openssl/include/crypto
Shane Lontis e454a3934c Add a range check (from SP800-56Ar3) to DH key derivation.
Fixes #14401

Note that this moves the public key check out of DH compute_key() since
key validation does not belong inside this primitive..
The check has been moved to the EVP_PKEY_derive_set_peer() function so that
it generally applies to all exchange operations.. Use EVP_PKEY_derive_set_peer_ex()
to disable this behaviour.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14717)
2021-04-01 09:07:08 +10:00
..
__DECC_INCLUDE_EPILOGUE.H
__DECC_INCLUDE_PROLOGUE.H
aes_platform.h Update copyright year 2021-02-18 15:05:17 +00:00
aria.h Add ossl_aria symbols 2021-03-18 17:52:37 +10:00
asn1_dsa.h Add ossl_encode symbols 2021-03-18 17:52:37 +10:00
asn1.h Implement EVP_PKEY_dup() function 2021-03-28 16:38:57 +10:00
asn1err.h Update copyright year 2020-11-26 14:18:57 +00:00
async.h Update copyright year 2021-02-18 15:05:17 +00:00
asyncerr.h Update copyright year 2020-11-26 14:18:57 +00:00
bioerr.h Update copyright year 2020-11-26 14:18:57 +00:00
bn_conf.h.in Update copyright year 2021-02-18 15:05:17 +00:00
bn_dh.h Update copyright year 2021-03-11 13:27:36 +00:00
bn_srp.h Add ossl_bn_group symbols 2021-03-18 17:52:37 +10:00
bn.h Fix external symbols for bn 2021-02-26 10:32:22 +10:00
bnerr.h Update copyright year 2020-11-26 14:18:57 +00:00
buffererr.h Update copyright year 2020-11-26 14:18:57 +00:00
chacha.h Update copyright year 2021-02-18 15:05:17 +00:00
cmll_platform.h Update copyright year 2021-02-18 15:05:17 +00:00
cmperr.h Update copyright year 2020-11-26 14:18:57 +00:00
cms.h TS and CMS CAdES-BES: Refactor check_signing_certs() funcs into common ESS func 2021-03-18 07:03:53 +01:00
cmserr.h Update copyright year 2020-11-26 14:18:57 +00:00
comperr.h Update copyright year 2020-11-26 14:18:57 +00:00
conferr.h Update copyright year 2020-11-26 14:18:57 +00:00
crmferr.h Update copyright year 2020-11-26 14:18:57 +00:00
cryptlib.h Update copyright year 2021-02-18 15:05:17 +00:00
cryptoerr.h openssl_hexstr2buf_sep(): Prevent misleading 'malloc failure' errors on short input 2020-12-10 15:19:55 +01:00
cterr.h Update copyright year 2020-11-26 14:18:57 +00:00
ctype.h Add ossl_asn1 symbols 2021-03-18 17:52:37 +10:00
decoder.h Update copyright year 2021-02-18 15:05:17 +00:00
decodererr.h Update copyright year 2020-11-26 14:18:57 +00:00
des_platform.h Update copyright year 2021-02-18 15:05:17 +00:00
dh.h Add a range check (from SP800-56Ar3) to DH key derivation. 2021-04-01 09:07:08 +10:00
dherr.h Add a range check (from SP800-56Ar3) to DH key derivation. 2021-04-01 09:07:08 +10:00
dsa.h PROV: Add type specific PKCS#8 decoding to the DER->key decoders 2021-03-19 16:46:39 +01:00
dsaerr.h Update copyright year 2020-11-26 14:18:57 +00:00
dso_conf.h.in Update copyright year 2021-02-18 15:05:17 +00:00
ec.h PROV: Add type specific PKCS#8 decoding to the DER->key decoders 2021-03-19 16:46:39 +01:00
ecerr.h Update copyright year 2020-11-26 14:18:57 +00:00
