oweals/openssl.git
12 years agoDon't install fips_standalone_sha1.exe if it isn't being built
Dr. Stephen Henson [Wed, 23 May 2012 00:39:01 +0000 (00:39 +0000)]
Don't install fips_standalone_sha1.exe if it isn't being built

12 years agoChanges needed to support WinCE compilation:
Dr. Stephen Henson [Tue, 22 May 2012 23:57:22 +0000 (23:57 +0000)]
Changes needed to support WinCE compilation:

Don't try to raise SIGABRT if not defined.
Return from fips_dhvs.c main instead of calling exit.
Workaround for lack of GetSystemFileAsFileTime.
Disable optimisation for part of bn_nist.c to avoid compiler bug.
Remove /WX flag so we don't exist on warnings.

12 years agocross compile target support for do_fips script
Dr. Stephen Henson [Fri, 18 May 2012 15:55:40 +0000 (15:55 +0000)]
cross compile target support for do_fips script

12 years agodon't insert time in response files: it breaks some systems and we shouldn't be doing...
Dr. Stephen Henson [Fri, 18 May 2012 15:05:33 +0000 (15:05 +0000)]
don't insert time in response files: it breaks some systems and we shouldn't be doing this anyway

12 years agoMake Windows FIPS build work more like other builds. Add build_tests
Dr. Stephen Henson [Thu, 17 May 2012 11:09:46 +0000 (11:09 +0000)]
Make Windows FIPS build work more like other builds. Add build_tests
target to build FIPS test utilities and build_algvs target to build the
multicall fips_algvs utility.

12 years agoinitial mk1mf cross compilation support
Dr. Stephen Henson [Wed, 16 May 2012 18:56:33 +0000 (18:56 +0000)]
initial mk1mf cross compilation support

12 years agoThis commit was manufactured by cvs2svn to create branch 'OpenSSL-fips-
cvs2svn [Wed, 18 Jan 2012 15:07:12 +0000 (15:07 +0000)]
This commit was manufactured by cvs2svn to create branch 'OpenSSL-fips-
2_0-dev'.

12 years agorevert fipslink.pl unlink retry change OpenSSL-fips-2_0 OpenSSL-fips-2_0-rc9
Dr. Stephen Henson [Wed, 18 Jan 2012 15:07:11 +0000 (15:07 +0000)]
revert fipslink.pl unlink retry change

12 years agogive a hand old assemblers assembling loop instruction. (original by Andy)
Dr. Stephen Henson [Wed, 18 Jan 2012 14:54:20 +0000 (14:54 +0000)]
give a hand old assemblers assembling loop instruction. (original by Andy)

12 years agotypo OpenSSL-fips-2_0-rc8
Dr. Stephen Henson [Tue, 3 Jan 2012 19:43:06 +0000 (19:43 +0000)]
typo

12 years agoPrepare RC8
Dr. Stephen Henson [Tue, 3 Jan 2012 14:23:54 +0000 (14:23 +0000)]
Prepare RC8

12 years agounlink target and retry to avoid intermittent Win32 failures
Dr. Stephen Henson [Tue, 3 Jan 2012 14:22:45 +0000 (14:22 +0000)]
unlink target and retry to avoid intermittent Win32 failures

12 years agoset version to rc8-dev
Dr. Stephen Henson [Mon, 12 Dec 2011 14:02:57 +0000 (14:02 +0000)]
set version to rc8-dev

12 years agoPrepare for RC7. OpenSSL-fips-2_0-rc7
Dr. Stephen Henson [Mon, 12 Dec 2011 13:44:05 +0000 (13:44 +0000)]
Prepare for RC7.

12 years agoRetry rename operation with a slight delay to workaround problems on
Dr. Stephen Henson [Sat, 10 Dec 2011 18:06:55 +0000 (18:06 +0000)]
Retry rename operation with a slight delay to workaround problems on
some versions of Windows.

