Andy Polyakov [Sat, 12 Nov 2011 13:10:00 +0000 (13:10 +0000)]
cryptlib.c, etc.: fix linker warnings in 64-bit Darwin build.
Andy Polyakov [Sat, 12 Nov 2011 12:16:11 +0000 (12:16 +0000)]
Configure, x86gas.pl: fix linker warnings in 32-bit Darwin build.
Andy Polyakov [Sat, 12 Nov 2011 12:13:13 +0000 (12:13 +0000)]
engines/: get rid of cvs warnings on MacOS X, proper clean in ccgost.
Andy Polyakov [Sat, 12 Nov 2011 11:57:54 +0000 (11:57 +0000)]
Makefile.org: proper libclean on MacOS X.
Dr. Stephen Henson [Fri, 11 Nov 2011 19:01:25 +0000 (19:01 +0000)]
portability fix for some perl versions
Andy Polyakov [Thu, 10 Nov 2011 22:41:31 +0000 (22:41 +0000)]
bsaes-x86_64.pl: add bsaes_xts_[en|de]crypt.
Andy Polyakov [Wed, 9 Nov 2011 20:08:44 +0000 (20:08 +0000)]
arm_arch.h: allow to specify __ARM_ARCH__ elsewhere.
Andy Polyakov [Tue, 8 Nov 2011 21:27:44 +0000 (21:27 +0000)]
x86cpuid.pl: compensate for imaginary virtual machines.
Andy Polyakov [Tue, 8 Nov 2011 18:32:07 +0000 (18:32 +0000)]
Configure: harmonize darwin64-x86_64-cc line with assembler pack.
Andy Polyakov [Tue, 8 Nov 2011 14:40:33 +0000 (14:40 +0000)]
config: KERNEL_BITS envrionment variable to control choice between 32-
and 64-bit Solaris builds.
Andy Polyakov [Tue, 8 Nov 2011 13:31:28 +0000 (13:31 +0000)]
config: KERNEL_BITS envrionment variable to control choice between 32- and
64-bit darwin builds.
Andy Polyakov [Tue, 8 Nov 2011 13:02:57 +0000 (13:02 +0000)]
Configure: initial support for iOS.
Andy Polyakov [Tue, 8 Nov 2011 12:45:00 +0000 (12:45 +0000)]
Configure: allow ./config to pass compiler flags with white spaces.
Andy Polyakov [Tue, 8 Nov 2011 12:21:32 +0000 (12:21 +0000)]
fips_canister.c: add cross-compiler support for iOS (it applies even to
MacOS X, because it's easier to handle it this way).
Andy Polyakov [Tue, 8 Nov 2011 12:15:04 +0000 (12:15 +0000)]
fips_premain.c: fix warning about _exit on MacOS X.
Andy Polyakov [Sun, 6 Nov 2011 23:22:58 +0000 (23:22 +0000)]
fipsld, incore: switch to new cross-compile support.
Andy Polyakov [Sun, 6 Nov 2011 19:48:39 +0000 (19:48 +0000)]
e_aes.c: fold aesni_xts_cipher and [most importantly] fix aes_xts_cipher's
return value after custom flag was rightly reverted.
Dr. Stephen Henson [Sun, 6 Nov 2011 13:08:41 +0000 (13:08 +0000)]
check for unset entropy and nonce callbacks
Dr. Stephen Henson [Sun, 6 Nov 2011 12:53:13 +0000 (12:53 +0000)]
Update fips_test_suite to take multiple command line options and
an induced error checking function.
Dr. Stephen Henson [Sat, 5 Nov 2011 18:25:40 +0000 (18:25 +0000)]
typo
Dr. Stephen Henson [Sat, 5 Nov 2011 18:14:42 +0000 (18:14 +0000)]
make post failure simulation reversible in all cases
Dr. Stephen Henson [Sat, 5 Nov 2011 18:11:05 +0000 (18:11 +0000)]
typo: use key for POST callback
Dr. Stephen Henson [Sat, 5 Nov 2011 18:04:31 +0000 (18:04 +0000)]
fix set but unused warnings
Andy Polyakov [Sat, 5 Nov 2011 13:07:18 +0000 (13:07 +0000)]
armv4cpuid.S, armv4-gf2m.pl: make newest code compilable by older assembler.
Andy Polyakov [Sat, 5 Nov 2011 10:44:12 +0000 (10:44 +0000)]
x86cpuid.pl: don't punish "last-year" OSes on "this-year" CPUs.
