Branch: refs/heads/openssl-3.3
Home: https://github.com/openssl/openssl
Commit: 85a97087a3beb9d4b9f7fbe14d96034d5d9dcee4
https://github.com/openssl/openssl/commit/85a97087a3beb9d4b9f7fbe14d96034d5d9dcee4
Author: sapph2c <arn4...@g.rit.edu>
Date: 2024-05-01 (Wed, 01 May 2024)
Changed paths:
M doc/man3/EVP_PKEY_decrypt.pod
M doc/man3/RSA_public_encrypt.pod
Log Message:
-----------
Fixed typos in EVP_PKEY_decrypt.pod and RSA_public_encrypt.pod
CLA: trivial
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24304)
(cherry picked from commit f4601b6de709a89120c86ad825b70f65b332deed)
Commit: 86ce09a10d01834a82f696b221a01d9e2ca21a18
https://github.com/openssl/openssl/commit/86ce09a10d01834a82f696b221a01d9e2ca21a18
Author: Tomas Mraz <to...@openssl.org>
Date: 2024-05-02 (Thu, 02 May 2024)
Changed paths:
M crypto/bn/bn_lib.c
M crypto/bn/bn_local.h
M crypto/bn/bn_rand.c
M include/internal/constant_time.h
Log Message:
-----------
Make BN_generate_dsa_nonce() constant time and non-biased
Co-authored-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Neil Horman <nhor...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)
(cherry picked from commit d7d1bdcb6aa3d5000bf7f5ebc5518be5c91fd5a5)
Commit: 2c1c0aacbd3fa7cfd706e7df6a73344f99b3c538
https://github.com/openssl/openssl/commit/2c1c0aacbd3fa7cfd706e7df6a73344f99b3c538
Author: Tomas Mraz <to...@openssl.org>
Date: 2024-05-02 (Thu, 02 May 2024)
Changed paths:
M crypto/bn/bn_lib.c
M crypto/bn/bn_local.h
M crypto/bn/bn_rand.c
M crypto/bn/bn_shift.c
M crypto/deterministic_nonce.c
M include/crypto/bn.h
M include/internal/constant_time.h
Log Message:
-----------
Make ossl_gen_deterministic_nonce_rfc6979() constant time
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Neil Horman <nhor...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)
(cherry picked from commit 2d285fa873028f6cff9484a0cdf690fe05d7fb16)
Commit: d99332f612a4ccead17ba5d63c3976aa6bcb68b6
https://github.com/openssl/openssl/commit/d99332f612a4ccead17ba5d63c3976aa6bcb68b6
Author: Tomas Mraz <to...@openssl.org>
Date: 2024-05-02 (Thu, 02 May 2024)
Changed paths:
M crypto/bn/bn_rand.c
M crypto/dsa/dsa_ossl.c
M crypto/ec/ecdsa_ossl.c
M include/crypto/bn.h
Log Message:
-----------
Add ossl_bn_priv_rand_range_fixed_top() and use it for EC/DSA
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Neil Horman <nhor...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)
(cherry picked from commit 13b3ca5c998e6db4f7251a56c43541cb1a422bd0)
Commit: 1c3286a3c7a4361ab57536e7e752850e42d71650
https://github.com/openssl/openssl/commit/1c3286a3c7a4361ab57536e7e752850e42d71650
Author: Tomas Mraz <to...@openssl.org>
Date: 2024-05-02 (Thu, 02 May 2024)
Changed paths:
M crypto/bn/bn_rand.c
M crypto/dsa/dsa_ossl.c
M crypto/ec/ecdsa_ossl.c
M include/crypto/bn.h
Log Message:
-----------
Rename BN_generate_dsa_nonce() to ossl_bn_gen_dsa_nonce_fixed_top()
And create a new BN_generate_dsa_nonce() that corrects the BIGNUM top.
We do this to avoid leaking fixed top numbers via the public API.
Also add a slight optimization in ossl_bn_gen_dsa_nonce_fixed_top()
and make it LE/BE agnostic.
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Neil Horman <nhor...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)
(cherry picked from commit 9c85f6cd2d6debe5ef6ef475ff4bf17e0985f7a2)
Commit: d39f5746d4c45931b5ba34eab617327e880fb5af
https://github.com/openssl/openssl/commit/d39f5746d4c45931b5ba34eab617327e880fb5af
Author: Tomas Mraz <to...@openssl.org>
Date: 2024-05-02 (Thu, 02 May 2024)
Changed paths:
M providers/fips/self_test_data.inc
Log Message:
-----------
Adjust FIPS EC/DSA self test data for different nonce generation
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Neil Horman <nhor...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)
(cherry picked from commit 8a1f65468064e39f65ef4918c62db73a9eef80e4)
Commit: 375447bac3ba98b97fe2a4c8b3c797fc0b2f4234
https://github.com/openssl/openssl/commit/375447bac3ba98b97fe2a4c8b3c797fc0b2f4234
Author: Tomas Mraz <to...@openssl.org>
Date: 2024-05-02 (Thu, 02 May 2024)
Changed paths:
M crypto/bn/bn_rand.c
M crypto/deterministic_nonce.c
Log Message:
-----------
Correct top for EC/DSA nonces if BN_DEBUG is on
Otherwise following operations would bail out in bn_check_top().
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Neil Horman <nhor...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24265)
(cherry picked from commit a380ae85be287045b1eaa64d23942101a426c080)
Compare: https://github.com/openssl/openssl/compare/91d5fd54ee3a...375447bac3ba
To unsubscribe from these emails, change your notification settings at
https://github.com/openssl/openssl/settings/notifications
