yggdrasil/ring
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
ring/include/openssl
History
Adam Langley d72e47fddb Add FIPS shared mode. 
This change adds a FIPS integrity check using shared libraries. Unlike
with the static case, a shared build can take advantage of the linker
resolving relocations and thus doesn't need delocation. It does mean
that both .text and .rodata sections need to be handled, however, so the
hashing format is slightly different. inject-hash.go is updated to be
able to rewrite shared libraries to inject the correct hash value.

Change-Id: I9a71910cd6df3a85e4efac896b0913e65b5f875b
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/36024
Commit-Queue: Adam Langley <agl@google.com>
Reviewed-by: David Benjamin <davidben@google.com>
2019-05-30 19:03:16 +00:00
..
aead.h
Flatten EVP_AEAD_CTX
2018-10-22 23:12:57 +00:00
aes.h
Check key sizes in AES_set_*_key.
2019-04-11 15:33:57 +00:00
arm_arch.h
Run comment conversion script on include/
2017-08-18 23:38:51 +00:00
asn1_mac.h
Purge the remainder of asn1_mac.h.
2016-08-03 21:37:31 +00:00
asn1.h
Remove d2i_ASN1_UINTEGER.
2019-03-18 17:18:26 +00:00
asn1t.h
Remove ASN1_template_(i2d,d2i).
2017-09-15 22:53:43 +00:00
base64.h
Document alternative functions to BIO_f_base64.
2018-09-07 15:58:12 +00:00
base.h
Add SSL_get_early_data_reason.
2019-05-06 22:04:52 +00:00
bio.h
Fix d2i_*_bio on partial reads.
2018-12-05 22:05:28 +00:00
blowfish.h
Fix some size_t to long casts.
2019-01-03 21:46:45 +00:00
bn.h
Add some Node compatibility functions.
2019-01-25 16:50:30 +00:00
buf.h
Support symbol prefixes
2018-09-06 20:07:52 +00:00
buffer.h
Add buffer.h for compatibility.
2015-05-12 00:09:57 +00:00
bytestring.h
Handle CBB_cleanup on child CBBs more gracefully.
2019-04-10 22:12:42 +00:00
cast.h
Fix some size_t to long casts.
2019-01-03 21:46:45 +00:00
chacha.h
Add chacha.h to the list of documented headers.
2017-10-12 15:27:34 +00:00
cipher.h
Add EVP_CIPHER support for Blowfish and CAST to decrepit.
2019-01-03 21:34:46 +00:00
cmac.h
Support symbol prefixes
2018-09-06 20:07:52 +00:00
conf.h
Undo recent changes to |X509V3_EXT_conf_nid|.
2018-10-17 21:05:45 +00:00
cpu.h
Add FIPS shared mode.
2019-05-30 19:03:16 +00:00
crypto.h
Add a pile of compatibility functions.
2018-08-13 23:13:26 +00:00
curve25519.h
Support symbol prefixes
2018-09-06 20:07:52 +00:00
des.h
Run comment conversion script on include/
2017-08-18 23:38:51 +00:00
dh.h
Add missing bssl::UpRef overloads.
2018-09-14 16:45:54 +00:00
digest.h
Add a compatibility EVP_DigestFinalXOF function.
2019-04-30 17:44:25 +00:00
dsa.h
Reject obviously invalid DSA parameters during signing.
2019-05-07 22:12:54 +00:00
dtls1.h
Opaquify DTLS structs.
2015-05-08 18:02:02 +00:00
e_os2.h
Add a stub e_os2.h header.
2018-05-08 01:32:14 +00:00
ec_key.h
Add EC_KEY_key2buf for OpenSSL compatibility
2019-01-03 16:32:21 +00:00
ec.h
Add a very roundabout EC keygen API.
2019-01-25 23:08:12 +00:00
ecdh.h
Add ECDH_compute_key_fips inside the module.
2018-07-30 22:40:31 +00:00
ecdsa.h
Support symbol prefixes
2018-09-06 20:07:52 +00:00
engine.h
Give ENGINE_free a return value.
2019-04-17 20:57:57 +00:00
err.h
Add some more compatibility functions.
2018-05-08 20:51:15 +00:00
evp.h
Add functions for "raw" EVP_PKEY serializations.
