See file ChangeLog.0_9_7-stable_not-in-head for explanations.
This is the "FIPS"-related part.
2003-07-27 19:00 ben
Changed:
Configure (1.314.2.85), "Exp", lines: +2 -0
Makefile.org (1.154.2.67), "Exp", lines: +12 -3
crypto/cryptlib.c (1.32.2.9), "Exp", lines: +5 -0
crypto/md32_common.h (1.22.2.4), "Exp", lines: +11 -0
crypto/aes/Makefile.ssl (1.4.2.6), "Exp", lines: +2 -1
crypto/aes/aes_core.c (1.1.2.4), "Exp", lines: +4 -0
crypto/des/des.h (1.40.2.4), "Exp", lines: +1 -1
crypto/des/des_old.c (1.11.2.4), "Exp", lines: +1 -1
crypto/des/destest.c (1.30.2.6), "Exp", lines: +2 -2
crypto/des/ecb3_enc.c (1.8.2.1), "Exp", lines: +1 -3
crypto/dsa/Makefile.ssl (1.49.2.5), "Exp", lines: +7 -4
crypto/dsa/dsa_ossl.c (1.12.2.4), "Exp", lines: +2 -0
crypto/dsa/dsa_sign.c (1.10.2.3), "Exp", lines: +12 -0
crypto/dsa/dsa_vrf.c (1.10.2.3), "Exp", lines: +8 -0
crypto/engine/engine.h (1.36.2.6), "Exp", lines: +4 -0
crypto/err/err.h (1.35.2.3), "Exp", lines: +2 -0
crypto/err/err_all.c (1.17.2.2), "Exp", lines: +4 -0
crypto/err/openssl.ec (1.11.2.1), "Exp", lines: +1 -0
crypto/evp/Makefile.ssl (1.64.2.8), "Exp", lines: +8 -7
crypto/evp/c_all.c (1.7.8.7), "Exp", lines: +1 -0
crypto/evp/e_aes.c (1.6.2.4), "Exp", lines: +12 -4
crypto/evp/e_des3.c (1.8.2.2), "Exp", lines: +1 -1
crypto/evp/evp.h (1.86.2.10), "Exp", lines: +2 -0
crypto/evp/evp_err.c (1.23.2.1), "Exp", lines: +3 -1
crypto/md4/Makefile.ssl (1.6.2.4), "Exp", lines: +7 -4
crypto/md5/Makefile.ssl (1.33.2.7), "Exp", lines: +7 -4
crypto/rand/Makefile.ssl (1.56.2.4), "Exp", lines: +17 -15
crypto/rand/md_rand.c (1.69.2.2), "Exp", lines: +9 -0
crypto/rand/rand.h (1.26.2.5), "Exp", lines: +2 -0
crypto/rand/rand_err.c (1.6.2.1), "Exp", lines: +3 -1
crypto/rand/rand_lib.c (1.15.2.2), "Exp", lines: +11 -0
crypto/ripemd/Makefile.ssl (1.25.2.5), "Exp", lines: +7 -2
crypto/sha/Makefile.ssl (1.26.2.5), "Exp", lines: +16 -6
fips/.cvsignore (1.1.2.1), "Exp", lines: +1 -0
fips/Makefile.ssl (1.1.2.1), "Exp", lines: +155 -0
fips/fingerprint.sha1 (1.1.2.1), "Exp", lines: +3 -0
fips/fips.c (1.1.2.1), "Exp", lines: +74 -0
fips/fips.h (1.1.2.1), "Exp", lines: +85 -0
fips/fips_check_sha1 (1.1.2.1), "Exp", lines: +7 -0
fips/fips_err.c (1.1.2.1), "Exp", lines: +96 -0
fips/fips_make_sha1 (1.1.2.1), "Exp", lines: +21 -0
fips/lib (1.1.2.1), "Exp", lines: +0 -0
fips/aes/.cvsignore (1.1.2.1), "Exp", lines: +4 -0
fips/aes/Makefile.ssl (1.1.2.1), "Exp", lines: +95 -0
fips/aes/fingerprint.sha1 (1.1.2.1), "Exp", lines: +2 -0
fips/aes/fips_aes_core.c (1.1.2.1), "Exp", lines: +1260 -0
fips/aes/fips_aes_locl.h (1.1.2.1), "Exp", lines: +85 -0
fips/aes/fips_aesavs.c (1.1.2.1), "Exp", lines: +896 -0
fips/dsa/.cvsignore (1.1.2.1), "Exp", lines: +2 -0
fips/dsa/Makefile.ssl (1.1.2.1), "Exp", lines: +95 -0
fips/dsa/fingerprint.sha1 (1.1.2.1), "Exp", lines: +1 -0
fips/dsa/fips_dsa_ossl.c (1.1.2.1), "Exp", lines: +366 -0
fips/dsa/fips_dsatest.c (1.1.2.1), "Exp", lines: +252 -0
fips/rand/.cvsignore (1.1.2.1), "Exp", lines: +2 -0
fips/rand/Makefile.ssl (1.1.2.1), "Exp", lines: +94 -0
fips/rand/fingerprint.sha1 (1.1.2.1), "Exp", lines: +2 -0
fips/rand/fips_rand.c (1.1.2.1), "Exp", lines: +236 -0
fips/rand/fips_rand.h (1.1.2.1), "Exp", lines: +55 -0
fips/rand/fips_randtest.c (1.1.2.1), "Exp", lines: +348 -0
fips/sha1/.cvsignore (1.1.2.1), "Exp", lines: +3 -0
fips/sha1/Makefile.ssl (1.1.2.1), "Exp", lines: +94 -0
fips/sha1/fingerprint.sha1 (1.1.2.1), "Exp", lines: +3 -0
fips/sha1/fips_md32_common.h (1.1.2.1), "Exp", lines: +637 -0
fips/sha1/fips_sha1dgst.c (1.1.2.1), "Exp", lines: +76 -0
fips/sha1/fips_sha1test.c (1.1.2.1), "Exp", lines: +128 -0
fips/sha1/fips_sha_locl.h (1.1.2.1), "Exp", lines: +472 -0
fips/sha1/fips_standalone_sha1.c (1.1.2.1), "Exp", lines: +101 -0
fips/sha1/standalone.sha1 (1.1.2.1), "Exp", lines: +4 -0
test/Makefile.ssl (1.84.2.29), "Exp", lines: +81 -13
util/mkerr.pl (1.18.2.4), "Exp", lines: +2 -1
Unfinished FIPS stuff for review/improvement.
2003-07-27 19:19 ben
Changed:
fips/fips_check_sha1 (1.1.2.2), "Exp", lines: +1 -1
Use unified diff.
2003-07-27 19:23 ben
Changed:
fips/Makefile.ssl (1.1.2.2), "Exp", lines: +3 -3
fips/fingerprint.sha1 (1.1.2.2), "Exp", lines: +2 -1
fips/fips_make_sha1 (1.1.2.2), "Exp", lines: +1 -1
Build in non-FIPS mode.
2003-07-27 23:13 ben
Changed:
Makefile.org (1.154.2.68), "Exp", lines: +1 -1
fips/fips_check_sha1 (1.1.2.3), "Exp", lines: +2 -1
fips/aes/fips_aesavs.c (1.1.2.2), "Exp", lines: +2 -0
fips/dsa/fips_dsa_ossl.c (1.1.2.2), "Exp", lines: +8 -0
fips/dsa/fips_dsatest.c (1.1.2.2), "Exp", lines: +2 -1
fips/sha1/fingerprint.sha1 (1.1.2.2), "Exp", lines: +1 -1
fips/sha1/fips_sha1dgst.c (1.1.2.2), "Exp", lines: +5 -1
fips/sha1/fips_standalone_sha1.c (1.1.2.2), "Exp", lines: +2 -0
fips/sha1/standalone.sha1 (1.1.2.2), "Exp", lines: +1 -1
Build when not FIPS.
2003-07-28 11:56 ben
Changed:
fips/dsa/fingerprint.sha1 (1.1.2.2), "Exp", lines: +1 -1
fips/sha1/standalone.sha1 (1.1.2.3), "Exp", lines: +1 -1
New fingerprints.
2003-07-29 16:06 ben
Changed:
fips/aes/fips_aesavs.c (1.1.2.5), "Exp", lines: +295 -303
Reformat.
2003-07-29 16:34 ben
Changed:
fips/aes/fips_aesavs.c (1.1.2.6), "Exp", lines: +43 -17
MMT for CFB1
2003-07-29 17:17 ben
Changed:
fips/fips_err_wrapper.c (1.1.2.1), "Exp", lines: +5 -0
fips/sha1/sha1hashes.txt (1.1.2.1), "Exp", lines: +342 -0
fips/sha1/sha1vectors.txt (1.1.2.1), "Exp", lines: +2293 -0
Missing files.
2003-07-31 23:30 levitte
Changed:
Makefile.org (1.154.2.71), "Exp", lines: +2 -0
If FDIRS is to be treated like SDIRS, let's not forget to
initialize it in Makefile.org.
2003-07-31 23:41 levitte
Changed:
fips/sha1/fips_sha1test.c (1.1.2.2), "Exp", lines: +3 -3
No C++ comments in C programs!
2003-08-01 15:07 steve
Changed:
fips/aes/fips_aesavs.c (1.1.2.8), "Exp", lines: +3 -3
Replace C++ style comments.
2003-08-03 14:22 ben
Changed:
fips/des/fips_desmovs.c (1.1.2.2), "Exp", lines: +55 -37
Make tests work (CFB1 still doesn't produce the right answers,
strangely).
2003-08-08 12:08 levitte
Changed:
fips/des/fips_des_enc.c (1.1.2.2), "Exp", lines: +9 -0
Avoid clashing with the regular DES functions when not compiling
with -DFIPS. This is basically only visible when building with
shared library supoort...
