Emilia Kasper f2df488a1c RT3425: constant-time evp_enc ...

Do the final padding check in EVP_DecryptFinal_ex in constant time to
avoid a timing leak from padding failure.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 4aac102f75b517bdb56b1bcfd0a856052d559f6e)

Conflicts:
	crypto/evp/evp_enc.c

(cherry picked from commit 738911cde68b2b3706e502cf8daf5b14738f2f42)

2014-09-24 16:25:54 +02:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

bio_b64.c

Initialize num properly.

2014-05-06 14:09:14 +01:00

bio_enc.c

Add missing function EVP_CIPHER_CTX_copy(). Current code uses memcpy() to copy

2010-02-07 13:41:23 +00:00

bio_md.c

Backport libcrypto audit: check return values of EVP functions instead

2011-06-03 20:53:00 +00:00

bio_ok.c

Backport libcrypto audit: check return values of EVP functions instead

2011-06-03 20:53:00 +00:00

c_all.c

PR: 1974 (partial)

2009-07-01 14:55:59 +00:00

c_allc.c

e_aes_cbc_hmac_sha1.c: address the CBC decrypt timing issues.

2013-02-02 19:35:09 +01:00

c_alld.c

Delete MD2 from algorithm tables and default compilation.

2009-07-08 08:50:53 +00:00

digest.c

Ignore NULL parameter in EVP_MD_CTX_destroy.

2013-12-20 22:52:41 +00:00

e_aes_cbc_hmac_sha1.c

e_aes_cbc_hmac_sha1.c: fix rare bad record mac on AES-NI plaforms.

2013-03-18 19:35:48 +01:00

e_aes.c

Fix build when BSAES_ASM is defined but VPAES_ASM is not

2014-08-21 15:48:23 +02:00

e_bf.c

Make sure we get the definition of OPENSSL_NO_BF.

2003-03-20 23:28:16 +00:00

e_camellia.c

Fix C++ style comments, change assert to OPENSSL_assert, stop warning with

2006-08-31 20:56:20 +00:00

e_cast.c

Make sure we get the definition of OPENSSL_NO_CAST.

2003-03-20 23:28:27 +00:00

e_des3.c

evp/e_des3.c: fix typo with potential integer overflow on 32-bit platforms.

2013-10-03 11:11:44 +02:00

e_des.c

Fix "possible loss of data" Win64 compiler warnings.

2008-12-29 12:35:49 +00:00

e_dsa.c

Change #include filenames from <foo.h> to <openssl.h>.

1999-04-23 22:13:45 +00:00

e_idea.c

size_t-fy EVP_CIPHER. Note that being size_t-fied it doesn't require

2008-10-31 19:48:25 +00:00

e_null.c

Redirect null cipher to FIPS module.

2011-06-20 20:00:10 +00:00

e_old.c

Use OPENSSL_NO_CAST, not OPENSSL_NO_CAST5 in e_old.c

2005-04-25 23:09:00 +00:00

e_rc2.c

Backport libcrypto audit: check return values of EVP functions instead

2011-06-03 20:53:00 +00:00

e_rc4_hmac_md5.c

e_rc4_hmac_md5.c: reapply commit#21726, which was erroneously omitted.

2012-04-20 21:45:17 +00:00

e_rc4.c

revert more "version skew" changes that break FIPS builds

2012-06-10 23:01:28 +00:00

e_rc5.c

Make sure we get the definition of OPENSSL_NO_RC5.

2003-03-20 23:29:26 +00:00

e_seed.c

Add SEED encryption algorithm.

2007-04-23 23:48:59 +00:00

e_xcbc_d.c

size_t-fy EVP_CIPHER. Note that being size_t-fied it doesn't require

2008-10-31 19:48:25 +00:00

encode.c

evp: prevent underflow in base64 decoding

2014-05-06 18:10:23 -04:00

evp_acnf.c

Update obsolete email address...

2008-11-05 18:39:08 +00:00

evp_cnf.c

add missing evp_cnf.c file

2012-07-04 13:14:11 +00:00

evp_enc.c

RT3425: constant-time evp_enc

2014-09-24 16:25:54 +02:00

evp_err.c

PR: 2840

2012-07-03 20:16:30 +00:00

evp_fips.c

Redirect null cipher to FIPS module.