12 years agouse different names for asm temp files to avoid problems on some platforms
Dr. Stephen Henson [Sat, 10 Dec 2011 13:29:23 +0000 (13:29 +0000)]
use different names for asm temp files to avoid problems on some platforms

12 years agoClose file streams in FIPS algorithm test utilities.
Dr. Stephen Henson [Thu, 8 Dec 2011 15:14:38 +0000 (15:14 +0000)]
Close file streams in FIPS algorithm test utilities.

12 years agoprepare for RC6 OpenSSL-fips-2_0-rc6
Dr. Stephen Henson [Sun, 4 Dec 2011 21:29:08 +0000 (21:29 +0000)]
prepare for RC6

12 years agoFor FIPS builds we don't use the normal test files (and in the restricted
Dr. Stephen Henson [Sun, 4 Dec 2011 15:26:26 +0000 (15:26 +0000)]
For FIPS builds we don't use the normal test files (and in the restricted
tarball some don't exist) so set TEST='' to avoid linking to them. This also
avoids problems on platforms that copy instead of symlink.

12 years agouse BUILD_ONE_CMD for fips specific links otherwise we effectively do 'make links...
Dr. Stephen Henson [Sun, 4 Dec 2011 15:14:13 +0000 (15:14 +0000)]
use BUILD_ONE_CMD for fips specific links otherwise we effectively do 'make links' twice

12 years agoWorkaround for VxWorks
Dr. Stephen Henson [Sun, 4 Dec 2011 15:11:44 +0000 (15:11 +0000)]
Workaround for VxWorks

12 years agoavoid use of symlinks on Windows: it causes problems on some build environments
Dr. Stephen Henson [Sun, 4 Dec 2011 15:04:20 +0000 (15:04 +0000)]
avoid use of symlinks on Windows: it causes problems on some build environments

12 years agoFix x86cpuid so it doesn't fail for some (currently theoretical) virtual
Dr. Stephen Henson [Sat, 3 Dec 2011 21:47:48 +0000 (21:47 +0000)]
Fix x86cpuid so it doesn't fail for some (currently theoretical) virtual
machines.

12 years agoChange EVP_MAXCHUNK so it doesn't wraparound to 0 on some platforms (IP32L64).
Dr. Stephen Henson [Sat, 3 Dec 2011 21:44:01 +0000 (21:44 +0000)]
Change EVP_MAXCHUNK so it doesn't wraparound to 0 on some platforms (IP32L64).

12 years agoPrepare for RC6.
Dr. Stephen Henson [Sat, 3 Dec 2011 19:51:52 +0000 (19:51 +0000)]
Prepare for RC6.

12 years agoAdd tests to ensure ECDSA key gen and DSA signing fails if DRBG
Dr. Stephen Henson [Sat, 3 Dec 2011 19:41:28 +0000 (19:41 +0000)]
Add tests to ensure ECDSA key gen and DSA signing fails if DRBG
entropy source fails.

12 years agofunctions aren't unused: revert
Dr. Stephen Henson [Sat, 3 Dec 2011 19:19:34 +0000 (19:19 +0000)]
functions aren't unused: revert

12 years agoremove unused functions from module
Dr. Stephen Henson [Sat, 3 Dec 2011 18:27:31 +0000 (18:27 +0000)]
remove unused functions from module

12 years agobn/asm/mips.pl: fix typos [from HEAD], original by Andy
Dr. Stephen Henson [Sat, 3 Dec 2011 18:26:26 +0000 (18:26 +0000)]
bn/asm/mips.pl: fix typos [from HEAD], original by Andy

13 years agoprepare for rc5 OpenSSL-fips-2_0-rc5
Dr. Stephen Henson [Fri, 25 Nov 2011 16:27:19 +0000 (16:27 +0000)]
prepare for rc5

13 years agoreturn error if counter exceeds limit and seed value supplied
Dr. Stephen Henson [Fri, 25 Nov 2011 16:03:27 +0000 (16:03 +0000)]
return error if counter exceeds limit and seed value supplied

13 years agocheck counter value against 4 * L, not 4096
Dr. Stephen Henson [Fri, 25 Nov 2011 15:00:20 +0000 (15:00 +0000)]
check counter value against 4 * L, not 4096

13 years agobump version for rc5-dev: hopefully will never be needed...
Dr. Stephen Henson [Mon, 21 Nov 2011 00:05:15 +0000 (00:05 +0000)]
bump version for rc5-dev: hopefully will never be needed...

