oweals/openssl.git
13 years agox86_64-mont5.pl: add missing Win64 support.
Andy Polyakov [Sun, 14 Aug 2011 09:06:06 +0000 (09:06 +0000)]
x86_64-mont5.pl: add missing Win64 support.

13 years agoeng_rdrand.c: make it link in './config 386' case.
Andy Polyakov [Sun, 14 Aug 2011 08:30:56 +0000 (08:30 +0000)]
eng_rdrand.c: make it link in './config 386' case.

13 years agoarmv4-mont.pl: profiler-assisted optimization gives 8%-14% improvement
Andy Polyakov [Sat, 13 Aug 2011 12:38:41 +0000 (12:38 +0000)]
armv4-mont.pl: profiler-assisted optimization gives 8%-14% improvement
(more for longer keys) on RSA/DSA.

13 years agoSPARC assembler pack: fix FIPS linking errors.
Andy Polyakov [Fri, 12 Aug 2011 21:38:19 +0000 (21:38 +0000)]
SPARC assembler pack: fix FIPS linking errors.

13 years agox86_64-xlate.pl: fix movzw.
Andy Polyakov [Fri, 12 Aug 2011 21:24:19 +0000 (21:24 +0000)]
x86_64-xlate.pl: fix movzw.

13 years agoThis commit completes recent modular exponentiation optimizations on
Andy Polyakov [Fri, 12 Aug 2011 16:44:32 +0000 (16:44 +0000)]
This commit completes recent modular exponentiation optimizations on
x86_64 platform. It targets specifically RSA1024 sign (using ideas
from http://eprint.iacr.org/2011/239) and adds more than 10% on most
platforms. Overall performance improvement relative to 1.0.0 is ~40%
in average, with best result of 54% on Westmere. Incidentally ~40%
is average improvement even for longer key lengths.

13 years agoalphacpuid.pl: fix alignment bug.
Andy Polyakov [Fri, 12 Aug 2011 12:28:52 +0000 (12:28 +0000)]
alphacpuid.pl: fix alignment bug.
alpha-mont.pl: fix typo.
PR: 2577

13 years agoaesni TLS GCM support
Dr. Stephen Henson [Thu, 11 Aug 2011 23:06:19 +0000 (23:06 +0000)]
aesni TLS GCM support

13 years agoprevent compilation errors and warnings
Dr. Stephen Henson [Thu, 11 Aug 2011 21:12:17 +0000 (21:12 +0000)]
prevent compilation errors and warnings

13 years agoInclude armcap.c in fips tarball.
Dr. Stephen Henson [Thu, 11 Aug 2011 17:30:07 +0000 (17:30 +0000)]
Include armcap.c in fips tarball.

13 years agoRemove redundant assignment.
Dr. Stephen Henson [Thu, 11 Aug 2011 13:22:04 +0000 (13:22 +0000)]
Remove redundant assignment.

13 years agoAdd provisory support for RDRAND instruction.
Andy Polyakov [Wed, 10 Aug 2011 18:52:42 +0000 (18:52 +0000)]
Add provisory support for RDRAND instruction.

13 years agox86_64-mont.pl: futher optimization resulting in up to 48% improvement
Andy Polyakov [Tue, 9 Aug 2011 13:05:05 +0000 (13:05 +0000)]
x86_64-mont.pl: futher optimization resulting in up to 48% improvement
(4096-bit RSA sign benchmark on Core2) in comparison to initial version
from 2005.

13 years agoAdd HMAC DRBG from SP800-90
Dr. Stephen Henson [Mon, 8 Aug 2011 22:07:38 +0000 (22:07 +0000)]
Add HMAC DRBG from SP800-90

13 years agoUse "resp" for default directory name for .rsp files.
Dr. Stephen Henson [Mon, 8 Aug 2011 18:06:40 +0000 (18:06 +0000)]
Use "resp" for default directory name for .rsp files.

13 years agoFix DSA to skip EOL test when parsing mod line.
Dr. Stephen Henson [Mon, 8 Aug 2011 14:47:51 +0000 (14:47 +0000)]
Fix DSA to skip EOL test when parsing mod line.

