Mark J. Cox b213966415 Introduce limits to prevent malicious keys being able to ...

cause a denial of service.  (CVE-2006-2940)
[Steve Henson, Bodo Moeller]

Fix ASN.1 parsing of certain invalid structures that can result
in a denial of service.  (CVE-2006-2937)  [Steve Henson]

Fix buffer overflow in SSL_get_shared_ciphers() function.
(CVE-2006-3738) [Tavis Ormandy and Will Drewry, Google Security Team]

Fix SSL client code which could crash if connecting to a
malicious SSLv2 server.  (CVE-2006-4343)
[Tavis Ormandy and Will Drewry, Google Security Team]

2006-09-28 11:53:51 +00:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:18:14 +00:00

Makefile

Fix from HEAD.

2006-02-04 01:50:41 +00:00

rsa_asn1.c

More linker bloat reorganisation:

2001-07-27 02:22:42 +00:00

rsa_chk.c

Constify the RSA library.

2000-11-06 22:34:17 +00:00

rsa_eay.c

Introduce limits to prevent malicious keys being able to

2006-09-28 11:53:51 +00:00

rsa_err.c

Introduce limits to prevent malicious keys being able to

2006-09-28 11:53:51 +00:00

rsa_gen.c

apply fixes from the cvs head

2006-03-14 09:07:06 +00:00

rsa_lib.c

Memory leak fix: RSA_blinding_on() didn't free Ai under certain circumstances.

2003-04-16 06:25:29 +00:00

rsa_none.c

Constify the RSA library.

2000-11-06 22:34:17 +00:00

rsa_null.c

A few more constifications of some RSA routines that I forgot

2000-11-07 13:49:46 +00:00

rsa_oaep.c

Add PSS support. Minimal at this stage for FIPS140.

2005-05-27 21:59:52 +00:00

rsa_pk1.c

The logic in the main signing and verifying functions to check lengths was

2002-11-26 11:14:45 +00:00

rsa_pss.c

Make PSS more flexible, most notably assign special meaning to negative

2005-06-02 18:07:16 +00:00

rsa_saos.c

Add lots of checks for memory allocation failure, error codes to indicate

2004-12-05 01:04:44 +00:00

rsa_sign.c

Avoid PKCS #1 v1.5 signature attack discovered by Daniel Bleichenbacher

2006-09-05 08:24:14 +00:00

rsa_ssl.c

Constify the RSA library.

2000-11-06 22:34:17 +00:00

rsa_test.c

Implement fixed-window exponentiation to mitigate hyper-threading

2005-05-16 01:26:08 +00:00

rsa_x931.c

Update from head.

2005-06-06 22:42:35 +00:00

rsa.h

Introduce limits to prevent malicious keys being able to

2006-09-28 11:53:51 +00:00