13 years agoprepare for rc4 OpenSSL-fips-2_0-rc4
Dr. Stephen Henson [Sat, 19 Nov 2011 17:04:28 +0000 (17:04 +0000)]
prepare for rc4

13 years agoAdd flag to support cofactor ECDH
Dr. Stephen Henson [Sat, 19 Nov 2011 17:03:44 +0000 (17:03 +0000)]
Add flag to support cofactor ECDH

13 years agobump version to rc4-dev
Dr. Stephen Henson [Fri, 18 Nov 2011 21:59:36 +0000 (21:59 +0000)]
bump version to rc4-dev

13 years agoprepare for RC3 OpenSSL-fips-2_0-rc3
Dr. Stephen Henson [Fri, 18 Nov 2011 18:50:57 +0000 (18:50 +0000)]
prepare for RC3

13 years agoIn EC_KEY_set_public_key_affine_coordinates include explicit check to see passed...
Dr. Stephen Henson [Wed, 16 Nov 2011 13:28:11 +0000 (13:28 +0000)]
In EC_KEY_set_public_key_affine_coordinates include explicit check to see passed components do not exceed field order

13 years agoportability fix for some perl versions
Dr. Stephen Henson [Fri, 11 Nov 2011 19:01:11 +0000 (19:01 +0000)]
portability fix for some perl versions

13 years agofclose streams in fips_drbvs.c OpenSSL-fips-2_0-rc2
Dr. Stephen Henson [Wed, 9 Nov 2011 14:23:17 +0000 (14:23 +0000)]
fclose streams in fips_drbvs.c

Produced error message for unsupported curves in fips_ecdhvs.c

13 years agoPrepare for RC3 (which may never happen).
Dr. Stephen Henson [Tue, 8 Nov 2011 19:08:40 +0000 (19:08 +0000)]
Prepare for RC3 (which may never happen).

13 years agoPlatform update from HEAD.
Andy Polyakov [Tue, 8 Nov 2011 14:44:55 +0000 (14:44 +0000)]
Platform update from HEAD.

13 years agoadd fips_algvs.c to restricted tarball
Dr. Stephen Henson [Mon, 7 Nov 2011 13:54:30 +0000 (13:54 +0000)]
add fips_algvs.c to restricted tarball

13 years agoPrepare for RC2
Dr. Stephen Henson [Mon, 7 Nov 2011 13:18:12 +0000 (13:18 +0000)]
Prepare for RC2

13 years agoMacOS and iOS support
Dr. Stephen Henson [Mon, 7 Nov 2011 13:16:55 +0000 (13:16 +0000)]
MacOS and iOS support

13 years agofipsld, incore: switch to new cross-compile support [from HEAD].
Andy Polyakov [Mon, 7 Nov 2011 00:22:59 +0000 (00:22 +0000)]
fipsld, incore: switch to new cross-compile support [from HEAD].

13 years agoe_aes.c: fold aesni_xts_cipher and [most importantly] fix aes_xts_cipher's
Andy Polyakov [Sun, 6 Nov 2011 19:49:58 +0000 (19:49 +0000)]
e_aes.c: fold aesni_xts_cipher and [most importantly] fix aes_xts_cipher's
return value after custom flag was rightly reverted [from HEAD].

13 years agocheck for unset entropy and nonce callbacks
Dr. Stephen Henson [Sun, 6 Nov 2011 13:08:54 +0000 (13:08 +0000)]
check for unset entropy and nonce callbacks

13 years agoUpdate fips_test_suite to take multiple command line options and
Dr. Stephen Henson [Sun, 6 Nov 2011 12:52:27 +0000 (12:52 +0000)]
Update fips_test_suite to take multiple command line options and
an induced error checking function.

