#
665d899f |
| 01-Aug-2017 |
Paul Yang |
Support multi-prime RSA (RFC 8017) * Introduce RSA_generate_multi_prime_key to generate multi-prime RSA private key. As well as the following functions: RSA_get_multi_prime_ext
Support multi-prime RSA (RFC 8017) * Introduce RSA_generate_multi_prime_key to generate multi-prime RSA private key. As well as the following functions: RSA_get_multi_prime_extra_count RSA_get0_multi_prime_factors RSA_get0_multi_prime_crt_params RSA_set0_multi_prime_params RSA_get_version * Support EVP operations for multi-prime RSA * Support ASN.1 operations for multi-prime RSA * Support multi-prime check in RSA_check_key_ex * Support multi-prime RSA in apps/genrsa and apps/speed * Support multi-prime RSA manipulation functions * Test cases and documentation are added * CHANGES is updated Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de> (Merged from https://github.com/openssl/openssl/pull/4241)
show more ...
|
#
46f4e1be |
| 12-Nov-2017 |
Josh Soref |
Many spelling fixes/typo's corrected. Around 138 distinct errors found and fixed; thanks! Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tim Hudson <tjh@openssl.org>
Many spelling fixes/typo's corrected. Around 138 distinct errors found and fixed; thanks! Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3459)
show more ...
|
#
cfb5bc69 |
| 10-Sep-2017 |
Andy Polyakov |
rsa/rsa_pmeth.c: recognize SHA3 as supported RSA digest. Reviewed-by: Richard Levitte <levitte@openssl.org>
|
#
90862ab4 |
| 22-Aug-2017 |
Paul Yang |
This part fixes braces around if-else. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl
This part fixes braces around if-else. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4223)
show more ...
|
#
8a3cde7d |
| 13-Jul-2017 |
Dr. Stephen Henson |
Typo: should check mgf1md Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3920)
|
Revision tags: OpenSSL_1_0_2l, OpenSSL_1_1_0f |
|
#
237bc6c9 |
| 26-Apr-2017 |
Bernd Edlinger |
Remove unnecessary loop in pkey_rsa_decrypt. It is not necessary to remove leading zeros here because RSA_padding_check_PKCS1_OAEP_mgf1 appends them again. As this was not done in co
Remove unnecessary loop in pkey_rsa_decrypt. It is not necessary to remove leading zeros here because RSA_padding_check_PKCS1_OAEP_mgf1 appends them again. As this was not done in constant time, this might have leaked timing information. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Andy Polyakov <appro@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3313)
show more ...
|
Revision tags: OpenSSL-fips-2_0_16 |
|
#
1bcbf658 |
| 28-Feb-2017 |
Bernd Edlinger |
Fix handling of EVP_PKEY_CTRL_PKCS7_ENCRYPT/DECRYPT with OPENSSL_NO_CMS. Reviewed-by: Stephen Henson <steve@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https
Fix handling of EVP_PKEY_CTRL_PKCS7_ENCRYPT/DECRYPT with OPENSSL_NO_CMS. Reviewed-by: Stephen Henson <steve@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2764)
show more ...
|
Revision tags: OpenSSL_1_1_0e, OpenSSL_1_0_2k, OpenSSL_1_1_0d |
|
#
137096a7 |
| 17-Jan-2017 |
Dr. Stephen Henson |
Defines and strings for special salt length values, add tests Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2236)
|
#
79ebfc46 |
| 16-Jan-2017 |
Dr. Stephen Henson |
Add support for -1, -2 salt lengths for PSS only keys. Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2236)
|
#
c82bafc5 |
| 07-Jan-2017 |
Dr. Stephen Henson |
fix a few more style issues Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
|
#
f291138b |
| 06-Jan-2017 |
Dr. Stephen Henson |
Remove unnecessary frees and style fixes. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull
Remove unnecessary frees and style fixes. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
show more ...
|
#
bc1ea030 |
| 06-Jan-2017 |
Dr. Stephen Henson |
Use more desciptive macro name rsa_pss_restricted() Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/op
Use more desciptive macro name rsa_pss_restricted() Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
show more ...
|
#
52ad523c |
| 05-Jan-2017 |
Dr. Stephen Henson |
fix various style issues Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
|
#
186e48cd |
| 06-Dec-2016 |
Dr. Stephen Henson |
Return errors PKCS#7/CMS enveloped data ctrls and PSS Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/
Return errors PKCS#7/CMS enveloped data ctrls and PSS Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
show more ...
|
#
59029ca1 |
| 05-Dec-2016 |
Dr. Stephen Henson |
Add PSS parameter restrictions. If a key contains any PSS parameter restrictions set them during sign or verification initialisation. Parameters now become the default values for sig
Add PSS parameter restrictions. If a key contains any PSS parameter restrictions set them during sign or verification initialisation. Parameters now become the default values for sign/verify. Digests are fixed and any attempt to change them is an error. The salt length can be modified but must not be less than the minimum value. If the key parameters are invalid then verification or signing initialisation returns an error. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
show more ...
|
#
cb49e749 |
| 05-Dec-2016 |
Dr. Stephen Henson |
Initial parameter restrictions. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
|
#
87ee7b22 |
| 01-Dec-2016 |
Dr. Stephen Henson |
Add macros to determine if key or ctx is PSS. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/
Add macros to determine if key or ctx is PSS. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
show more ...
|
#
a300c725 |
| 30-Nov-2016 |
Dr. Stephen Henson |
Support pad mode get/set for PSS keys. Pad mode setting returns an error if the mode is anything other then PSS. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Cas
Support pad mode get/set for PSS keys. Pad mode setting returns an error if the mode is anything other then PSS. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
show more ...
|
#
e64b2b5c |
| 30-Nov-2016 |
Dr. Stephen Henson |
Key gen param support. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
|
#
ad4b3d0a |
| 30-Nov-2016 |
Dr. Stephen Henson |
Set PSS padding mode for PSS keys. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
|
#
410877ba |
| 30-Nov-2016 |
Dr. Stephen Henson |
Digest string helper function. New function EVP_PKEY_CTX_md() which takes a string and passes a digest to a ctrl. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Mat
Digest string helper function. New function EVP_PKEY_CTX_md() which takes a string and passes a digest to a ctrl. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
show more ...
|
Revision tags: OpenSSL-fips-2_0_15 |
|
#
6577e008 |
| 24-Nov-2016 |
Dr. Stephen Henson |
PSS EVP_PKEY method Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
|
#
faa02fe2 |
| 20-Nov-2016 |
Dr. Stephen Henson |
Use method key type instead of EVP_PKEY_RSA Make RSA method more flexible by using the key type from the method instead of hard coding EVP_PKEY_RSA: by doing this the same code suppo
Use method key type instead of EVP_PKEY_RSA Make RSA method more flexible by using the key type from the method instead of hard coding EVP_PKEY_RSA: by doing this the same code supports both RSA and RSA-PSS. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2177)
show more ...
|
#
71bbc79b |
| 08-Dec-2016 |
Dr. Stephen Henson |
Check input length to pkey_rsa_verify() Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2065)
|
Revision tags: OpenSSL-fips-2_0_14, OpenSSL_1_1_0c, OpenSSL_1_0_2j, OpenSSL_1_1_0b, OpenSSL_1_0_1u, OpenSSL_1_0_2i, OpenSSL_1_1_0a, OpenSSL_1_1_0 |
|
#
464d59a5 |
| 22-Aug-2016 |
Rich Salz |
RT2676: Reject RSA eponent if even or 1 Also, re-organize RSA check to use goto err. Add a test case. Try all checks, not just stopping at first (via Richard Levitte) Review
RT2676: Reject RSA eponent if even or 1 Also, re-organize RSA check to use goto err. Add a test case. Try all checks, not just stopping at first (via Richard Levitte) Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
show more ...
|