PR: 2633
Andy Polyakov [Sat, 5 Nov 2011 10:16:04 +0000 (10:16 +0000)]
ppc.pl: fix bug in bn_mul_comba4.
PR: 2636
Submitted by: Charles Bryant
Dr. Stephen Henson [Sat, 5 Nov 2011 01:34:36 +0000 (01:34 +0000)]
Add single call public key sign and verify functions.
Dr. Stephen Henson [Wed, 2 Nov 2011 19:17:30 +0000 (19:17 +0000)]
Add support for memory leak checking in fips_algvs.
Fix many memory leaks in algorithm test utilities.
Dr. Stephen Henson [Wed, 2 Nov 2011 16:58:17 +0000 (16:58 +0000)]
Remove duplicate test from health check.
Fix memory leaks by uninstantiating DRBG before reinitialising it.
Dr. Stephen Henson [Wed, 2 Nov 2011 00:58:17 +0000 (00:58 +0000)]
Print out an error for "make test" in FIPS builds. (from FIPS stable)
Dr. Stephen Henson [Wed, 2 Nov 2011 00:57:22 +0000 (00:57 +0000)]
Add fips_algvs utility (from FIPS 2.0 stable branch).
Richard Levitte [Sun, 30 Oct 2011 14:43:53 +0000 (14:43 +0000)]
Typo...
Andy Polyakov [Sun, 30 Oct 2011 12:15:56 +0000 (12:15 +0000)]
bsaes-x86_64.pl: add CBC decrypt and engage it in e_aes.c.
Richard Levitte [Sun, 30 Oct 2011 11:46:07 +0000 (11:46 +0000)]
Add missing algorithms to disable, and in particular, disable
EC_NISTP_64_GCC_128 by default, as GCC isn't currently supported on
VMS. Synchronise with Unix.
Richard Levitte [Sun, 30 Oct 2011 11:40:54 +0000 (11:40 +0000)]
Teach mkshared.com to have a look for disabled algorithms in opensslconf.h
Andy Polyakov [Sat, 29 Oct 2011 19:25:13 +0000 (19:25 +0000)]
bn_exp.c: fix corner case in new constant-time code.
Submitted by: Emilia Kasper
Andy Polyakov [Sat, 29 Oct 2011 11:56:21 +0000 (11:56 +0000)]
bsaes-x86_64.pl: optimize InvMixColumns.
Andy Polyakov [Sat, 29 Oct 2011 11:47:20 +0000 (11:47 +0000)]
bsaes-x86_64.pl: add decryption procedure (with unoptimized reference
InvMixColumns).
Dr. Stephen Henson [Thu, 27 Oct 2011 13:06:52 +0000 (13:06 +0000)]
PR: 2628
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve
Send alert instead of assertion failure for incorrectly formatted DTLS
fragments.
Dr. Stephen Henson [Thu, 27 Oct 2011 13:01:33 +0000 (13:01 +0000)]
PR: 2628
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve
Fix for ECC keys and DTLS.
Dr. Stephen Henson [Wed, 26 Oct 2011 16:43:34 +0000 (16:43 +0000)]
PR: 2632
Submitted by: emmanuel.azencot@bull.net
Reviewed by: steve
Return -1 immediately if not affine coordinates as BN_CTX has not been
set up.
Dr. Stephen Henson [Tue, 25 Oct 2011 12:51:22 +0000 (12:51 +0000)]
Use correct tag for SRP username.
Dr. Stephen Henson [Mon, 24 Oct 2011 13:23:51 +0000 (13:23 +0000)]
typo
Andy Polyakov [Mon, 24 Oct 2011 06:00:06 +0000 (06:00 +0000)]
e_aes.c: fold even aesni_ccm_cipher.
Andy Polyakov [Sun, 23 Oct 2011 22:58:40 +0000 (22:58 +0000)]
e_aes.c: prevent potential DoS in aes_gcm_tls_cipher.
Andy Polyakov [Sun, 23 Oct 2011 19:41:00 +0000 (19:41 +0000)]
cryptlib.c: remove stdio dependency in Windows fipscanister.lib.
Dr. Stephen Henson [Sun, 23 Oct 2011 17:06:28 +0000 (17:06 +0000)]
No need for custom flag in XTS mode: block length is 1.
Andy Polyakov [Sun, 23 Oct 2011 15:17:30 +0000 (15:17 +0000)]
fips_canister.c: harmonize fingerprinting for all Windows, CE or not.
Andy Polyakov [Sun, 23 Oct 2011 15:12:37 +0000 (15:12 +0000)]
config: in cross-compile case interrogate cross-compiler, not host, work
around sub-shell limitation.
Dr. Stephen Henson [Sat, 22 Oct 2011 17:24:27 +0000 (17:24 +0000)]
Check for selftest failure in various places.
Andy Polyakov [Sat, 22 Oct 2011 10:49:52 +0000 (10:49 +0000)]
x86gas.pl: relax .init segment alignment.
Andy Polyakov [Fri, 21 Oct 2011 19:34:48 +0000 (19:34 +0000)]
mk1mk.pl: cleanup engines' handling and make fips build work on WIN64I.
Dr. Stephen Henson [Fri, 21 Oct 2011 11:46:16 +0000 (11:46 +0000)]
Update error codes.
Andy Polyakov [Fri, 21 Oct 2011 06:03:45 +0000 (06:03 +0000)]
fips.c: remove preprocessor artefact.
Dr. Stephen Henson [Fri, 21 Oct 2011 01:57:37 +0000 (01:57 +0000)]
fix (?) AVX clearing
Dr. Stephen Henson [Fri, 21 Oct 2011 00:12:53 +0000 (00:12 +0000)]
Check for uninitialised DRBG_CTX and don't free up default DRBG_CTX.
Andy Polyakov [Thu, 20 Oct 2011 21:03:09 +0000 (21:03 +0000)]
fips.c: x86[_64] capability masking.
Andy Polyakov [Thu, 20 Oct 2011 20:52:26 +0000 (20:52 +0000)]
armcap.c: auto-setup processor capability vector.
Dr. Stephen Henson [Thu, 20 Oct 2011 13:56:01 +0000 (13:56 +0000)]
Fix error codes.
Andy Polyakov [Thu, 20 Oct 2011 12:09:13 +0000 (12:09 +0000)]
fips/fips_[canister|premain].c: make it work with VC6 and add sentinels
even to code segments.
Andy Polyakov [Thu, 20 Oct 2011 08:39:29 +0000 (08:39 +0000)]
sha1-mips.pl: fix typo.
Andy Polyakov [Thu, 20 Oct 2011 08:28:06 +0000 (08:28 +0000)]
Drain unused MacOS directory.
Dr. Stephen Henson [Wed, 19 Oct 2011 23:23:35 +0000 (23:23 +0000)]
Add "nopass" for empty password too.
Dr. Stephen Henson [Wed, 19 Oct 2011 22:34:53 +0000 (22:34 +0000)]
add authentication parameter to FIPS_module_mode_set
Andy Polyakov [Wed, 19 Oct 2011 21:49:20 +0000 (21:49 +0000)]
vxworks-mips: unify and add assembler.
Andy Polyakov [Wed, 19 Oct 2011 21:42:21 +0000 (21:42 +0000)]
Remove superseded MIPS assembler modules.
Andy Polyakov [Wed, 19 Oct 2011 21:05:53 +0000 (21:05 +0000)]
fips_canister.c: more cross-compiler platfroms verified.
Andy Polyakov [Wed, 19 Oct 2011 18:57:03 +0000 (18:57 +0000)]
arm_arch.h: add missing pre-defined macro, __ARM_ARCH_5TEJ__.
Bodo Möller [Wed, 19 Oct 2011 15:29:14 +0000 (15:29 +0000)]
"make update" (partial)
Bodo Möller [Wed, 19 Oct 2011 14:59:27 +0000 (14:59 +0000)]
BN_BLINDING multi-threading fix.
Submitted by: Emilia Kasper (Google)
Dr. Stephen Henson [Wed, 19 Oct 2011 12:05:08 +0000 (12:05 +0000)]
Typo (?)
Dr. Stephen Henson [Wed, 19 Oct 2011 11:47:21 +0000 (11:47 +0000)]
Build fipscanister.o only by default. Utility build now needs
make build_tests
Dr. Stephen Henson [Wed, 19 Oct 2011 11:44:25 +0000 (11:44 +0000)]
Recognise new option.
Bodo Möller [Wed, 19 Oct 2011 09:24:22 +0000 (09:24 +0000)]
Fix indentation
Bodo Möller [Wed, 19 Oct 2011 08:59:53 +0000 (08:59 +0000)]
Fix warnings.
Also, use the common Configure mechanism for enabling/disabling the 64-bit ECC code.
Dr. Stephen Henson [Tue, 18 Oct 2011 22:11:11 +0000 (22:11 +0000)]
Update premain fingerprint.
