[openssl/openssl] a1f703: rsa: fix bn_reduce_once_in_place call for rsaz_mod...

2022-06-22 Thread pauli
  Branch: refs/heads/openssl-3.0
  Home:   https://github.openssl.org/openssl/openssl
  Commit: a1f7034bbd8f0730d360211f5ba0feeaef0b7b2c
  
https://github.openssl.org/openssl/openssl/commit/a1f7034bbd8f0730d360211f5ba0feeaef0b7b2c
  Author: Xi Ruoyao 
  Date:   2022-06-23 (Thu, 23 Jun 2022)

  Changed paths:
M crypto/bn/rsaz_exp_x2.c

  Log Message:
  ---
  rsa: fix bn_reduce_once_in_place call for rsaz_mod_exp_avx512_x2

bn_reduce_once_in_place expects the number of BN_ULONG, but factor_size
is moduli bit size.

Fixes #18625.

Signed-off-by: Xi Ruoyao 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18626)

(cherry picked from commit 4d8a88c134df634ba610ff8db1eb8478ac5fd345)




[openssl/openssl] 4d8a88: rsa: fix bn_reduce_once_in_place call for rsaz_mod...

2022-06-22 Thread pauli
  Branch: refs/heads/master
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 4d8a88c134df634ba610ff8db1eb8478ac5fd345
  
https://github.openssl.org/openssl/openssl/commit/4d8a88c134df634ba610ff8db1eb8478ac5fd345
  Author: Xi Ruoyao 
  Date:   2022-06-23 (Thu, 23 Jun 2022)

  Changed paths:
M crypto/bn/rsaz_exp_x2.c

  Log Message:
  ---
  rsa: fix bn_reduce_once_in_place call for rsaz_mod_exp_avx512_x2

bn_reduce_once_in_place expects the number of BN_ULONG, but factor_size
is moduli bit size.

Fixes #18625.

Signed-off-by: Xi Ruoyao 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18626)




Coverity Scan: Analysis completed for openssl/openssl

2022-06-22 Thread scan-admin


Your request for analysis of openssl/openssl has been completed 
successfully.
The results are available at 
https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0qcxCbhZ31OYv50yoN-2BQSVjTtaSz8wS4wOr7HlekBtV1P4YRtWclMVkCdvAA-3D-3DiGfm_MulOTlHne1IxTRELXXnGni8d68xSVF-2BUCe3a7Ux-2BjeEs08krCNcFvnMCU7-2FpWYjLCy8uIa9wgvjfWkCvkyZ3jz6ihuGt6tKZlw9XDjkD-2BH-2FwEdXjzeMh1WphzDl-2BXP9sKcIEleZFmnT-2BnKEX0jKPZApBS485aqoR2WyiMrAGI9x9MNYfzm9-2FrZ6eGY1xA1B308EKeYOuNOFrRCfTVfUv4sqY9HkE9NB8XBkV7KwHJIw-3D

Build ID: 463397

Analysis Summary:
   New defects found: 1
   Defects eliminated: 0

If you have difficulty understanding any defects, email us at 
scan-ad...@coverity.com,
or post your question to StackOverflow
at 
https://u15810271.ct.sendgrid.net/ls/click?upn=CTPegkVN6peWFCMEieYYmPWIi1E4yUS9EoqKFcNAiqhRq8qmgeBE-2Bdt3uvFRAFXd-2FlwX83-2FVVdybfzIMOby0qA-3D-3DqVDq_MulOTlHne1IxTRELXXnGni8d68xSVF-2BUCe3a7Ux-2BjeEs08krCNcFvnMCU7-2FpWYjLCy8uIa9wgvjfWkCvkyZ3j8oAS3XOhpcJbBLc3X1c2x83Wj-2B58TRMPN01m7NZoDrgJocsSdbYX69vF-2B41RFCCtQ4c3QTInjuFyhRNI74BCs-2FO3cMvysK-2BWC8NI5dZz6B0dWvg45rx0v6mNpTWNjEO6JRuXHoL7z6I8-2FPVEP7t-2F5Y-3D


[openssl/openssl] 7ae2bc: Add SM3 implementation in RISC-V Zksh asm

2022-06-22 Thread Tomas Mraz
  Branch: refs/heads/master
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 7ae2bc9df6e0916a8f16183f07dfa1815dd4b66d
  
https://github.openssl.org/openssl/openssl/commit/7ae2bc9df6e0916a8f16183f07dfa1815dd4b66d
  Author: Hongren (Zenithal) Zheng 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M crypto/sm3/sm3_local.h