13 years agoInitial support for tests for 2.0 module. Not complete and not all working
Dr. Stephen Henson [Mon, 8 Aug 2011 14:47:04 +0000 (14:47 +0000)]
Initial support for tests for 2.0 module. Not complete and not all working
yet.

Allow test type to be determined by a regexp on the pathname. So tests like:

DSA/SigVer, DSA2/SigVer, ECDSA/SigVer, ECDSA2/SigVer can all be
distinguished.

13 years agoaes/asm/aesni-*.pl: fix CCM and further optimize it.
Andy Polyakov [Sun, 7 Aug 2011 17:47:56 +0000 (17:47 +0000)]
aes/asm/aesni-*.pl: fix CCM and further optimize it.
modes/ccm128.c: minor branch optimization.

13 years agofix memory leak
Dr. Stephen Henson [Wed, 3 Aug 2011 16:39:58 +0000 (16:39 +0000)]
fix memory leak

13 years agoExpand range of ctrls for AES GCM to support retrieval and setting of
Dr. Stephen Henson [Wed, 3 Aug 2011 15:37:22 +0000 (15:37 +0000)]
Expand range of ctrls for AES GCM to support retrieval and setting of
invocation field.

Add complete support for AES GCM ciphersuites including all those in
RFC5288 and RFC5289.

13 years agorecognise ecdsaWithSHA1 OID
Dr. Stephen Henson [Thu, 28 Jul 2011 14:40:01 +0000 (14:40 +0000)]
recognise ecdsaWithSHA1 OID

13 years agoFix warnings.
Dr. Stephen Henson [Mon, 25 Jul 2011 21:58:11 +0000 (21:58 +0000)]
Fix warnings.

13 years agoUpdate CHANGES.
Dr. Stephen Henson [Mon, 25 Jul 2011 21:43:57 +0000 (21:43 +0000)]
Update CHANGES.

13 years agooops, remove debug option
Dr. Stephen Henson [Mon, 25 Jul 2011 21:38:41 +0000 (21:38 +0000)]
oops, remove debug option

13 years agoAdd HMAC ECC ciphersuites from RFC5289. Include SHA384 PRF support and
Dr. Stephen Henson [Mon, 25 Jul 2011 20:41:32 +0000 (20:41 +0000)]
Add HMAC ECC ciphersuites from RFC5289. Include SHA384 PRF support and
prohibit use of these ciphersuites for TLS < 1.2

13 years agocryptlib.c: OPENSSL_ia32cap environment variable to interpret ~ as cpuid mask.
Andy Polyakov [Sat, 23 Jul 2011 12:10:26 +0000 (12:10 +0000)]
cryptlib.c: OPENSSL_ia32cap environment variable to interpret ~ as cpuid mask.

13 years agoMore symbol renaming.
Dr. Stephen Henson [Fri, 22 Jul 2011 14:29:27 +0000 (14:29 +0000)]
More symbol renaming.

13 years agoMake sure OPENSSL_FIPSCANISTER is visible to ARM assembly language files.
Dr. Stephen Henson [Fri, 22 Jul 2011 14:20:50 +0000 (14:20 +0000)]
Make sure OPENSSL_FIPSCANISTER is visible to ARM assembly language files.

13 years agoutil/incore: fix brown-bag bug.
Andy Polyakov [Fri, 22 Jul 2011 10:24:40 +0000 (10:24 +0000)]
util/incore: fix brown-bag bug.

13 years agoutil/incore: make transition smoother.
Andy Polyakov [Fri, 22 Jul 2011 10:13:52 +0000 (10:13 +0000)]
util/incore: make transition smoother.

13 years agofips_canister.c: add support for embedded ppc linux.
Andy Polyakov [Fri, 22 Jul 2011 09:42:11 +0000 (09:42 +0000)]
fips_canister.c: add support for embedded ppc linux.

