CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2024/02/18 08:41:50
Modified files: lib/libcrypto/evp: evp_cipher.c evp_local.h Log message: Add EVP_CIPHER_CTX_legacy_clear() OpenSSL 1.1 made EVP_CIPHER_CTX_init() an alias of EVP_CIPHER_CTX_reset(). In particular, it changed signature and it would no longer leak internal state if used on an already used ctx. On the other hand, it can't be used for ctx on the stack. libcrypto still has a few ctx on the stack which will be converted to heap allocated contexts at some point. Until this is completed, we will use EVP_CIPHER_CTX_legacy_clear() internally, so that the public API can be changed to match OpenSSL 1.1. ok jsing