  Log Message:
  ---
  Add SM3 implementation in RISC-V Zksh asm

This works for both RV32 and RV64

Signed-off-by: Hongren (Zenithal) Zheng 

Reviewed-by: Paul Dale 
Reviewed-by: Tomas Mraz 
(Merged from https://github.com/openssl/openssl/pull/18287)


  Commit: eea820f3e239a4c11d618741fd5d00a6bc877347
  
https://github.openssl.org/openssl/openssl/commit/eea820f3e239a4c11d618741fd5d00a6bc877347
  Author: Hongren (Zenithal) Zheng 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M crypto/sm3/sm3_local.h
M include/crypto/md32_common.h

  Log Message:
  ---
  Add ROTATE inline asm support for SM3

And move ROTATE inline asm to header.

Now this benefits SM3, SHA (when with Zbb only and no Zknh)
and other hash functions

Reviewed-by: Paul Dale 
Reviewed-by: Tomas Mraz 
(Merged from https://github.com/openssl/openssl/pull/18287)


Compare: 
https://github.openssl.org/openssl/openssl/compare/5317b6ee1fc3...eea820f3e239


[openssl/openssl] 5317b6: Add deprecation macro for 3.1 and deprecate OPENSS...

2022-06-22 Thread Hugo Landau
  Branch: refs/heads/master
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 5317b6ee1fc3db20de5976fbb46cc49a45c0768a
  
https://github.openssl.org/openssl/openssl/commit/5317b6ee1fc3db20de5976fbb46cc49a45c0768a
  Author: Hugo Landau 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M CHANGES.md
M apps/include/function.h
M crypto/core_namemap.c
M crypto/engine/eng_local.h
M crypto/lhash/lh_stats.c
M crypto/objects/obj_local.h
M crypto/property/defn_cache.c
M crypto/property/property.c
M crypto/property/property_string.c
M crypto/store/store_local.h
M doc/internal/man7/deprecation.pod
M doc/man3/OPENSSL_LH_COMPFUNC.pod
M doc/man3/OPENSSL_LH_stats.pod
M doc/man7/migration_guide.pod
M include/internal/cryptlib.h
M include/openssl/lhash.h.in
M include/openssl/macros.h
M ssl/ssl_local.h
M test/lhash_test.c
M util/find-doc-nits
M util/libcrypto.num
M util/missingmacro.txt
M util/perl/OpenSSL/ParseC.pm

  Log Message:
  ---
  Add deprecation macro for 3.1 and deprecate OPENSSL_LH_stats

Reviewed-by: Paul Dale 
Reviewed-by: Tomas Mraz 
(Merged from https://github.com/openssl/openssl/pull/17937)




[openssl/openssl] bcb52b: Optimize chacha20 on aarch64 by SVE2

2022-06-22 Thread pauli
  Branch: refs/heads/master
  Home:   https://github.openssl.org/openssl/openssl
  Commit: bcb52bcc9f9c36a85d037976676fd5ca52f307cd
  
https://github.openssl.org/openssl/openssl/commit/bcb52bcc9f9c36a85d037976676fd5ca52f307cd
  Author: Daniel Hu 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M crypto/chacha/asm/chacha-armv8-sve.pl

  Log Message:
  ---
  Optimize chacha20 on aarch64 by SVE2

This patch improves existing chacha20 SVE patch by using SVE2,
which is an optional architecture feature of aarch64, with XAR
instruction that can improve the performance of chacha20.

Signed-off-by: Daniel Hu 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18522)




[openssl/openssl] 3cb370: test/v3nametest.c: Add check for OPENSSL_malloc

2022-06-22 Thread pauli
  Branch: refs/heads/openssl-3.0
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 3cb3708c2bf86dbf0cb8a1ada0964738c96a9b07
  
https://github.openssl.org/openssl/openssl/commit/3cb3708c2bf86dbf0cb8a1ada0964738c96a9b07
  Author: Jiasheng Jiang 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M test/v3nametest.c

  Log Message:
  ---
  test/v3nametest.c: Add check for OPENSSL_malloc

As the potential failure of the OPENSSL_malloc(),
it should be better to add the check and return
error if fails.

