openssl/crypto
Shane Lontis 63794b048c Add multiple fixes for ffc key generation using invalid p,q,g parameters.
Fixes #11864

- The dsa keygen assumed valid p, q, g values were being passed. If this is not correct then it is
  possible that dsa keygen can either hang or segfault.
  The fix was to do a partial validation of p, q, and g inside the keygen.
- Fixed a potential double free in the dsa keypair test in the case when in failed (It should never fail!).
  It freed internal object members without setting them to NULL.
- Changed the FFC key validation to accept 1024 bit keys in non fips mode.
- Added tests that use both the default provider & fips provider to test these cases.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/12176)
2020-07-09 13:43:10 +10:00
..
aes Avoid undefined behavior with unaligned accesses 2020-05-27 20:11:20 +02:00
aria
asn1 Remove whitespace from 'white space' 2020-06-19 07:59:46 +02:00
async Make the ASYNC code default libctx aware 2020-06-28 10:55:52 +02:00
bf
bio Improve BIO_socket_wait(), BIO_wait(), BIO_connect_retry(), and their docs 2020-06-16 18:51:39 +02:00
bn Update copyright year 2020-06-25 14:13:12 +01:00
buffer
camellia
cast Fix logic error for building x86 CAST assembly 2020-06-14 12:35:34 -07:00
chacha
cmac The EVP_MAC functions have been renamed for consistency. The EVP_MAC_CTX_* 2020-06-11 11:16:37 +10:00
cmp Add X509_self_signed(), extending and improving documenation and tests 2020-07-01 11:14:54 +02:00
cms Fix CID 1454806: NEGATIVE_RETURNS (cms_enc.c) 2020-07-08 11:19:08 +03:00
comp
conf APPS: Remove make_config_name, use CONF_get1_default_config_file instead 2020-06-02 09:42:34 +02:00
crmf Fix CMP -days option range checking and test failing with enable-ubsan 2020-06-22 16:39:26 +02:00
ct
des Build: Remove faulty DES assembler spec 2020-06-20 11:02:18 +02:00
dh Add multiple fixes for ffc key generation using invalid p,q,g parameters. 2020-07-09 13:43:10 +10:00
dsa Add multiple fixes for ffc key generation using invalid p,q,g parameters. 2020-07-09 13:43:10 +10:00
dso
ec [EC][ASN1] Detect missing OID when serializing EC parameters and keys 2020-07-06 19:15:36 +03:00
engine Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md files 2020-07-05 11:29:43 +02:00
err [EC][ASN1] Detect missing OID when serializing EC parameters and keys 2020-07-06 19:15:36 +03:00
ess Fix CID 1463883 Dereference after null check (in ess_find_cert_v2()) 2020-07-08 11:19:08 +03:00
evp rand: avoid caching RNG parameters. 2020-07-05 13:18:08 +10:00
ffc Add multiple fixes for ffc key generation using invalid p,q,g parameters. 2020-07-09 13:43:10 +10:00
hmac
http Ensure a string is properly terminated in http_client.c 2020-07-03 17:18:41 +01:00
idea
include/internal
kdf
lhash
md2
md4
md5
mdc2
modes The EVP_MAC functions have been renamed for consistency. The EVP_MAC_CTX_* 2020-06-11 11:16:37 +10:00
objects Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md files 2020-07-05 11:29:43 +02:00
ocsp
pem [EC][ASN1] Detect missing OID when serializing EC parameters and keys 2020-07-06 19:15:36 +03:00
perlasm Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md files 2020-07-05 11:29:43 +02:00
pkcs7 Fix CID 1454808: Error handling issues NEGATIVE_RETURNS (PKCS7_dataDecode()) 2020-07-08 11:19:08 +03:00
pkcs12
poly1305
property Fix CID #1465216 Resource leak in property_fetch 2020-07-08 11:19:08 +03:00
rand evp_rand: documentation 2020-06-24 20:07:46 +10:00
rc2
rc4
rc5
ripemd
rsa Fix potential double free in rsa_keygen pairwise test. 2020-06-23 12:28:48 +02:00
seed
serializer Fix memory leaks on OSSL_SERIALIZER_CTX_new_by_EVP_PKEY 2020-07-02 16:45:14 +03:00
sha
siphash
sm2
sm3
sm4
srp
stack
store Fix CID 1465214 Resource leak (in file_load.c) 2020-07-08 11:19:08 +03:00
ts crypto/cms: add CAdES-BES signed attributes validation 2020-05-27 13:16:30 +02:00
txt_db
ui Update copyright year 2020-06-04 14:33:57 +01:00
whrlpool Avoid undefined behavior with unaligned accesses 2020-05-27 20:11:20 +02:00
x509 X509v3_cache_extensions(): Improve coding style and doc, fix case 'sha1 == NULL' 2020-07-01 11:14:54 +02:00
alphacpuid.pl
arm64cpuid.pl
arm_arch.h
armcap.c
armv4cpuid.pl
asn1_dsa.c
bsearch.c
build.info
c64xpluscpuid.pl
context.c CORE: Add an internal function to distinguish the global default context 2020-06-28 10:55:52 +02:00
core_algorithm.c CORE: perform post-condition in algorithm_do_this() under all circumstances 2020-07-05 14:07:14 +02:00
core_fetch.c Update copyright year 2020-06-04 14:33:57 +01:00
core_namemap.c namemap: change ossl_namemap_empty() to do what the documentation says. 2020-06-21 16:49:51 +10:00
cpt_err.c
cryptlib.c
ctype.c
cversion.c
der_writer.c
dllmain.c
ebcdic.c
ex_data.c
getenv.c
ia64cpuid.S
info.c Print CPUINFO also for s390 processors 2020-06-22 02:35:01 +02:00
init.c
initthread.c Make the naming scheme for dispatched functions more consistent 2020-06-24 22:01:22 +02:00
LPdir_nyi.c
LPdir_unix.c
LPdir_vms.c
LPdir_win32.c
LPdir_win.c
LPdir_wince.c
mem_clr.c
mem_sec.c Fix wrong return value check of mmap function 2020-06-23 10:08:28 +10:00
mem.c
mips_arch.h
o_dir.c
o_fopen.c
o_init.c
o_str.c Update copyright year 2020-06-04 14:33:57 +01:00
o_time.c
packet.c
param_build_set.c
param_build.c params: add OSSL_PARAM helpers for time_t. 2020-06-24 20:05:41 +10:00
params_from_text.c
params.c params: add OSSL_PARAM helpers for time_t. 2020-06-24 20:05:41 +10:00
pariscid.pl
ppc_arch.h
ppccap.c
ppccpuid.pl
provider_conf.c
provider_core.c Fix OSSL_PROVIDER_get_capabilities() 2020-07-08 08:55:56 +01:00
provider_local.h
provider_predefined.c
provider.c Add the OSSL_PROVIDER_get_capabilities() API function 2020-06-19 10:19:31 +01:00
README-sparse_array.md Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md files 2020-07-05 11:29:43 +02:00
s390x_arch.h
s390xcap.c
s390xcpuid.pl
self_test_core.c
sparc_arch.h
sparccpuid.S
sparcv9cap.c
sparse_array.c
threads_none.c
threads_pthread.c
threads_win.c
trace.c
uid.c
vms_rms.h
x86_64cpuid.pl
x86cpuid.pl