2003-08-11 11:36 levitte
Deleted:
fips/sha1/.cvsignore (1.1.2.2)
fips/sha1/Makefile.ssl (1.1.2.3)
fips/sha1/fingerprint.sha1 (1.1.2.3)
fips/sha1/fips_md32_common.h (1.1.2.2)
fips/sha1/fips_sha1dgst.c (1.1.2.3)
fips/sha1/fips_sha1test.c (1.1.2.3)
fips/sha1/fips_sha_locl.h (1.1.2.2)
fips/sha1/fips_standalone_sha1.c (1.1.2.3)
fips/sha1/sha1hashes.txt (1.1.2.2)
fips/sha1/sha1vectors.txt (1.1.2.2)
fips/sha1/standalone.sha1 (1.1.2.4)
fips/dsa/.cvsignore (1.1.2.2)
fips/dsa/Makefile.ssl (1.1.2.2)
fips/dsa/fingerprint.sha1 (1.1.2.3)
fips/dsa/fips_dsa_ossl.c (1.1.2.3)
fips/dsa/fips_dsatest.c (1.1.2.3)
fips/rand/.cvsignore (1.1.2.2)
fips/rand/Makefile.ssl (1.1.2.2)
fips/rand/fingerprint.sha1 (1.1.2.2)
fips/rand/fips_rand.c (1.1.2.2)
fips/rand/fips_rand.h (1.1.2.2)
fips/rand/fips_randtest.c (1.1.2.2)
fips/des/.cvsignore (1.1.2.2)
fips/des/Makefile.ssl (1.1.2.3)
fips/des/fingerprint.sha1 (1.1.2.2)
fips/des/fips_des_enc.c (1.1.2.3)
fips/des/fips_des_locl.h (1.1.2.2)
fips/des/fips_desmovs.c (1.1.2.3)
fips/aes/.cvsignore (1.1.2.2)
fips/aes/Makefile.ssl (1.1.2.5)
fips/aes/fingerprint.sha1 (1.1.2.2)
fips/aes/fips_aes_core.c (1.1.2.2)
fips/aes/fips_aes_locl.h (1.1.2.2)
fips/aes/fips_aesavs.c (1.1.2.9)
fips/.cvsignore (1.1.2.2)
fips/Makefile.ssl (1.1.2.6)
fips/fingerprint.sha1 (1.1.2.3)
fips/fips.c (1.1.2.2)
fips/fips.h (1.1.2.2)
fips/fips_check_sha1 (1.1.2.4)
fips/fips_err.c (1.1.2.2)
fips/fips_err_wrapper.c (1.1.2.2)
fips/fips_make_sha1 (1.1.2.4)
fips/lib (1.1.2.2)
Changed:
util/libeay.num (1.173.2.16), "Exp", lines: +11 -38
util/mkerr.pl (1.18.2.5), "Exp", lines: +1 -2
test/Makefile.ssl (1.84.2.31), "Exp", lines: +54 -180
crypto/ripemd/Makefile.ssl (1.25.2.6), "Exp", lines: +2 -7
crypto/sha/Makefile.ssl (1.26.2.6), "Exp", lines: +6 -16
crypto/rand/Makefile.ssl (1.56.2.5), "Exp", lines: +15 -17
crypto/rand/md_rand.c (1.69.2.3), "Exp", lines: +0 -9
crypto/rand/rand.h (1.26.2.6), "Exp", lines: +0 -2
crypto/rand/rand_err.c (1.6.2.2), "Exp", lines: +1 -3
crypto/rand/rand_lib.c (1.15.2.3), "Exp", lines: +0 -11
crypto/objects/obj_dat.h (1.49.2.18), "Exp", lines: +3 -27
crypto/objects/obj_mac.h (1.19.2.18), "Exp", lines: +0 -32
crypto/objects/obj_mac.num (1.15.2.14), "Exp", lines: +0 -8
crypto/objects/objects.txt (1.20.2.19), "Exp", lines: +0 -11
crypto/md4/Makefile.ssl (1.6.2.5), "Exp", lines: +4 -7
crypto/md5/Makefile.ssl (1.33.2.8), "Exp", lines: +4 -7
crypto/evp/Makefile.ssl (1.64.2.9), "Exp", lines: +7 -8
crypto/evp/c_allc.c (1.8.2.6), "Exp", lines: +0 -4
crypto/evp/e_aes.c (1.6.2.9), "Exp", lines: +4 -22
crypto/evp/e_des.c (1.5.2.5), "Exp", lines: +2 -43
crypto/evp/e_des3.c (1.8.2.4), "Exp", lines: +3 -3
crypto/evp/evp.h (1.86.2.13), "Exp", lines: +11 -36
crypto/evp/evp_err.c (1.23.2.2), "Exp", lines: +1 -3
crypto/evp/evp_lib.c (1.6.8.3), "Exp", lines: +0 -24
crypto/evp/evp_locl.h (1.7.2.5), "Exp", lines: +2 -11
crypto/evp/evp_test.c (1.14.2.12), "Exp", lines: +8 -17
crypto/evp/evptests.txt (1.9.2.6), "Exp", lines: +1 -106
crypto/dsa/Makefile.ssl (1.49.2.7), "Exp", lines: +6 -10
crypto/dsa/dsa_ossl.c (1.12.2.5), "Exp", lines: +0 -2
crypto/dsa/dsa_sign.c (1.10.2.4), "Exp", lines: +0 -12
crypto/dsa/dsa_vrf.c (1.10.2.4), "Exp", lines: +0 -8
crypto/err/Makefile.ssl (1.48.2.5), "Exp", lines: +16 -17
crypto/err/err.h (1.35.2.4), "Exp", lines: +0 -2
crypto/err/err_all.c (1.17.2.3), "Exp", lines: +0 -4
crypto/err/openssl.ec (1.11.2.2), "Exp", lines: +0 -1
crypto/des/des.h (1.40.2.5), "Exp", lines: +1 -1
crypto/des/des_enc.c (1.11.2.3), "Exp", lines: +0 -4
crypto/des/des_old.c (1.11.2.5), "Exp", lines: +1 -1
crypto/des/destest.c (1.30.2.7), "Exp", lines: +2 -2
crypto/des/ecb3_enc.c (1.8.2.2), "Exp", lines: +3 -1
crypto/aes/Makefile.ssl (1.4.2.7), "Exp", lines: +1 -2
crypto/aes/aes.h (1.1.2.8), "Exp", lines: +0 -9
crypto/aes/aes_cfb.c (1.1.2.8), "Exp", lines: +0 -93
crypto/aes/aes_core.c (1.1.2.5), "Exp", lines: +0 -4
crypto/cryptlib.c (1.32.2.10), "Exp", lines: +0 -5
crypto/md32_common.h (1.22.2.5), "Exp", lines: +0 -11
Configure (1.314.2.86), "Exp", lines: +0 -2
Makefile.org (1.154.2.72), "Exp", lines: +8 -34
TABLE (1.99.2.30), "Exp", lines: +0 -50
A new branch for FIPS-related changes has been created with the
name OpenSSL-fips-0_9_7-stable.
Since the 0.9.7-stable branch is supposed to be in freeze
and should only contain bug corrections, this change removes the
FIPS changes from that branch.
