summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* c6x/* "facelift":OpenSSL-fips-2_0-devAndy Polyakov2017-08-309-4/+115
| | | | | | | | | | | | - make scripts executable; - "parameterize" platform selection in c6x/do_fips; - add c6x/fips_algvs.mak; - add c6x/run6x.js launcher for more recent CCS versions; Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Stephen Henson <steve@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4265)
* Add some C64x assembly modules [by minor adjustments of C64x+ modules].Andy Polyakov2017-08-306-0/+3011
| | | | | | | | | | | | | | AES, SHA256 and SHA512 modules can actually replace corresponding C64x+ modules. This is because C64x+ instructions don't actually provide "killer-argument" advantage in these modules. As for SHA1, even though its performance exactly same, C64x+ module is more responsive to interrupts, i.e. doesn't inhibit them for as long periods as C64x module. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Stephen Henson <steve@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4265)
* Add "wishlist" of desired but possibly unobtainable fixes/improvementsSteve Marquess2017-08-211-0/+31
| | | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Stephen Henson <steve@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4208)
* Add linux-mips32be target for new platformSteve Marquess2017-08-162-1/+9
| | | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Andy Polyakov <appro@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3300)
* FIPS MIPS assembly pack refresh.Andy Polyakov2016-07-015-516/+165
| | | | | | Backport CVE-2014-3570 bug and postability fixes. Reviewed-by: Rich Salz <rsalz@openssl.org>
* PowerPC assembly pack: add POWER8 support.Andy Polyakov2016-06-2121-36/+5096
| | | | Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* crypto/modes/modes_lcl.h: let STRICT_ALIGNMENT be on ARMv7.Andy Polyakov2015-05-201-4/+1
| | | | | | | | | | | | | | While ARMv7 in general is capable of unaligned access, not all instructions actually are. And trouble is that compiler doesn't seem to differentiate those capable and incapable of unaligned access. Side effect is that kernel goes into endless loop retrying same instruction triggering unaligned trap. Problem was observed in xts128.c and ccm128.c modules. It's possible to resolve it by using (volatile u32*) casts, but letting STRICT_ALIGNMENT be feels more appropriate. (cherry picked from commit 3bdd80521a81d50ade4214053cd9b293f920a77b) Reviewed-by: Dr. Stephen Henson <steve@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org>
* util/incore update that allows FINGERPRINT_premain-free build.Andy Polyakov2015-05-132-3/+6
| | | | | | | | | | | | | As for complementary fips.c modification. Goal is to ensure that FIPS_signature does not end up in .bss segment, one guaranteed to be zeroed upon program start-up. One would expect explicitly initialized values to end up in .data segment, but it turned out that values explicitly initialized with zeros can end up in .bss. The modification does not affect program flow, because first byte was the only one of significance [to FINGERPRINT_premain]. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> (cherry picked from commit 34f39b062c76fbd3082521b26edee7f53afc061d)
* Add support for Android 5, both 32- and 64-bit cases.Andy Polyakov2015-05-135-2/+15
| | | | | | | | | | | | | | | | Special note about additional -pie flag in android-armv7. The initial reason for adding it is that Android 5 refuses to execute non-PIE binaries. But what about older systems and previously validated platforms? It should be noted that flag is not used when compiling object code, fipscanister.o in this context, only when linking applications, *supplementary* fips_algvs used during validation procedure. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> (cherry picked from commit 6db8e3bdc9ef83d83b83f3eec9722c96daa91f82) Resolved conflicts: test/fips_algvs.c
* Additional vxWorks target.Andy Polyakov2015-05-133-0/+67
| | | | | Reviewed-by: Dr. Stephen Henson <steve@openssl.org> (cherry picked from commit 50e2a0ea4615124aa159e8f43317dedcf0cfcaa2)
* Configure: add ios-cross target with ARM assembly support.Andy Polyakov2015-05-134-1/+20
| | | | | | | | | Reviewed-by: Dr. Stephen Henson <steve@openssl.org> (cherry picked from commit 97fbb0c88c2f601f98e25e57b9f6f9679d14f3a8) Resolved conflicts: Configure config
* Add iOS-specific armv4cpud.S module.Andy Polyakov2015-05-131-0/+210
| | | | | | | | | Normally it would be generated from a perlasm module, but doing so would affect existing armv4cpuid.S, which in turn would formally void previously validated platforms. Hense separate module is generated. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> (cherry picked from commit 5837e90f08ffcf5ad84933793bc285630018ce26)
* Adapt ARM assembly pack for iOS.Andy Polyakov2015-05-137-21/+136
| | | | | | | | | | This is achieved by filtering perlasm output through arm-xlate.pl. But note that it's done only if "flavour" argument is not 'void'. As 'void' is default value for other ARM targets, permasm output is not actually filtered on previously validated platforms. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> (cherry picked from commit 874faf2ffb22187ad5483d9691a3a2eb7112f161)
