Dr. Stephen Henson 1cfd255c91 Add additional DigestInfo checks. ...

Reencode DigestInto in DER and check against the original: this
will reject any improperly encoded DigestInfo structures.

Note: this is a precautionary measure, there is no known attack
which can exploit this.

Thanks to Brian Smith for reporting this issue.
Reviewed-by: Tim Hudson <tjh@openssl.org>

2014-09-29 12:01:05 +01:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

Makefile

RT3066: rewrite RSA padding checks to be slightly more constant time.

2014-09-24 12:45:42 +02:00

rsa_ameth.c

RT2626: Change default_bits from 1K to 2K

2014-09-08 17:21:04 -04:00

rsa_asn1.c

CMS RSA-OAEP and RSA-PSS support.

2013-06-21 23:43:05 +01:00

rsa_chk.c

crypto/rsa/rsa_chk.c: harmonize error codes.

2014-09-21 23:05:13 +02:00

rsa_crpt.c

Remove unnecessary dependencies.

2011-02-21 17:35:53 +00:00

rsa_depr.c

add additional checks + cleanup

2006-01-29 23:12:22 +00:00

rsa_eay.c

RT2163: Remove some unneeded #include's

2014-08-18 12:50:00 -04:00

rsa_err.c

RT3066: rewrite RSA padding checks to be slightly more constant time.

2014-09-24 12:45:42 +02:00

rsa_gen.c

Rename FIPS_mode_set and FIPS_mode. Theses symbols will be defined in

2011-05-11 14:43:38 +00:00

rsa_lib.c

Add functions returning security bits.

2014-03-28 14:49:04 +00:00

rsa_locl.h

FIPS mode RSA changes:

2011-01-26 15:37:41 +00:00

rsa_none.c

RT2163: Remove some unneeded #include's

2014-08-18 12:50:00 -04:00

rsa_null.c

Update obsolete email address...

2008-11-05 18:39:08 +00:00

rsa_oaep.c

RT3066: rewrite RSA padding checks to be slightly more constant time.

2014-09-24 12:45:42 +02:00

rsa_pk1.c

RT3066: rewrite RSA padding checks to be slightly more constant time.

2014-09-24 12:45:42 +02:00

rsa_pmeth.c

CMS RSA-OAEP and RSA-PSS support.

2013-06-21 23:43:05 +01:00

rsa_prn.c

Update obsolete email address...

2008-11-05 18:39:08 +00:00

rsa_pss.c

Allow for dynamic base in Win64 FIPS module.

2011-09-14 20:48:49 +00:00

rsa_saos.c

Add lots of checks for memory allocation failure, error codes to indicate

2004-12-05 01:03:15 +00:00

rsa_sign.c

Add additional DigestInfo checks.

2014-09-29 12:01:05 +01:00

rsa_ssl.c

Transfer error redirection to fips.h, add OPENSSL_FIPSAPI to source files

2011-02-03 17:00:24 +00:00

rsa_test.c

Remove the dual-callback scheme for numeric and pointer thread IDs,

2008-08-06 15:54:15 +00:00

rsa_x931.c

Transfer error redirection to fips.h, add OPENSSL_FIPSAPI to source files

2011-02-03 17:00:24 +00:00

rsa_x931g.c

Rename FIPS_mode_set and FIPS_mode. Theses symbols will be defined in

2011-05-11 14:43:38 +00:00

rsa.h

RT3066: rewrite RSA padding checks to be slightly more constant time.

2014-09-24 12:45:42 +02:00