson [Tue, 16 Oct 2012 22:47:00 +0000 (22:47 +0000)]
Don't require tag before ciphertext in AESGCM mode
Dr. Stephen Henson [Mon, 15 Oct 2012 11:28:59 +0000 (11:28 +0000)]
e_aes.c: uninitialized variable in aes_ccm_init_key.
PR: 2874
Submitted by: Tomas Mraz
(backport from HEAD)
Dr. Stephen Henson [Sun, 14 Oct 2012 12:38:58 +0000 (12:38 +0000)]
reset ctx->num for CTR mode for FIPS EVP
Dr. Stephen Henson [Sun, 14 Oct 2012 12:30:12 +0000 (12:30 +0000)]
sha1-armv4-large.pl: comply with ABI.
(backport from HEAD)
Dr. Stephen Henson [Sun, 14 Oct 2012 12:29:25 +0000 (12:29 +0000)]
gcm128.c: fix AAD-only case with AAD length not divisible by 16.
PR: 2859
Submitted by: John Foley
(backport from HEAD)
Dr. Stephen Henson [Sun, 14 Oct 2012 12:26:02 +0000 (12:26 +0000)]
optimize make_kn (from HEAD, by Andy)
Dr. Stephen Henson [Sun, 14 Oct 2012 12:24:24 +0000 (12:24 +0000)]
CMAC reset fix (from HEAD)
Dr. Stephen Henson [Sun, 14 Oct 2012 12:03:34 +0000 (12:03 +0000)]
Add BSD-ppc85xx support and avoid copying overlapping buffers in fips_dssvs.c
Dr. Stephen Henson [Thu, 4 Oct 2012 14:27:39 +0000 (14:27 +0000)]
Add support for Windows CE and C64+ to FIPS module. (from fips2-stable)
Dr. Stephen Henson [Thu, 4 Oct 2012 13:27:12 +0000 (13:27 +0000)]
file TI_CGTOOLS.pl was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 14:27:39 +0000
Dr. Stephen Henson [Thu, 4 Oct 2012 13:27:10 +0000 (13:27 +0000)]
file fips_standalone_sha1 was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 14:27:38 +0000
Dr. Stephen Henson [Thu, 4 Oct 2012 13:27:09 +0000 (13:27 +0000)]
file run6x was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 14:27:33 +0000
Dr. Stephen Henson [Thu, 4 Oct 2012 13:27:08 +0000 (13:27 +0000)]
file incore6x was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 14:27:33 +0000
Dr. Stephen Henson [Thu, 4 Oct 2012 13:27:07 +0000 (13:27 +0000)]
file hmac_sha1.pl was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 14:27:33 +0000
Dr. Stephen Henson [Thu, 4 Oct 2012 13:27:06 +0000 (13:27 +0000)]
file fipscanister.cmd was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 14:27:33 +0000
Dr. Stephen Henson [Thu, 4 Oct 2012 13:27:05 +0000 (13:27 +0000)]
file fips_standalone_sha1 was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 14:27:33 +0000
Dr. Stephen Henson [Thu, 4 Oct 2012 13:27:04 +0000 (13:27 +0000)]
file env was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 14:27:33 +0000
Dr. Stephen Henson [Thu, 4 Oct 2012 13:27:03 +0000 (13:27 +0000)]
file do_fips was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 14:27:33 +0000
Dr. Stephen Henson [Thu, 7 Jun 2012 17:14:31 +0000 (17:14 +0000)]
automatically make output directory is using minimal script
Dr. Stephen Henson [Wed, 23 May 2012 17:07:23 +0000 (17:07 +0000)]
Version of "incore" for Windows executables. Original by Andy.
Dr. Stephen Henson [Wed, 23 May 2012 12:44:48 +0000 (12:44 +0000)]
Add --script-sfprefix option to insert a prefix before the request and
response filenames in output script.
Dr. Stephen Henson [Wed, 23 May 2012 11:47:01 +0000 (11:47 +0000)]
add comment
Dr. Stephen Henson [Wed, 23 May 2012 11:45:21 +0000 (11:45 +0000)]
fix typo
Dr. Stephen Henson [Wed, 23 May 2012 00:39:01 +0000 (00:39 +0000)]
Don't install fips_standalone_sha1.exe if it isn't being built
Dr. Stephen Henson [Tue, 22 May 2012 23:57:22 +0000 (23:57 +0000)]
Changes needed to support WinCE compilation:
Don't try to raise SIGABRT if not defined.