13 years agostop warnings
Dr. Stephen Henson [Thu, 21 Jul 2011 13:45:06 +0000 (13:45 +0000)]
stop warnings

13 years agoRename another symbol.
Dr. Stephen Henson [Thu, 21 Jul 2011 13:43:19 +0000 (13:43 +0000)]
Rename another symbol.

13 years agoaes-ppc.pl: minor optimization favoring embedded processors (performance
Andy Polyakov [Wed, 20 Jul 2011 22:16:27 +0000 (22:16 +0000)]
aes-ppc.pl: minor optimization favoring embedded processors (performance
of "big" processors is unaffected).

13 years agoAdd RSAX builtin engine. It optimizes RSA1024 sign benchmark.
Andy Polyakov [Wed, 20 Jul 2011 21:49:46 +0000 (21:49 +0000)]
Add RSAX builtin engine. It optimizes RSA1024 sign benchmark.

13 years agoPR: 2559
Dr. Stephen Henson [Wed, 20 Jul 2011 15:22:11 +0000 (15:22 +0000)]
PR: 2559
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS socket error bug

13 years agoPR: 2555
Dr. Stephen Henson [Wed, 20 Jul 2011 15:17:51 +0000 (15:17 +0000)]
PR: 2555
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS sequence number bug

13 years agoPR: 2550
Dr. Stephen Henson [Wed, 20 Jul 2011 15:14:24 +0000 (15:14 +0000)]
PR: 2550
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS HelloVerifyRequest Timer bug

13 years agosha512-sparcv9.pl: minor optimization of sha256.
Andy Polyakov [Mon, 18 Jul 2011 11:34:07 +0000 (11:34 +0000)]
sha512-sparcv9.pl: minor optimization of sha256.

13 years agoAdd support for ECCCDH test format.
Dr. Stephen Henson [Mon, 18 Jul 2011 00:45:05 +0000 (00:45 +0000)]
Add support for ECCCDH test format.

13 years agoARM assembler pack: add platform run-time detection.
Andy Polyakov [Sun, 17 Jul 2011 17:40:29 +0000 (17:40 +0000)]
ARM assembler pack: add platform run-time detection.

13 years agoPR: 2556 (partial)
Dr. Stephen Henson [Thu, 14 Jul 2011 12:01:53 +0000 (12:01 +0000)]
PR: 2556 (partial)
Reported by: Daniel Marschall <daniel-marschall@viathinksoft.de>
Reviewed by: steve

Fix OID routines.

Check on encoding leading zero rejection should start at beginning of
encoding.

Allow for initial digit when testing when to use BIGNUMs which can increase
first value by 2 * 40.

13 years agofips/Makefile: HP-UX-specific update.
Andy Polyakov [Wed, 13 Jul 2011 22:30:33 +0000 (22:30 +0000)]
fips/Makefile: HP-UX-specific update.

13 years agoms/uplink.c: fix Visual Studio 2010 warning.
Andy Polyakov [Wed, 13 Jul 2011 14:54:38 +0000 (14:54 +0000)]
ms/uplink.c: fix Visual Studio 2010 warning.

13 years agoconfig: detect if assembler supports --noexecstack and pass it down.
Andy Polyakov [Wed, 13 Jul 2011 14:23:19 +0000 (14:23 +0000)]
config: detect if assembler supports --noexecstack and pass it down.

13 years agoperlasm/cbc.pl: fix tail processing bug.
Andy Polyakov [Wed, 13 Jul 2011 06:20:30 +0000 (06:20 +0000)]
perlasm/cbc.pl: fix tail processing bug.
PR: 2557

13 years agossl/ssl_ciph.c: allow to switch to predefined "composite" cipher/mac
Andy Polyakov [Mon, 11 Jul 2011 14:00:43 +0000 (14:00 +0000)]
ssl/ssl_ciph.c: allow to switch to predefined "composite" cipher/mac
combos that can be implemented as AEAD ciphers.

13 years agossl/t1_enc.c: initial support for AEAD ciphers.
Andy Polyakov [Mon, 11 Jul 2011 13:58:59 +0000 (13:58 +0000)]
ssl/t1_enc.c: initial support for AEAD ciphers.