13 years agotypo
Dr. Stephen Henson [Sat, 5 Nov 2011 18:25:16 +0000 (18:25 +0000)]
typo

13 years agomake post failure simulation reversible in all cases
Dr. Stephen Henson [Sat, 5 Nov 2011 18:15:01 +0000 (18:15 +0000)]
make post failure simulation reversible in all cases

13 years agotypo: use key for POST callback
Dr. Stephen Henson [Sat, 5 Nov 2011 18:11:16 +0000 (18:11 +0000)]
typo: use key for POST callback

13 years agofix set but unused warnings
Dr. Stephen Henson [Sat, 5 Nov 2011 18:04:50 +0000 (18:04 +0000)]
fix set but unused warnings

13 years agoarmv4cpuid.S, armv4-gf2m.pl: make newest code compilable by older assembler [from...
Andy Polyakov [Sat, 5 Nov 2011 13:57:02 +0000 (13:57 +0000)]
armv4cpuid.S, armv4-gf2m.pl: make newest code compilable by older assembler [from HEAD].

13 years agox86cpuid.pl: don't punish "last-year" OSes on "this-year" CPUs [from HEAD].
Andy Polyakov [Sat, 5 Nov 2011 13:56:10 +0000 (13:56 +0000)]
x86cpuid.pl: don't punish "last-year" OSes on "this-year" CPUs [from HEAD].
PR: 2633

13 years agoppc.pl: fix bug in bn_mul_comba4 [from HEAD].
Andy Polyakov [Sat, 5 Nov 2011 13:55:20 +0000 (13:55 +0000)]
ppc.pl: fix bug in bn_mul_comba4 [from HEAD].
PR: 2636
Submitted by: Charles Bryant

13 years agoAdd single call public key sign and verify functions.
Dr. Stephen Henson [Sat, 5 Nov 2011 01:32:52 +0000 (01:32 +0000)]
Add single call public key sign and verify functions.

13 years agoAdd support for memory leak checking in fips_algvs.
Dr. Stephen Henson [Wed, 2 Nov 2011 19:16:43 +0000 (19:16 +0000)]
Add support for memory leak checking in fips_algvs.

Fix many memory leaks in algorithm test utilities.

13 years agoRemove duplicate test from health check. Fix memory leaks by uninstantiating
Dr. Stephen Henson [Wed, 2 Nov 2011 16:35:24 +0000 (16:35 +0000)]
Remove duplicate test from health check. Fix memory leaks by uninstantiating
DRBG before reinitialising it.

13 years agoPrint out an error for "make test" in FIPS builds.
Dr. Stephen Henson [Wed, 2 Nov 2011 00:43:45 +0000 (00:43 +0000)]
Print out an error for "make test" in FIPS builds.

13 years agoReplace exit calls with return in fips_test_suite
Dr. Stephen Henson [Wed, 2 Nov 2011 00:07:15 +0000 (00:07 +0000)]
Replace exit calls with return in fips_test_suite

13 years agoAdd support for multicall fips_algvs utility combining functionality
Dr. Stephen Henson [Tue, 1 Nov 2011 13:45:30 +0000 (13:45 +0000)]
Add support for multicall fips_algvs utility combining functionality
of all fips test utilities in a single binary and some minimal script
parsing for platforms lacking a suitable shell.

In order to keep changes to the build system to a minimum it #includes all
the utilities C source files (yuck).

13 years agoPR: 2632
Dr. Stephen Henson [Wed, 26 Oct 2011 16:46:20 +0000 (16:46 +0000)]
PR: 2632
Submitted by: emmanuel.azencot@bull.net
Reviewed by: steve

Return -1 immediately if not affine coordinates as BN_CTX has not been
set up.

13 years agoPrepare for RC2.
Dr. Stephen Henson [Mon, 24 Oct 2011 16:58:49 +0000 (16:58 +0000)]
Prepare for RC2.

