openssl/crypto
slontis 3859a02725 Change PBES2 KDF default salt length to 16 bytes.
The PKCS5 (RFC 8018) standard uses a 64 bit salt length for PBE, and
recommends a minimum of 64 bits for PBES2. For FIPS compliance PBKDF2
requires a salt length of 128 bits.
This affects OpenSSL command line applications such as "genrsa" and "pkcs8"
and API's such as PEM_write_bio_PrivateKey() that are reliant on the
default salt length.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21858)
2023-09-04 14:15:34 +10:00
..
aes Fixed incorrect usage of vshuf.b instruction 2023-08-01 19:42:58 +02:00
aria
asn1 Change PBES2 KDF default salt length to 16 bytes. 2023-09-04 14:15:34 +10:00
async Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
bf Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
bio Minor fixes 2023-09-01 10:45:36 +01:00
bn Move ALIGN32 and ALIGN64 into common.h, and fix for clang-cl.exe 2023-09-04 08:44:21 +10:00
buffer Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
camellia
cast Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
chacha Fix ChaCha assembly code on 32-bit HPUX itanium systems 2023-08-09 12:22:20 +02:00
cmac Update CMAC test cases. 2023-06-12 08:36:08 +02:00
cmp cmp_genm.c: Remove superfluous store_ctx != 0 check 2023-08-18 15:06:18 +02:00
cms Do not raise CMS_R_CONTENT_TYPE_NOT_ENVELOPED_DATA error in CMS_ContentInfo_free 2023-08-10 12:09:38 +02:00
comp bio: pass flags on BIO_ctrl to make flush retriable 2023-08-04 10:30:58 -04:00
conf OPENSSL_init_crypto load config into initial global default library context 2023-08-31 17:06:51 +02:00
crmf CMS, PKCS7, and CRMF: simplify use of EVP_PKEY_decrypt() by helper function 2023-05-30 22:02:10 +02:00
ct Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
des Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
dh DH_check(): Do not try checking q properties if it is obviously invalid 2023-07-27 09:48:22 -04:00
dsa fix memory allocation and reference counting issues 2023-07-05 08:34:00 +10:00
dso dso: update to structure based atomics 2023-07-01 21:18:25 +10:00
ec Move ALIGN32 and ALIGN64 into common.h, and fix for clang-cl.exe 2023-09-04 08:44:21 +10:00
encode_decode Fix a leak in ossl_encode_ctx_setup_for_pkey 2023-08-23 16:01:30 +01:00
engine no_autoload: make the no-autoload-config option work again. 2023-08-04 11:57:27 +10:00
err make update 2023-08-30 08:28:22 +01:00
ess Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
evp Allow RSA-PSS also in EVP_PKEY_assign() and EVP_PKEY_can_sign() 2023-08-24 18:07:08 +02:00
ffc FFC cleanups 2023-04-03 10:31:04 +02:00
hmac
hpke Fix typos found by codespell 2023-06-15 10:11:46 +10:00
http OSSL_HTTP_{REQ_CTX_set_request_line(),_set1_request()}: backward compat w.r.t. path parameter 2023-08-10 17:29:07 +02:00
idea Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
kdf
lhash Change all references to OpenSSL 3.1 to OpenSSL 3.2 in the master branch 2022-10-07 10:05:50 +02:00
md2 Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
md4 Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
md5 fix md5 bug on aarch64 big-endian plantform. 2023-04-28 14:36:35 +02:00
mdc2 Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
modes riscv: Clarify dual-licensing wording for GCM and AES 2023-07-06 12:53:27 +10:00