13 years agoevp.h: add flag to distinguish AEAD ciphers and pair of control codes...
Andy Polyakov [Mon, 11 Jul 2011 13:54:53 +0000 (13:54 +0000)]
evp.h: add flag to distinguish AEAD ciphers and pair of control codes...

13 years agoFix typo.
Bodo Möller [Mon, 11 Jul 2011 12:13:55 +0000 (12:13 +0000)]
Fix typo.

Submitted by: Jim Morrison

13 years agoAdd a tool that (semi)automatically created the API documentation
Richard Levitte [Tue, 5 Jul 2011 15:40:58 +0000 (15:40 +0000)]
Add a tool that (semi)automatically created the API documentation
required for FIPS.

13 years agoRename symbol.
Dr. Stephen Henson [Tue, 5 Jul 2011 11:12:41 +0000 (11:12 +0000)]
Rename symbol.

13 years agox86_64-mont.pl: add squaring procedure and improve RSA sign performance
Andy Polyakov [Tue, 5 Jul 2011 09:21:03 +0000 (09:21 +0000)]
x86_64-mont.pl: add squaring procedure and improve RSA sign performance
by up to 38% (4096-bit benchmark on Core2).

13 years agoAdd functions to return FIPS module version.
Dr. Stephen Henson [Mon, 4 Jul 2011 23:38:16 +0000 (23:38 +0000)]
Add functions to return FIPS module version.

13 years agox86_64-xlate.pl: sha1 and md5 warnings made it to nasm 2.09, extend gnu
Andy Polyakov [Mon, 4 Jul 2011 13:10:50 +0000 (13:10 +0000)]
x86_64-xlate.pl: sha1 and md5 warnings made it to nasm 2.09, extend gnu
assembler workaround to all assemblers.

13 years agosha1-x86_64.pl: nasm 2.07 screws up labels if AVX path is compiled.
Andy Polyakov [Mon, 4 Jul 2011 13:00:24 +0000 (13:00 +0000)]
sha1-x86_64.pl: nasm 2.07 screws up labels if AVX path is compiled.

13 years agos390x-gf2m.pl: commentary update (final performance numbers turned to be
Andy Polyakov [Mon, 4 Jul 2011 11:20:33 +0000 (11:20 +0000)]
s390x-gf2m.pl: commentary update (final performance numbers turned to be
higher).

13 years agoIf make clean fails it is not a fatal error.
Dr. Stephen Henson [Sun, 3 Jul 2011 12:35:06 +0000 (12:35 +0000)]
If make clean fails it is not a fatal error.

13 years agoAdditional error checking.
Dr. Stephen Henson [Sat, 2 Jul 2011 15:57:35 +0000 (15:57 +0000)]
Additional error checking.

13 years agosha1-x86_64.pl: fix win64-specific typos and add masm support.
Andy Polyakov [Fri, 1 Jul 2011 21:23:13 +0000 (21:23 +0000)]
sha1-x86_64.pl: fix win64-specific typos and add masm support.

13 years agox86_64-xlate.pl: masm-specific update.
Andy Polyakov [Fri, 1 Jul 2011 21:21:14 +0000 (21:21 +0000)]
x86_64-xlate.pl: masm-specific update.

13 years agoDelete any EXARG value first.
Dr. Stephen Henson [Fri, 1 Jul 2011 14:52:09 +0000 (14:52 +0000)]
Delete any EXARG value first.

13 years agoAdd no-asm argument to Configure if needed.
Dr. Stephen Henson [Fri, 1 Jul 2011 14:43:34 +0000 (14:43 +0000)]
Add no-asm argument to Configure if needed.

13 years agoRecognise fipscheck option and call fipsas for WIN64 builds.
Dr. Stephen Henson [Thu, 30 Jun 2011 19:18:41 +0000 (19:18 +0000)]
Recognise fipscheck option and call fipsas for WIN64 builds.

13 years agocrypto/aes/Makefile: make it work on IRIX.
Andy Polyakov [Tue, 28 Jun 2011 12:55:39 +0000 (12:55 +0000)]
crypto/aes/Makefile: make it work on IRIX.

