[openssl-dev] [openssl.org #3676] [PATCH] Export ASN1 templates for DH and ECDH groups

2016-03-05 Thread Stephen Henson via RT
On Sat Mar 05 19:58:57 2016, matthias.st.pie...@ncp-e.com wrote: > > These functions, although internal, appear to me to be the natural way > to serialize > and deserialize private ECDH groups. They are well tested and reusable > and the only > reason why they are not public is probably because

[openssl-dev] [openssl.org #4380] [PATCH] Missing Sanity Checks for EVP_PKEY_new() in OpenSSL-1.0.2g

2016-03-05 Thread Bill Parker via RT
Hello All, In reviewing code in directory 'crypto/evp', file 'pmeth_gn.c', in function 'EVP_PKEY_keygen()', there is a call to EVP_PKEY_new() which is not checked for a return value of NULL, indicating failure. This test is done in function 'EVP_PKEY_paramgen()', but looks like it was left out

Re: [openssl-dev] [openssl.org #3676] [PATCH] Export ASN1 templates for DH and ECDH groups

2016-03-05 Thread Dr. Matthias St. Pierre via RT
> Von: Stephen Henson via RT [mailto:r...@openssl.org] > Gesendet: Samstag, 5. März 2016 17:53 > An: Dr. Matthias St. Pierre > Cc: openssl-dev@openssl.org > Betreff: [openssl.org #3676] [PATCH] Export ASN1 templates for DH and ECDH > groups > > ... > > The fact we don't export the DHparameters

Re: [openssl-dev] [openssl.org #3163] [PATCH] DSTU-4145-2002 engine implementation

2016-03-05 Thread Ignat Korchagin via RT
Probably, will make a PR. -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=3163 Please log in as guest with password guest if prompted -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #3163] [PATCH] DSTU-4145-2002 engine implementation

2016-03-05 Thread Salz, Rich via RT
Can you make a PR for that? Or just post a diff to objects.txt? -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=3163 Please log in as guest with password guest if prompted -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl-dev] [openssl.org #3676] [PATCH] Export ASN1 templates for DH and ECDH groups

2016-03-05 Thread Stephen Henson via RT
On Sat Mar 05 09:01:48 2016, matthias.st.pie...@ncp-e.com wrote: > Is there any chance that this change will find it's way into OpenSSL > 1.1 ? > The fact we don't export the DHparameters item I'd regard as a bug which should be fixed. The EC one I'm less sure about. This ends up exposing what

[openssl-dev] Static code checker research worth investigating (Communications of the ACM, 03/2016, Vol. 59, No. 03, p. 99)

2016-03-05 Thread Tom Browder
Interesting article in latest issue of subject titled: "A Differential Approach to Undefined Behavior Detection" which may describe procedures not used in other static analysis programs. Article references the authors' website here: http://css.csail.mit.edu/stack which contains more info

Re: [openssl-dev] [openssl.org #3163] [PATCH] DSTU-4145-2002 engine implementation

2016-03-05 Thread Ignat Korchagin via RT
Will do. But, is it still feasible to get DSTU NIDs merged to core code? Regards, Ignat 2016-03-03 5:30 GMT+00:00 Rich Salz via RT : > If this is still of interest, please do it as an external engine, like GOSTnow > is. > -- > Rich Salz, OpenSSL dev team; rs...@openssl.org > >

Re: [openssl-dev] [openssl.org #3676] [PATCH] Export ASN1 templates for DH and ECDH groups

2016-03-05 Thread Dr. Matthias St. Pierre via RT
Is there any chance that this change will find it's way into OpenSSL 1.1 ? Regards, Matthias St. Pierre -Ursprüngliche Nachricht- Von: Rich Salz via RT [mailto:r...@openssl.org] Gesendet: Mittwoch, 2. März 2016 15:28 An: Dr. Matthias St. Pierre Cc: openssl-dev@openssl.org Betreff: