boringssl

Historique

Adam Langley 764ab9802e Support and test P-224 certificates. Previously we only needed to be able to serve P-224 certificates, but now we anticipate a need to be able to connect and validate them also. Since this requires advertising support for P-224 in the handshake, we need to support P-224 ECDHE too. P-224 support is disabled by default and so clients need to both set the enabled curves explicitly and set a maximum version of TLS 1.2. Change-Id: Idc69580f47334e0912eb431a0db0e78ee2eb5bbe Reviewed-on: https://boringssl-review.googlesource.com/14225 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>		il y a 7 ans
..
aead.h	Remove old ChaCha20-Poly1305 AEAD.	il y a 7 ans
aes.h	Replace keywrap AEADs with upstream's APIs.	il y a 8 ans
arm_arch.h	Remove CRYPTO_set_NEON_functional.	il y a 8 ans
asn1.h	Remove crypto/asn1 LONG and ZLONG.	il y a 7 ans
asn1_mac.h	Purge the remainder of asn1_mac.h.	il y a 8 ans
asn1t.h	Remove BIGNUM and CBIGNUM crypto/asn1 types.	il y a 7 ans
base.h	Support asynchronous ticket decryption with TLS 1.0–1.2.	il y a 7 ans
base64.h	Replace base64 decoding.	il y a 8 ans
bio.h	Remove support for blocking DTLS timeout handling.	il y a 7 ans
blowfish.h	Add decrepit, initially containing CAST and Blowfish.	il y a 9 ans
bn.h	Add BN_is_pow2, BN_mod_pow2, and BN_nnmod_pow2.	il y a 7 ans
buf.h	Fold stack-allocated types into headers.	il y a 8 ans
buffer.h	Add buffer.h for compatibility.	il y a 9 ans
bytestring.h	Correct a typo in ASN.1 type name.	il y a 7 ans
cast.h	Add decrepit, initially containing CAST and Blowfish.	il y a 9 ans
chacha.h	Require in == out for in-place encryption.	il y a 8 ans
cipher.h	Spellcheck our public headers.	il y a 7 ans
cmac.h	Fold stack-allocated types into headers.	il y a 8 ans
conf.h	Fix out-of-memory condition in conf.	il y a 7 ans
cpu.h	Add PPC64LE assembly for AES-GCM.	il y a 8 ans
crypto.h	Add no-op function ENGINE_register_all_complete.	il y a 8 ans
curve25519.h	Add yet another way to spell 32.	il y a 7 ans
des.h	Fix shared library build on OS X.	il y a 9 ans
dh.h	Fold stack-allocated types into headers.	il y a 8 ans
digest.h	Decouple PKCS#12 hash lookup from the OID table.	il y a 7 ans
dsa.h	Spellcheck our public headers.	il y a 7 ans
dtls1.h	Opaquify DTLS structs.	il y a 9 ans
ec.h	Fix a couple of missing spaces in comments.	il y a 7 ans
ec_key.h	Fold stack-allocated types into headers.	il y a 8 ans
ecdh.h	Const-correct ECDH_compute_key.	il y a 8 ans
ecdsa.h	ECDSA: const EC_KEY* arguments where possible.	il y a 7 ans
engine.h	Fold stack-allocated types into headers.	il y a 8 ans
err.h	Spellcheck our public headers.	il y a 7 ans
evp.h	Spellcheck our public headers.	il y a 7 ans
ex_data.h	Skip free callbacks on empty CRYPTO_EX_DATAs.	il y a 8 ans
hkdf.h	Const-correct HKDF_expand.	il y a 8 ans
hmac.h	Fold stack-allocated types into headers.	il y a 8 ans
lhash.h	Remove lh_new's default hash and comparator.	il y a 7 ans
lhash_macros.h	Add CRYPTO_BUFFER and CRYPTO_BUFFER_POOL.	il y a 8 ans
md4.h	Add one-shot \|MD4\| function.	il y a 8 ans
md5.h	Store the partial block as uint8_t, not uint32_t.	il y a 8 ans
mem.h	Fold stack-allocated types into headers.	il y a 8 ans
nid.h	Reimplement objects.pl in Go.	il y a 7 ans
obj.h	Spellcheck our public headers.	il y a 7 ans
obj_mac.h	Rename obj_mac.h to nid.h and make it a multiply-includable header.	il y a 8 ans
objects.h	Move public headers to include/openssl/	il y a 10 ans
opensslconf.h	Rename opensslfeatures.h to opensslconf.h.	il y a 8 ans
opensslv.h	Get version-related functions from crypto.h rather than ssl.h.	il y a 9 ans
ossl_typ.h	Move public headers to include/openssl/	il y a 10 ans
pem.h	Include crypto.h from pem.h.	il y a 8 ans
pkcs7.h	Move public headers to include/openssl/	il y a 10 ans
pkcs8.h	Decouple PKCS8_encrypt and PKCS8_decrypt's core from crypto/asn1.	il y a 7 ans
pkcs12.h	Move public headers to include/openssl/	il y a 10 ans
poly1305.h	Revert "Enable upstream's Poly1305 code."	il y a 8 ans
pool.h	Fix a couple of missing spaces in comments.	il y a 7 ans
rand.h	Add corpora for fuzzers with fuzzer mode disabled.	il y a 8 ans
rc4.h	Add \|RC4_options\| to decrepit.	il y a 8 ans
ripemd.h	Add RIPEMD160 support in decrepit.	il y a 8 ans
rsa.h	size_t the RSA padding add functions.	il y a 7 ans
safestack.h	Rename safe_stack.h to safestack.h.	il y a 9 ans
sha.h	Remove SHA_LBLOCK and SHA_LONG.	il y a 7 ans
srtp.h	Fold srtp.h into ssl.h.	il y a 9 ans
ssl.h	Support and test P-224 certificates.	il y a 7 ans
ssl3.h	Avoid transitioning into SSL_ST_OK and back out.	il y a 7 ans
stack.h	Add STACK_OF(CRYPTO_BUFFER).	il y a 8 ans
stack_macros.h	Add STACK_OF(CRYPTO_BUFFER).	il y a 8 ans
thread.h	Add missing 'does nothing' comments for consistency.	il y a 8 ans
tls1.h	Remove experimental TLS 1.3 short record header extension.	il y a 7 ans
type_check.h	Get OPENSSL_COMPILE_ASSERT working in function bodies.	il y a 7 ans
x509.h	Unexport PKCS5 functions.	il y a 7 ans
x509_vfy.h	Add \|X509_STORE_set0_additional_untrusted\|.	il y a 7 ans
x509v3.h	Fix up macros.	il y a 8 ans