2019-04-30 21:32:48 +00:00
ex_data.h
Run comment conversion script on include/
2017-08-18 23:38:51 +00:00
hkdf.h
Run comment conversion script on include/
2017-08-18 23:38:51 +00:00
hmac.h
Support symbol prefixes
2018-09-06 20:07:52 +00:00
hrss.h
HRSS: flatten sample distribution.
2019-01-22 22:06:43 +00:00
is_boringssl.h
Run comment conversion script on include/
2017-08-18 23:38:51 +00:00
lhash.h
Clear out a bunch of -Wextra-semi warnings.
2019-02-21 19:12:39 +00:00
md4.h
Rename 'md' output parameter to 'out' and add bounds.
2019-04-08 18:19:01 +00:00
md5.h
Rename 'md' output parameter to 'out' and add bounds.
2019-04-08 18:19:01 +00:00
mem.h
silence unused variable warnings when using OPENSSL_clear_free
2019-03-04 19:55:29 +00:00
nid.h
Integrate SIKE with TLS key exchange.
2019-05-24 16:52:33 +00:00
obj_mac.h
Rename obj_mac.h to nid.h and make it a multiply-includable header.
2016-03-31 20:45:35 +00:00
obj.h
Add some more compatibility functions.
2018-05-08 20:51:15 +00:00
objects.h
Move public headers to include/openssl/
2014-07-14 22:42:18 +00:00
opensslconf.h
Switch OPENSSL_VERSION_NUMBER to 1.1.0.
2017-09-29 04:51:27 +00:00
opensslv.h
Get version-related functions from crypto.h rather than ssl.h.
2015-05-20 22:58:14 +00:00
ossl_typ.h
Move public headers to include/openssl/
2014-07-14 22:42:18 +00:00
pem.h
Fix undefined function pointer casts in IMPLEMENT_PEM_*.
2018-10-01 17:34:44 +00:00
pkcs7.h
Support symbol prefixes
2018-09-06 20:07:52 +00:00
pkcs8.h
Align PKCS12_parse closer to OpenSSL.
2019-05-21 17:08:43 +00:00
pkcs12.h
Move public headers to include/openssl/
2014-07-14 22:42:18 +00:00
poly1305.h
Run comment conversion script on include/
2017-08-18 23:38:51 +00:00
pool.h
Support symbol prefixes
2018-09-06 20:07:52 +00:00
rand.h
Remove pooling of PRNG state.
2019-01-03 20:19:44 +00:00
rc4.h
Run comment conversion script on include/
2017-08-18 23:38:51 +00:00
ripemd.h
Rename 'md' output parameter to 'out' and add bounds.
2019-04-08 18:19:01 +00:00
rsa.h
Mark the |e| argument to |RSA_generate_key_ex| as const.
2018-11-14 15:57:25 +00:00
safestack.h
Rename safe_stack.h to safestack.h.
2015-02-20 23:33:48 +00:00
sha.h
Rename 'md' output parameter to 'out' and add bounds.
2019-04-08 18:19:01 +00:00
span.h
Remove stray semicolons.
2019-02-07 17:36:54 +00:00
srtp.h
Fold srtp.h into ssl.h.
2015-09-14 23:59:37 +00:00
ssl3.h
Modernize OPENSSL_COMPILE_ASSERT, part 2.
2018-11-14 16:06:37 +00:00
ssl.h
Integrate SIKE with TLS key exchange.
2019-05-24 16:52:33 +00:00
stack.h
Clear out a bunch of -Wextra-semi warnings.
2019-02-21 19:12:39 +00:00
thread.h
Rename OPENSSL_NO_THREADS, part 1.
2018-09-26 19:10:02 +00:00
tls1.h
Implement server support for delegated credentials.
2019-01-24 20:06:58 +00:00
type_check.h
Modernize OPENSSL_COMPILE_ASSERT, part 2.
2018-11-14 16:06:37 +00:00
x509_vfy.h
Require certificates under name constraints use SANs.
2019-04-22 21:32:29 +00:00
x509.h
Push an error on sigalg mismatch in X509_verify.
2018-09-19 03:44:50 +00:00
x509v3.h
Silently ignore X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT.
2019-04-18 18:36:46 +00:00