Dr. Stephen Henson d61be85581 Return an error if no recipient type matches. ...

If the key type does not match any CMS recipient type return
an error instead of using a random key (MMA mitigation). This
does not leak any useful information to an attacker.

PR#3348

2014-05-09 14:24:51 +01:00

..

.cvsignore

.cvignore file for cms

2008-03-13 00:50:02 +00:00

cms_asn1.c

Backport of password based CMS support from HEAD.

2011-10-09 15:28:02 +00:00

cms_att.c

And so it begins...

2008-03-12 21:14:28 +00:00

cms_cd.c

Don't include comp.h in cmd_cd.c if OPENSSL_NO_COMP set

2013-01-23 01:07:23 +00:00

cms_dd.c

Remove unnecessary header.

2008-03-29 21:08:37 +00:00

cms_enc.c

Reduce version skew.

2012-06-08 09:18:47 +00:00

cms_env.c

Set Enveloped data version to 2 if ktri version not zero.

2014-05-06 14:02:38 +01:00

cms_err.c

Backport of password based CMS support from HEAD.

2011-10-09 15:28:02 +00:00

cms_ess.c

Submitted by: Julia Lawall <julia@diku.dk>

2009-09-13 11:27:27 +00:00

cms_io.c

Use correct headers for signed receipts. Use consistent naming.

2008-03-31 15:03:55 +00:00

cms_lcl.h

Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and

2012-03-12 16:27:50 +00:00

cms_lib.c

Remove duplicate statement.

2014-02-15 01:29:36 +00:00

cms_pwri.c

Backport ossl_ssize_t type from HEAD.

2011-10-10 22:33:50 +00:00

cms_sd.c

Backport libcrypto audit: check return values of EVP functions instead

2011-06-03 20:53:00 +00:00

cms_smime.c

Return an error if no recipient type matches.

2014-05-09 14:24:51 +01:00

cms.h

Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and

2012-03-12 16:27:50 +00:00

Makefile

make update

2014-01-06 13:33:27 +00:00