Signed-off-by: Jiasheng Jiang 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18573)

(cherry picked from commit b147b9daf17744d529f23b5da40397a6071a88aa)




[openssl/openssl] b147b9: test/v3nametest.c: Add check for OPENSSL_malloc

2022-06-22 Thread pauli
  Branch: refs/heads/master
  Home:   https://github.openssl.org/openssl/openssl
  Commit: b147b9daf17744d529f23b5da40397a6071a88aa
  
https://github.openssl.org/openssl/openssl/commit/b147b9daf17744d529f23b5da40397a6071a88aa
  Author: Jiasheng Jiang 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M test/v3nametest.c

  Log Message:
  ---
  test/v3nametest.c: Add check for OPENSSL_malloc

As the potential failure of the OPENSSL_malloc(),
it should be better to add the check and return
error if fails.

Signed-off-by: Jiasheng Jiang 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18573)




[openssl/openssl] 6408e7: test/evp_test.c: Add check for OPENSSL_strdup

2022-06-22 Thread pauli
  Branch: refs/heads/openssl-3.0
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 6408e7cf8acad6f816268f2f62e17c8c0985c1c3
  
https://github.openssl.org/openssl/openssl/commit/6408e7cf8acad6f816268f2f62e17c8c0985c1c3
  Author: Jiasheng Jiang 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M test/evp_test.c

  Log Message:
  ---
  test/evp_test.c: Add check for OPENSSL_strdup

As the potential failure of the OPENSSL_strdup(),
it should be better to check the return value and
return error if fails.

Signed-off-by: Jiasheng Jiang 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18592)

(cherry picked from commit 5203a8dfdc209f05c7dbd9c1e5208743fcaa6752)




[openssl/openssl] 5203a8: test/evp_test.c: Add check for OPENSSL_strdup

2022-06-22 Thread pauli
  Branch: refs/heads/master
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 5203a8dfdc209f05c7dbd9c1e5208743fcaa6752
  
https://github.openssl.org/openssl/openssl/commit/5203a8dfdc209f05c7dbd9c1e5208743fcaa6752
  Author: Jiasheng Jiang 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M test/evp_test.c

  Log Message:
  ---
  test/evp_test.c: Add check for OPENSSL_strdup

As the potential failure of the OPENSSL_strdup(),
it should be better to check the return value and
return error if fails.

Signed-off-by: Jiasheng Jiang 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18592)




[openssl/openssl] a58978: Improve diagnostics on setting groups

2022-06-22 Thread beldmit
  Branch: refs/heads/openssl-3.0
  Home:   https://github.openssl.org/openssl/openssl
  Commit: a58978f1bf44706f88395d9011a7be405a0c6e4b
  
https://github.openssl.org/openssl/openssl/commit/a58978f1bf44706f88395d9011a7be405a0c6e4b
  Author: Dmitry Belyavskiy 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M ssl/t1_lib.c

  Log Message:
  ---
  Improve diagnostics on setting groups

- If keymgmmt is not available, it's not an error but the error message
  persists in stack
- when setting groups, it's worth saying which group is not available
Fixes #18585

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18591)

(cherry picked from commit ce8822b7e5f4fdf836677faee336a5cf996d4363)




[openssl/openssl] ce8822: Improve diagnostics on setting groups

2022-06-22 Thread beldmit
  Branch: refs/heads/master
  Home:   https://github.openssl.org/openssl/openssl
  Commit: ce8822b7e5f4fdf836677faee336a5cf996d4363
  
https://github.openssl.org/openssl/openssl/commit/ce8822b7e5f4fdf836677faee336a5cf996d4363
  Author: Dmitry Belyavskiy 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M ssl/t1_lib.c

  Log Message:
  ---
  Improve diagnostics on setting groups

- If keymgmmt is not available, it's not an error but the error message
  persists in stack
- when setting groups, it's worth saying which group is not available
Fixes #18585

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18591)




[openssl/openssl] 386ab7: Add test cases for verification of time stamping c...