2004-05-11 14:44 ben
Deleted:
apps/Makefile.ssl (1.100.2.27)
crypto/Makefile.ssl (1.84.2.12)
crypto/aes/Makefile.ssl (1.4.2.9)
crypto/asn1/Makefile.ssl (1.77.2.7)
crypto/bf/Makefile.ssl (1.25.2.6)
crypto/bio/Makefile.ssl (1.52.2.4)
crypto/bn/Makefile.ssl (1.65.2.9)
crypto/buffer/Makefile.ssl (1.32.2.4)
crypto/cast/Makefile.ssl (1.31.2.6)
crypto/comp/Makefile.ssl (1.32.2.4)
crypto/conf/Makefile.ssl (1.38.2.8)
crypto/des/Makefile.ssl (1.61.2.13)
crypto/dh/Makefile.ssl (1.43.2.5)
crypto/dsa/Makefile.ssl (1.49.2.9)
crypto/dso/Makefile.ssl (1.11.2.4)
crypto/ec/Makefile.ssl (1.7.2.4)
crypto/engine/Makefile.ssl (1.30.2.13)
crypto/err/Makefile.ssl (1.48.2.7)
crypto/evp/Makefile.ssl (1.64.2.12)
crypto/hmac/Makefile.ssl (1.33.2.6)
crypto/idea/Makefile.ssl (1.20.2.4)
crypto/krb5/Makefile.ssl (1.5.2.6)
crypto/lhash/Makefile.ssl (1.28.2.4)
crypto/md2/Makefile.ssl (1.29.2.5)
crypto/md4/Makefile.ssl (1.6.2.7)
crypto/md5/Makefile.ssl (1.33.2.10)
crypto/mdc2/Makefile.ssl (1.30.2.4)
crypto/objects/Makefile.ssl (1.46.2.6)
crypto/ocsp/Makefile.ssl (1.19.2.7)
crypto/pem/Makefile.ssl (1.51.2.5)
crypto/pkcs12/Makefile.ssl (1.37.2.5)
crypto/pkcs7/Makefile.ssl (1.47.2.5)
crypto/rand/Makefile.ssl (1.56.2.8)
crypto/rc2/Makefile.ssl (1.20.2.4)
crypto/rc4/Makefile.ssl (1.25.2.6)
crypto/rc5/Makefile.ssl (1.22.2.6)
crypto/ripemd/Makefile.ssl (1.25.2.9)
crypto/rsa/Makefile.ssl (1.53.2.6)
crypto/sha/Makefile.ssl (1.26.2.9)
crypto/stack/Makefile.ssl (1.28.2.4)
crypto/txt_db/Makefile.ssl (1.26.2.4)
crypto/ui/Makefile.ssl (1.10.2.6)
crypto/x509/Makefile.ssl (1.56.2.5)
crypto/x509v3/Makefile.ssl (1.62.2.5)
ssl/Makefile.ssl (1.53.2.11)
test/Makefile.ssl (1.84.2.36)
tools/Makefile.ssl (1.9.2.4)
Changed:
.cvsignore (1.7.6.2), "Exp", lines: +2 -1
Configure (1.314.2.92), "Exp", lines: +38 -8
FAQ (1.61.2.31), "Exp", lines: +1 -1
INSTALL (1.45.2.9), "Exp", lines: +2 -2
INSTALL.W32 (1.30.2.14), "Exp", lines: +9 -4
Makefile.org (1.154.2.78), "Exp", lines: +51 -19
PROBLEMS (1.4.2.10), "Exp", lines: +2 -2
e_os.h (1.56.2.17), "Exp", lines: +20 -1
apps/.cvsignore (1.5.8.1), "Exp", lines: +1 -0
apps/Makefile (1.1.4.1), "Exp", lines: +1147 -0
apps/apps.c (1.49.2.27), "Exp", lines: +0 -10
apps/ca.c (1.102.2.31), "Exp", lines: +0 -10
apps/dgst.c (1.23.2.10), "Exp", lines: +39 -11
apps/openssl.c (1.48.2.9), "Exp", lines: +19 -0
crypto/Makefile (1.1.4.1), "Exp", lines: +217 -0
crypto/cryptlib.c (1.32.2.11), "Exp", lines: +5 -0
crypto/crypto-lib.com (1.53.2.12), "Exp", lines: +1 -1
crypto/md32_common.h (1.22.2.6), "Exp", lines: +12 -0
crypto/aes/Makefile (1.1.4.1), "Exp", lines: +102 -0
crypto/aes/aes.h (1.1.2.9), "Exp", lines: +9 -0
crypto/aes/aes_cfb.c (1.1.2.9), "Exp", lines: +93 -0
crypto/aes/aes_core.c (1.1.2.6), "Exp", lines: +4 -0
crypto/asn1/Makefile (1.1.4.1), "Exp", lines: +1150 -0
crypto/bf/Makefile (1.1.4.1), "Exp", lines: +113 -0
crypto/bio/Makefile (1.1.4.1), "Exp", lines: +214 -0
crypto/bio/bio.h (1.56.2.6), "Exp", lines: +1 -0
crypto/bn/Makefile (1.1.4.1), "Exp", lines: +324 -0
crypto/bn/bntest.c (1.55.2.4), "Exp", lines: +1 -1
crypto/buffer/Makefile (1.1.4.1), "Exp", lines: +92 -0
crypto/cast/Makefile (1.1.4.1), "Exp", lines: +118 -0
crypto/cast/asm/.cvsignore (1.2.8.1), "Exp", lines: +1 -0
crypto/comp/Makefile (1.1.4.1), "Exp", lines: +112 -0
crypto/conf/Makefile (1.1.4.1), "Exp", lines: +181 -0
crypto/des/Makefile (1.1.4.1), "Exp", lines: +314 -0
crypto/des/cfb64ede.c (1.6.2.4), "Exp", lines: +111 -0
crypto/des/des.h (1.40.2.6), "Exp", lines: +5 -1
crypto/des/des_enc.c (1.11.2.4), "Exp", lines: +8 -0
crypto/des/des_old.c (1.11.2.6), "Exp", lines: +1 -1
crypto/des/destest.c (1.30.2.8), "Exp", lines: +2 -2
crypto/des/ecb3_enc.c (1.8.2.3), "Exp", lines: +1 -3
crypto/des/set_key.c (1.18.2.2), "Exp", lines: +4 -0
crypto/dh/Makefile (1.1.4.1), "Exp", lines: +131 -0
crypto/dsa/Makefile (1.1.4.1), "Exp", lines: +173 -0
crypto/dsa/dsa_gen.c (1.19.2.1), "Exp", lines: +4 -1
crypto/dsa/dsa_key.c (1.9.2.1), "Exp", lines: +2 -0
crypto/dsa/dsa_ossl.c (1.12.2.6), "Exp", lines: +2 -0
crypto/dsa/dsa_sign.c (1.10.2.5), "Exp", lines: +12 -0
crypto/dsa/dsa_vrf.c (1.10.2.5), "Exp", lines: +8 -0
crypto/dso/Makefile (1.1.4.1), "Exp", lines: +140 -0
crypto/ec/Makefile (1.1.4.1), "Exp", lines: +126 -0
crypto/engine/Makefile (1.1.4.1), "Exp", lines: +536 -0
crypto/engine/hw_cryptodev.c (1.1.2.6), "Exp", lines: +6 -2
crypto/err/Makefile (1.1.4.1), "Exp", lines: +118 -0
crypto/err/err.h (1.35.2.6), "Exp", lines: +2 -0
crypto/err/err_all.c (1.17.2.4), "Exp", lines: +4 -0
crypto/err/openssl.ec (1.11.2.3), "Exp", lines: +1 -0
crypto/evp/Makefile (1.1.4.1), "Exp", lines: +1057 -0
crypto/evp/bio_md.c (1.11.2.1), "Exp", lines: +6 -0
crypto/evp/c_allc.c (1.8.2.7), "Exp", lines: +8 -0
crypto/evp/e_aes.c (1.6.2.10), "Exp", lines: +22 -4
crypto/evp/e_des.c (1.5.2.8), "Exp", lines: +36 -3
crypto/evp/e_des3.c (1.8.2.7), "Exp", lines: +43 -4
crypto/evp/evp.h (1.86.2.15), "Exp", lines: +39 -11
crypto/evp/evp_err.c (1.23.2.3), "Exp", lines: +3 -1
crypto/evp/evp_lib.c (1.6.8.4), "Exp", lines: +24 -0
crypto/evp/evp_locl.h (1.7.2.6), "Exp", lines: +11 -2
crypto/evp/evp_test.c (1.14.2.13), "Exp", lines: +17 -8
crypto/evp/evptests.txt (1.9.2.7), "Exp", lines: +106 -1
crypto/hmac/Makefile (1.1.4.1), "Exp", lines: +99 -0
crypto/idea/Makefile (1.1.4.1), "Exp", lines: +89 -0
crypto/krb5/Makefile (1.1.4.1), "Exp", lines: +88 -0
crypto/lhash/Makefile (1.1.4.1), "Exp", lines: +91 -0
crypto/md2/Makefile (1.1.4.1), "Exp", lines: +91 -0
crypto/md4/Makefile (1.1.4.1), "Exp", lines: +93 -0
crypto/md5/Makefile (1.1.4.1), "Exp", lines: +129 -0
crypto/mdc2/Makefile (1.1.4.1), "Exp", lines: +96 -0
crypto/objects/Makefile (1.1.4.1), "Exp", lines: +121 -0
crypto/objects/obj_dat.h (1.49.2.19), "Exp", lines: +33 -3
crypto/objects/obj_mac.h (1.19.2.19), "Exp", lines: +40 -0
crypto/objects/obj_mac.num (1.15.2.15), "Exp", lines: +10 -0
crypto/objects/objects.txt (1.20.2.20), "Exp", lines: +13 -0
crypto/ocsp/Makefile (1.1.4.1), "Exp", lines: +291 -0
crypto/pem/Makefile (1.1.4.1), "Exp", lines: +334 -0
crypto/pkcs12/Makefile (1.1.4.1), "Exp", lines: +415 -0
crypto/pkcs7/Makefile (1.1.4.1), "Exp", lines: +241 -0
crypto/rand/Makefile (1.1.4.1), "Exp", lines: +196 -0
crypto/rand/md_rand.c (1.69.2.4), "Exp", lines: +9 -0
crypto/rand/rand.h (1.26.2.7), "Exp", lines: +3 -0
crypto/rand/rand_err.c (1.6.2.3), "Exp", lines: +4 -1
crypto/rand/rand_lib.c (1.15.2.4), "Exp", lines: +11 -0
crypto/rc2/Makefile (1.1.4.1), "Exp", lines: +89 -0
crypto/rc4/Makefile (1.1.4.1), "Exp", lines: +108 -0
crypto/rc5/Makefile (1.1.4.1), "Exp", lines: +106 -0
crypto/ripemd/Makefile (1.1.4.1), "Exp", lines: +111 -0
crypto/rsa/Makefile (1.1.4.1), "Exp", lines: +239 -0
crypto/rsa/rsa_eay.c (1.28.2.9), "Exp", lines: +1 -1
crypto/rsa/rsa_gen.c (1.8.6.1), "Exp", lines: +3 -0
crypto/sha/Makefile (1.1.4.1), "Exp", lines: +118 -0
crypto/sha/sha1dgst.c (1.21.2.1), "Exp", lines: +8 -0
