Branch: refs/heads/openssl-3.2 Home: https://github.com/openssl/openssl Commit: d735f108d9319840ce79409825bd7f06b4f21077 https://github.com/openssl/openssl/commit/d735f108d9319840ce79409825bd7f06b4f21077 Author: sapph2c <arn4...@g.rit.edu> Date: 2024-05-01 (Wed, 01 May 2024)
Changed paths: M doc/man3/EVP_PKEY_decrypt.pod M doc/man3/RSA_public_encrypt.pod Log Message: ----------- Fixed typos in EVP_PKEY_decrypt.pod and RSA_public_encrypt.pod CLA: trivial Reviewed-by: Paul Dale <ppz...@gmail.com> Reviewed-by: Tomas Mraz <to...@openssl.org> (Merged from https://github.com/openssl/openssl/pull/24304) (cherry picked from commit f4601b6de709a89120c86ad825b70f65b332deed) Commit: 4688a4507956c9686dfa80b8dd25f4b06e3d7ff8 https://github.com/openssl/openssl/commit/4688a4507956c9686dfa80b8dd25f4b06e3d7ff8 Author: Tomas Mraz <to...@openssl.org> Date: 2024-05-02 (Thu, 02 May 2024) Changed paths: M crypto/bn/bn_lib.c M crypto/bn/bn_local.h M crypto/bn/bn_rand.c M include/internal/constant_time.h Log Message: ----------- Make BN_generate_dsa_nonce() constant time and non-biased Co-authored-by: Paul Dale <ppz...@gmail.com> Reviewed-by: Paul Dale <ppz...@gmail.com> Reviewed-by: Neil Horman <nhor...@openssl.org> (Merged from https://github.com/openssl/openssl/pull/24265) (cherry picked from commit d7d1bdcb6aa3d5000bf7f5ebc5518be5c91fd5a5) Commit: e35181427355e1a6f18011786a3bb07b18217b82 https://github.com/openssl/openssl/commit/e35181427355e1a6f18011786a3bb07b18217b82 Author: Tomas Mraz <to...@openssl.org> Date: 2024-05-02 (Thu, 02 May 2024) Changed paths: M crypto/bn/bn_lib.c M crypto/bn/bn_local.h M crypto/bn/bn_rand.c M crypto/bn/bn_shift.c M crypto/deterministic_nonce.c M include/crypto/bn.h M include/internal/constant_time.h Log Message: ----------- Make ossl_gen_deterministic_nonce_rfc6979() constant time Reviewed-by: Paul Dale <ppz...@gmail.com> Reviewed-by: Neil Horman <nhor...@openssl.org> (Merged from https://github.com/openssl/openssl/pull/24265) (cherry picked from commit 2d285fa873028f6cff9484a0cdf690fe05d7fb16) Commit: 39819ae4cc7fbaadf1e49b9dbb393a4815d3612f https://github.com/openssl/openssl/commit/39819ae4cc7fbaadf1e49b9dbb393a4815d3612f Author: Tomas Mraz <to...@openssl.org> Date: 2024-05-02 (Thu, 02 May 2024) Changed paths: M crypto/bn/bn_rand.c M crypto/dsa/dsa_ossl.c M crypto/ec/ecdsa_ossl.c M include/crypto/bn.h Log Message: ----------- Add ossl_bn_priv_rand_range_fixed_top() and use it for EC/DSA Reviewed-by: Paul Dale <ppz...@gmail.com> Reviewed-by: Neil Horman <nhor...@openssl.org> (Merged from https://github.com/openssl/openssl/pull/24265) (cherry picked from commit 13b3ca5c998e6db4f7251a56c43541cb1a422bd0) Commit: 2ed99891c6ac93f7177bd9dd4d9d84095d7e5533 https://github.com/openssl/openssl/commit/2ed99891c6ac93f7177bd9dd4d9d84095d7e5533 Author: Tomas Mraz <to...@openssl.org> Date: 2024-05-02 (Thu, 02 May 2024) Changed paths: M crypto/bn/bn_rand.c M crypto/dsa/dsa_ossl.c M crypto/ec/ecdsa_ossl.c M include/crypto/bn.h Log Message: ----------- Rename BN_generate_dsa_nonce() to ossl_bn_gen_dsa_nonce_fixed_top() And create a new BN_generate_dsa_nonce() that corrects the BIGNUM top. We do this to avoid leaking fixed top numbers via the public API. Also add a slight optimization in ossl_bn_gen_dsa_nonce_fixed_top() and make it LE/BE agnostic. Reviewed-by: Paul Dale <ppz...@gmail.com> Reviewed-by: Neil Horman <nhor...@openssl.org> (Merged from https://github.com/openssl/openssl/pull/24265) (cherry picked from commit 9c85f6cd2d6debe5ef6ef475ff4bf17e0985f7a2) Commit: cd69bd9fbd06f0aceead79930ab6720e376bb97e https://github.com/openssl/openssl/commit/cd69bd9fbd06f0aceead79930ab6720e376bb97e Author: Tomas Mraz <to...@openssl.org> Date: 2024-05-02 (Thu, 02 May 2024) Changed paths: M providers/fips/self_test_data.inc Log Message: ----------- Adjust FIPS EC/DSA self test data for different nonce generation Reviewed-by: Paul Dale <ppz...@gmail.com> Reviewed-by: Neil Horman <nhor...@openssl.org> (Merged from https://github.com/openssl/openssl/pull/24265) (cherry picked from commit 8a1f65468064e39f65ef4918c62db73a9eef80e4) Commit: 65b8a5156e13482ff6564ae6410ffb7892f144d3 https://github.com/openssl/openssl/commit/65b8a5156e13482ff6564ae6410ffb7892f144d3 Author: Tomas Mraz <to...@openssl.org> Date: 2024-05-02 (Thu, 02 May 2024) Changed paths: M crypto/bn/bn_rand.c M crypto/deterministic_nonce.c Log Message: ----------- Correct top for EC/DSA nonces if BN_DEBUG is on Otherwise following operations would bail out in bn_check_top(). Reviewed-by: Paul Dale <ppz...@gmail.com> Reviewed-by: Neil Horman <nhor...@openssl.org> (Merged from https://github.com/openssl/openssl/pull/24265) (cherry picked from commit a380ae85be287045b1eaa64d23942101a426c080) Compare: https://github.com/openssl/openssl/compare/f301d75eb850...65b8a5156e13 To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications