openssl/ssl
Ben Laurie 7c770d572a Add and use a constant-time memcmp.
This change adds CRYPTO_memcmp, which compares two vectors of bytes in
an amount of time that's independent of their contents. It also changes
several MAC compares in the code to use this over the standard memcmp,
which may leak information about the size of a matching prefix.
(cherry picked from commit 2ee798880a)
2013-02-06 14:16:55 +00:00
..
.cvsignore
bio_ssl.c OPENSSL_NO_SOCK fixes. 2012-04-16 17:42:36 +00:00
d1_both.c PR: 2755 2012-03-06 13:47:43 +00:00
d1_clnt.c Version skew reduction: trivia (I hope). 2012-06-03 22:00:21 +00:00
d1_enc.c Sanity check record length before skipping explicit IV in TLS 1.2, 1.1 and 2012-05-10 16:03:52 +00:00
d1_lib.c Improve WINCE support. 2013-01-19 21:23:13 +01:00
d1_meth.c
d1_pkt.c Add and use a constant-time memcmp. 2013-02-06 14:16:55 +00:00
d1_srtp.c Submitted by: Eric Rescorla <ekr@rtfm.com> 2012-02-11 22:53:31 +00:00
d1_srvr.c PR: 2778(part) 2012-03-31 18:03:02 +00:00
dtls1.h PR: 2658 2011-12-31 22:59:57 +00:00
install-ssl.com Install srtp.h 2012-07-05 13:20:19 +00:00
kssl_lcl.h
kssl.c Version skew reduction: trivia (I hope). 2012-06-03 22:00:21 +00:00
kssl.h
Makefile Make "make depend" work on MacOS out of the box. 2013-01-19 14:14:30 +00:00
s2_clnt.c Add and use a constant-time memcmp. 2013-02-06 14:16:55 +00:00
s2_enc.c
s2_lib.c Add ctrl and utility functions to retrieve raw cipher list sent by client in 2012-09-12 13:57:48 +00:00
s2_meth.c
s2_pkt.c Add and use a constant-time memcmp. 2013-02-06 14:16:55 +00:00
s2_srvr.c Fix some warnings caused by __owur. Temporarily (I hope) remove the more 2011-11-14 00:36:10 +00:00
s3_both.c Add and use a constant-time memcmp. 2013-02-06 14:16:55 +00:00
s3_clnt.c perform sanity checks on server certificate type as soon as it is received instead of waiting until server key exchange 2012-08-31 11:18:54 +00:00
s3_enc.c oops, typo 2012-08-28 23:19:25 +00:00
s3_lib.c Print out point format list for clients too. 2012-11-26 18:39:38 +00:00
s3_meth.c
s3_pkt.c Add and use a constant-time memcmp. 2013-02-06 14:16:55 +00:00
s3_srvr.c stop warning when compiling with no-comp 2012-12-29 23:37:56 +00:00
s23_clnt.c send out the raw SSL/TLS headers to the msg_callback and display them in SSL_trace 2012-12-07 23:42:33 +00:00
s23_lib.c
s23_meth.c
s23_pkt.c
s23_srvr.c Add three Suite B modes to TLS code, supporting RFC6460. 2012-08-15 15:15:05 +00:00
srtp.h move internal functions to ssl_locl.h 2011-11-21 22:52:13 +00:00
ssl2.h
ssl3.h send out the raw SSL/TLS headers to the msg_callback and display them in SSL_trace 2012-12-07 23:42:33 +00:00
ssl23.h
ssl_algs.c add GCM ciphers in SSL_library_init 2011-10-10 12:56:18 +00:00
ssl_asn1.c Version skew reduction: trivia (I hope). 2012-06-03 22:00:21 +00:00
ssl_cert.c Add ctrl and utility functions to retrieve raw cipher list sent by client in 2012-09-12 13:57:48 +00:00
ssl_ciph.c return error if Suite B mode is selected and TLS 1.2 can't be used. Correct error coded 2012-12-01 18:33:21 +00:00
ssl_conf.c really fix automatic ;-) 2012-12-07 12:41:13 +00:00
ssl_err2.c
ssl_err.c return error if Suite B mode is selected and TLS 1.2 can't be used. Correct error coded 2012-12-01 18:33:21 +00:00
ssl_lib.c fix typo and warning 2012-11-19 02:46:46 +00:00
ssl_locl.h Add ctrl and utility functions to retrieve raw cipher list sent by client in 2012-09-12 13:57:48 +00:00
ssl_rsa.c Rearrange and test authz extension. 2012-06-07 13:20:47 +00:00
ssl_sess.c Version skew reduction: trivia (I hope). 2012-06-03 22:00:21 +00:00
ssl_stat.c PR: 1794 2011-11-25 00:17:44 +00:00
ssl_task.c
ssl_txt.c
ssl-lib.com Add d1_srtp and t1_trce. 2012-07-05 13:20:02 +00:00
ssl.h typo 2012-12-26 15:23:42 +00:00
ssltest.c stop warning when compiling with no-comp 2012-12-29 23:37:56 +00:00
t1_clnt.c
t1_enc.c * ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately in 2012-09-21 13:08:24 +00:00
t1_lib.c Add and use a constant-time memcmp. 2013-02-06 14:16:55 +00:00
t1_meth.c
t1_reneg.c
t1_srvr.c
t1_trce.c Fix for trace code: SSL3 doesn't include a length value for 2013-02-04 15:13:12 +00:00
tls1.h Add three Suite B modes to TLS code, supporting RFC6460. 2012-08-15 15:15:05 +00:00
tls_srp.c PR: 1794 2011-12-14 22:17:06 +00:00