2011-06-20 20:00:10 +00:00

evp_key.c

Backport libcrypto audit: check return values of EVP functions instead

2011-06-03 20:53:00 +00:00

evp_lib.c

Add default ASN1 handling to support FIPS.

2011-05-29 02:32:05 +00:00

evp_locl.h

undef some symbols that cause problems with make depend for fips builds

2012-01-18 01:40:36 +00:00

evp_pbe.c

Fix for EVP_PBE_alg_add().

2014-06-27 22:58:55 +01:00

evp_pkey.c

Update obsolete email address...

2008-11-05 18:39:08 +00:00

evp_test.c

PR: 2588

2011-09-01 13:49:08 +00:00

evp.h

PR: 2840

2012-07-03 20:16:30 +00:00

evptests.txt

backport AES EVP ctr mode changes from HEAD

2010-11-17 17:46:23 +00:00

m_dss1.c

Reduce version skew.

2012-06-08 09:18:47 +00:00

m_dss.c

Reduce version skew.

2012-06-08 09:18:47 +00:00

m_ecdsa.c

For consistency define clone digests in evp_fips.c

2011-06-01 15:11:00 +00:00

m_md2.c

make

2005-07-16 12:37:36 +00:00

m_md4.c

revert more "version skew" changes that break FIPS builds

2012-06-10 23:01:28 +00:00

m_md5.c

revert more "version skew" changes that break FIPS builds

2012-06-10 23:01:28 +00:00

m_mdc2.c

revert more "version skew" changes that break FIPS builds

2012-06-10 23:01:28 +00:00

m_null.c

size_t-fication of message digest APIs. We should size_t-fy more APIs...

2004-05-15 11:29:55 +00:00

m_ripemd.c

revert more "version skew" changes that break FIPS builds

2012-06-10 23:01:28 +00:00

m_sha1.c

Reduce version skew.

2012-06-08 09:18:47 +00:00

m_sha.c

revert more "version skew" changes that break FIPS builds

2012-06-10 23:01:28 +00:00

m_sigver.c

Some of the MS_STATIC use in crypto/evp is a legacy from the days when

2010-11-27 17:35:56 +00:00

m_wp.c

revert more "version skew" changes that break FIPS builds

2012-06-10 23:01:28 +00:00

Makefile

RT3425: constant-time evp_enc

2014-09-24 16:25:54 +02:00

names.c

Add RC4-MD5 and AESNI-SHA1 "stitched" implementations [from HEAD].

2011-08-23 20:53:34 +00:00

openbsd_hw.c

This changes EVP's cipher and digest code to hook via the ENGINE support.

2001-09-25 21:37:02 +00:00

p5_crpt2.c

Fix memory leak.

2013-11-11 23:55:40 +00:00

p5_crpt.c

fix leak

2012-03-22 16:28:51 +00:00

p_dec.c

Initial DSA EVP_PKEY_METHOD. Fixup some error codes.

2006-04-12 10:20:47 +00:00

p_enc.c

Initial DSA EVP_PKEY_METHOD. Fixup some error codes.

2006-04-12 10:20:47 +00:00

p_lib.c

PR: 2385

2010-11-30 19:45:31 +00:00

p_open.c

Backport libcrypto audit: check return values of EVP functions instead

2011-06-03 20:53:00 +00:00

p_seal.c

Backport libcrypto audit: check return values of EVP functions instead

2011-06-03 20:53:00 +00:00

p_sign.c

Reduce version skew.

2012-06-08 09:18:47 +00:00

p_verify.c

Reduce version skew.

2012-06-08 09:18:47 +00:00

pmeth_fn.c

Updates from HEAD.

2009-06-16 16:39:20 +00:00

pmeth_gn.c

constify EVP_PKEY_new_mac_key()

2010-11-24 13:14:03 +00:00

pmeth_lib.c

update pkey method initialisation and copy

2011-10-11 18:16:02 +00:00