objects no_autoload: make the no-autoload-config option work again. 2023-08-04 11:57:27 +10:00
ocsp Add two missing entries to the OCSP CRLReason table 2023-08-18 10:05:39 +02:00
pem The PEM_read_bio_Parameters() function should not ask for a password 2023-08-01 20:08:28 +02:00
perlasm Fix handling of the "0:" label in arm-xlate.pl 2023-08-08 22:35:53 +02:00
pkcs7 CMS, PKCS7, and CRMF: simplify use of EVP_PKEY_decrypt() by helper function 2023-05-30 22:02:10 +02:00
pkcs12 Fix typos found by codespell 2023-06-15 10:11:46 +10:00
poly1305 Avoid clobbering non-volatile XMM registers 2023-09-02 10:23:57 +02:00
property no_autoload: make the no-autoload-config option work again. 2023-08-04 11:57:27 +10:00
rand rand_lib: RAND_poll: Reseed in non-"no-deprecated" builds. 2023-06-14 09:03:14 +10:00
rc2 Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
rc4 Fix typos found by codespell 2023-06-15 10:11:46 +10:00
rc5 Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
ripemd Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
rsa Fix RSA OAEP set/get label for legacy engine 2023-07-17 08:15:06 +10:00
seed Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
sha Move Keccak rhotates tables to rodata 2023-07-14 11:15:45 +10:00
siphash crypto/*: Fix various typos, repeated words, align some spelling to LDP. 2022-10-12 16:55:01 +11:00
sm2 crypto/sm2/sm2_sign.c: Add BN_CTX_end 2023-06-13 13:37:33 +02:00
sm3 Fix arm64 asm code back compatible issue with gcc 4.9.4 2023-05-31 10:50:28 +10:00
sm4 Fix typos found by codespell 2023-06-15 10:11:46 +10:00
srp add a check for the return of sk_SRP_gN_new_null() so that capture the potential memory error in time 2022-10-20 19:04:44 +11:00
stack stack: fix searching when the stack isn't sorted. 2023-04-28 09:24:06 +02:00
store store: update to structure based atomics 2023-07-01 21:18:25 +10:00
thread Fix no-thread-pool building 2023-07-06 12:55:21 +10:00
ts Changed the default value of the "ess_cert_id_alg" option 2023-08-25 15:05:51 +02:00
txt_db Coverity 1528487: Avoid assignment of unused value of i 2023-06-10 19:23:59 -04:00
ui Fix stack corruption in ui_read 2023-05-17 12:07:02 +02:00
whrlpool Fix typos found by codespell 2023-07-18 18:54:45 +10:00
x509 ossl_x509_store_ctx_get_by_subject(): Check return value of X509_STORE_lock() 2023-08-18 15:06:18 +02:00
alphacpuid.pl
arm64cpuid.pl
arm_arch.h Update with ARMV8_HAVE_SHA3_AND_WORTH_USING 2023-07-21 10:19:19 +10:00
armcap.c Update with ARMV8_HAVE_SHA3_AND_WORTH_USING 2023-07-21 10:19:19 +10:00
armv4cpuid.pl Ensure there's only one copy of OPENSSL_armcap_P in libcrypto.a 2023-03-29 12:21:31 +02:00
asn1_dsa.c
bsearch.c
build.info params: provide a faster TRIE based param lookup. 2023-06-02 15:13:20 +10:00
c64xpluscpuid.pl
context.c Remove include/internal/decoder.h, as it's superfluous 2023-08-15 15:23:16 +02:00
core_algorithm.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
core_fetch.c
core_namemap.c return immediately if namemap is NULL 2023-06-18 16:55:09 +10:00
cpt_err.c
cpuid.c
cryptlib.c Fix UEFI support on win32 2023-04-13 10:25:55 +01:00
ctype.c Fixed typos in documentation and comments 2023-01-04 12:53:05 +01:00
cversion.c
der_writer.c
