openssl/providers
Shane Lontis 46eee7104d Add domain parameter match check for DH and ECDH key exchange.
Fixes #14808

Validation checks were moved into EVP_PKEY_derive_set_peer() which broke
an external negative test. Originally the old code was semi working by checking the peers public key was in the range of other parties p. It was not actually ever
checking that the domain parameters were consistent between the 2
parties. It now checks the parameters match as well as validating the
peers public key.

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14823)
2021-04-14 16:01:13 +10:00
..
common Add domain parameter match check for DH and ECDH key exchange. 2021-04-14 16:01:13 +10:00
fips Add FIPS Self test for AES_ECB decrypt 2021-04-13 13:06:37 +10:00
implementations Add domain parameter match check for DH and ECDH key exchange. 2021-04-14 16:01:13 +10:00
baseprov.c Update copyright year 2021-04-08 13:04:41 +01:00
build.info Make fipsinstall -out flag optional 2021-03-24 17:46:40 +01:00
decoders.inc Update copyright year 2021-02-18 15:05:17 +00:00
defltprov.c APPS: Replace the use of OBJ_nid2ln() with name or description calls 2021-04-02 08:57:47 +02:00
encoders.inc PROV: Implement an EC key -> blob encoder, to get the public key 2021-02-27 16:14:09 +01:00
legacyprov.c Rename some occurrences of 'library_context' and 'lib_ctx' to 'libctx' 2020-10-15 12:00:21 +01:00
nullprov.c null prov: fix gettable param array type. 2020-10-16 10:33:38 +10:00
prov_running.c keygen: add FIPS error state management to conditional self tests 2020-09-12 16:46:51 +10:00
stores.inc prov: prefix all OSSL_DISPATCH tables names with ossl_ 2020-09-29 16:31:46 +10:00