Return from fips_dhvs.c main instead of calling exit.
Workaround for lack of GetSystemFileAsFileTime.
Disable optimisation for part of bn_nist.c to avoid compiler bug.
Remove /WX flag so we don't exist on warnings.
Dr. Stephen Henson [Fri, 18 May 2012 15:55:40 +0000 (15:55 +0000)]
cross compile target support for do_fips script
Dr. Stephen Henson [Fri, 18 May 2012 15:05:33 +0000 (15:05 +0000)]
don't insert time in response files: it breaks some systems and we shouldn't be doing this anyway
Dr. Stephen Henson [Thu, 17 May 2012 11:09:46 +0000 (11:09 +0000)]
Make Windows FIPS build work more like other builds. Add build_tests
target to build FIPS test utilities and build_algvs target to build the
multicall fips_algvs utility.
Dr. Stephen Henson [Wed, 16 May 2012 18:56:33 +0000 (18:56 +0000)]
initial mk1mf cross compilation support
cvs2svn [Wed, 18 Jan 2012 15:07:12 +0000 (15:07 +0000)]
This commit was manufactured by cvs2svn to create branch 'OpenSSL-fips-
2_0-dev'.
Dr. Stephen Henson [Wed, 18 Jan 2012 15:07:11 +0000 (15:07 +0000)]
revert fipslink.pl unlink retry change
Dr. Stephen Henson [Wed, 18 Jan 2012 14:54:20 +0000 (14:54 +0000)]
give a hand old assemblers assembling loop instruction. (original by Andy)
Dr. Stephen Henson [Tue, 3 Jan 2012 19:43:06 +0000 (19:43 +0000)]
typo
Dr. Stephen Henson [Tue, 3 Jan 2012 14:23:54 +0000 (14:23 +0000)]
Prepare RC8
Dr. Stephen Henson [Tue, 3 Jan 2012 14:22:45 +0000 (14:22 +0000)]
unlink target and retry to avoid intermittent Win32 failures
Dr. Stephen Henson [Mon, 12 Dec 2011 14:02:57 +0000 (14:02 +0000)]
set version to rc8-dev
Dr. Stephen Henson [Mon, 12 Dec 2011 13:44:05 +0000 (13:44 +0000)]
Prepare for RC7.
Dr. Stephen Henson [Sat, 10 Dec 2011 18:06:55 +0000 (18:06 +0000)]
Retry rename operation with a slight delay to workaround problems on
some versions of Windows.
Dr. Stephen Henson [Sat, 10 Dec 2011 13:29:23 +0000 (13:29 +0000)]
use different names for asm temp files to avoid problems on some platforms
Dr. Stephen Henson [Thu, 8 Dec 2011 15:14:38 +0000 (15:14 +0000)]
Close file streams in FIPS algorithm test utilities.
Dr. Stephen Henson [Sun, 4 Dec 2011 21:29:08 +0000 (21:29 +0000)]
prepare for RC6
Dr. Stephen Henson [Sun, 4 Dec 2011 15:26:26 +0000 (15:26 +0000)]
For FIPS builds we don't use the normal test files (and in the restricted
tarball some don't exist) so set TEST='' to avoid linking to them. This also
avoids problems on platforms that copy instead of symlink.
Dr. Stephen Henson [Sun, 4 Dec 2011 15:14:13 +0000 (15:14 +0000)]
use BUILD_ONE_CMD for fips specific links otherwise we effectively do 'make links' twice
Dr. Stephen Henson [Sun, 4 Dec 2011 15:11:44 +0000 (15:11 +0000)]
Workaround for VxWorks
Dr. Stephen Henson [Sun, 4 Dec 2011 15:04:20 +0000 (15:04 +0000)]
avoid use of symlinks on Windows: it causes problems on some build environments
Dr. Stephen Henson [Sat, 3 Dec 2011 21:47:48 +0000 (21:47 +0000)]
Fix x86cpuid so it doesn't fail for some (currently theoretical) virtual
machines.
Dr. Stephen Henson [Sat, 3 Dec 2011 21:44:01 +0000 (21:44 +0000)]
Change EVP_MAXCHUNK so it doesn't wraparound to 0 on some platforms (IP32L64).