crypto/stack/Makefile (1.1.4.1), "Exp", lines: +86 -0
crypto/txt_db/Makefile (1.1.4.1), "Exp", lines: +86 -0
crypto/ui/Makefile (1.1.4.1), "Exp", lines: +115 -0
crypto/x509/Makefile (1.1.4.1), "Exp", lines: +592 -0
crypto/x509v3/Makefile (1.1.4.1), "Exp", lines: +601 -0
fips/Makefile (1.1.4.1), "Exp", lines: +202 -0
fips/fingerprint.sha1 (1.1.2.4), "Exp", lines: +4 -4
fips/fips.c (1.1.2.3), "Exp", lines: +120 -5
fips/fips.h (1.1.2.3), "Exp", lines: +42 -2
fips/fips_check_sha1 (1.1.2.5), "Exp", lines: +2 -2
fips/fips_err.h (1.1.4.1), "Exp", lines: +117 -0
fips/fips_err_wrapper.c (1.1.2.3), "Exp", lines: +4 -2
fips/fips_locl.h (1.1.4.1), "Exp", lines: +62 -0
fips/fips_make_sha1 (1.1.2.5), "Exp", lines: +9 -6
fips/fips_test_suite.c (1.1.4.1), "Exp", lines: +302 -0
fips/openssl_fips_fingerprint (1.1.4.1), "Exp", lines: +25 -0
fips/aes/Makefile (1.1.4.1), "Exp", lines: +131 -0
fips/aes/fingerprint.sha1 (1.1.2.3), "Exp", lines: +3 -2
fips/aes/fips_aes_core.c (1.1.2.3), "Exp", lines: +5 -2
fips/aes/fips_aes_locl.h (1.1.2.3), "Exp", lines: +0 -0
fips/aes/fips_aes_selftest.c (1.1.4.1), "Exp", lines: +112 -0
fips/aes/fips_aesavs.c (1.1.2.10), "Exp", lines: +12 -6
fips/des/Makefile (1.1.4.1), "Exp", lines: +155 -0
fips/des/fingerprint.sha1 (1.1.2.3), "Exp", lines: +5 -2
fips/des/fips_des_enc.c (1.1.2.4), "Exp", lines: +16 -3
fips/des/fips_des_locl.h (1.1.2.3), "Exp", lines: +1 -1
fips/des/fips_des_selftest.c (1.1.4.1), "Exp", lines: +200 -0
fips/des/fips_desmovs.c (1.1.2.4), "Exp", lines: +186 -79
fips/des/fips_set_key.c (1.1.4.1), "Exp", lines: +415 -0
fips/des/asm/fips-dx86-elf.s (1.1.4.1), "Exp", lines: +2697 -0
fips/dsa/Makefile (1.1.4.1), "Exp", lines: +159 -0
fips/dsa/fingerprint.sha1 (1.1.2.4), "Exp", lines: +3 -1
fips/dsa/fips_dsa_gen.c (1.1.4.1), "Exp", lines: +373 -0
fips/dsa/fips_dsa_ossl.c (1.1.2.4), "Exp", lines: +16 -3
fips/dsa/fips_dsa_selftest.c (1.1.4.1), "Exp", lines: +168 -0
fips/dsa/fips_dsatest.c (1.1.2.4), "Exp", lines: +10 -6
fips/dsa/fips_dssvs.c (1.1.4.1), "Exp", lines: +306 -0
fips/rand/Makefile (1.1.4.1), "Exp", lines: +104 -0
fips/rand/fingerprint.sha1 (1.1.2.3), "Exp", lines: +2 -2
fips/rand/fips_rand.c (1.1.2.3), "Exp", lines: +60 -10
fips/rand/fips_rand.h (1.1.2.3), "Exp", lines: +19 -1
fips/rand/fips_randtest.c (1.1.2.3), "Exp", lines: +31 -10
fips/rsa/Makefile (1.1.4.1), "Exp", lines: +112 -0
fips/rsa/fingerprint.sha1 (1.1.4.1), "Exp", lines: +3 -0
fips/rsa/fips_rsa_eay.c (1.1.4.1), "Exp", lines: +735 -0
fips/rsa/fips_rsa_gen.c (1.1.4.1), "Exp", lines: +249 -0
fips/rsa/fips_rsa_selftest.c (1.1.4.1), "Exp", lines: +207 -0
fips/sha1/.cvsignore (1.1.2.3), "Exp", lines: +1 -2
fips/sha1/Makefile (1.1.4.1), "Exp", lines: +158 -0
fips/sha1/fingerprint.sha1 (1.1.2.4), "Exp", lines: +5 -3
fips/sha1/fips_md32_common.h (1.1.2.3), "Exp", lines: +0 -0
fips/sha1/fips_sha1_selftest.c (1.1.4.1), "Exp", lines: +97 -0
fips/sha1/fips_sha1dgst.c (1.1.2.4), "Exp", lines: +4 -4
fips/sha1/fips_sha1test.c (1.1.2.4), "Exp", lines: +17 -0
fips/sha1/fips_sha_locl.h (1.1.2.3), "Exp", lines: +7 -0
fips/sha1/fips_standalone_sha1.c (1.1.2.4), "Exp", lines: +60 -7
fips/sha1/sha1hashes.txt (1.1.2.3), "Exp", lines: +0 -0
fips/sha1/sha1vectors.txt (1.1.2.3), "Exp", lines: +0 -0
fips/sha1/standalone.sha1 (1.1.2.5), "Exp", lines: +6 -4
fips/sha1/asm/sx86-elf.s (1.1.4.1), "Exp", lines: +1568 -0
ms/do_masm.bat (1.1.8.2), "Exp", lines: +12 -10
ms/do_ms.bat (1.4.8.2), "Exp", lines: +11 -11
ms/do_nasm.bat (1.1.8.2), "Exp", lines: +12 -11
ms/do_nt.bat (1.2.8.1), "Exp", lines: +4 -4
shlib/hpux10-cc.sh (1.3.2.2), "Exp", lines: +3 -3
ssl/Makefile (1.1.4.1), "Exp", lines: +1019 -0
ssl/s3_clnt.c (1.53.2.16), "Exp", lines: +10 -0
ssl/s3_srvr.c (1.85.2.21), "Exp", lines: +9 -0
ssl/ssl_cert.c (1.48.2.7), "Exp", lines: +9 -0
ssl/ssl_lib.c (1.110.2.12), "Exp", lines: +13 -1
ssl/ssltest.c (1.53.2.23), "Exp", lines: +33 -1
ssl/t1_enc.c (1.27.2.8), "Exp", lines: +19 -1
test/.cvsignore (1.4.8.1), "Exp", lines: +4 -0
test/Makefile (1.1.4.1), "Exp", lines: +941 -0
test/bctest (1.14.2.1), "Exp", lines: +1 -1
test/testenc (1.3.8.1), "Exp", lines: +1 -1
test/testfipsssl (1.1.4.1), "Exp", lines: +113 -0
tools/Makefile (1.1.4.1), "Exp", lines: +61 -0
util/cygwin.sh (1.1.2.5), "Exp", lines: +3 -3
util/domd (1.6.2.3), "Exp", lines: +5 -5
util/fixNT.sh (1.1.1.2.8.1), "Exp", lines: +3 -3
util/libeay.num (1.173.2.19), "Exp", lines: +55 -11
util/mk1mf.pl (1.41.2.10), "Exp", lines: +6 -4
util/mkdef.pl (1.67.2.7), "Exp", lines: +11 -4
util/mkerr.pl (1.18.2.6), "Exp", lines: +2 -1
util/mkfiles.pl (1.12.2.1), "Exp", lines: +8 -1
util/pod2mantest (1.1.2.7), "Exp", lines: +1 -1
util/selftest.pl (1.18.2.1), "Exp", lines: +2 -2
util/pl/BC-16.pl (1.2.2.1), "Exp", lines: +1 -1
util/pl/BC-32.pl (1.11.2.4), "Exp", lines: +1 -1
util/pl/Mingw32.pl (1.12.6.5), "Exp", lines: +1 -1
util/pl/OS2-EMX.pl (1.1.2.3), "Exp", lines: +1 -1
util/pl/VC-16.pl (1.3.2.1), "Exp", lines: +2 -2
util/pl/VC-32.pl (1.11.2.3), "Exp", lines: +2 -2
util/pl/VC-CE.pl (1.1.2.5), "Exp", lines: +1 -1
util/pl/ultrix.pl (1.2.8.1), "Exp", lines: +1 -1
Pull FIPS back into stable.
2004-05-12 10:27 levitte
Changed:
apps/Makefile (1.1.4.2), "Exp", lines: +3 -1
Only check for FIPS signatures when FIPS is enabled.
2004-05-12 10:28 levitte
Changed:
crypto/des/FILES0 (1.1.4.2), "Exp", lines: +1 -1
Makefile.ssl changed name to Makefile.
2004-05-12 10:28 levitte
Changed:
fips/rand/fips_rand.c (1.1.2.4), "Exp", lines: +5 -1
Only really build this file when OPENSSL_FIPS is defined. And oh,
let's keep internal variables static.
2004-05-12 10:42 levitte
Changed:
fips/rand/fingerprint.sha1 (1.1.2.4), "Exp", lines: +1 -1
I forgot to modify the signature for fips_rand.c...
2004-05-12 10:46 levitte
Changed:
fips/rsa/.cvsignore (1.1.4.1), "Exp", lines: +1 -0
fips/.cvsignore (1.1.2.3), "Exp", lines: +1 -1
fips/aes/.cvsignore (1.1.2.3), "Exp", lines: +0 -3
fips/des/.cvsignore (1.1.2.3), "Exp", lines: +0 -2
fips/dsa/.cvsignore (1.1.2.3), "Exp", lines: +0 -1
fips/rand/.cvsignore (1.1.2.3), "Exp", lines: +0 -1
Ignore the 'lib' timestamp file.
2004-05-12 12:07 levitte
Changed:
fips/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
fips/aes/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
fips/des/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
fips/dsa/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
fips/rand/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
fips/rsa/.cvsignore (1.1.4.2), "Exp", lines: +1 -0
fips/sha1/.cvsignore (1.1.2.4), "Exp", lines: +1 -0
Ignore 'Makefile.save'
2004-05-12 16:11 ben
Changed:
crypto/rand/rand.h (1.26.2.8), "Exp", lines: +2 -0
crypto/rand/rand_err.c (1.6.2.4), "Exp", lines: +2 -0
fips/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
fips/fips.c (1.1.2.4), "Exp", lines: +5 -1
fips/rand/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
fips/rand/fips_rand.c (1.1.2.5), "Exp", lines: +29 -0
Blow up in people's faces if they don't reseed.