13 years agoprepare for RC1
Dr. Stephen Henson [Mon, 24 Oct 2011 16:53:59 +0000 (16:53 +0000)]
prepare for RC1

13 years agotypo
Dr. Stephen Henson [Mon, 24 Oct 2011 13:24:28 +0000 (13:24 +0000)]
typo

13 years agoThis commit was manufactured by cvs2svn to create branch 'OpenSSL-fips-
cvs2svn [Mon, 24 Oct 2011 06:00:07 +0000 (06:00 +0000)]
This commit was manufactured by cvs2svn to create branch 'OpenSSL-fips-
2_0-stable'.

13 years agoe_aes.c: fold even aesni_ccm_cipher.
Andy Polyakov [Mon, 24 Oct 2011 06:00:06 +0000 (06:00 +0000)]
e_aes.c: fold even aesni_ccm_cipher.

13 years agoe_aes.c: prevent potential DoS in aes_gcm_tls_cipher.
Andy Polyakov [Sun, 23 Oct 2011 22:58:40 +0000 (22:58 +0000)]
e_aes.c: prevent potential DoS in aes_gcm_tls_cipher.

13 years agocryptlib.c: remove stdio dependency in Windows fipscanister.lib.
Andy Polyakov [Sun, 23 Oct 2011 19:41:00 +0000 (19:41 +0000)]
cryptlib.c: remove stdio dependency in Windows fipscanister.lib.

13 years agoNo need for custom flag in XTS mode: block length is 1.
Dr. Stephen Henson [Sun, 23 Oct 2011 17:06:28 +0000 (17:06 +0000)]
No need for custom flag in XTS mode: block length is 1.

13 years agofips_canister.c: harmonize fingerprinting for all Windows, CE or not.
Andy Polyakov [Sun, 23 Oct 2011 15:17:30 +0000 (15:17 +0000)]
fips_canister.c: harmonize fingerprinting for all Windows, CE or not.

13 years agoconfig: in cross-compile case interrogate cross-compiler, not host, work
Andy Polyakov [Sun, 23 Oct 2011 15:12:37 +0000 (15:12 +0000)]
config: in cross-compile case interrogate cross-compiler, not host, work
around sub-shell limitation.

13 years agoCheck for selftest failure in various places.
Dr. Stephen Henson [Sat, 22 Oct 2011 17:24:27 +0000 (17:24 +0000)]
Check for selftest failure in various places.

13 years agox86gas.pl: relax .init segment alignment.
Andy Polyakov [Sat, 22 Oct 2011 10:49:52 +0000 (10:49 +0000)]
x86gas.pl: relax .init segment alignment.

13 years agomk1mk.pl: cleanup engines' handling and make fips build work on WIN64I.
Andy Polyakov [Fri, 21 Oct 2011 19:34:48 +0000 (19:34 +0000)]
mk1mk.pl: cleanup engines' handling and make fips build work on WIN64I.

13 years agoUpdate error codes.
Dr. Stephen Henson [Fri, 21 Oct 2011 11:46:16 +0000 (11:46 +0000)]
Update error codes.

13 years agofips.c: remove preprocessor artefact.
Andy Polyakov [Fri, 21 Oct 2011 06:03:45 +0000 (06:03 +0000)]
fips.c: remove preprocessor artefact.

13 years agofix (?) AVX clearing
Dr. Stephen Henson [Fri, 21 Oct 2011 01:57:37 +0000 (01:57 +0000)]
fix (?) AVX clearing

13 years agoCheck for uninitialised DRBG_CTX and don't free up default DRBG_CTX.
Dr. Stephen Henson [Fri, 21 Oct 2011 00:12:53 +0000 (00:12 +0000)]
Check for uninitialised DRBG_CTX and don't free up default DRBG_CTX.

13 years agofips.c: x86[_64] capability masking.
Andy Polyakov [Thu, 20 Oct 2011 21:03:09 +0000 (21:03 +0000)]
fips.c: x86[_64] capability masking.

