openssl/crypto/dh
Shane Lontis e454a3934c Add a range check (from SP800-56Ar3) to DH key derivation.
Fixes #14401

Note that this moves the public key check out of DH compute_key() since
key validation does not belong inside this primitive..
The check has been moved to the EVP_PKEY_derive_set_peer() function so that
it generally applies to all exchange operations.. Use EVP_PKEY_derive_set_peer_ex()
to disable this behaviour.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14717)
2021-04-01 09:07:08 +10:00
..
build.info EVP_PKEY & DH: Make DH EVP_PKEY_CTX parameter ctrls / setters more available 2020-12-16 11:55:39 +01:00
dh_ameth.c Implement EVP_PKEY_dup() function 2021-03-28 16:38:57 +10:00
dh_asn1.c Update copyright year 2021-03-11 13:27:36 +00:00
dh_backend.c dh: fix coverty 1474423: resource leak 2021-03-24 09:40:26 +10:00
dh_check.c Update copyright year 2021-03-11 13:27:36 +00:00
dh_depr.c
dh_err.c Add a range check (from SP800-56Ar3) to DH key derivation. 2021-04-01 09:07:08 +10:00
dh_gen.c Update copyright year 2021-03-11 13:27:36 +00:00
dh_group_params.c Update copyright year 2021-03-11 13:27:36 +00:00
dh_kdf.c Update copyright year 2021-03-11 13:27:36 +00:00
dh_key.c Add a range check (from SP800-56Ar3) to DH key derivation. 2021-04-01 09:07:08 +10:00
dh_lib.c Update copyright year 2021-03-11 13:27:36 +00:00
dh_local.h Rename OPENSSL_CTX prefix to OSSL_LIB_CTX 2020-10-15 11:59:53 +01:00
dh_meth.c Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 2020-11-13 09:35:02 +01:00
dh_pmeth.c Remove a TODO(3.0) from EVP_PKEY_derive_set_peer() 2021-03-17 09:56:33 +00:00
dh_prn.c Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 2020-11-13 09:35:02 +01:00
dh_rfc5114.c Update copyright year 2021-03-11 13:27:36 +00:00