Dr. Stephen Henson [Sat, 3 Dec 2011 19:51:52 +0000 (19:51 +0000)]
Prepare for RC6.
Dr. Stephen Henson [Sat, 3 Dec 2011 19:41:28 +0000 (19:41 +0000)]
Add tests to ensure ECDSA key gen and DSA signing fails if DRBG
entropy source fails.
Dr. Stephen Henson [Sat, 3 Dec 2011 19:19:34 +0000 (19:19 +0000)]
functions aren't unused: revert
Dr. Stephen Henson [Sat, 3 Dec 2011 18:27:31 +0000 (18:27 +0000)]
remove unused functions from module
Dr. Stephen Henson [Sat, 3 Dec 2011 18:26:26 +0000 (18:26 +0000)]
bn/asm/mips.pl: fix typos [from HEAD], original by Andy
Dr. Stephen Henson [Fri, 25 Nov 2011 16:27:19 +0000 (16:27 +0000)]
prepare for rc5
Dr. Stephen Henson [Fri, 25 Nov 2011 16:03:27 +0000 (16:03 +0000)]
return error if counter exceeds limit and seed value supplied
Dr. Stephen Henson [Fri, 25 Nov 2011 15:00:20 +0000 (15:00 +0000)]
check counter value against 4 * L, not 4096
Dr. Stephen Henson [Mon, 21 Nov 2011 00:05:15 +0000 (00:05 +0000)]
bump version for rc5-dev: hopefully will never be needed...
Dr. Stephen Henson [Sat, 19 Nov 2011 17:04:28 +0000 (17:04 +0000)]
prepare for rc4
Dr. Stephen Henson [Sat, 19 Nov 2011 17:03:44 +0000 (17:03 +0000)]
Add flag to support cofactor ECDH
Dr. Stephen Henson [Fri, 18 Nov 2011 21:59:36 +0000 (21:59 +0000)]
bump version to rc4-dev
Dr. Stephen Henson [Fri, 18 Nov 2011 18:50:57 +0000 (18:50 +0000)]
prepare for RC3
Dr. Stephen Henson [Wed, 16 Nov 2011 13:28:11 +0000 (13:28 +0000)]
In EC_KEY_set_public_key_affine_coordinates include explicit check to see passed components do not exceed field order
Dr. Stephen Henson [Fri, 11 Nov 2011 19:01:11 +0000 (19:01 +0000)]
portability fix for some perl versions
Dr. Stephen Henson [Wed, 9 Nov 2011 14:23:17 +0000 (14:23 +0000)]
fclose streams in fips_drbvs.c
Produced error message for unsupported curves in fips_ecdhvs.c
Dr. Stephen Henson [Tue, 8 Nov 2011 19:08:40 +0000 (19:08 +0000)]
Prepare for RC3 (which may never happen).
Andy Polyakov [Tue, 8 Nov 2011 14:44:55 +0000 (14:44 +0000)]
Platform update from HEAD.
Dr. Stephen Henson [Mon, 7 Nov 2011 13:54:30 +0000 (13:54 +0000)]
add fips_algvs.c to restricted tarball
Dr. Stephen Henson [Mon, 7 Nov 2011 13:18:12 +0000 (13:18 +0000)]
Prepare for RC2
Dr. Stephen Henson [Mon, 7 Nov 2011 13:16:55 +0000 (13:16 +0000)]
MacOS and iOS support
Andy Polyakov [Mon, 7 Nov 2011 00:22:59 +0000 (00:22 +0000)]
fipsld, incore: switch to new cross-compile support [from HEAD].
Andy Polyakov [Sun, 6 Nov 2011 19:49:58 +0000 (19:49 +0000)]
e_aes.c: fold aesni_xts_cipher and [most importantly] fix aes_xts_cipher's
return value after custom flag was rightly reverted [from HEAD].
Dr. Stephen Henson [Sun, 6 Nov 2011 13:08:54 +0000 (13:08 +0000)]
check for unset entropy and nonce callbacks
Dr. Stephen Henson [Sun, 6 Nov 2011 12:52:27 +0000 (12:52 +0000)]
Update fips_test_suite to take multiple command line options and
an induced error checking function.