2004-05-15 19:51 ben
Changed:
crypto/dh/dh.h (1.23.2.6), "Exp", lines: +1 -0
crypto/dh/dh_err.c (1.6.2.3), "Exp", lines: +2 -1
crypto/dh/dh_gen.c (1.8.8.2), "Exp", lines: +9 -0
fips/fips_test_suite.c (1.1.4.2), "Exp", lines: +4 -3
fips/aes/fips_aesavs.c (1.1.2.11), "Exp", lines: +49 -1
fips/des/fingerprint.sha1 (1.1.2.4), "Exp", lines: +1 -1
fips/des/fips_desmovs.c (1.1.2.5), "Exp", lines: +49 -1
fips/des/fips_set_key.c (1.1.4.2), "Exp", lines: +2 -0
fips/sha1/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
fips/sha1/fips_md32_common.h (1.1.2.4), "Exp", lines: +3 -0
fips/sha1/standalone.sha1 (1.1.2.6), "Exp", lines: +1 -1
Fix self-tests, ban some things in FIPS mode, fix copyrights.
2004-05-17 06:28 levitte
Changed:
util/mk1mf.pl (1.41.2.11), "Exp", lines: +8 -2
util/pl/BC-16.pl (1.2.2.2), "Exp", lines: +9 -4
util/pl/BC-32.pl (1.11.2.5), "Exp", lines: +8 -3
util/pl/Mingw32.pl (1.12.6.6), "Exp", lines: +7 -2
util/pl/OS2-EMX.pl (1.1.2.4), "Exp", lines: +7 -2
util/pl/VC-16.pl (1.3.2.2), "Exp", lines: +7 -2
util/pl/VC-32.pl (1.11.2.4), "Exp", lines: +7 -2
util/pl/VC-CE.pl (1.1.2.6), "Exp", lines: +7 -2
util/pl/linux.pl (1.3.6.1), "Exp", lines: +7 -2
util/pl/ultrix.pl (1.2.8.2), "Exp", lines: +7 -2
util/pl/unix.pl (1.2.8.1), "Exp", lines: +7 -2
Generate SHA1 files on Windows and other platforms supported by
mk1mf.pl, when building in FIPS mode.
Note: UNTESTED!
2004-05-17 06:30 levitte
Changed:
apps/apps.h (1.44.2.14), "Exp", lines: +3 -0
apps/openssl.c (1.48.2.10), "Exp", lines: +9 -5
Make sure the applications know when we are running in FIPS mode.
We can't use the variable in libcrypto, since it's supposedly
unknown.
Note: currently only supported in MONOLITH mode.
2004-05-17 06:31 levitte
Changed:
apps/enc.c (1.35.2.9), "Exp", lines: +10 -1
When in FIPS mode, use SHA1 to digest the key, rather than MD5, as
MD5 isn't a FIPS-approved algorithm.
Note: this means the user needs to keep track of this, and
we need to add support for that...
2004-05-19 16:16 levitte
Changed:
fips/rsa/fingerprint.sha1 (1.1.4.2), "Exp", lines: +2 -2
fips/rsa/fips_rsa_eay.c (1.1.4.2), "Exp", lines: +8 -8
fips/rsa/fips_rsa_gen.c (1.1.4.2), "Exp", lines: +1 -1
fips/dsa/fingerprint.sha1 (1.1.2.5), "Exp", lines: +2 -2
fips/dsa/fips_dsa_gen.c (1.1.4.2), "Exp", lines: +2 -2
fips/dsa/fips_dsa_ossl.c (1.1.2.5), "Exp", lines: +4 -4
fips/aes/fingerprint.sha1 (1.1.2.4), "Exp", lines: +1 -1
fips/aes/fips_aes_core.c (1.1.2.4), "Exp", lines: +5 -5
crypto/rsa/rsa.h (1.36.2.11), "Exp", lines: +4 -0
crypto/aes/aes.h (1.1.2.10), "Exp", lines: +6 -0
crypto/dsa/dsa.h (1.26.2.5), "Exp", lines: +4 -0
Define FIPS_*_SIZE_T for AES, DSA and RSA as well, in preparation
for size_t-ification of those algorithms in future version of
OpenSSL...
2004-05-27 11:33 levitte
Changed:
makevms.com (1.35.2.3), "Exp", lines: +27 -0
Copy the FIPS files to the temporary openssl include directory.
2004-05-27 12:04 levitte
Changed:
fips/fips-lib.com (1.1.2.1), "Exp", lines: +1179 -0
makevms.com (1.35.2.4), "Exp", lines: +8 -0
Compile the FIPS directory on VMS as well. fips-lib.com is
essentially a copy of crypto-lib.com, with just a few edits.
2004-05-27 12:07 levitte
Changed:
fips/install.com (1.1.2.1), "Exp", lines: +55 -0
install.com (1.4.2.2), "Exp", lines: +6 -6
Run an installation of FIPS stuff as well.
2004-05-27 12:19 levitte
Changed:
test/maketests.com (1.13.2.5), "Exp", lines: +3 -3
apps/makeapps.com (1.18.2.5), "Exp", lines: +3 -3
Make sure o_str.h is reachable.
2004-06-19 15:15 ben
Changed:
Makefile.org (1.154.2.80), "Exp", lines: +1 -1
crypto/dh/dh.h (1.23.2.7), "Exp", lines: +0 -1
crypto/dh/dh_check.c (1.6.2.1), "Exp", lines: +4 -0
crypto/dh/dh_err.c (1.6.2.4), "Exp", lines: +0 -1
crypto/dh/dh_gen.c (1.8.8.3), "Exp", lines: +5 -9
crypto/dh/dh_key.c (1.16.2.3), "Exp", lines: +4 -0
fips/Makefile (1.1.4.2), "Exp", lines: +13 -14
fips/fingerprint.sha1 (1.1.2.6), "Exp", lines: +2 -2
fips/fips.h (1.1.2.4), "Exp", lines: +1 -0
fips/fips_err.h (1.1.4.2), "Exp", lines: +1 -0
fips/fips_make_sha1 (1.1.2.6), "Exp", lines: +3 -0
fips/fips_test_suite.c (1.1.4.3), "Exp", lines: +13 -9
fips/openssl_fips_fingerprint (1.1.4.2), "Exp", lines: +1 -2
The version that was actually submitted for FIPS testing.
2004-06-19 15:16 ben
Changed:
fips/dh/Makefile (1.1.2.1), "Exp", lines: +92 -0
fips/dh/fingerprint.sha1 (1.1.2.1), "Exp", lines: +3 -0
fips/dh/fips_dh_check.c (1.1.2.1), "Exp", lines: +119 -0
fips/dh/fips_dh_gen.c (1.1.2.1), "Exp", lines: +182 -0
fips/dh/fips_dh_key.c (1.1.2.1), "Exp", lines: +222 -0
Add Diffie-Hellman to FIPS.
2004-06-19 15:18 ben
Changed:
fips/.cvsignore (1.1.2.5), "Exp", lines: +2 -0
fips/dh/.cvsignore (1.1.2.1), "Exp", lines: +1 -0
Update ignores.
2004-06-21 11:07 levitte
Changed:
fips/aes/Makefile (1.1.4.2), "Exp", lines: +7 -5
fips/des/Makefile (1.1.4.2), "Exp", lines: +7 -5
fips/dh/Makefile (1.1.2.2), "Exp", lines: +7 -6
fips/dsa/Makefile (1.1.4.2), "Exp", lines: +7 -6
fips/rsa/Makefile (1.1.4.2), "Exp", lines: +7 -6
fips/sha1/Makefile (1.1.4.2), "Exp", lines: +7 -5
Make sure we don't try to loop over an empty EXHEADER. In the
Makefiles where this was fixed by commenting away code, change it
to check for an empty EXHEADER instead, so we have less hassle in a
future where EXHEADER changes.
PR: 900
2004-06-21 20:05 levitte
Changed:
Makefile.org (1.154.2.82), "Exp", lines: +3 -1
Standard sh doesn't tolerate ! as part of the conditional command.
PR: 900
2004-06-28 22:33 levitte
Changed:
fips/dh/fips_dh_check.c (1.1.2.2), "Exp", lines: +6 -0
fips/dh/fips_dh_gen.c (1.1.2.2), "Exp", lines: +6 -2
fips/dh/fips_dh_key.c (1.1.2.2), "Exp", lines: +8 -0
Make sure the FIPS stuff is only really compiled when in FIPS mode.
2004-07-12 19:59 ben
Changed:
fips/fips_test_suite.c (1.1.4.4), "Exp", lines: +39 -6
fips/dh/fingerprint.sha1 (1.1.2.2), "Exp", lines: +3 -3
Corrected test program.
2004-07-17 14:48 appro
Changed:
fips/des/Makefile (1.1.4.3), "Exp", lines: +1 -1
Eliminate enforced -g from CFLAGS. It switches off optimization
with some compilers, e.g. DEC C.
2004-07-21 19:41 steve
Changed:
crypto/pem/pem_all.c (1.20.2.1), "Exp", lines: +119 -0
When in FIPS mode write private keys in PKCS#8 and PBES2 format to
avoid use of prohibited MD5 algorithm.
2004-07-23 15:20 ben
Changed:
fips/rand/fingerprint.sha1 (1.1.2.7), "Exp", lines: +1 -1
fips/rand/fips_rand.c (1.1.2.7), "Exp", lines: +22 -7
fips/rand/fips_randtest.c (1.1.2.5), "Exp", lines: +2 -2
Convert to X9.31.
2004-07-21 19:35 steve
Changed:
fips/fingerprint.sha1 (1.1.2.7), "Exp", lines: +1 -1
fips/fips.c (1.1.2.5), "Exp", lines: +3 -3
fips/rsa/fingerprint.sha1 (1.1.4.3), "Exp", lines: +1 -1
fips/rsa/fips_rsa_selftest.c (1.1.4.2), "Exp", lines: +8 -8
Avoid compiler warnings.
2004-07-27 02:17 steve
Changed:
fips/fips_test_suite.c (1.1.4.5), "Exp", lines: +9 -8
Stop compiler warnings.
