| a0f8d28 | Steve Marquess | 04 July 2015, 19:18:46 UTC | Add new iOS subdirectory Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Stephen Henson <steve@openssl.org> | 04 July 2015, 19:18:46 UTC |
| 0f38e9c | Andy Polyakov | 04 July 2015, 19:17:45 UTC | Add new VxWorks x86 platform Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Stephen Henson <steve@openssl.org> | 04 July 2015, 19:17:45 UTC |
| 34f39b0 | Andy Polyakov | 11 May 2015, 10:16:01 UTC | util/incore update that allows FINGERPRINT_premain-free build. As for complementary fips.c modification. Goal is to ensure that FIPS_signature does not end up in .bss segment, one guaranteed to be zeroed upon program start-up. One would expect explicitly initialized values to end up in .data segment, but it turned out that values explicitly initialized with zeros can end up in .bss. The modification does not affect program flow, because first byte was the only one of significance [to FINGERPRINT_premain]. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> | 13 May 2015, 14:48:08 UTC |
| 6db8e3b | Andy Polyakov | 11 May 2015, 10:04:12 UTC | Add support for Android 5, both 32- and 64-bit cases. Special note about additional -pie flag in android-armv7. The initial reason for adding it is that Android 5 refuses to execute non-PIE binaries. But what about older systems and previously validated platforms? It should be noted that flag is not used when compiling object code, fipscanister.o in this context, only when linking applications, *supplementary* fips_algvs used during validation procedure. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> | 13 May 2015, 14:47:55 UTC |
| 50e2a0e | Andy Polyakov | 11 May 2015, 09:56:30 UTC | Additional vxWorks target. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> | 13 May 2015, 14:47:43 UTC |
| 3f137e6 | Andy Polyakov | 11 May 2015, 09:55:19 UTC | fipsalgtest.pl update. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> | 13 May 2015, 14:47:32 UTC |
| 97fbb0c | Andy Polyakov | 11 May 2015, 09:53:41 UTC | Configure: add ios-cross target with ARM assembly support. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> | 13 May 2015, 14:47:21 UTC |
| 5837e90 | Andy Polyakov | 11 May 2015, 09:50:29 UTC | Add iOS-specific armv4cpud.S module. Normally it would be generated from a perlasm module, but doing so would affect existing armv4cpuid.S, which in turn would formally void previously validated platforms. Hense separate module is generated. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> | 13 May 2015, 14:47:10 UTC |
| 874faf2 | Andy Polyakov | 11 May 2015, 09:43:55 UTC | Adapt ARM assembly pack for iOS. This is achieved by filtering perlasm output through arm-xlate.pl. But note that it's done only if "flavour" argument is not 'void'. As 'void' is default value for other ARM targets, permasm output is not actually filtered on previously validated platforms. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> | 13 May 2015, 14:46:58 UTC |
| 0b45df7 | Andy Polyakov | 11 May 2015, 09:20:52 UTC | crypto/modes/modes_lcl.h: let STRICT_ALIGNMENT be on iOS. While ARMv7 in general is capable of unaligned access, not all instructions actually are. And trouble is that compiler doesn't seem to differentiate those capable and incapable of unaligned access. As result exceptions could be observed in xts128.c and ccm128.c modules. Contemporary Linux kernels handle such exceptions by performing requested operation and resuming execution as is if it succeeded. While on iOS exception is fatal. Correct solution is to let STRICT_ALIGNMENT be on all ARM platforms, but doing so is in formal conflict with FIPS maintenance policy. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> | 13 May 2015, 14:46:44 UTC |
