kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
bde00394f0
boringssl/crypto
History
Adam Langley fd4d67cb5b Always generate X25519 private keys that need to be masked. 
In order to ensure that we don't randomly interoperate with
implementations that don't mask scalars correctly, always generate
scalars with the wrong fixed bits.

Change-Id: I82536a856f034cfe4464fc545a99c21b3cff1691
Reviewed-on: https://boringssl-review.googlesource.com/8391
Reviewed-by: David Benjamin <davidben@google.com>
2016-06-20 18:57:55 +00:00
..
aes Switch all 'num' parameters in crypto/modes to unsigned. 2016-04-19 17:56:25 +00:00
asn1 Remove ASN.1 BIOs. 2016-06-14 17:39:30 +00:00
base64 Replace base64 decoding. 2016-05-26 17:59:10 +00:00
bio Wrap MSVC-only warning pragmas in a macro. 2016-06-09 21:29:36 +00:00
bn Return earlier if inverse is not found in |BN_mod_inverse_ex|. 2016-06-16 18:32:35 +00:00
buf Add BUF_MEM_reserve. 2016-05-18 19:09:06 +00:00
bytestring Make tls_open_record always in-place. 2016-06-08 18:39:07 +00:00
chacha Revert "Import chacha-x86.pl fix." 2016-06-09 19:49:12 +00:00
cipher Wrap MSVC-only warning pragmas in a macro. 2016-06-09 21:29:36 +00:00
cmac Fix some malloc test failures. 2016-03-28 17:17:32 +00:00
conf Add missing internal includes. 2016-03-20 16:38:54 +00:00
curve25519 Always generate X25519 private keys that need to be masked. 2016-06-20 18:57:55 +00:00
des Use the straight-forward ROTATE macro. 2015-12-16 19:57:31 +00:00
dh Call |BN_mod_exp_mont_consttime| in crypto/dh. 2016-05-11 22:34:19 +00:00
digest Revert md_len removal from SHA256_CTX and SHA512_CTX. 2016-04-27 19:01:23 +00:00
dsa Don't rely on BN_FLG_CONSTTIME in the DSA code. 2016-06-20 17:17:41 +00:00
ec Don't bother storing the cofactor. 2016-06-20 17:26:02 +00:00
ecdh Clean up |ECDH_compute_key|. 2015-10-27 17:00:25 +00:00
ecdsa Always use Fermat's Little Theorem in ecdsa_sign_setup. 2016-06-20 17:11:42 +00:00
engine
err Always use Fermat's Little Theorem in ecdsa_sign_setup. 2016-06-20 17:11:42 +00:00
evp Fix the name of OPENSSL_add_all_algorithms_conf. 2016-06-15 21:29:50 +00:00
hkdf Fix HKDF leak. 2016-05-20 15:42:01 +00:00
hmac Reimplement PKCS#12 key derivation. 2016-04-19 18:16:38 +00:00
lhash Use non-deprecated methods on windows. 2016-05-19 20:30:50 +00:00
md4 Revert md_len removal from SHA256_CTX and SHA512_CTX. 2016-04-27 19:01:23 +00:00
md5 Revert md_len removal from SHA256_CTX and SHA512_CTX. 2016-04-27 19:01:23 +00:00
modes Wrap MSVC-only warning pragmas in a macro. 2016-06-09 21:29:36 +00:00
newhope Don't align NEWPOLY_POLY. 2016-06-16 17:48:08 +00:00
obj Split unlock functions into read/write variants. 2016-05-31 21:09:29 +00:00
pem Reject inappropriate private key encryption ciphers. 2016-05-03 16:30:08 +00:00
perlasm perlasm/x86_64-xlate.pl: handle binary constants early. 2016-03-17 18:23:40 +00:00
pkcs8 Add standalone PKCS#8 and SPKI fuzzers. 2016-04-25 21:57:28 +00:00
poly1305 Be consistent about 𝑥_tests.txt 2016-06-06 15:57:46 +00:00
rand Wrap MSVC-only warning pragmas in a macro. 2016-06-09 21:29:36 +00:00
rc4 Remove RC4_options from rc4-586.pl. 2016-04-22 21:14:11 +00:00
rsa Split unlock functions into read/write variants. 2016-05-31 21:09:29 +00:00
sha Revert md_len removal from SHA256_CTX and SHA512_CTX. 2016-04-27 19:01:23 +00:00
stack Fix stack macro const-ness. 2016-05-13 18:24:57 +00:00
test Wrap MSVC-only warning pragmas in a macro. 2016-06-09 21:29:36 +00:00
x509 Unwind X509_LU_RETRY and fix a lot of type confusion. 2016-06-16 16:24:44 +00:00
x509v3 Remove ASN1_parse and ASN1_parse_dump. 2016-06-14 17:39:17 +00:00
CMakeLists.txt Banish SSL_add_dir_cert_subjects_to_stack and OPENSSL_DIR_CTX to decrepit. 2016-04-27 18:40:25 +00:00
constant_time_test.c
cpu-aarch64-linux.c Rewrite ARM feature detection. 2016-03-26 04:54:44 +00:00
cpu-arm-linux.c Make CRYPTO_is_NEON_capable aware of the buggy CPU. 2016-04-28 16:42:21 +00:00
cpu-arm.c Rewrite ARM feature detection. 2016-03-26 04:54:44 +00:00
cpu-intel.c Wrap MSVC-only warning pragmas in a macro. 2016-06-09 21:29:36 +00:00
crypto.c Add CRYPTO_has_asm. 2016-05-17 19:03:31 +00:00
ex_data.c Split unlock functions into read/write variants. 2016-05-31 21:09:29 +00:00
internal.h Wrap MSVC-only warning pragmas in a macro. 2016-06-09 21:29:36 +00:00
mem.c Include intrin.h under cover of warning pragmas. 2016-06-16 16:12:32 +00:00
refcount_c11.c
refcount_lock.c Split unlock functions into read/write variants. 2016-05-31 21:09:29 +00:00
refcount_test.c
thread_none.c Split unlock functions into read/write variants. 2016-05-31 21:09:29 +00:00
thread_pthread.c Split unlock functions into read/write variants. 2016-05-31 21:09:29 +00:00
thread_test.c Wrap MSVC-only warning pragmas in a macro. 2016-06-09 21:29:36 +00:00
thread_win.c Wrap MSVC-only warning pragmas in a macro. 2016-06-09 21:29:36 +00:00
thread.c Wrap MSVC-only warning pragmas in a macro. 2016-06-09 21:29:36 +00:00
time_support.c Remove some mingw support cruft. 2016-01-25 23:05:45 +00:00