2004-07-27 02:20 steve
Changed:
crypto/err/err.c (1.51.2.6), "Exp", lines: +1 -0
Add FIPS name to error library.
2004-07-27 14:22 steve
Changed:
Makefile.org (1.154.2.84), "Exp", lines: +3 -3
fips/fips_check_sha1 (1.1.2.6), "Exp", lines: +1 -1
fips/openssl_fips_fingerprint (1.1.4.3), "Exp", lines: +1 -1
Rename libcrypto.sha1 to libcrypto.a.sha1
2004-07-27 20:28 steve
Changed:
ssl/s3_lib.c (1.57.2.11), "Exp", lines: +33 -33
ssl/ssl.h (1.126.2.20), "Exp", lines: +1 -0
ssl/ssl_ciph.c (1.33.2.9), "Exp", lines: +11 -0
ssl/ssl_locl.h (1.47.2.3), "Exp", lines: +2 -1
New cipher "strength" FIPS which specifies that a cipher suite is
FIPS compatible.
New cipherstring "FIPS" is all FIPS compatible ciphersuites
except eNULL.
Only allow FIPS ciphersuites in FIPS mode.
2004-07-28 04:24 levitte
Changed:
makevms.com (1.35.2.6), "Exp", lines: +2 -2
From the FIPS directory, darnit!
2004-07-28 15:47 levitte
Changed:
makevms.com (1.35.2.7), "Exp", lines: +5 -1
Define OPENSSL_FIPS in opensslconf.h if a logical name with the
same name is defined.
Go up one directory level before dealing with FIPS stuff.
2004-07-30 00:26 levitte
Changed:
fips/fips-lib.com (1.1.2.2), "Exp", lines: +3 -3
We're building crypto stuff, not ssl stuff. Additionally, we're in
the fips subdirectory, not the crypto one...
2004-07-30 16:37 levitte
Changed:
fips/sha1/fingerprint.sha1 (1.1.2.7), "Exp", lines: +2 -2
fips/sha1/fips_md32_common.h (1.1.2.6), "Exp", lines: +1 -1
fips/sha1/fips_sha_locl.h (1.1.2.5), "Exp", lines: +2 -2
fips/sha1/fips_standalone_sha1.c (1.1.2.5), "Exp", lines: +1 -1
fips/sha1/standalone.sha1 (1.1.2.8), "Exp", lines: +3 -3
ssl/ssl_ciph.c (1.33.2.10), "Exp", lines: +2 -2
fips/rsa/fingerprint.sha1 (1.1.4.4), "Exp", lines: +2 -2
fips/rsa/fips_rsa_eay.c (1.1.4.3), "Exp", lines: +1 -1
fips/rsa/fips_rsa_gen.c (1.1.4.3), "Exp", lines: +1 -1
fips/dh/fingerprint.sha1 (1.1.2.3), "Exp", lines: +1 -1
fips/dh/fips_dh_gen.c (1.1.2.3), "Exp", lines: +1 -1
fips/dsa/fingerprint.sha1 (1.1.2.6), "Exp", lines: +2 -2
fips/dsa/fips_dsa_gen.c (1.1.4.3), "Exp", lines: +4 -3
fips/dsa/fips_dsa_ossl.c (1.1.2.6), "Exp", lines: +2 -2
fips/des/fingerprint.sha1 (1.1.2.5), "Exp", lines: +2 -2
fips/des/fips_des_enc.c (1.1.2.5), "Exp", lines: +2 -2
fips/des/fips_set_key.c (1.1.4.3), "Exp", lines: +3 -3
fips/fingerprint.sha1 (1.1.2.8), "Exp", lines: +2 -2
fips/fips.c (1.1.2.6), "Exp", lines: +76 -23
fips/fips.h (1.1.2.5), "Exp", lines: +2 -3
fips/fips_locl.h (1.1.4.2), "Exp", lines: +7 -2
fips/aes/fingerprint.sha1 (1.1.2.5), "Exp", lines: +1 -1
fips/aes/fips_aes_core.c (1.1.2.5), "Exp", lines: +1 -1
crypto/rand/md_rand.c (1.69.2.5), "Exp", lines: +1 -1
crypto/rand/rand_lib.c (1.15.2.5), "Exp", lines: +2 -1
crypto/dsa/dsa_sign.c (1.10.2.6), "Exp", lines: +2 -2
crypto/dsa/dsa_vrf.c (1.10.2.6), "Exp", lines: +1 -1
crypto/pem/pem_all.c (1.20.2.2), "Exp", lines: +2 -2
crypto/cryptlib.c (1.32.2.12), "Exp", lines: +122 -6
crypto/crypto.h (1.62.2.8), "Exp", lines: +8 -1
crypto/md32_common.h (1.22.2.7), "Exp", lines: +2 -2
To protect FIPS-related global variables, add locking mechanisms
around them.
NOTE: because two new locks are added, this adds potential
binary incompatibility with earlier versions in the 0.9.7 series.
However, those locks will only ever be touched when FIPS_mode_set()
is called and after, thanks to a variable that's only changed from
0 to 1 once (when FIPS_mode_set() is called). So basically, as
long as FIPS mode hasn't been engaged explicitely by the calling
application, the new locks are treated as if they didn't exist at
all, thus not becoming a problem. Applications that are built or
rebuilt to use FIPS functionality will need to be recompiled in any
case, thus not being a problem either.
2004-08-02 16:15 levitte
Changed:
crypto/cryptlib.c (1.32.2.13), "Exp", lines: +4 -4
Let's lock a write lock when changing values, shall we?
Thanks to Dr Stephen Henson <shenson@drh-consultancy.co.uk>
for making me aware of this error.
2004-08-05 20:11 steve
Changed:
fips/fingerprint.sha1 (1.1.2.9), "Exp", lines: +1 -1
fips/fips.c (1.1.2.7), "Exp", lines: +1 -1
Stop compiler giving bogus shadow warning.
2004-08-09 14:13 levitte
Changed:
makevms.com (1.35.2.8), "Exp", lines: +1 -1
In the fips directory, we use FIPS-LIB.COM, not CRYPTO-LIB.COM...
2004-08-09 14:14 levitte
Changed:
fips/fips-lib.com (1.1.2.3), "Exp", lines: +4 -4
Correct typos and include directory specifications.
2004-08-10 11:11 levitte
Changed:
fips/fips-lib.com (1.1.2.4), "Exp", lines: +2 -1
Update the VMS fips library builder with the DH library.
2004-08-10 12:04 levitte
Changed:
fips/rand/fingerprint.sha1 (1.1.2.8), "Exp", lines: +1 -1
fips/rand/fips_rand.c (1.1.2.8), "Exp", lines: +7 -1
With DEC C in ANSI C mode, we need to define _XOPEN_SOURCE_EXTENDED
to get struct timeval and gettimeofday().
2004-09-06 16:19 levitte
Changed:
fips/fips.c (1.1.2.8), "Exp", lines: +5 -4
Replace the bogus checks of n with proper uses of feof(), ferror()
and clearerr().
2004-09-06 16:21 levitte
Changed:
fips/sha1/fips_sha_locl.h (1.1.2.6), "Exp", lines: +2 -2
num is an unsigned long, but since it was transfered from
crypto/sha/sha_locl.h, where it is in fact an int, we need to check
for less-than-zero as if it was an int...
2004-10-08 12:03 ben
Changed:
fips/fingerprint.sha1 (1.1.2.10), "Exp", lines: +1 -1
fips/sha1/fingerprint.sha1 (1.1.2.8), "Exp", lines: +1 -1
fips/sha1/standalone.sha1 (1.1.2.9), "Exp", lines: +1 -1
Update fingerprints.
2004-10-14 07:51 levitte
Changed:
VMS/mkshared.com (1.3.2.1), "Exp", lines: +8 -0
We need to check for OPENSSL_FIPS when building shared libraries,
so we get correct transfer vectors for those functions when
required.
2004-10-26 13:47 steve
Changed:
util/mkfiles.pl (1.12.2.2), "Exp", lines: +1 -0
Add fips/dh directory to mkfiles.pl
2004-10-26 14:17 levitte
Changed:
fips/sha1/Makefile (1.1.4.4), "Exp", lines: +3 -1
util/mkfiles.pl (1.12.2.3), "Exp", lines: +1 -0
fips/Makefile (1.1.4.5), "Exp", lines: +7 -1
crypto/sha/Makefile (1.1.4.4), "Exp", lines: +1 -7
fips/dh was missing in mkfiles.pl. make update
2004-10-26 15:01 steve
Changed:
util/mkfiles.pl (1.12.2.4), "Exp", lines: +0 -1
Only add fips/dh once...
2004-11-01 09:20 levitte
Changed:
fips/rand/fingerprint.sha1 (1.1.2.9), "Exp", lines: +1 -1
fips/rand/fips_rand.c (1.1.2.9), "Exp", lines: +3 -1
Make sure _XOPEN_SOURCE_EXTENDED is correctly defined, and only if
not already defined.
2004-12-09 19:03 appro
vChanged:
crypto/Makefile (1.1.4.4), "Exp", lines: +2 -0
Postpone linking of shared libcrypto in FIPS build.
2004-12-09 19:13 appro
Changed:
fips/fingerprint.sha1 (1.1.2.11), "Exp", lines: +1 -1
fips/fips.c (1.1.2.9), "Exp", lines: +13 -1
fips/openssl_fips_fingerprint (1.1.4.4), "Exp", lines: +4 -2
Cygwin specific FIPS fix-ups.
2004-12-09 23:43 appro
Changed:
Configure (1.314.2.100), "Exp", lines: +2 -3
crypto/des/des_enc.c (1.11.2.5), "Exp", lines: +2 -2
Eliminate false dependency on 386 config option is FIPS context.
At the same time limit assembler support to ELF platforms [that's
what is there, ELF modules].