ecx.h Fix Build issue on Oracle Linux x64 2021-03-28 12:43:46 +10:00
encoder.h Rename OPENSSL_CTX prefix to OSSL_LIB_CTX 2020-10-15 11:59:53 +01:00
encodererr.h Update copyright year 2020-11-26 14:18:57 +00:00
engine.h
engineerr.h Update copyright year 2020-11-26 14:18:57 +00:00
err.h Update copyright year 2021-02-18 15:05:17 +00:00
ess.h TS and CMS CAdES-BES: Refactor check_signing_certs() funcs into common ESS func 2021-03-18 07:03:53 +01:00
esserr.h TS and CMS CAdES-BES: Refactor check_signing_certs() funcs into common ESS func 2021-03-18 07:03:53 +01:00
evp.h EVP_PKCS82PKEY: Create provided keys if possible 2021-03-25 15:24:00 +01:00
evperr.h Don't overflow the output length in EVP_CipherUpdate calls 2021-02-16 11:40:12 +00:00
httperr.h Update copyright year 2020-11-26 14:18:57 +00:00
lhash.h Add ossl_lhash symbols 2021-03-18 17:52:38 +10:00
md32_common.h
modes.h Update copyright year 2021-03-11 13:27:36 +00:00
objects.h Add ossl_ conf symbols 2021-03-18 17:52:37 +10:00
objectserr.h Update copyright year 2020-11-26 14:18:57 +00:00
ocsperr.h Update copyright year 2020-11-26 14:18:57 +00:00
pem.h PROV: Add type specific MSBLOB and PVK decoding for the MS->key decoders 2021-03-19 16:46:39 +01:00
pemerr.h PROV: Add type specific MSBLOB and PVK decoding for the MS->key decoders 2021-03-19 16:46:39 +01:00
pkcs7.h Fix external symbols for pkcs7. 2021-02-22 09:16:37 +10:00
pkcs7err.h Update copyright year 2020-11-26 14:18:57 +00:00
pkcs12err.h Update copyright year 2020-11-26 14:18:57 +00:00
poly1305.h Update copyright year 2021-02-18 15:05:17 +00:00
punycode.h Update copyright year 2021-02-18 15:05:17 +00:00
rand_pool.h Add ossl_rand symbols 2021-03-18 17:52:37 +10:00
rand.h Add ossl_rand symbols 2021-03-18 17:52:37 +10:00
randerr.h Update copyright year 2020-11-26 14:18:57 +00:00
rsa.h Fix change in behaviour of EVP_PKEY_CTRL_RSA_KEYGEN_BITS 2021-03-30 19:22:33 +02:00
rsaerr.h Update copyright year 2020-11-26 14:18:57 +00:00
security_bits.h Fix misc external ossl_ symbols. 2021-03-18 17:52:37 +10:00
sha.h Update copyright year 2021-02-18 15:05:17 +00:00
siphash.h Fix a TODO(3.0) in the siphash code 2021-03-17 10:16:21 +10:00
siv.h Add ossl_siv symbols 2021-03-18 17:52:37 +10:00
sm2.h Fix external symbols related to ec & sm2 keys 2021-02-26 10:53:01 +10:00
sm2err.h ERR: Rebuild all generated error headers and source files 2021-02-05 14:09:16 +01:00
sm4.h Add ossl_ symbols for sm3 and sm4 2021-03-18 17:52:37 +10:00
sparse_array.h Add ossl_sa symbols 2021-03-18 17:52:37 +10:00
store.h Update copyright year 2021-02-18 15:05:17 +00:00
storeerr.h Update copyright year 2020-11-26 14:18:57 +00:00
tserr.h Update copyright year 2020-11-26 14:18:57 +00:00
types.h Added guarding #ifndef/#define to avoid duplicate include of crypto/types.h 2021-03-31 13:28:46 +10:00
uierr.h Update copyright year 2020-11-26 14:18:57 +00:00
x509.h Implement EVP_PKEY_dup() function 2021-03-28 16:38:57 +10:00
x509err.h Update copyright year 2020-11-26 14:18:57 +00:00
x509v3err.h Update copyright year 2020-11-26 14:18:57 +00:00