Bodo Möller [Tue, 18 Oct 2011 19:43:16 +0000 (19:43 +0000)]
Improve optional 64-bit NIST-P224 implementation, and add NIST-P256 and
NIST-P521. (Now -DEC_NISTP_64_GCC_128 enables all three of these;
-DEC_NISTP224_64_GCC_128 no longer works.)
Submitted by: Google Inc.
Andy Polyakov [Tue, 18 Oct 2011 18:59:33 +0000 (18:59 +0000)]
fipssyms.h: assign alias to newly introduced bn_gather5.
Andy Polyakov [Tue, 18 Oct 2011 18:56:09 +0000 (18:56 +0000)]
fips/*: extend fipsro segmenting to all _MSC_VER builds (including WinCE).
Andy Polyakov [Tue, 18 Oct 2011 18:52:05 +0000 (18:52 +0000)]
fips_enc.c: assign minimal block size to bad_cipher [to avoid arithmetic
exceptions in TLS layer].
Andy Polyakov [Tue, 18 Oct 2011 13:39:47 +0000 (13:39 +0000)]
engines/.cvsignore: stop whining about e_padlock-*.s.
Andy Polyakov [Tue, 18 Oct 2011 13:37:26 +0000 (13:37 +0000)]
evp/e_aes.c: fold AES-NI modes that heavily rely on indirect calls
(trade 2% small-block performance), engage bit-sliced AES in GCM.
Andy Polyakov [Tue, 18 Oct 2011 09:50:23 +0000 (09:50 +0000)]
x86_64-xlate.pl: make vpaes-x86_64.pl and rc4-md5-x86_64 work with ml64,
fix bug in .crt section alignment.
PR: 2620, 2624
Andy Polyakov [Tue, 18 Oct 2011 09:22:04 +0000 (09:22 +0000)]
bsaes-x86_64.pl: make it work with ml64.
Andy Polyakov [Tue, 18 Oct 2011 08:03:02 +0000 (08:03 +0000)]
[bs|vp]aes-x86[_64].pl: typos and clarifications.
Andy Polyakov [Tue, 18 Oct 2011 07:53:50 +0000 (07:53 +0000)]
c_allc.c: add aes-xts to loop.
Dr. Stephen Henson [Tue, 18 Oct 2011 00:02:42 +0000 (00:02 +0000)]
Do global replace to remove assembly language object files.
Andy Polyakov [Mon, 17 Oct 2011 23:35:00 +0000 (23:35 +0000)]
bn_mont.c: get corner cases right in updated BN_from_montgomery_word.
Andy Polyakov [Mon, 17 Oct 2011 17:41:49 +0000 (17:41 +0000)]
bn_exp.c: further optimizations using more ideas from
http://eprint.iacr.org/2011/239.
Andy Polyakov [Mon, 17 Oct 2011 17:39:59 +0000 (17:39 +0000)]
x86_64-mont.pl: minor optimization.
Andy Polyakov [Mon, 17 Oct 2011 17:24:28 +0000 (17:24 +0000)]
bn_mont.c: simplify BN_from_montgomery_word.
Andy Polyakov [Mon, 17 Oct 2011 17:20:48 +0000 (17:20 +0000)]
bn_shift.c: minimize reallocations, which allows BN_FLG_STATIC_DATA to
be shifted in specific cases.
Andy Polyakov [Mon, 17 Oct 2011 17:10:54 +0000 (17:10 +0000)]
Engage bsaes-x86_64.pl, bit-sliced AES.
Dr. Stephen Henson [Sun, 16 Oct 2011 12:31:49 +0000 (12:31 +0000)]
L=3072, N=256 provides 128 bits of security not 112.
Andy Polyakov [Sat, 15 Oct 2011 08:32:16 +0000 (08:32 +0000)]
Add android-x86.
Dr. Stephen Henson [Fri, 14 Oct 2011 23:51:58 +0000 (23:51 +0000)]
Clarify usage message.
Dr. Stephen Henson [Fri, 14 Oct 2011 22:04:14 +0000 (22:04 +0000)]
more vxworks patches
Dr. Stephen Henson [Fri, 14 Oct 2011 17:28:10 +0000 (17:28 +0000)]
Allow override of GCCVER and noexecstack checking from environment.
Vxworks support.
Dr. Stephen Henson [Fri, 14 Oct 2011 15:15:20 +0000 (15:15 +0000)]
Don't use TPREFIX shell variable for minimal script.
Dr. Stephen Henson [Fri, 14 Oct 2011 13:00:08 +0000 (13:00 +0000)]
Add usage messages.