2004-12-10 12:37 appro
Changed:
Configure (1.314.2.101), "Exp", lines: +10 -3
crypto/des/des_enc.c (1.11.2.6), "Exp", lines: +2 -2
Respect no-asm with fips option and disable FIPS DES assembler in
shared context [because it's not PIC].
2004-12-10 14:15 appro
Changed:
fips/sha1/fingerprint.sha1 (1.1.2.10), "Exp", lines: +1 -1
fips/sha1/standalone.sha1 (1.1.2.11), "Exp", lines: +1 -1
fips/sha1/asm/sx86-elf.s (1.1.4.3), "Exp", lines: +32 -32
Solaris x86 assembler update.
2004-12-10 17:30 appro
Changed:
fips/fips_check_sha1 (1.1.2.7), "Exp", lines: +1 -1
fips/openssl_fips_fingerprint (1.1.4.5), "Exp", lines: +1 -1
fips/sha1/Makefile (1.1.4.6), "Exp", lines: +1 -1
Adapt FIPS sub-tree for mingw.
2005-01-03 18:46 steve
Changed:
fips/rsa/fingerprint.sha1 (1.1.4.5), "Exp", lines: +1 -1
fips/rsa/fips_rsa_selftest.c (1.1.4.3), "Exp", lines: +55 -11
RSA KAT.
2005-01-11 17:54 levitte
Changed:
fips/rsa/fingerprint.sha1 (1.1.4.6), "Exp", lines: +1 -1
fips/rsa/fips_rsa_selftest.c (1.1.4.4), "Exp", lines: +2 -2
Clear signed vs. unsigned conflicts. Change the fingerprint
accordingly.
2005-01-11 19:25 levitte
Changed:
ssl/ssltest.c (1.53.2.24), "Exp", lines: +2 -2
fips/rand/fips_randtest.c (1.1.2.6), "Exp", lines: +3 -3
fips/sha1/fips_sha1test.c (1.1.2.5), "Exp", lines: +10 -4
fips/des/fips_desmovs.c (1.1.2.6), "Exp", lines: +8 -7
fips/dsa/fips_dsatest.c (1.1.2.5), "Exp", lines: +2 -2
apps/openssl.c (1.48.2.12), "Exp", lines: +1 -1
fips/aes/fips_aesavs.c (1.1.2.12), "Exp", lines: +8 -7
Use EXIT() instead of exit().
2005-01-26 21:00 steve
Changed:
apps/dgst.c (1.23.2.13), "Exp", lines: +10 -0
apps/pkcs12.c (1.60.2.13), "Exp", lines: +8 -1
crypto/crypto.h (1.62.2.9), "Exp", lines: +49 -0
crypto/md32_common.h (1.22.2.9), "Exp", lines: +1 -1
crypto/bf/bf_skey.c (1.6.2.1), "Exp", lines: +2 -1
crypto/bf/blowfish.h (1.9.2.1), "Exp", lines: +4 -1
crypto/cast/c_skey.c (1.5.6.1), "Exp", lines: +3 -1
crypto/cast/cast.h (1.7.2.1), "Exp", lines: +4 -1
crypto/evp/bio_md.c (1.11.2.3), "Exp", lines: +2 -7
crypto/evp/digest.c (1.21.2.7), "Exp", lines: +11 -0
crypto/evp/e_aes.c (1.6.2.11), "Exp", lines: +11 -11
crypto/evp/e_des.c (1.5.2.9), "Exp", lines: +5 -3
crypto/evp/e_des3.c (1.8.2.8), "Exp", lines: +6 -6
crypto/evp/evp.h (1.86.2.16), "Exp", lines: +17 -0
crypto/evp/evp_enc.c (1.28.2.11), "Exp", lines: +15 -1
crypto/evp/evp_err.c (1.23.2.4), "Exp", lines: +6 -1
crypto/evp/evp_locl.h (1.7.2.7), "Exp", lines: +17 -2
crypto/evp/m_dss.c (1.8.2.1), "Exp", lines: +1 -1
crypto/evp/m_md2.c (1.9.2.1), "Exp", lines: +1 -0
crypto/evp/m_md4.c (1.8.2.1), "Exp", lines: +1 -0
crypto/evp/m_md5.c (1.9.2.1), "Exp", lines: +1 -0
crypto/evp/m_mdc2.c (1.9.2.1), "Exp", lines: +1 -0
crypto/evp/m_sha.c (1.8.2.2), "Exp", lines: +1 -0
crypto/evp/m_sha1.c (1.8.2.1), "Exp", lines: +1 -1
crypto/evp/names.c (1.7.2.1), "Exp", lines: +3 -0
crypto/hmac/hmac.c (1.12.2.3), "Exp", lines: +7 -0
crypto/hmac/hmac.h (1.14.2.2), "Exp", lines: +1 -0
crypto/idea/i_skey.c (1.5.6.1), "Exp", lines: +13 -0
crypto/idea/idea.h (1.10.2.1), "Exp", lines: +4 -0
crypto/md2/md2.h (1.11.2.1), "Exp", lines: +3 -0
crypto/md2/md2_dgst.c (1.13.2.4), "Exp", lines: +3 -1
crypto/md4/md4.h (1.3.2.1), "Exp", lines: +3 -0
crypto/md4/md4_dgst.c (1.2.2.2), "Exp", lines: +1 -1
crypto/md5/md5.h (1.10.2.3), "Exp", lines: +3 -0
crypto/md5/md5_dgst.c (1.16.2.2), "Exp", lines: +1 -1
crypto/mdc2/mdc2.h (1.9.2.1), "Exp", lines: +3 -1
crypto/mdc2/mdc2dgst.c (1.13.2.1), "Exp", lines: +3 -1
crypto/rc2/rc2.h (1.10.2.1), "Exp", lines: +4 -1
crypto/rc2/rc2_skey.c (1.4.6.1), "Exp", lines: +13 -0
crypto/rc4/rc4.h (1.10.2.2), "Exp", lines: +3 -0
crypto/rc4/rc4_skey.c (1.10.8.2), "Exp", lines: +2 -1
crypto/rc5/rc5.h (1.5.2.1), "Exp", lines: +4 -1
crypto/rc5/rc5_skey.c (1.4.6.1), "Exp", lines: +14 -0
crypto/ripemd/ripemd.h (1.8.2.1), "Exp", lines: +3 -0
crypto/ripemd/rmd_dgst.c (1.13.2.2), "Exp", lines: +2 -1
crypto/sha/sha.h (1.11.2.2), "Exp", lines: +3 -0
crypto/sha/sha_locl.h (1.16.2.3), "Exp", lines: +4 -0
crypto/x509/x509_cmp.c (1.22.2.4), "Exp", lines: +7 -1
crypto/x509/x509_vfy.c (1.56.2.13), "Exp", lines: +1 -1
ssl/s3_clnt.c (1.53.2.18), "Exp", lines: +2 -0
ssl/s3_enc.c (1.31.2.9), "Exp", lines: +3 -0
ssl/s3_srvr.c (1.85.2.23), "Exp", lines: +2 -0
ssl/t1_enc.c (1.27.2.9), "Exp", lines: +2 -0
FIPS algorithm blocking.
Non FIPS algorithms are not normally allowed in FIPS mode.
Any attempt to use them via high level functions will
return an error.
The low level non-FIPS algorithm functions cannot return
errors so they produce assertion failures. HMAC also has to give an
assertion error because it (erroneously) can't return an error
either.
There are exceptions (such as MD5 in TLS and non
cryptographic use of algorithms) and applications can override the
blocking and use non FIPS algorithms anyway.
For low level functions the override is perfomed by
prefixing the algorithm initalization function with "private_" for
example private_MD5_Init().
For high level functions an override is performed by
setting a flag in the context.
2005-01-27 02:49 steve
Changed:
apps/dgst.c (1.23.2.14), "Exp", lines: +9 -5
crypto/crypto.h (1.62.2.10), "Exp", lines: +3 -0
crypto/evp/digest.c (1.21.2.8), "Exp", lines: +34 -0
crypto/hmac/hmac.c (1.12.2.4), "Exp", lines: +9 -0
More FIPS algorithm blocking.
Catch attempted use of non FIPS algorithms with HMAC.
Give an assertion error for applications that ignore FIPS
digest errors.
Make -non-fips-allow work with dgst and HMAC.
2005-01-28 15:03 steve
Changed:
apps/dgst.c (1.23.2.15), "Exp", lines: +2 -1
apps/enc.c (1.35.2.13), "Exp", lines: +38 -4
crypto/evp/e_rc4.c (1.11.2.2), "Exp", lines: +1 -0
crypto/evp/evp.h (1.86.2.17), "Exp", lines: +3 -0
crypto/evp/evp_enc.c (1.28.2.12), "Exp", lines: +60 -15
crypto/evp/evp_locl.h (1.7.2.8), "Exp", lines: +1 -0
test/testenc (1.3.8.2), "Exp", lines: +8 -8
Further FIPS algorithm blocking.
Fixes to cipher blocking and enabling code.
Add option -non-fips-allow to 'enc' and update testenc.
2005-01-31 02:33 steve
Changed:
ssl/s23_clnt.c (1.20.2.7), "Exp", lines: +16 -0
ssl/s23_srvr.c (1.41.2.6), "Exp", lines: +9 -0
ssl/s3_clnt.c (1.53.2.19), "Exp", lines: +0 -8
ssl/s3_enc.c (1.31.2.10), "Exp", lines: +1 -0
ssl/s3_srvr.c (1.85.2.24), "Exp", lines: +0 -8
ssl/ssl.h (1.126.2.21), "Exp", lines: +1 -0
ssl/ssl_cert.c (1.48.2.10), "Exp", lines: +0 -8
ssl/ssl_err.c (1.41.2.4), "Exp", lines: +2 -1
ssl/ssl_lib.c (1.110.2.13), "Exp", lines: +8 -9
ssl/t1_enc.c (1.27.2.10), "Exp", lines: +0 -18
Only allow TLS is FIPS mode.
