openssl/crypto/dh
Shane Lontis 63794b048c Add multiple fixes for ffc key generation using invalid p,q,g parameters.
Fixes #11864

- The dsa keygen assumed valid p, q, g values were being passed. If this is not correct then it is
  possible that dsa keygen can either hang or segfault.
  The fix was to do a partial validation of p, q, and g inside the keygen.
- Fixed a potential double free in the dsa keypair test in the case when in failed (It should never fail!).
  It freed internal object members without setting them to NULL.
- Changed the FFC key validation to accept 1024 bit keys in non fips mode.
- Added tests that use both the default provider & fips provider to test these cases.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/12176)
2020-07-09 13:43:10 +10:00
..
build.info Use build.info, not ifdef for crypto modules 2020-04-16 13:52:22 +02:00
dh_ameth.c Make EVP_PKEY_[get1|set1]_tls_encodedpoint work with provided keys 2020-06-05 11:04:11 +01:00
dh_asn1.c Update copyright year 2020-04-23 13:55:52 +01:00
dh_backend.c Add DH keygen to providers 2020-04-16 01:14:00 +10:00
dh_check.c Add ACVP fips module tests 2020-06-17 11:33:16 +10:00
dh_depr.c Update copyright year 2020-04-23 13:55:52 +01:00
dh_err.c Generate error queue entry on FFC_CHECK_BAD_LN_PAIR for DH and DSA 2020-06-10 11:08:21 +02:00
dh_gen.c Add ACVP fips module tests 2020-06-17 11:33:16 +10:00
dh_group_params.c Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
dh_kdf.c kdf: make function naming consistent. 2020-06-11 11:14:21 +10:00
dh_key.c Add multiple fixes for ffc key generation using invalid p,q,g parameters. 2020-07-09 13:43:10 +10:00
dh_lib.c Make EVP_PKEY_CTX_[get|set]_group_name work for DH too 2020-06-19 10:19:31 +01:00
dh_local.h Make EVP_PKEY_[get1|set1]_tls_encodedpoint work with provided keys 2020-06-05 11:04:11 +01:00
dh_meth.c Update copyright year 2020-04-23 13:55:52 +01:00
dh_pmeth.c Add ACVP fips module tests 2020-06-17 11:33:16 +10:00
dh_prn.c Update copyright year 2020-04-23 13:55:52 +01:00
dh_rfc5114.c Update copyright year 2020-04-23 13:55:52 +01:00