13 years agocrypto/whrlpool/wp_block.c: harmonize OPENSSL_ia32cap_P.
Andy Polyakov [Tue, 28 Jun 2011 12:42:10 +0000 (12:42 +0000)]
crypto/whrlpool/wp_block.c: harmonize OPENSSL_ia32cap_P.

13 years agocrypto/sha/asm/sha[1|512]-mips.pl: minor updates.
Andy Polyakov [Tue, 28 Jun 2011 12:41:19 +0000 (12:41 +0000)]
crypto/sha/asm/sha[1|512]-mips.pl: minor updates.

13 years agorc4-586.pl: add Atom performance results.
Andy Polyakov [Tue, 28 Jun 2011 12:36:10 +0000 (12:36 +0000)]
rc4-586.pl: add Atom performance results.

13 years agomd5-x86_86.pl: remove redundant instructions.
Andy Polyakov [Tue, 28 Jun 2011 12:33:58 +0000 (12:33 +0000)]
md5-x86_86.pl: remove redundant instructions.

13 years agocrypto/bn/Makefile: fix typo.
Andy Polyakov [Tue, 28 Jun 2011 08:52:36 +0000 (08:52 +0000)]
crypto/bn/Makefile: fix typo.

13 years agoauto detect configuration using KERNEL_BITS and CC
Dr. Stephen Henson [Mon, 27 Jun 2011 11:38:48 +0000 (11:38 +0000)]
auto detect configuration using KERNEL_BITS and CC

13 years agoConfigure: clean up linux32-s390x line.
Andy Polyakov [Mon, 27 Jun 2011 10:53:27 +0000 (10:53 +0000)]
Configure: clean up linux32-s390x line.

13 years agos390x assembler pack: add s390x-gf2m.pl and harmonize AES_xts_[en|de]crypt.
Andy Polyakov [Mon, 27 Jun 2011 10:00:31 +0000 (10:00 +0000)]
s390x assembler pack: add s390x-gf2m.pl and harmonize AES_xts_[en|de]crypt.

13 years agorc4-x86_64.pl: commentary update.
Andy Polyakov [Mon, 27 Jun 2011 09:46:16 +0000 (09:46 +0000)]
rc4-x86_64.pl: commentary update.

13 years agoMinor x86_64 perlasm update.
Andy Polyakov [Mon, 27 Jun 2011 09:45:10 +0000 (09:45 +0000)]
Minor x86_64 perlasm update.

13 years agoFix CPRNG test for Hash DRBG.
Dr. Stephen Henson [Sun, 26 Jun 2011 12:29:26 +0000 (12:29 +0000)]
Fix CPRNG test for Hash DRBG.

13 years agotypo
Dr. Stephen Henson [Fri, 24 Jun 2011 15:30:21 +0000 (15:30 +0000)]
typo

13 years agoAdd stub for HMAC DRBG.
Dr. Stephen Henson [Fri, 24 Jun 2011 14:28:34 +0000 (14:28 +0000)]
Add stub for HMAC DRBG.

13 years agoallow KERNEL_BITS to be specified in the environment
Dr. Stephen Henson [Fri, 24 Jun 2011 14:04:03 +0000 (14:04 +0000)]
allow KERNEL_BITS to be specified in the environment

13 years agoget the filename right
Dr. Stephen Henson [Fri, 24 Jun 2011 13:48:18 +0000 (13:48 +0000)]
get the filename right

13 years agoAdd sparcv9cap.c to restricted tarball.
Dr. Stephen Henson [Fri, 24 Jun 2011 13:45:44 +0000 (13:45 +0000)]
Add sparcv9cap.c to restricted tarball.

13 years agoAdd a symbol for the first parameter to OPENSSL_showfatal().
Richard Levitte [Thu, 23 Jun 2011 09:46:27 +0000 (09:46 +0000)]
Add a symbol for the first parameter to OPENSSL_showfatal().

13 years agoAdd symbols for the parameters on a couple more functions.
Richard Levitte [Thu, 23 Jun 2011 09:43:54 +0000 (09:43 +0000)]
Add symbols for the parameters on a couple more functions.