| 2bd3976 | Andy Polyakov | 11 May 2015, 09:39:04 UTC | Add iOS-specific fips_algvs application. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> | 13 May 2015, 14:46:26 UTC |
| c6d1090 | Andy Polyakov | 11 May 2015, 09:36:48 UTC | Configure: engage ARMv8 assembly pack in ios64-cross target. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> | 13 May 2015, 14:45:50 UTC |
| 083ed53 | Andy Polyakov | 11 May 2015, 09:34:56 UTC | Engage ARMv8 assembly pack. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> | 13 May 2015, 14:45:07 UTC |
| b84813e | Andy Polyakov | 11 May 2015, 09:18:04 UTC | Add ARMv8 assembly pack. Reviewed-by: Dr. Stephen Henson <steve@openssl.org> | 13 May 2015, 14:43:25 UTC |
| 7447e65 | Dr. Stephen Henson | 24 October 2014, 19:41:49 UTC | support for iOS 7.x/ARMv8 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Steve Marquess <marquess@openssl.org | 24 October 2014, 19:41:49 UTC |
| 60cd2b7 | Dr. Stephen Henson | 24 October 2014, 19:32:27 UTC | Update fipsalgtest.pl to cope with changes in file names and format X9.31 tests need to look in files for '9.31' RSA-PSS tests may contain additonal text as well as "salt len: n". We now just look at the start of a filename for a match. Separate ECDSA2 test list. Reorder test to handle new formats: for example PQGVer for DSA2 can be detected based on file format but if this fails revert to PQGVER. For future debugging add a --debug-detect option which prints out more details of the test detection including the first few lines of each request file. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Steve Marquess <marquess@openssl.org | 24 October 2014, 19:32:27 UTC |
| 7fb7844 | Dr. Stephen Henson | 11 July 2014, 18:12:21 UTC | Remove Dual EC DRBG again... Dual EC DRBG removal now accepted for 2.0.8 onwards. | 11 July 2014, 18:14:15 UTC |
| 005563b | Dr. Stephen Henson | 12 May 2014, 17:38:41 UTC | Add linux-x86_64-cross target. | 12 May 2014, 17:38:41 UTC |
| 3b43568 | Dr. Stephen Henson | 12 May 2014, 17:35:30 UTC | Revert "Remove Dual EC DRBG from FIPS module." Revert Dual EC DRBG removal commit as it was not accepted for 2.0.7 version of the module. This reverts commit 200f249b8c3b6439e0200d01caadc24806f1a983. | 12 May 2014, 17:35:30 UTC |
| 2659a2a | Dr. Stephen Henson | 16 December 2013, 21:41:07 UTC | QNX6-armv4 support. | 16 December 2013, 21:41:07 UTC |
| 200f249 | Dr. Stephen Henson | 09 December 2013, 21:54:50 UTC | Remove Dual EC DRBG from FIPS module. | 16 December 2013, 19:00:58 UTC |
| 4089bd6 | Dr. Stephen Henson | 16 December 2013, 14:29:20 UTC | eCos ARMv4/5 support | 16 December 2013, 14:29:20 UTC |
| baab0cf | Andy Polyakov | 17 August 2012, 19:57:04 UTC | sha1-armv4-large.pl: comply with ABI. (cherry picked from commit 1a9d60d2e3b02d5e1954fc71c92bf3a6af691495) | 16 December 2013, 14:08:56 UTC |
| 7e98d95 | Dr. Stephen Henson | 16 October 2012, 22:46:08 UTC | Don't require tag before ciphertext in AESGCM mode (cherry picked from commit 964eaad78ccdc6c4537664924e6082b08cc1c8ee) | 16 December 2013, 14:08:30 UTC |
| b0ee17a | Dr. Stephen Henson | 16 December 2013, 14:07:18 UTC | Add MIPS support. | 16 December 2013, 14:07:18 UTC |
| 4f6c4c1 | Dr. Stephen Henson | 10 April 2013, 14:38:24 UTC | Support for WinEC7. | 10 April 2013, 14:38:24 UTC |
| 2d183e4 | Dr. Stephen Henson | 14 October 2012, 12:02:53 UTC | Add BSD-ppc85xx support and avoid copying overlapping buffers in fips_dssvs.c | 14 October 2012, 12:02:53 UTC |
| 7049d13 | Dr. Stephen Henson | 04 October 2012, 14:10:12 UTC | update CHANGES | 04 October 2012, 14:10:12 UTC |
| c616200 | Dr. Stephen Henson | 04 October 2012, 13:27:11 UTC | Add support for Windows CE and C64+ to FIPS module. | 04 October 2012, 13:27:11 UTC |