2022-06-22 Thread pauli
  Branch: refs/heads/master
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 386ab7f1fefdd77521e670d9593e9894e2774be0
  
https://github.openssl.org/openssl/openssl/commit/386ab7f1fefdd77521e670d9593e9894e2774be0
  Author: Lutz Jaenicke 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
A test/certs/ee-timestampsign-CABforum-anyextkeyusage.pem
A test/certs/ee-timestampsign-CABforum-crlsign.pem
A test/certs/ee-timestampsign-CABforum-keycertsign.pem
A test/certs/ee-timestampsign-CABforum-noncritxku.pem
A test/certs/ee-timestampsign-CABforum-serverauth.pem
A test/certs/ee-timestampsign-CABforum.pem
A test/certs/ee-timestampsign-rfc3161-digsig.pem
A test/certs/ee-timestampsign-rfc3161-noncritxku.pem
A test/certs/ee-timestampsign-rfc3161.pem
M test/certs/setup.sh
M test/recipes/25-test_verify.t

  Log Message:
  ---
  Add test cases for verification of time stamping certificates

Test makes sure, that both time stamping certificate according to rfc3161 (no
requirements for keyUsage extension) and according to CAB forum (keyUsage
extension must be digitalSignature and be set critical) are accepted. Misuse
cases as stated in CAB forum are rejected, only exeption is a missing
"critial" flag on keyUsage.

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18597)




[openssl/openssl] 3ec2ba: apps/s_server.c: Add check for OPENSSL_strdup

2022-06-22 Thread pauli
  Branch: refs/heads/openssl-3.0
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 3ec2baf41dd6a414347f1ff6c7cec6a996e0afe1
  
https://github.openssl.org/openssl/openssl/commit/3ec2baf41dd6a414347f1ff6c7cec6a996e0afe1
  Author: Jiasheng Jiang 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M apps/s_server.c

  Log Message:
  ---
  apps/s_server.c: Add check for OPENSSL_strdup

As the potential failure of the OPENSSL_strdup(),
it should be better to check the return value and
return error if fails.

Signed-off-by: Jiasheng Jiang 

Reviewed-by: Todd Short 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18595)

(cherry picked from commit a6a2dd9f60b3f3e93de1337ee84f9e8f33bc86a8)




[openssl/openssl] a6a2dd: apps/s_server.c: Add check for OPENSSL_strdup

2022-06-22 Thread pauli
  Branch: refs/heads/master
  Home:   https://github.openssl.org/openssl/openssl
  Commit: a6a2dd9f60b3f3e93de1337ee84f9e8f33bc86a8
  
https://github.openssl.org/openssl/openssl/commit/a6a2dd9f60b3f3e93de1337ee84f9e8f33bc86a8
  Author: Jiasheng Jiang 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M apps/s_server.c

  Log Message:
  ---
  apps/s_server.c: Add check for OPENSSL_strdup

As the potential failure of the OPENSSL_strdup(),
it should be better to check the return value and
return error if fails.

Signed-off-by: Jiasheng Jiang 

Reviewed-by: Todd Short 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18595)




[openssl/openssl] 281483: crypto/x509/by_store.c: Add check for OPENSSL_strdup

2022-06-22 Thread pauli
  Branch: refs/heads/openssl-3.0
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 2814834bf2f4e7923294326b0251c3a6579b1312
  
https://github.openssl.org/openssl/openssl/commit/2814834bf2f4e7923294326b0251c3a6579b1312
  Author: Jiasheng Jiang 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M crypto/x509/by_store.c

  Log Message:
  ---
  crypto/x509/by_store.c: Add check for OPENSSL_strdup

As the potential failure of the OPENSSL_strdup(),
it should be better to check the return value and
return error if fails.

Signed-off-by: Jiasheng Jiang 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18593)

(cherry picked from commit e163969d3580e5b797fcebde0d3000302912ef18)




[openssl/openssl] e16396: crypto/x509/by_store.c: Add check for OPENSSL_strdup

2022-06-22 Thread pauli
  Branch: refs/heads/master
  Home:   https://github.openssl.org/openssl/openssl
  Commit: e163969d3580e5b797fcebde0d3000302912ef18
  
https://github.openssl.org/openssl/openssl/commit/e163969d3580e5b797fcebde0d3000302912ef18
  Author: Jiasheng Jiang 
  Date:   2022-06-22 (Wed, 22 Jun 2022)

  Changed paths:
M crypto/x509/by_store.c

  Log Message:
  ---
  crypto/x509/by_store.c: Add check for OPENSSL_strdup

As the potential failure of the OPENSSL_strdup(),
it should be better to check the return value and
return error if fails.

Signed-off-by: Jiasheng Jiang 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/18593)