boringssl/crypto/fipsmodule
David Benjamin 4a8c05ffe8 Check key sizes in AES_set_*_key.
AES_set_*_key used to call directly into aes_nohw_set_*_key which
gracefully handles some NULL parameters and invalid bit sizes. However,
we now enable optimized assembly implementations, not all of which
perform these checks. (vpaes does not.)

This is fine for the internal assembly functions themselves. Such checks
are better written in C than assembly, and the calling C code usually
already knows the key size. (Indeed aes_ctr_set_key already assumes the
assembly functions are infallible.) AES_set_*_key are public APIs,
however. The NULL check is silly, but we should handle length-like
checks in public APIs.

Change-Id: I259ae6b9811ceaa9dc5bd7173d5754ca7079cff8
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/35564
Reviewed-by: Adam Langley <agl@google.com>
2019-04-11 15:33:57 +00:00
..
aes Check key sizes in AES_set_*_key. 2019-04-11 15:33:57 +00:00
bn Rewrite BN_CTX. 2019-03-18 19:18:31 +00:00
cipher Unwind the large_inputs hint in aes_ctr_set_key. 2019-03-23 07:06:02 +00:00
des
digest Rename 'md' output parameter to 'out' and add bounds. 2019-04-08 18:19:01 +00:00
ec Update third_party/googletest. 2019-04-10 22:09:43 +00:00
ecdh Clean up EC_POINT to byte conversions. 2018-11-13 17:27:59 +00:00
ecdsa Modernize OPENSSL_COMPILE_ASSERT, part 2. 2018-11-14 16:06:37 +00:00
hmac
md4 Rename 'md' output parameter to 'out' and add bounds. 2019-04-08 18:19:01 +00:00
md5 Rename 'md' output parameter to 'out' and add bounds. 2019-04-08 18:19:01 +00:00
modes Adapt gcm_*_neon to aarch64. 2019-03-14 21:43:27 +00:00
policydocs Include details about latest FIPS certification. 2018-11-05 19:03:25 +00:00
rand Unwind the large_inputs hint in aes_ctr_set_key. 2019-03-23 07:06:02 +00:00
rsa Clear out a bunch of -Wextra-semi warnings. 2019-02-21 19:12:39 +00:00
self_check Always print some diagnostic information when POST fails. 2018-09-28 19:33:38 +00:00
sha Rename 'md' output parameter to 'out' and add bounds. 2019-04-08 18:19:01 +00:00
tls Fix include path. 2018-05-08 16:26:05 +00:00
bcm.c Always print some diagnostic information when POST fails. 2018-09-28 19:33:38 +00:00
CMakeLists.txt Add an optimized x86_64 vpaes ctr128_f and remove bsaes. 2019-03-23 06:59:22 +00:00
delocate.h Use a pool of |rand_state| objects. 2018-07-06 21:25:37 +00:00
FIPS.md Include details about latest FIPS certification. 2018-11-05 19:03:25 +00:00
intcheck1.png
intcheck2.png
intcheck3.png
is_fips.c Add some more compatibility functions. 2018-05-08 20:51:15 +00:00