[openssl/openssl] e18186: Add translation for ECX group parameter

2022-10-13 Thread Juergen Christ
  Branch: refs/heads/openssl-3.0
  Home:   https://github.com/openssl/openssl
  Commit: e18186aa6ab11fd0d587163a7f9e2103e4df60ac
  
https://github.com/openssl/openssl/commit/e18186aa6ab11fd0d587163a7f9e2103e4df60ac
  Author: Juergen Christ 
  Date:   2022-10-13 (Thu, 13 Oct 2022)

  Changed paths:
M crypto/evp/ctrl_params_translate.c

  Log Message:
  ---
  Add translation for ECX group parameter

Legacy EVP_PKEY_CTX objects did not support the "group" parameter for X25519
and X448.  The translation of this parameter resulted in an error.  This
caused errors for legacy keys and engines.

Fix this situation by adding a translation that simply checks that the correct
parameter is to be set, but does not actually set anything.  This is correct
since the group name is anyway optional for these two curves.

Fixes #19313

Signed-off-by: Juergen Christ 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
Reviewed-by: Hugo Landau 
(Merged from https://github.com/openssl/openssl/pull/19348)

(cherry picked from commit c048779520d47962316ddb436d08a050d5659666)




[openssl/openssl] c04877: Add translation for ECX group parameter

2022-10-13 Thread Juergen Christ
  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: c048779520d47962316ddb436d08a050d5659666
  
https://github.com/openssl/openssl/commit/c048779520d47962316ddb436d08a050d5659666
  Author: Juergen Christ 
  Date:   2022-10-13 (Thu, 13 Oct 2022)

  Changed paths:
M crypto/evp/ctrl_params_translate.c

  Log Message:
  ---
  Add translation for ECX group parameter

Legacy EVP_PKEY_CTX objects did not support the "group" parameter for X25519
and X448.  The translation of this parameter resulted in an error.  This
caused errors for legacy keys and engines.

Fix this situation by adding a translation that simply checks that the correct
parameter is to be set, but does not actually set anything.  This is correct
since the group name is anyway optional for these two curves.

Fixes #19313

Signed-off-by: Juergen Christ 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
Reviewed-by: Hugo Landau 
(Merged from https://github.com/openssl/openssl/pull/19348)




[openssl/openssl] 9710d7: apps/speed.c: Lock buffer in memory

2022-09-28 Thread Juergen Christ
  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 9710d72b95f4fc218ed613f42dc90ad0d263b14f
  
https://github.com/openssl/openssl/commit/9710d72b95f4fc218ed613f42dc90ad0d263b14f
  Author: Juergen Christ 
  Date:   2022-09-29 (Thu, 29 Sep 2022)

  Changed paths:
M apps/speed.c
M doc/man1/openssl-speed.pod.in

  Log Message:
  ---
  apps/speed.c: Lock buffer in memory

Lock the buffers used for throughput measurements into memory.  This removes
some side effects of paging.

Errors from the memory locking functions are ignored since they are not
critical to the application.

This feature is limited to Linux and Windows.

Signed-off-by: Juergen Christ 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/19091)




[openssl/openssl] d12b82: Fix HPKE and DHKEM for X25519 and X448 on s390x

2022-09-27 Thread Juergen Christ
  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: d12b824ddaee502400c19bf8c32e1ada3111fc50
  
https://github.com/openssl/openssl/commit/d12b824ddaee502400c19bf8c32e1ada3111fc50
  Author: Juergen Christ 
  Date:   2022-09-27 (Tue, 27 Sep 2022)

  Changed paths:
M providers/implementations/keymgmt/ecx_kmgmt.c

  Log Message:
  ---
  Fix HPKE and DHKEM for X25519 and X448 on s390x

The IKM was not respected by the s390x specific implementations of X25519 and
X448 keygen.  This caused test failures and wrong results if the PCC
instruction was actually available and supported X25519 and/or X448.

Fixes: 78c44b05945b ("Add HPKE DHKEM provider support for EC, X25519 and X448.")
Signed-off-by: Juergen Christ 

Reviewed-by: Matt Caswell 
Reviewed-by: Shane Lontis 
Reviewed-by: Tomas Mraz 
(Merged from https://github.com/openssl/openssl/pull/19278)




[openssl/openssl] 3cca05: s390x: fix ecx derive

2022-09-09 Thread Juergen Christ
  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 3cca05cc194c0528865deea57d9e60ca3fb0e5d3
  
https://github.com/openssl/openssl/commit/3cca05cc194c0528865deea57d9e60ca3fb0e5d3
  Author: Juergen Christ 
  Date:   2022-09-09 (Fri, 09 Sep 2022)

  Changed paths:
M crypto/ec/ecx_meth.c

  Log Message:
  ---
  s390x: fix ecx derive

Derivation via ecx-methods did not properly set the length.  Make the code
more similar to common code and set the length property.

Signed-off-by: Juergen Christ 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
Reviewed-by: Hugo Landau 
(Merged from https://github.com/openssl/openssl/pull/19158)




[openssl/openssl] ed37a8: s390x: fix ecx derive

2022-09-09 Thread Juergen Christ
  Branch: refs/heads/openssl-3.0
  Home:   https://github.com/openssl/openssl
  Commit: ed37a881f450a07520084f4cd8bfaed294d31141
  
https://github.com/openssl/openssl/commit/ed37a881f450a07520084f4cd8bfaed294d31141
  Author: Juergen Christ 
  Date:   2022-09-09 (Fri, 09 Sep 2022)

  Changed paths:
M crypto/ec/ecx_meth.c

  Log Message:
  ---
  s390x: fix ecx derive

Derivation via ecx-methods did not properly set the length.  Make the code
more similar to common code and set the length property.

Signed-off-by: Juergen Christ 

Reviewed-by: Tomas Mraz 
Reviewed-by: Paul Dale 
Reviewed-by: Hugo Landau 
(Merged from https://github.com/openssl/openssl/pull/19158)

(cherry picked from commit 3cca05cc194c0528865deea57d9e60ca3fb0e5d3)