| 7b899c1 | Dr. Stephen Henson | 23 May 2012, 17:07:25 UTC | file msincore was added on branch OpenSSL-fips-2_0-stable on 2012-10-04 13:27:10 +0000 | 23 May 2012, 17:07:25 UTC |
| 6b2e340 | Dr. Stephen Henson | 23 May 2012, 17:07:24 UTC | file hmac_sha1.pl was added on branch OpenSSL-fips-2_0-stable on 2012-10-04 13:27:10 +0000 | 23 May 2012, 17:07:24 UTC |
| 1de6a62 | Dr. Stephen Henson | 18 January 2012, 15:07:11 UTC | revert fipslink.pl unlink retry change | 18 January 2012, 15:07:11 UTC |
| ac38194 | Dr. Stephen Henson | 18 January 2012, 14:54:20 UTC | give a hand old assemblers assembling loop instruction. (original by Andy) | 18 January 2012, 14:54:20 UTC |
| 24fadf2 | Dr. Stephen Henson | 03 January 2012, 19:43:06 UTC | typo | 03 January 2012, 19:43:06 UTC |
| 409abd2 | Dr. Stephen Henson | 03 January 2012, 14:23:54 UTC | Prepare RC8 | 03 January 2012, 14:23:54 UTC |
| 421de62 | Dr. Stephen Henson | 03 January 2012, 14:22:45 UTC | unlink target and retry to avoid intermittent Win32 failures | 03 January 2012, 14:22:45 UTC |
| c567812 | Dr. Stephen Henson | 12 December 2011, 14:02:57 UTC | set version to rc8-dev | 12 December 2011, 14:02:57 UTC |
| 49dbcba | Dr. Stephen Henson | 12 December 2011, 13:44:05 UTC | Prepare for RC7. | 12 December 2011, 13:44:05 UTC |
| df0884f | Dr. Stephen Henson | 10 December 2011, 18:06:55 UTC | Retry rename operation with a slight delay to workaround problems on some versions of Windows. | 10 December 2011, 18:06:55 UTC |
| 0e480d5 | Dr. Stephen Henson | 10 December 2011, 13:29:23 UTC | use different names for asm temp files to avoid problems on some platforms | 10 December 2011, 13:29:23 UTC |
| 7c0d300 | Dr. Stephen Henson | 08 December 2011, 15:14:38 UTC | Close file streams in FIPS algorithm test utilities. | 08 December 2011, 15:14:38 UTC |
| 81fc8cd | Dr. Stephen Henson | 04 December 2011, 21:29:08 UTC | prepare for RC6 | 04 December 2011, 21:29:08 UTC |
| 1d23503 | Dr. Stephen Henson | 04 December 2011, 15:26:26 UTC | For FIPS builds we don't use the normal test files (and in the restricted tarball some don't exist) so set TEST='' to avoid linking to them. This also avoids problems on platforms that copy instead of symlink. | 04 December 2011, 15:26:26 UTC |
| 58886fd | Dr. Stephen Henson | 04 December 2011, 15:14:13 UTC | use BUILD_ONE_CMD for fips specific links otherwise we effectively do 'make links' twice | 04 December 2011, 15:14:13 UTC |
| 61c3085 | Dr. Stephen Henson | 04 December 2011, 15:11:44 UTC | Workaround for VxWorks | 04 December 2011, 15:11:44 UTC |
| 32b56fe | Dr. Stephen Henson | 04 December 2011, 15:04:20 UTC | avoid use of symlinks on Windows: it causes problems on some build environments | 04 December 2011, 15:04:20 UTC |
| efd031a | Dr. Stephen Henson | 03 December 2011, 21:47:48 UTC | Fix x86cpuid so it doesn't fail for some (currently theoretical) virtual machines. | 03 December 2011, 21:47:48 UTC |
| dd4eefd | Dr. Stephen Henson | 03 December 2011, 21:44:01 UTC | Change EVP_MAXCHUNK so it doesn't wraparound to 0 on some platforms (IP32L64). | 03 December 2011, 21:44:01 UTC |
| fcd3e8e | Dr. Stephen Henson | 03 December 2011, 19:51:52 UTC | Prepare for RC6. | 03 December 2011, 19:51:52 UTC |
| 476e7e4 | Dr. Stephen Henson | 03 December 2011, 19:41:28 UTC | Add tests to ensure ECDSA key gen and DSA signing fails if DRBG entropy source fails. | 03 December 2011, 19:41:28 UTC |
| 5e900f3 | Dr. Stephen Henson | 03 December 2011, 19:19:34 UTC | functions aren't unused: revert | 03 December 2011, 19:19:34 UTC |
| 75b250a | Dr. Stephen Henson | 03 December 2011, 18:27:31 UTC | remove unused functions from module | 03 December 2011, 18:27:31 UTC |
| 44cb365 | Dr. Stephen Henson | 03 December 2011, 18:26:26 UTC | bn/asm/mips.pl: fix typos [from HEAD], original by Andy | 03 December 2011, 18:26:26 UTC |
