Andy Polyakov 
							
						 
					 
					
						
						
							
						
						925596f85b 
					 
					
						
						
							
							ARM assembler pack: engage newly introduced armv4-gf2m module.  
						
						
						
						
					 
					
						2011-05-05 21:57:11 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						8d3cdd5b58 
					 
					
						
						
							
							Fix warning of signed/unsigned comparison.  
						
						
						
						
					 
					
						2011-05-05 14:47:38 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						75359644d0 
					 
					
						
						
							
							ARM assembler pack. Add bn_GF2m_mul_2x2 implementation (see source code  
						
						... 
						
						
						
						for details and performance data). 
						
						
					 
					
						2011-05-05 07:21:17 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						034688ec4d 
					 
					
						
						
							
							bn_gf2m.c: optimized BN_GF2m_mod_inv delivers sometimes 2x of ECDSA sign.  
						
						... 
						
						
						
						Exact improvement coefficients vary from one benchmark and platform to
another, e.g. it performs 70%-33% better on ARM, hereafter less for
longer keys, and 100%-90% better on x86_64. 
						
						
					 
					
						2011-05-04 15:22:53 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						48da9b8f2a 
					 
					
						
						
							
							Fix warning.  
						
						
						
						
					 
					
						2011-04-11 14:52:59 +00:00 
						 
				 
			
				
					
						
							
							
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						c6dbe90895 
					 
					
						
						
							
							make update  
						
						
						
						
					 
					
						2011-03-24 22:59:02 +00:00 
						 
				 
			
				
					
						
							
							
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						537c982306 
					 
					
						
						
							
							After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS  
						
						... 
						
						
						
						submitted by Steven M. Schweda <sms@antinode.info > 
						
						
					 
					
						2011-03-19 10:58:14 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						edc032b5e3 
					 
					
						
						
							
							Add SRP support.  
						
						
						
						
					 
					
						2011-03-12 17:01:19 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						a000759a5c 
					 
					
						
						
							
							ia64-mont.pl: optimize short-key performance.  
						
						
						
						
					 
					
						2011-03-04 13:27:29 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						0ab8fd58e1 
					 
					
						
						
							
							s390x assembler pack: tune-up and support for new z196 hardware.  
						
						
						
						
					 
					
						2011-03-04 13:09:16 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						949c6f8ccf 
					 
					
						
						
							
							Stop warnings.  
						
						
						
						
					 
					
						2011-02-23 16:06:33 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						b7056b6414 
					 
					
						
						
							
							Update dependencies.  
						
						
						
						
					 
					
						2011-02-21 17:51:59 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						d749e1080a 
					 
					
						
						
							
							Experimental symbol renaming to avoid clashes with regular OpenSSL.  
						
						... 
						
						
						
						Make sure crypto.h is included first in any affected files. 
						
						
					 
					
						2011-02-16 14:40:06 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						fe26d066ff 
					 
					
						
						
							
							Add ECDSA functionality to fips module. Initial very incomplete version  
						
						... 
						
						
						
						of algorithm test program. 
						
						
					 
					
						2011-02-14 17:14:55 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						133291f8e7 
					 
					
						
						
							
							New function BN_nist_mod_func which returns an appropriate function  
						
						... 
						
						
						
						if the passed prime is a NIST prime. 
						
						
					 
					
						2011-02-14 16:44:29 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						c9a90645a5 
					 
					
						
						
							
							Disable some functions in headers with no-ec2m  
						
						
						
						
					 
					
						2011-02-12 17:38:06 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						b331016124 
					 
					
						
						
							
							New option to disable characteristic two fields in EC code.  
						
						
						
						
					 
					
						2011-02-12 17:23:32 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						ed12c2f7ca 
					 
					
						
						
							
							In FIPS mode only use "Generation by Testing Candidates" equivalent.  
						
						
						
						
					 
					
						2011-02-11 15:19:54 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						14ae26f2e4 
					 
					
						
						
							
							Transfer error redirection to fips.h, add OPENSSL_FIPSAPI to source files  
						
						... 
						
