boringssl

Vēsture

David Benjamin 582d2847ed Reimplement PKCS#12 key derivation. This is avoids pulling in BIGNUM for doing a straight-forward addition on a block-sized value, and avoids a ton of mallocs. It's also -Wconversion-clean, unlike the old one. In doing so, this replaces the HMAC_MAX_MD_CBLOCK with EVP_MAX_MD_BLOCK_SIZE. By having the maximum block size available, most of the temporary values in the key derivation don't need to be malloc'd. BUG=22 Change-Id: I940a62bba4ea32bf82b1190098f3bf185d4cc7fe Reviewed-on: https://boringssl-review.googlesource.com/7688 Reviewed-by: Steven Valdez <svaldez@google.com> Reviewed-by: David Benjamin <davidben@google.com>		pirms 8 gadiem
..
aead.h	Remove EVP_aead_chacha20_poly1305_rfc7539 alias.	pirms 8 gadiem
aes.h	Fix documentation typo.	pirms 9 gadiem
arm_arch.h	Remove CRYPTO_set_NEON_functional.	pirms 8 gadiem
asn1.h	Align with upstream's error strings, take two.	pirms 8 gadiem
asn1_mac.h	Ditch remaining filename comments from public headers and ssl/	pirms 9 gadiem
asn1t.h	Ditch remaining filename comments from public headers and ssl/	pirms 9 gadiem
base.h	Add BORINGSSL_PREFIX for prefixing symbols	pirms 8 gadiem
base64.h	Deprecate basically the entire base64 implementation.	pirms 9 gadiem
bio.h	Only use recv/send for socket BIOs on Windows.	pirms 8 gadiem
blowfish.h	Add decrepit, initially containing CAST and Blowfish.	pirms 9 gadiem
bn.h	Make return value of \|BN_MONT_CTX_set_locked\| int.	pirms 8 gadiem
buf.h	Have doc.go parse struct comments.	pirms 8 gadiem
buffer.h	Add buffer.h for compatibility.	pirms 9 gadiem
bytestring.h	Add CBS_ASN1_UTF8STRING define.	pirms 8 gadiem
cast.h	Add decrepit, initially containing CAST and Blowfish.	pirms 9 gadiem
chacha.h	Change \|CRYPTO_chacha_20\| to use 96-bit nonces, 32-bit counters.	pirms 9 gadiem
cipher.h	Switch all 'num' parameters in crypto/modes to unsigned.	pirms 8 gadiem
cmac.h	Style: fix some header guards	pirms 9 gadiem
conf.h	Fix the shared library build.	pirms 8 gadiem
cpu.h	Rewrite ARM feature detection.	pirms 8 gadiem
crypto.h	Document that CRYPTO_library_init may be called concurrently.	pirms 8 gadiem
curve25519.h	Tweak X25519 documentation.	pirms 8 gadiem
des.h	Fix shared library build on OS X.	pirms 9 gadiem
dh.h	Add missing prototypes.	pirms 8 gadiem
digest.h	Reimplement PKCS#12 key derivation.	pirms 8 gadiem
dsa.h	Add DSA_generate_parameters to decrepit.	pirms 8 gadiem
dtls1.h	Opaquify DTLS structs.	pirms 9 gadiem
ec.h	Restore EC_GROUP_new_by_curve_name and EC_GROUP_set_generator.	pirms 8 gadiem
ec_key.h	Drop support for engines-provided signature verification.	pirms 8 gadiem
ecdh.h	Clean up \|ECDH_compute_key\|.	pirms 9 gadiem
ecdsa.h	Update comments to better document in-place semantics.	pirms 8 gadiem
engine.h	Unwind DH_METHOD and DSA_METHOD.	pirms 9 gadiem
err.h	Have doc.go parse struct comments.	pirms 8 gadiem
evp.h	Remove some easy obj.h dependencies.	pirms 8 gadiem
ex_data.h	Skip free callbacks on empty CRYPTO_EX_DATAs.	pirms 8 gadiem
hkdf.h	Get rid of err function codes.	pirms 9 gadiem
hmac.h	Reimplement PKCS#12 key derivation.	pirms 8 gadiem
lhash.h	Style: fix some header guards	pirms 9 gadiem
lhash_macros.h	Remove hash table lookups from ex_data.	pirms 9 gadiem
md4.h	Add one-shot \|MD4\| function.	pirms 8 gadiem
md5.h	Store the partial block as uint8_t, not uint32_t.	pirms 8 gadiem
mem.h	Add CRYPTO_[malloc\|free\|realloc] as aliases for the OPENSSL_𝑥 names.	pirms 8 gadiem
nid.h	Rename obj_mac.h to nid.h and make it a multiply-includable header.	pirms 8 gadiem
obj.h	Rename obj_mac.h to nid.h and make it a multiply-includable header.	pirms 8 gadiem
obj_mac.h	Rename obj_mac.h to nid.h and make it a multiply-includable header.	pirms 8 gadiem
objects.h	Move public headers to include/openssl/	pirms 10 gadiem
opensslconf.h	Rename opensslfeatures.h to opensslconf.h.	pirms 8 gadiem
opensslv.h	Get version-related functions from crypto.h rather than ssl.h.	pirms 9 gadiem
ossl_typ.h	Move public headers to include/openssl/	pirms 10 gadiem
pem.h	Decouple the EVP and PEM code.	pirms 8 gadiem
pkcs7.h	Move public headers to include/openssl/	pirms 10 gadiem
pkcs8.h	Changes to support node.js's use of PKCS#12.	pirms 8 gadiem
pkcs12.h	Move public headers to include/openssl/	pirms 10 gadiem
poly1305.h	Revert "Enable upstream's Poly1305 code."	pirms 8 gadiem
pqueue.h	Export pqueue functions.	pirms 10 gadiem
rand.h	Add a deterministic PRNG for fuzzing.	pirms 8 gadiem
rc4.h	Add \|RC4_options\| to decrepit.	pirms 8 gadiem
ripemd.h	Add RIPEMD160 support in decrepit.	pirms 8 gadiem
rsa.h	Require the public exponent to be available in RSA blinding.	pirms 8 gadiem
safestack.h	Rename safe_stack.h to safestack.h.	pirms 9 gadiem
sha.h	Store the partial block as uint8_t, not uint32_t.	pirms 8 gadiem
srtp.h	Fold srtp.h into ssl.h.	pirms 9 gadiem
ssl.h	Revert "Banish SSL_add_dir_cert_subjects_to_stack and OPENSSL_DIR_CTX to decrepit."	pirms 8 gadiem
ssl3.h	Remove SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER.	pirms 8 gadiem
stack.h	Remove stack macros for nonexistent types.	pirms 8 gadiem
stack_macros.h	Remove stack macros for nonexistent types.	pirms 8 gadiem
thread.h	Readd CRYPTO_{LOCK\|UNLOCK\|READ\|WRITE}.	pirms 9 gadiem
time_support.h	Include time.h in time_support.h.	pirms 8 gadiem
tls1.h	Update references to the extended master secret draft.	pirms 8 gadiem
type_check.h	Try to fix MSVC and __STDC_VERSION__ again.	pirms 9 gadiem
x509.h	Remove some easy obj.h dependencies.	pirms 8 gadiem
x509_vfy.h	Bring back \|verify_store\|.	pirms 8 gadiem
x509v3.h	Add missing prototypes.	pirms 8 gadiem