Geoff Thorpe 81d1998e09 Currently, RSA code, when using no padding scheme, simply checks that input ... does not contain more bytes than the RSA modulus 'n' - it does not check that the input is strictly *less* than 'n'. Whether this should be the case or not is open to debate - however, due to security problems with returning miscalculated CRT results, the 'rsa_mod_exp' implementation in rsa_eay.c now performs a public-key exponentiation to verify the CRT result and in the event of an error will instead recalculate and return a non-CRT (more expensive) mod_exp calculation. As the mod_exp of 'I' is equivalent to the mod_exp of 'I mod n', and the verify result is automatically between 0 and n-1 inclusive, the verify only matches the input if 'I' was less than 'n', otherwise even a correct CRT calculation is only congruent to 'I' (ie. they differ by a multiple of 'n'). Rather than rejecting correct calculations and doing redundant and slower ones instead, this changes the equality check in the verification code to a congruence check.		2001-07-20 15:16:10 +00:00
..
asn1	Patches from Vern Staats <staatsvr@asc.hpc.mil> to get Kerberos 5 in	2001-07-09 21:46:58 +00:00
bf	Remove unnecessary casts.	2001-07-06 22:06:08 +00:00
bio	Let's include cryptlib.h *before* things like NO_SYSLOG are tested or	2001-07-02 20:43:01 +00:00
bn	This fixes "Spurious test failures on IRIX?" reported in April. Apparently	2001-06-22 19:17:42 +00:00
buffer
cast
comp
conf	Modify apps to use NCONF code instead of old CONF code.	2001-06-28 11:41:50 +00:00
des	Use ui_compat.h to get the password reading functions.	2001-05-14 11:54:36 +00:00
dh	In {RSA,DSA,DH}_new_method(x) need to increase the reference	2001-06-23 23:07:34 +00:00
dsa	DSA verification should insist that r and s are in the allowed range.	2001-06-26 09:48:17 +00:00
dso	Use one address consistently.	2001-07-05 10:20:07 +00:00
ec	For consistency with the terminology used in my SAC2001 paper, avoid	2001-07-10 11:41:29 +00:00
engine	Update nCipher header with more liberal licence.	2001-07-04 12:26:39 +00:00
err	Translate into valid C (don't call functions with wrong prototypes).	2001-06-25 10:09:55 +00:00
evp	A better compromise between encrypt and decrypt (but why isn't it as fast	2001-07-09 21:00:36 +00:00
hmac
idea
krb5	Delete extra ;	2001-07-11 22:54:24 +00:00
lhash	Correct const-ness.	2001-07-08 11:42:38 +00:00
md2	Change all calls to low level digest routines in the library and	2001-06-19 22:30:40 +00:00
md4	Change all calls to low level digest routines in the library and	2001-06-19 22:30:40 +00:00
md5	Change all calls to low level digest routines in the library and	2001-06-19 22:30:40 +00:00
mdc2	Change all calls to low level digest routines in the library and	2001-06-19 22:30:40 +00:00
objects	Add support for MS CSP Name PKCS#12 attribute.	2001-06-11 00:43:20 +00:00
ocsp	In ocsp_match_issuerid() we are passed the CA that signed the responder	2001-07-11 22:42:20 +00:00
pem
perlasm	Accept digits in symbol names. Spotted by Brian Havard <brianh@kheldar.apana.org.au>	2001-06-04 16:34:31 +00:00
pkcs7
pkcs12	Change all calls to low level digest routines in the library and	2001-06-19 22:30:40 +00:00
rand	make update	2001-07-10 21:00:37 +00:00
rc2
rc4	Change all calls to low level digest routines in the library and	2001-06-19 22:30:40 +00:00
rc5	Constification.	2001-07-06 21:35:00 +00:00
rijndael
ripemd	Change all calls to low level digest routines in the library and	2001-06-19 22:30:40 +00:00
rsa	Currently, RSA code, when using no padding scheme, simply checks that input	2001-07-20 15:16:10 +00:00
sha	Change all calls to low level digest routines in the library and	2001-06-19 22:30:40 +00:00
stack	make update	2001-07-10 21:00:37 +00:00
threads
txt_db
ui	One forgotten function.	2001-07-11 07:10:43 +00:00
x509	Handle empty X509_NAME in printing routines.	2001-06-26 12:04:35 +00:00
x509v3	Modify apps to use NCONF code instead of old CONF code.	2001-06-28 11:41:50 +00:00
.cvsignore
cpt_err.c
cryptlib.c	Don't set pointer if add_lock_callback used.	2001-06-19 00:04:57 +00:00
cryptlib.h
crypto-lib.com	New internal function OPENSSL_gmtime, which is intended to do the same	2001-05-16 08:44:09 +00:00
crypto.h	Add a general user interface API. This is designed to replace things	2001-05-06 23:19:37 +00:00
cversion.c
ebcdic.c
ebcdic.h
ex_data.c
install.com	ui was forgotten when installing libcrypto and it's headers.	2001-05-14 12:22:27 +00:00
Makefile.ssl	'make update'	2001-06-05 20:32:36 +00:00
md32_common.h
mem_dbg.c	Correct const-ness.	2001-07-08 11:42:38 +00:00
mem.c
o_time.c	Use one address consistently.	2001-07-05 10:20:07 +00:00
o_time.h	Use one address consistently.	2001-07-05 10:20:07 +00:00
opensslconf.h.in
opensslv.h	In version numbers, there is just one "M" nybble.	2001-07-10 10:04:26 +00:00
symhacks.h	Make more short aliases for symbols that are longer than 31	2001-05-14 11:58:08 +00:00
tmdiff.c
tmdiff.h
uid.c	User OPENSSL_UNISTD instead of <unistd.h>.	2001-04-26 08:26:18 +00:00