Remove old FIPS_allow_md5() calls.
2005-02-05 19:24 steve
Changed:
apps/req.c (1.88.2.18), "Exp", lines: +8 -1
apps/x509.c (1.67.2.20), "Exp", lines: +8 -1
In FIPS mode use SHA1 as default digest in x509 and req utilities.
2005-03-15 10:46 appro
Changed:
Makefile.org (1.154.2.96), "Exp", lines: +1 -1
crypto/Makefile (1.1.4.6), "Exp", lines: +2 -3
fips/Makefile (1.1.4.8), "Exp", lines: +4 -1
Real Bourne shell doesn't accept ! as in "if ! grep ..." Fix this
in crypto/Makefile and make Makefile.org and fips/Makefile more
discreet.
2005-03-22 18:29 steve
Changed:
fips/fingerprint.sha1 (1.1.2.12), "Exp", lines: +1 -1
fips/fips.c (1.1.2.10), "Exp", lines: +1 -0
Fix memory leak.
2005-03-27 05:36 steve
Changed:
crypto/evp/e_null.c (1.9.2.1), "Exp", lines: +1 -1
ssl/s3_lib.c (1.57.2.13), "Exp", lines: +3 -3
Allow 'null' cipher and appropriate Kerberos ciphersuites in FIPS
mode.
2005-04-14 14:44 steve
Changed:
fips/fipshashes.sha1 (1.1.2.1), "Exp", lines: +29 -0
util/checkhash.pl (1.1.2.1), "Exp", lines: +181 -0
Perl script that checks or rebuilds FIPS hash files. This works on
both Unix and Windows.
Merge all FIPS hash files into a single hash file
fips/fips.sha1
2005-04-15 05:27 steve
Changed:
fips/Makefile (1.1.4.9), "Exp", lines: +1 -1
fips/aes/Makefile (1.1.4.4), "Exp", lines: +1 -4
fips/des/Makefile (1.1.4.6), "Exp", lines: +1 -4
fips/dh/Makefile (1.1.2.5), "Exp", lines: +1 -4
fips/dsa/Makefile (1.1.4.4), "Exp", lines: +1 -4
fips/rand/Makefile (1.1.4.3), "Exp", lines: +1 -4
fips/rsa/Makefile (1.1.4.5), "Exp", lines: +1 -4
fips/sha1/Makefile (1.1.4.9), "Exp", lines: +1 -7
Update hash checking in makefiles to use new perl script.
2005-04-17 06:37 steve
Changed:
util/checkhash.pl (1.1.2.2), "Exp", lines: +163 -127
Modify checkhash.pl so it can be run standalone or included as a
funtion in another perl script.
2005-04-17 16:00 appro
Changed:
fips/sha1/Makefile (1.1.4.10), "Exp", lines: +9 -5
Bring back fips_standalone_sha1.
2005-04-17 16:17 appro
Deleted:
fips/sha1/asm/sx86-elf.s (1.1.4.4)
Changed:
Configure (1.314.2.114), "Exp", lines: +1 -1
fips/fipshashes.sha1 (1.1.2.2), "Exp", lines: +1 -1
fips/sha1/Makefile (1.1.4.11), "Exp", lines: +1 -1
fips/sha1/standalone.sha1 (1.1.2.13), "Exp", lines: +1 -1
fips/sha1/asm/fips-sx86-elf.s (1.1.2.1), "Exp", lines: +1568 -0
Rename fips/sha1/sx86-elf.s to fips/sha1/fips-sx86-elf.s.
2005-04-17 16:21 steve
Changed:
util/checkhash.pl (1.1.2.3), "Exp", lines: +2 -0
Return 0 for successful hash check.
2005-04-17 16:54 appro
Changed:
Configure (1.314.2.116), "Exp", lines: +8 -1
Makefile.org (1.154.2.99), "Exp", lines: +3 -2
crypto/aes/aes_cbc.c (1.1.2.11), "Exp", lines: +2 -0
fips/fipshashes.sha1 (1.1.2.4), "Exp", lines: +1 -0
fips/aes/Makefile (1.1.4.5), "Exp", lines: +4 -2
fips/aes/asm/fips-ax86-elf.s (1.1.2.1), "Exp", lines: +1822 -0
Throw in fips/aes/asm/fips-ax86-elf.s.
2005-04-17 16:35 appro
Changed:
Configure (1.314.2.115), "Exp", lines: +1 -1
fips/fipshashes.sha1 (1.1.2.3), "Exp", lines: +1 -1
fips/des/asm/fips-dx86-elf.s (1.1.4.2), "Exp", lines: +108 -98
Regenerate fips/des/asm/fips-dx86-elf.s with -fPIC flag.
2005-04-17 17:26 appro
Changed:
crypto/cryptlib.c (1.32.2.18), "Exp", lines: +6 -55
crypto/crypto.h (1.62.2.11), "Exp", lines: +0 -3
fips/fips.c (1.1.2.11), "Exp", lines: +62 -8
fips/fips.h (1.1.2.7), "Exp", lines: +2 -3
fips/fips_locl.h (1.1.4.3), "Exp", lines: +6 -3
fips/fipshashes.sha1 (1.1.2.5), "Exp", lines: +4 -4
fips/rand/fips_rand.c (1.1.2.10), "Exp", lines: +3 -1
fips/rsa/fips_rsa_gen.c (1.1.4.4), "Exp", lines: +4 -2
Resolve minor binary compatibility issues in fips.
2005-04-17 18:22 appro
Changed:
fips/fipshashes.sha1 (1.1.2.6), "Exp", lines: +12 -12
fips/des/fips_des_locl.h (1.1.2.4), "Exp", lines: +1 -1
fips/des/fips_set_key.c (1.1.4.4), "Exp", lines: +2 -2
fips/dh/fips_dh_key.c (1.1.2.3), "Exp", lines: +1 -1
fips/dsa/fips_dsa_ossl.c (1.1.2.7), "Exp", lines: +1 -1
fips/dsa/fips_dsa_selftest.c (1.1.4.2), "Exp", lines: +3 -3
fips/rand/fips_rand.c (1.1.2.11), "Exp", lines: +2 -2
fips/rand/fips_rand.h (1.1.2.5), "Exp", lines: +1 -1
fips/rsa/fips_rsa_eay.c (1.1.4.4), "Exp", lines: +1 -1
fips/rsa/fips_rsa_gen.c (1.1.4.5), "Exp", lines: +1 -1
fips/rsa/fips_rsa_selftest.c (1.1.4.5), "Exp", lines: +11 -11
fips/sha1/fips_sha1_selftest.c (1.1.4.2), "Exp", lines: +1 -1
fips/sha1/fips_sha1dgst.c (1.1.2.5), "Exp", lines: +1 -1
fips/sha1/standalone.sha1 (1.1.2.14), "Exp", lines: +2 -2
Minor fips const-ification.
2005-04-18 07:02 steve
Changed:
crypto/bf/bf_skey.c (1.6.2.2), "Exp", lines: +1 -0
crypto/cast/c_skey.c (1.5.6.2), "Exp", lines: +1 -0
crypto/idea/i_skey.c (1.5.6.2), "Exp", lines: +1 -0
crypto/rc2/rc2_skey.c (1.4.6.2), "Exp", lines: +1 -0
crypto/rc4/rc4_skey.c (1.10.8.3), "Exp", lines: +1 -0
crypto/rc5/rc5_skey.c (1.4.6.2), "Exp", lines: +1 -0
Pick up definition of FIPS_mode() in fips.h to avoid warnings.
2005-04-18 10:34 steve
Deleted:
fips/fingerprint.sha1 (1.1.2.14)
fips/fips_check_sha1 (1.1.2.8)
fips/fips_make_sha1 (1.1.2.7)
fips/aes/fingerprint.sha1 (1.1.2.7)
fips/des/fingerprint.sha1 (1.1.2.6)
fips/dh/fingerprint.sha1 (1.1.2.4)
fips/dsa/fingerprint.sha1 (1.1.2.7)
fips/rand/fingerprint.sha1 (1.1.2.10)
fips/rsa/fingerprint.sha1 (1.1.4.7)
fips/sha1/fingerprint.sha1 (1.1.2.12)
Changed:
fips/sha1/Makefile (1.1.4.12), "Exp", lines: +1 -4
Remove obsolete fingerprint.sha1 files and associated scripts.
Delete test in fips/sha1/Makefile: the top level test checks the
same files.
2005-04-19 09:11 appro
Deleted:
fips/fipshashes.sha1 (1.1.2.7)
fips/sha1/standalone.sha1 (1.1.2.15)
Changed:
fips/fipshashes.c (1.1.2.1), "Exp", lines: +32 -0
util/checkhash.pl (1.1.2.4), "Exp", lines: +7 -4
Maintain fingerprint hashes as C source.
2005-04-19 09:17 appro
Changed:
util/checkhash.pl (1.1.2.5), "Exp", lines: +1 -1
Complete the transition C-code hashes.
2005-04-21 19:06 steve
Changed:
apps/openssl.c (1.48.2.13), "Exp", lines: +0 -2
fips/fips.c (1.1.2.12), "Exp", lines: +0 -27
fips/fips.h (1.1.2.8), "Exp", lines: +0 -2
fips/fipshashes.c (1.1.2.2), "Exp", lines: +2 -2
Remove defunct FIPS_allow_md5() and related functions.
2005-04-22 06:15 appro
Changed:
fips/fips.c (1.1.2.13), "Exp", lines: +3 -3
fips/fips_err.h (1.1.4.4), "Exp", lines: +3 -3
fips/fipshashes.c (1.1.2.4), "Exp", lines: +2 -2
Move some variables to .bss.
|