						
						
						that use it. 
						
						
					 
					
						2011-02-03 17:00:24 +00:00 
						 
				 
			
				
					
						
							
							
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						9d0397e977 
					 
					
						
						
							
							make update  
						
						
						
						
					 
					
						2011-02-03 10:17:53 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						7edfe67456 
					 
					
						
						
							
							Move all FIPSAPI renames into fips.h header file, include early in  
						
						... 
						
						
						
						crypto.h if needed.
Modify source tree to handle change. 
						
						
					 
					
						2011-01-27 19:10:56 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						7cc684f4f7 
					 
					
						
						
							
							Redirect FIPS memory allocation to FIPS_malloc() routine, remove  
						
						... 
						
						
						
						OpenSSL malloc dependencies. 
						
						
					 
					
						2011-01-27 17:23:43 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						aa87945f47 
					 
					
						
						
							
							Update source files to handle new FIPS_lock() location. Add FIPS_lock()  
						
						... 
						
						
						
						definition. Remove stale function references from fips.h 
						
						
					 
					
						2011-01-27 15:57:31 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						7c8ced94c3 
					 
					
						
						
							
							Change OPENSSL_FIPSEVP to OPENSSL_FIPSAPI as it doesn't just refer  
						
						... 
						
						
						
						to EVP any more.
Move locking #define into fips.h.
Set FIPS locking callbacks at same time as OpenSSL locking callbacks. 
						
						
					 
					
						2011-01-27 15:22:26 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						a27de7b7fd 
					 
					
						
						
							
							use FIPSEVP in some bn and rsa files  
						
						
						
						
					 
					
						2011-01-27 14:24:42 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						879bd6e38c 
					 
					
						
						
							
							Internal version of BN_mod_inverse allowing checking of no-inverse without  
						
						... 
						
						
						
						need to inspect error queue. 
						
						
					 
					
						2011-01-26 16:59:47 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						df6de39fe7 
					 
					
						
						
							
							Change AR to ARX to allow exclusion of fips object modules  
						
						
						
						
					 
					
						2011-01-26 16:08:08 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						13a5519208 
					 
					
						
						
							
							Move BN_options function to bn_print.c to remove dependency for BIO printf  
						
						... 
						
						
						
						routines from bn_lib.c 
						
						
					 
					
						2011-01-25 17:10:30 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						7b1a04519f 
					 
					
						
						
							
							add X9.31 prime generation routines from 0.9.8 branch  
						
						
						
						
					 
					
						2011-01-09 13:02:14 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						e822c756b6 
					 
					
						
						
							
							s390x assembler pack: adapt for -m31 build, see commentary in Configure  
						
						... 
						
						
						
						for more details. 
						
						
					 
					
						2010-11-29 20:52:43 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						dd128715a2 
					 
					
						
						
							
							s390x.S: fix typo in bn_mul_words.  
						
						... 
						
						
						
						PR: 2380 
						
						
					 
					
						2010-11-22 21:55:07 +00:00 
						 
				 
			
				
					
						
							
							
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						776654adff 
					 
					
						
						
							
							PR: 2295  
						
						... 
						
						
						
						Submitted by: Alexei Khlebnikov <alexei.khlebnikov@opera.com >
Reviewed by: steve
OOM checking. Leak in OOM fix. Fall-through comment. Duplicate code
elimination. 
						
						
					 
					
						2010-10-11 23:49:22 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						d466588788 
					 
					
						
						
							
							MIPS assembler pack: enable it in Configure, add SHA2 module, fix make rules,  
						
						... 
						
						
						
						update commentary... 
						
						
					 
					
						2010-10-02 11:47:17 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						da4d239dad 
					 
					
						
						
							
							Add unified mips.pl, which will replace mips3.s.  
						
						
						
						
					 
					
						2010-09-27 21:19:43 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						0985473636 
					 
					
						
						
							
							sha1-mips.pl, mips-mont.pl: unify MIPS assembler modules in respect to  
						
						... 
						
						
						
						ABI and binutils. 
						