| 9bd2dde | Dr. Stephen Henson | 25 November 2011, 16:27:19 UTC | prepare for rc5 | 25 November 2011, 16:27:19 UTC |
| 31bf5f1 | Dr. Stephen Henson | 25 November 2011, 16:03:27 UTC | return error if counter exceeds limit and seed value supplied | 25 November 2011, 16:03:27 UTC |
| 7dcdc0d | Dr. Stephen Henson | 25 November 2011, 15:00:20 UTC | check counter value against 4 * L, not 4096 | 25 November 2011, 15:00:20 UTC |
| 6ecd287 | Dr. Stephen Henson | 21 November 2011, 00:05:15 UTC | bump version for rc5-dev: hopefully will never be needed... | 21 November 2011, 00:05:15 UTC |
| 0e508c1 | Dr. Stephen Henson | 19 November 2011, 17:04:28 UTC | prepare for rc4 | 19 November 2011, 17:04:28 UTC |
| f638524 | Dr. Stephen Henson | 19 November 2011, 17:03:44 UTC | Add flag to support cofactor ECDH | 19 November 2011, 17:03:44 UTC |
| 52876c3 | Dr. Stephen Henson | 18 November 2011, 21:59:36 UTC | bump version to rc4-dev | 18 November 2011, 21:59:36 UTC |
| c08128a | Dr. Stephen Henson | 18 November 2011, 18:50:57 UTC | prepare for RC3 | 18 November 2011, 18:50:57 UTC |
| 901b9b5 | Dr. Stephen Henson | 16 November 2011, 13:28:11 UTC | In EC_KEY_set_public_key_affine_coordinates include explicit check to see passed components do not exceed field order | 16 November 2011, 13:28:11 UTC |
| 9eca239 | Dr. Stephen Henson | 11 November 2011, 19:01:11 UTC | portability fix for some perl versions | 11 November 2011, 19:01:11 UTC |
| 3b4fb53 | Dr. Stephen Henson | 09 November 2011, 14:23:17 UTC | fclose streams in fips_drbvs.c Produced error message for unsupported curves in fips_ecdhvs.c | 09 November 2011, 14:23:17 UTC |
| 7437036 | Dr. Stephen Henson | 08 November 2011, 19:08:40 UTC | Prepare for RC3 (which may never happen). | 08 November 2011, 19:08:40 UTC |
| ffa7673 | Andy Polyakov | 08 November 2011, 14:44:55 UTC | Platform update from HEAD. | 08 November 2011, 14:44:55 UTC |
| cbed6cf | Dr. Stephen Henson | 07 November 2011, 13:54:30 UTC | add fips_algvs.c to restricted tarball | 07 November 2011, 13:54:30 UTC |
| be6dc7e | Dr. Stephen Henson | 07 November 2011, 13:18:12 UTC | Prepare for RC2 | 07 November 2011, 13:18:12 UTC |
| bb25a72 | Dr. Stephen Henson | 07 November 2011, 13:16:55 UTC | MacOS and iOS support | 07 November 2011, 13:16:55 UTC |
| 1562ce1 | Andy Polyakov | 07 November 2011, 00:22:59 UTC | fipsld, incore: switch to new cross-compile support [from HEAD]. | 07 November 2011, 00:22:59 UTC |
| 68b2f55 | Andy Polyakov | 06 November 2011, 19:49:58 UTC | e_aes.c: fold aesni_xts_cipher and [most importantly] fix aes_xts_cipher's return value after custom flag was rightly reverted [from HEAD]. | 06 November 2011, 19:49:58 UTC |
| 79f2c9d | Dr. Stephen Henson | 06 November 2011, 13:08:54 UTC | check for unset entropy and nonce callbacks | 06 November 2011, 13:08:54 UTC |
| 8a794ab | Dr. Stephen Henson | 06 November 2011, 12:52:27 UTC | Update fips_test_suite to take multiple command line options and an induced error checking function. | 06 November 2011, 12:52:27 UTC |
| 03eae35 | Dr. Stephen Henson | 05 November 2011, 18:25:16 UTC | typo | 05 November 2011, 18:25:16 UTC |
| df64f34 | Dr. Stephen Henson | 05 November 2011, 18:15:01 UTC | make post failure simulation reversible in all cases | 05 November 2011, 18:15:01 UTC |
| 21a5cb2 | Dr. Stephen Henson | 05 November 2011, 18:11:16 UTC | typo: use key for POST callback | 05 November 2011, 18:11:16 UTC |
| 01fc2c1 | Dr. Stephen Henson | 05 November 2011, 18:04:50 UTC | fix set but unused warnings | 05 November 2011, 18:04:50 UTC |
| 04c8062 | Andy Polyakov | 05 November 2011, 13:57:02 UTC | armv4cpuid.S, armv4-gf2m.pl: make newest code compilable by older assembler [from HEAD]. | 05 November 2011, 13:57:02 UTC |