deterministic_nonce.c Fix typos found by codespell 2023-06-15 10:11:46 +10:00
dllmain.c
ebcdic.c
ex_data.c When we're just reading EX_CALLBACK data just get a read lock 2023-05-30 17:26:02 +01:00
getenv.c
ia64cpuid.S
info.c info.c: Fix typos in seed macro name and description string 2023-01-10 12:15:42 +01:00
init.c Fix an init-deadlock in OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS) 2023-08-10 16:11:30 +02:00
initthread.c
loongarch64cpuid.pl Add LoongArch64 cpuid and OPENSSL_loongarchcap_P 2022-10-12 18:02:12 +11:00
loongarch_arch.h Resolve assembler complains when including loongarch_arch.h 2023-08-28 09:59:34 +02:00
loongarchcap.c vpaes: LoongArch: Use getauxval(AT_HWCAP) for LSX detection 2023-07-28 12:39:41 +10:00
LPdir_nyi.c
LPdir_unix.c Cast the argument to unsigned char when calling isdigit() 2023-06-06 15:48:46 +02:00
LPdir_vms.c
LPdir_win32.c
LPdir_win.c
LPdir_wince.c
mem_clr.c
mem_sec.c Introduce [HAVE_/NO_]MADVISE defines 2023-06-12 07:56:03 +02:00
mem.c
mips_arch.h
o_dir.c
o_fopen.c crypto: Fix various typos, repeated words, align some spelling to LDP. 2022-10-12 16:55:01 +11:00
o_init.c
o_str.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
o_time.c
packet.c Rationalize FIPS sources 2023-02-08 16:20:55 +01:00
param_build_set.c
param_build.c Fix typos found by codespell 2023-06-15 10:11:46 +10:00
params_dup.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
params_from_text.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
params_idx.c.in params: provide a faster TRIE based param lookup. 2023-06-02 15:13:20 +10:00
params.c crypto/params: drop float for UEFI 2023-05-22 07:45:10 +01:00
pariscid.pl
passphrase.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
ppccap.c
ppccpuid.pl
provider_child.c OSSL_PROVIDER_load_ex 2023-08-30 21:55:47 +02:00
provider_conf.c OSSL_PROVIDER_load_ex 2023-08-30 21:55:47 +02:00
provider_core.c OSSL_PROVIDER_load_ex 2023-08-30 21:55:47 +02:00
provider_local.h
provider_predefined.c
provider.c OSSL_PROVIDER_load_ex 2023-08-30 21:55:47 +02:00
punycode.c Add more punycode tests and remove ossl_a2ucompare() 2023-02-08 16:17:37 +01:00
quic_vlint.c QUIC: Enable building with QUIC support disabled 2023-01-13 13:20:16 +00:00
README-sparse_array.md
riscv32cpuid.pl
riscv64cpuid.pl
riscvcap.c
s390x_arch.h S390X: Accelerate keccak XOF 2023-03-07 18:21:51 +01:00
s390xcap.c s390xcap.c: Avoid copying structure on initialization 2023-06-28 08:31:07 +10:00
s390xcpuid.pl
self_test_core.c
sleep.c OSSL_sleep(): Calling sleep() function if sleepTime > 1sec 2023-05-30 21:10:03 +02:00
sparccpuid.S
sparcv9cap.c
sparse_array.c
threads_lib.c Define threads_lib.c functions only for OPENSSL_SYS_UNIX 2022-11-14 07:47:53 +00:00
threads_none.c QUIC: Fix bugs where threading is disabled 2023-05-24 10:34:54 +01:00
threads_pthread.c issue-21718: remove setting of PTHREAD_MUTEX_NORMAL 2023-08-17 08:02:15 +01:00
threads_win.c Add note about Windows LONG 2023-05-24 10:34:55 +01:00
time.c Fix UEFI support on win32 2023-04-13 10:25:55 +01:00
trace.c add OSSL_TRACE_STRING(), OSSL_TRACE_STRING_MAX, and OSSL_trace_string() 2023-01-26 09:16:51 +01:00
uid.c Add more fixes for WebAssembly/WASI build 2023-07-12 10:50:09 +10:00
vms_rms.h
x86_64cpuid.pl
x86cpuid.pl