Dr. Stephen Henson [Sat, 5 Nov 2011 18:25:16 +0000 (18:25 +0000)]
typo
Dr. Stephen Henson [Sat, 5 Nov 2011 18:15:01 +0000 (18:15 +0000)]
make post failure simulation reversible in all cases
Dr. Stephen Henson [Sat, 5 Nov 2011 18:11:16 +0000 (18:11 +0000)]
typo: use key for POST callback
Dr. Stephen Henson [Sat, 5 Nov 2011 18:04:50 +0000 (18:04 +0000)]
fix set but unused warnings
Andy Polyakov [Sat, 5 Nov 2011 13:57:02 +0000 (13:57 +0000)]
armv4cpuid.S, armv4-gf2m.pl: make newest code compilable by older assembler [from HEAD].
Andy Polyakov [Sat, 5 Nov 2011 13:56:10 +0000 (13:56 +0000)]
x86cpuid.pl: don't punish "last-year" OSes on "this-year" CPUs [from HEAD].
PR: 2633
Andy Polyakov [Sat, 5 Nov 2011 13:55:20 +0000 (13:55 +0000)]
ppc.pl: fix bug in bn_mul_comba4 [from HEAD].
PR: 2636
Submitted by: Charles Bryant
Dr. Stephen Henson [Sat, 5 Nov 2011 01:32:52 +0000 (01:32 +0000)]
Add single call public key sign and verify functions.
Dr. Stephen Henson [Wed, 2 Nov 2011 19:16:43 +0000 (19:16 +0000)]
Add support for memory leak checking in fips_algvs.
Fix many memory leaks in algorithm test utilities.
Dr. Stephen Henson [Wed, 2 Nov 2011 16:35:24 +0000 (16:35 +0000)]
Remove duplicate test from health check. Fix memory leaks by uninstantiating
DRBG before reinitialising it.
Dr. Stephen Henson [Wed, 2 Nov 2011 00:43:45 +0000 (00:43 +0000)]
Print out an error for "make test" in FIPS builds.
Dr. Stephen Henson [Wed, 2 Nov 2011 00:07:15 +0000 (00:07 +0000)]
Replace exit calls with return in fips_test_suite
Dr. Stephen Henson [Tue, 1 Nov 2011 13:45:30 +0000 (13:45 +0000)]
Add support for multicall fips_algvs utility combining functionality
of all fips test utilities in a single binary and some minimal script
parsing for platforms lacking a suitable shell.
In order to keep changes to the build system to a minimum it #includes all
the utilities C source files (yuck).
Dr. Stephen Henson [Wed, 26 Oct 2011 16:46:20 +0000 (16:46 +0000)]
PR: 2632
Submitted by: emmanuel.azencot@bull.net
Reviewed by: steve
Return -1 immediately if not affine coordinates as BN_CTX has not been
set up.
Dr. Stephen Henson [Mon, 24 Oct 2011 16:58:49 +0000 (16:58 +0000)]
Prepare for RC2.
Dr. Stephen Henson [Mon, 24 Oct 2011 16:53:59 +0000 (16:53 +0000)]
prepare for RC1
Dr. Stephen Henson [Mon, 24 Oct 2011 13:24:28 +0000 (13:24 +0000)]
typo
cvs2svn [Mon, 24 Oct 2011 06:00:07 +0000 (06:00 +0000)]
This commit was manufactured by cvs2svn to create branch 'OpenSSL-fips-
2_0-stable'.
Andy Polyakov [Mon, 24 Oct 2011 06:00:06 +0000 (06:00 +0000)]
e_aes.c: fold even aesni_ccm_cipher.
Andy Polyakov [Sun, 23 Oct 2011 22:58:40 +0000 (22:58 +0000)]
e_aes.c: prevent potential DoS in aes_gcm_tls_cipher.
Andy Polyakov [Sun, 23 Oct 2011 19:41:00 +0000 (19:41 +0000)]
cryptlib.c: remove stdio dependency in Windows fipscanister.lib.
Dr. Stephen Henson [Sun, 23 Oct 2011 17:06:28 +0000 (17:06 +0000)]
No need for custom flag in XTS mode: block length is 1.
Andy Polyakov [Sun, 23 Oct 2011 15:17:30 +0000 (15:17 +0000)]
fips_canister.c: harmonize fingerprinting for all Windows, CE or not.
Andy Polyakov [Sun, 23 Oct 2011 15:12:37 +0000 (15:12 +0000)]
config: in cross-compile case interrogate cross-compiler, not host, work
around sub-shell limitation.