* Configure: engage ARMv8 assembly pack in ios64-cross target.Andy Polyakov2015-05-132-3/+38
| | | | | | | | Reviewed-by: Dr. Stephen Henson <steve@openssl.org> (cherry picked from commit c6d109051d1c2b9a453427a2a53ad3d40acc9276) Resolved Conflicts: Configure
* Engage ARMv8 assembly pack.Andy Polyakov2015-05-134-6/+177
| | | | | Reviewed-by: Dr. Stephen Henson <steve@openssl.org> (cherry picked from commit 083ed53defb42ab4d3488bc7f80d9170d22293e7)
* Add ARMv8 assembly pack.Andy Polyakov2015-05-1310-0/+2359
| | | | | Reviewed-by: Dr. Stephen Henson <steve@openssl.org> (cherry picked from commit b84813ec017cb03b8dd0b85bce2bb3e021c45685)
* Configure: add ios64 target.Andy Polyakov2014-10-233-2/+53
| | | | | Reviewed-by: Steve Marquess <marquess@openssl.org> (cherry picked from commit b06f7d9ac0752083e7443dddc9e5ac3e198063d4)
* Add iOS-specific FIPS addendum code.Andy Polyakov2014-10-236-0/+1242
| | | | Reviewed-by: Steve Marquess <marquess@openssl.org>
* RT2849: Redundant check of "dsa" variable.Rich Salz2014-09-081-2/+6
| | | | | | | | In the current code, the check isn't redundant. And in fact the REAL check was missing. This avoids a NULL-deref crash. Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* Fix copy for CCM, GCM and XTS.Dr. Stephen Henson2014-07-111-3/+58
| | | | | | | | | | Internal pointers in CCM, GCM and XTS contexts should either be NULL or set to point to the appropriate key schedule. This needs to be adjusted when copying contexts. Combination of 2 commits: 370bf1d708e6d7af42e1752fb078d0822c9bc73d c2fd5d79ffc4fc9d120a0faad579ce96473e6a2f
* Only cleanse sbuf if it is not NULL.Dr. Stephen Henson2014-07-051-2/+5
| | | | PR#2339
* Check return smaller of ret and f.Alan Hryngle2014-07-051-1/+1
| | | | | PR#3418. (cherry picked from commit d4909f9a8dbbda9c5d140476b34a8f80b02b51f3)
* cryptlib.c: fix typo in WIN32 version of OPENSSL_showfatal.Andy Polyakov2014-04-021-1/+1
|
* Add verbose option to fips_test_suite to give additional details ofDr. Stephen Henson2013-01-231-64/+356
| | | | | | | | | | all operations. Add ecdsa test. Test crypto operations are inhibited on test failures. Test on demand POST.
* Now GMAC is fixed remove workaround.Dr. Stephen Henson2013-01-161-4/+0
|
* Add .gitignoreDr. Stephen Henson2013-01-101-0/+70
|
* Make DES3 and ECDSA self tests continue with remaining cases onDr. Stephen Henson2012-12-283-54/+42
| | | | | | | failure. Make fips_test_suite induced failure work on every possible subtest instead of just categories of subtest.
* VC-32.pl: fix typo [from HEAD].Andy Polyakov2012-12-161-1/+1
| | | | Submitted by: Pierre Delaage
* Cumulative updates from HEAD.Andy Polyakov2012-10-296-30/+52
|
* update DRBG to handle new file formatOpenSSL-fips-2_0-pl1Dr. Stephen Henson2012-10-191-2/+10
|
* aix[64]-cc: get MT support right (gcc targets are not affected).Dr. Stephen Henson2012-10-162-4/+4
| | | | (backport from HEAD)
* Don't require tag before ciphertext in AESGCM modeDr. Stephen Henson2012-10-161-2/+2
|
* e_aes.c: uninitialized variable in aes_ccm_init_key.Dr. Stephen Henson2012-10-151-0/+1
| | | | | | PR: 2874 Submitted by: Tomas Mraz (backport from HEAD)
* reset ctx->num for CTR mode for FIPS EVPDr. Stephen Henson2012-10-141-0/+1
|
* sha1-armv4-large.pl: comply with ABI.Dr. Stephen Henson2012-10-141-1/+1
| | | | (backport from HEAD)
* gcm128.c: fix AAD-only case with AAD length not divisible by 16.Dr. Stephen Henson2012-10-141-1/+1
| | | | | | PR: 2859 Submitted by: John Foley (backport from HEAD)
* optimize make_kn (from HEAD, by Andy)Dr. Stephen Henson2012-10-141-9/+7
|
* CMAC reset fix (from HEAD)Dr. Stephen Henson2012-10-141-0/+2
|
* Add BSD-ppc85xx support and avoid copying overlapping buffers in fips_dssvs.cDr. Stephen Henson2012-10-145-13/+31
|
* Add support for Windows CE and C64+ to FIPS module. (from fips2-stable)Dr. Stephen Henson2012-10-0440-83/+4304
|
* file TI_CGTOOLS.pl was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 ↵Dr. Stephen Henson2012-10-040-0/+0
| | | | 14:27:39 +0000
* file fips_standalone_sha1 was added on branch OpenSSL-fips-2_0-dev on ↵Dr. Stephen Henson2012-10-040-0/+0
| | | | 2012-10-04 14:27:38 +0000
* file run6x was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 14:27:33 +0000Dr. Stephen Henson2012-10-040-0/+0
|
* file incore6x was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 ↵Dr. Stephen Henson2012-10-040-0/+0
| | | | 14:27:33 +0000
* file hmac_sha1.pl was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 ↵Dr. Stephen Henson2012-10-040-0/+0
| | | | 14:27:33 +0000
* file fipscanister.cmd was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 ↵Dr. Stephen Henson2012-10-040-0/+0
| | | | 14:27:33 +0000
* file fips_standalone_sha1 was added on branch OpenSSL-fips-2_0-dev on ↵Dr. Stephen Henson2012-10-040-0/+0
| | | | 2012-10-04 14:27:33 +0000
* file env was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 14:27:33 +0000Dr. Stephen Henson2012-10-040-0/+0
|
* file do_fips was added on branch OpenSSL-fips-2_0-dev on 2012-10-04 14:27:33 ↵Dr. Stephen Henson2012-10-040-0/+0
| | | | +0000
* automatically make output directory is using minimal scriptDr. Stephen Henson2012-06-071-3/+4
|
View Lorry Controller Status