boringssl/crypto
David Benjamin 899b9b19a4 Ensure |BN_div| never gives negative zero in the no_branch code.
Have |bn_correct_top| fix |bn->neg| if the input is zero so that we
don't have negative zeros lying around.

Thanks to Brian Smith for noticing.

Change-Id: I91bcadebc8e353bb29c81c4367e85853886c8e4e
Reviewed-on: https://boringssl-review.googlesource.com/9074
Reviewed-by: Adam Langley <agl@google.com>
Commit-Queue: Adam Langley <agl@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-08-02 18:53:45 +00:00
..
aes Import (unreachable) bsaes-armv7.pl XTS fixes. 2016-07-26 19:47:12 +00:00
asn1 Always check that the value returned by asn1_do_adb() is non-NULL. 2016-07-26 22:41:51 +00:00
base64
bio Inline bio_set. 2016-07-25 18:44:46 +00:00
bn Ensure |BN_div| never gives negative zero in the no_branch code. 2016-08-02 18:53:45 +00:00
buf
bytestring Check for overflow in CBB_add_u24. 2016-07-26 15:19:41 +00:00
chacha Switch perlasm calling convention. 2016-06-27 21:59:26 +00:00
cipher Revert "Move C++ helpers into |bssl| namespace." 2016-07-12 08:09:33 -07:00
cmac Revert "Move C++ helpers into |bssl| namespace." 2016-07-12 08:09:33 -07:00
conf
curve25519 Revert "Move C++ helpers into |bssl| namespace." 2016-07-12 08:09:33 -07:00
des
dh Add BN_rand_range_ex and use internally. 2016-07-29 16:09:26 +00:00
digest Promise more accurate bounds than EVP_MD_MAX_SIZE. 2016-08-01 23:24:04 +00:00
dsa Add BN_rand_range_ex and use internally. 2016-07-29 16:09:26 +00:00
ec Add BN_rand_range_ex and use internally. 2016-07-29 16:09:26 +00:00
ecdh
ecdsa Add BN_rand_range_ex and use internally. 2016-07-29 16:09:26 +00:00
engine
err Add TLS 1.3 1-RTT. 2016-07-18 09:54:46 +00:00
evp Change |EVP_PKEY_up_ref| to return int. 2016-07-12 17:55:41 +00:00
hkdf Const-correct HKDF_expand. 2016-07-16 07:55:19 +00:00
hmac Update comments for HMAC to give a more accurate bound than EVP_MD_MAX_SIZE 2016-08-02 18:20:42 +00:00
lhash
md4
md5 Switch perlasm calling convention. 2016-06-27 21:59:26 +00:00
modes Switch perlasm calling convention. 2016-06-27 21:59:26 +00:00
newhope Revert "Move C++ helpers into |bssl| namespace." 2016-07-12 08:09:33 -07:00
obj
pem
perlasm Sync x86 perlasm drivers with upstream master. 2016-06-27 22:00:51 +00:00
pkcs8 Revert "Move C++ helpers into |bssl| namespace." 2016-07-12 08:09:33 -07:00
poly1305 Revert "Move C++ helpers into |bssl| namespace." 2016-07-12 08:09:33 -07:00
rand Define RAND_cleanup in one place only 2016-07-11 17:02:45 +00:00
rc4 Switch perlasm calling convention. 2016-06-27 21:59:26 +00:00
rsa Calculate inverse in |BN_MONT_CTX_set| in constant time w.r.t. modulus. 2016-08-02 16:26:44 +00:00
sha Fix the comments for |SHA[256|384|512]_Transform|. 2016-07-28 21:49:48 +00:00
stack
test Revert "Move C++ helpers into |bssl| namespace." 2016-07-12 08:09:33 -07:00
x509 Use newest CRL. 2016-08-02 17:45:15 +00:00
x509v3 Fix an error path leak in do_ext_nconf() 2016-07-26 19:11:01 +00:00
CMakeLists.txt Switch perlasm calling convention. 2016-06-27 21:59:26 +00:00
constant_time_test.c
cpu-aarch64-linux.c
cpu-arm-linux.c Make CRYPTO_is_NEON_capable aware of the buggy CPU. 2016-04-28 16:42:21 +00:00
cpu-arm.c Rewrite ARM feature detection. 2016-03-26 04:54:44 +00:00
cpu-intel.c Wrap MSVC-only warning pragmas in a macro. 2016-06-09 21:29:36 +00:00
crypto.c Add no-op function ENGINE_register_all_complete. 2016-07-12 17:54:41 +00:00
ex_data.c
internal.h Remove compatibility 'inline' define. 2016-06-27 22:16:03 +00:00
mem.c Breaking news: 1998 has come and gone. 2016-07-11 23:51:47 +00:00
refcount_c11.c Cast refcounts to _Atomic before use. 2015-05-20 13:39:22 -07:00
refcount_lock.c
refcount_test.c
thread_none.c
thread_pthread.c
thread_test.c Wrap MSVC-only warning pragmas in a macro. 2016-06-09 21:29:36 +00:00
thread_win.c Wrap MSVC-only warning pragmas in a macro. 2016-06-09 21:29:36 +00:00
thread.c Remove a bunch of unnecessary includes. 2016-06-28 20:31:14 +00:00
time_support.c