13 years agoarmcap.c: auto-setup processor capability vector.
Andy Polyakov [Thu, 20 Oct 2011 20:52:26 +0000 (20:52 +0000)]
armcap.c: auto-setup processor capability vector.

13 years agoFix error codes.
Dr. Stephen Henson [Thu, 20 Oct 2011 13:56:01 +0000 (13:56 +0000)]
Fix error codes.

13 years agofips/fips_[canister|premain].c: make it work with VC6 and add sentinels
Andy Polyakov [Thu, 20 Oct 2011 12:09:13 +0000 (12:09 +0000)]
fips/fips_[canister|premain].c: make it work with VC6 and add sentinels
even to code segments.

13 years agosha1-mips.pl: fix typo.
Andy Polyakov [Thu, 20 Oct 2011 08:39:29 +0000 (08:39 +0000)]
sha1-mips.pl: fix typo.

13 years agoDrain unused MacOS directory.
Andy Polyakov [Thu, 20 Oct 2011 08:28:06 +0000 (08:28 +0000)]
Drain unused MacOS directory.

13 years agoAdd "nopass" for empty password too.
Dr. Stephen Henson [Wed, 19 Oct 2011 23:23:35 +0000 (23:23 +0000)]
Add "nopass" for empty password too.

13 years agoadd authentication parameter to FIPS_module_mode_set
Dr. Stephen Henson [Wed, 19 Oct 2011 22:34:53 +0000 (22:34 +0000)]
add authentication parameter to FIPS_module_mode_set

13 years agovxworks-mips: unify and add assembler.
Andy Polyakov [Wed, 19 Oct 2011 21:49:20 +0000 (21:49 +0000)]
vxworks-mips: unify and add assembler.

13 years agoRemove superseded MIPS assembler modules.
Andy Polyakov [Wed, 19 Oct 2011 21:42:21 +0000 (21:42 +0000)]
Remove superseded MIPS assembler modules.

13 years agofips_canister.c: more cross-compiler platfroms verified.
Andy Polyakov [Wed, 19 Oct 2011 21:05:53 +0000 (21:05 +0000)]
fips_canister.c: more cross-compiler platfroms verified.

13 years agoarm_arch.h: add missing pre-defined macro, __ARM_ARCH_5TEJ__.
Andy Polyakov [Wed, 19 Oct 2011 18:57:03 +0000 (18:57 +0000)]
arm_arch.h: add missing pre-defined macro, __ARM_ARCH_5TEJ__.

13 years ago"make update" (partial)
Bodo Möller [Wed, 19 Oct 2011 15:29:14 +0000 (15:29 +0000)]
"make update" (partial)

13 years agoBN_BLINDING multi-threading fix.
Bodo Möller [Wed, 19 Oct 2011 14:59:27 +0000 (14:59 +0000)]
BN_BLINDING multi-threading fix.

Submitted by: Emilia Kasper (Google)

13 years agoTypo (?)
Dr. Stephen Henson [Wed, 19 Oct 2011 12:05:08 +0000 (12:05 +0000)]
Typo (?)

13 years agoBuild fipscanister.o only by default. Utility build now needs
Dr. Stephen Henson [Wed, 19 Oct 2011 11:47:21 +0000 (11:47 +0000)]
Build fipscanister.o only by default. Utility build now needs
make build_tests

13 years agoRecognise new option.
Dr. Stephen Henson [Wed, 19 Oct 2011 11:44:25 +0000 (11:44 +0000)]
Recognise new option.

13 years agoFix indentation
Bodo Möller [Wed, 19 Oct 2011 09:24:22 +0000 (09:24 +0000)]
Fix indentation

13 years agoFix warnings.
Bodo Möller [Wed, 19 Oct 2011 08:59:53 +0000 (08:59 +0000)]
Fix warnings.
Also, use the common Configure mechanism for enabling/disabling the 64-bit ECC code.

13 years agoUpdate premain fingerprint.
Dr. Stephen Henson [Tue, 18 Oct 2011 22:11:11 +0000 (22:11 +0000)]
Update premain fingerprint.