| 6fcc2bb | Andy Polyakov | 05 November 2011, 13:56:10 UTC | x86cpuid.pl: don't punish "last-year" OSes on "this-year" CPUs [from HEAD]. PR: 2633 | 05 November 2011, 13:56:10 UTC |
| f2b0cf9 | Andy Polyakov | 05 November 2011, 13:55:20 UTC | ppc.pl: fix bug in bn_mul_comba4 [from HEAD]. PR: 2636 Submitted by: Charles Bryant | 05 November 2011, 13:55:20 UTC |
| 485ef85 | Dr. Stephen Henson | 05 November 2011, 01:32:52 UTC | Add single call public key sign and verify functions. | 05 November 2011, 01:32:52 UTC |
| b7de76b | Dr. Stephen Henson | 02 November 2011, 19:16:43 UTC | Add support for memory leak checking in fips_algvs. Fix many memory leaks in algorithm test utilities. | 02 November 2011, 19:16:43 UTC |
| 8ab0d50 | Dr. Stephen Henson | 02 November 2011, 16:35:24 UTC | Remove duplicate test from health check. Fix memory leaks by uninstantiating DRBG before reinitialising it. | 02 November 2011, 16:35:24 UTC |
| cb47a71 | Dr. Stephen Henson | 02 November 2011, 00:43:45 UTC | Print out an error for "make test" in FIPS builds. | 02 November 2011, 00:43:45 UTC |
| d593906 | Dr. Stephen Henson | 02 November 2011, 00:07:15 UTC | Replace exit calls with return in fips_test_suite | 02 November 2011, 00:07:15 UTC |
| 8b8096d | Dr. Stephen Henson | 01 November 2011, 13:45:30 UTC | Add support for multicall fips_algvs utility combining functionality of all fips test utilities in a single binary and some minimal script parsing for platforms lacking a suitable shell. In order to keep changes to the build system to a minimum it #includes all the utilities C source files (yuck). | 01 November 2011, 13:45:30 UTC |
| 9ab6d68 | Dr. Stephen Henson | 26 October 2011, 16:46:20 UTC | PR: 2632 Submitted by: emmanuel.azencot@bull.net Reviewed by: steve Return -1 immediately if not affine coordinates as BN_CTX has not been set up. | 26 October 2011, 16:46:20 UTC |
| 45e5f55 | Dr. Stephen Henson | 24 October 2011, 16:58:49 UTC | Prepare for RC2. | 24 October 2011, 16:58:49 UTC |
| 51035e7 | Dr. Stephen Henson | 24 October 2011, 16:53:59 UTC | prepare for RC1 | 24 October 2011, 16:53:59 UTC |
| 319c726 | Dr. Stephen Henson | 24 October 2011, 13:24:28 UTC | typo | 24 October 2011, 13:24:28 UTC |
| 0684e77 | cvs2svn | 24 October 2011, 06:00:07 UTC | This commit was manufactured by cvs2svn to create branch 'OpenSSL-fips- 2_0-stable'. | 24 October 2011, 06:00:07 UTC |
| f278499 | Andy Polyakov | 24 October 2011, 06:00:06 UTC | e_aes.c: fold even aesni_ccm_cipher. | 24 October 2011, 06:00:06 UTC |
| 507b0d9 | Andy Polyakov | 23 October 2011, 22:58:40 UTC | e_aes.c: prevent potential DoS in aes_gcm_tls_cipher. | 23 October 2011, 22:58:40 UTC |
| 181fbb7 | Andy Polyakov | 23 October 2011, 19:41:00 UTC | cryptlib.c: remove stdio dependency in Windows fipscanister.lib. | 23 October 2011, 19:41:00 UTC |
| f59a5d6 | Dr. Stephen Henson | 23 October 2011, 17:06:28 UTC | No need for custom flag in XTS mode: block length is 1. | 23 October 2011, 17:06:28 UTC |
| 005cdac | Andy Polyakov | 23 October 2011, 15:17:30 UTC | fips_canister.c: harmonize fingerprinting for all Windows, CE or not. | 23 October 2011, 15:17:30 UTC |
| 8b8d2dc | Andy Polyakov | 23 October 2011, 15:12:37 UTC | config: in cross-compile case interrogate cross-compiler, not host, work around sub-shell limitation. | 23 October 2011, 15:12:37 UTC |
| 5fd7226 | Dr. Stephen Henson | 22 October 2011, 17:24:27 UTC | Check for selftest failure in various places. | 22 October 2011, 17:24:27 UTC |
| 5b198d5 | Andy Polyakov | 22 October 2011, 10:49:52 UTC | x86gas.pl: relax .init segment alignment. | 22 October 2011, 10:49:52 UTC |
| 16190a7 | Andy Polyakov | 21 October 2011, 19:34:48 UTC | mk1mk.pl: cleanup engines' handling and make fips build work on WIN64I. | 21 October 2011, 19:34:48 UTC |