13 years agoPR: 2470
Dr. Stephen Henson [Wed, 22 Jun 2011 15:38:21 +0000 (15:38 +0000)]
PR: 2470
Submitted by: Corinna Vinschen <vinschen@redhat.com>
Reviewed by: steve

Don't call ERR_remove_state from DllMain.

13 years agoPR: 2543
Dr. Stephen Henson [Wed, 22 Jun 2011 15:30:14 +0000 (15:30 +0000)]
PR: 2543
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Correctly handle errors in DTLSv1_handle_timeout()

13 years agoPR: 2540
Dr. Stephen Henson [Wed, 22 Jun 2011 15:24:05 +0000 (15:24 +0000)]
PR: 2540
Submitted by: emmanuel.azencot@bull.net
Reviewed by: steve

Prevent infinite loop in BN_GF2m_mod_inv().

13 years agocorrectly encode OIDs near 2^32
Dr. Stephen Henson [Wed, 22 Jun 2011 15:15:58 +0000 (15:15 +0000)]
correctly encode OIDs near 2^32

13 years agotypo
Dr. Stephen Henson [Wed, 22 Jun 2011 12:59:53 +0000 (12:59 +0000)]
typo

13 years agostop complaints about no CVS version
Dr. Stephen Henson [Wed, 22 Jun 2011 12:38:39 +0000 (12:38 +0000)]
stop complaints about no CVS version

13 years agoNow the FIPS capable OpenSSL is available simplify the various FIPS test
Dr. Stephen Henson [Wed, 22 Jun 2011 12:30:18 +0000 (12:30 +0000)]
Now the FIPS capable OpenSSL is available simplify the various FIPS test
build options.

All fispcanisterbuild builds only build fipscanister.o and include symbol
renaming.

Move all renamed symbols to fipssyms.h

Update README.FIPS

13 years agoadd symbol rename
Dr. Stephen Henson [Wed, 22 Jun 2011 11:41:31 +0000 (11:41 +0000)]
add symbol rename

13 years agoallow MD5 use for computing old format hash links
Dr. Stephen Henson [Wed, 22 Jun 2011 02:18:19 +0000 (02:18 +0000)]
allow MD5 use for computing old format hash links

13 years agoDon't set FIPS rand method at same time as RAND method as this can cause the
Dr. Stephen Henson [Tue, 21 Jun 2011 17:10:21 +0000 (17:10 +0000)]
Don't set FIPS rand method at same time as RAND method as this can cause the
FIPS library to fail. Applications that want to set the FIPS rand method can do
so explicitly and presumably they know what they are doing...

13 years agoAdd prototype for null cipher.
Dr. Stephen Henson [Tue, 21 Jun 2011 16:14:01 +0000 (16:14 +0000)]
Add prototype for null cipher.

13 years agomake EVP_dss() work for DSA signing
Dr. Stephen Henson [Mon, 20 Jun 2011 20:05:51 +0000 (20:05 +0000)]
make EVP_dss() work for DSA signing

13 years agotypo
Dr. Stephen Henson [Mon, 20 Jun 2011 19:58:12 +0000 (19:58 +0000)]
typo

13 years agoadd null cipher to FIPS module
Dr. Stephen Henson [Mon, 20 Jun 2011 19:48:44 +0000 (19:48 +0000)]
add null cipher to FIPS module

13 years agoCorrection.
Dr. Stephen Henson [Sat, 18 Jun 2011 17:21:27 +0000 (17:21 +0000)]
Correction.

13 years agoStrip CRs when installing fips_premain.c Correct compat library rule
Dr. Stephen Henson [Sat, 18 Jun 2011 17:18:25 +0000 (17:18 +0000)]
Strip CRs when installing fips_premain.c Correct compat library rule
in FIPS mode.

13 years agoInitial FIPS capable OpenSSL information
Dr. Stephen Henson [Fri, 17 Jun 2011 21:08:15 +0000 (21:08 +0000)]
Initial FIPS capable OpenSSL information