						
					 
					
						2010-09-22 08:43:09 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						f8927c89d0 
					 
					
						
						
							
							Alpha assembler pack: adapt for Linux.  
						
						... 
						
						
						
						PR: 2335 
						
						
					 
					
						2010-09-13 13:28:52 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						dd4a0af370 
					 
					
						
						
							
							crypto/bn/asm/s390x.S: drop redundant instructions.  
						
						
						
						
					 
					
						2010-09-10 14:53:36 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						1cbdca7bf2 
					 
					
						
						
							
							Harmonize s390x assembler modules with "catch-all" rules from commit#19749.  
						
						
						
						
					 
					
						2010-07-09 12:11:12 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						e216cd6ee9 
					 
					
						
						
							
							armv4-mont.pl: addenum to previous commit#19749.  
						
						
						
						
					 
					
						2010-07-08 15:06:01 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						396df7311e 
					 
					
						
						
							
							crypto/*/Makefile: unify "catch-all" assembler make rules and harmonize  
						
						... 
						
						
						
						ARM assembler modules. 
						
						
					 
					
						2010-07-08 15:03:42 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						c8bbd98a2b 
					 
					
						
						
							
							Fix warnings.  
						
						
						
						
					 
					
						2010-06-12 14:13:23 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						3efe51a407 
					 
					
						
						
							
							Revert previous Linux-specific/centric commit#19629. If it really has to  
						
						... 
						
						
						
						be done, it's definitely not the way to do it. So far answer to the
question was to ./config -Wa,--noexecstack (adopted by RedHat). 
						
						
					 
					
						2010-05-05 22:05:39 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						0e3ef596e5 
					 
					
						
						
							
							Non-executable stack in asm.  
						
						
						
						
					 
					
						2010-05-05 15:50:13 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						d23f4e9d5a 
					 
					
						
						
							
							alpha-mont.pl: comply with stack alignment requirements.  
						
						
						
						
					 
					
						2010-04-10 13:33:04 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						97a6a01f0f 
					 
					
						
						
							
							ARMv4 assembler: fix compilation failure. Fix is actually unconfirmed, but  
						
						... 
						
						
						
						I can't think of any other cause for failure 
						
						
					 
					
						2010-03-29 09:55:19 +00:00 
						 
				 
			
				
					
						
							
							
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						2d9dcd4ff0 
					 
					
						
						
							
							Always check bn_wexpend() return values for failure (CVE-2009-3245).  
						
						... 
						
						
						
						(The CHANGES entry covers the change from PR #2111  as well, submitted by
Martin Olsson.)
Submitted by: Neel Mehta 
						
						
					 
					
						2010-02-23 10:36:35 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						964ed94649 
					 
					
						
						
							
							parisc-mont.pl: PA-RISC 2.0 code path optimization based on intruction-  
						
						... 
						
						
						
						level profiling data resulted in almost 50% performance improvement.
PA-RISC 1.1 is also reordered in same manner, mostly to be consistent,
as no gain was observed, not on PA-7100LC. 
						
						
					 
					
						2010-01-25 23:12:00 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						4f38565204 
					 
					
						
						
							
							bn_lcl.h: add MIPS III-specific BN_UMULT_LOHI as alternative to porting  
						
						... 
						
						
						
						crypto/bn/asm/mips3.s from IRIX. Performance improvement is not as
impressive as with complete assembler, but still... it's almost 2.5x
[on R5000]. 
						
						
					 
					
						2010-01-17 12:08:24 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						4407700c40 
					 
					
						
						
							
							ia64-mont.pl: add shorter vector support ("shorter" refers to 512 bits and  
						
						... 
						
						
						
						less). 
						
						
					 
					
						2010-01-17 11:33:59 +00:00 
						 
				 
			
				
					
						
							
							
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						74f2260694 
					 
					
						
						
							
							ia64-mont.pl: addp4 is not needed when referring to stack (this is 32-bit  
						
						... 
						
						
						
						HP-UX thing). 
						
						
					 
					
						2010-01-07 15:36:59 +00:00