mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-12-15 06:01:37 +08:00
Code Issues Packages Projects Releases Wiki Activity
852438adc0
openssl/crypto/asn1
History
slontis 3859a02725 Change PBES2 KDF default salt length to 16 bytes. 
The PKCS5 (RFC 8018) standard uses a 64 bit salt length for PBE, and
recommends a minimum of 64 bits for PBES2. For FIPS compliance PBKDF2
requires a salt length of 128 bits.
This affects OpenSSL command line applications such as "genrsa" and "pkcs8"
and API's such as PEM_write_bio_PrivateKey() that are reliant on the
default salt length.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21858)
2023-09-04 14:15:34 +10:00
..
a_bitstr.c Add negative integer check when using ASN1_BIT_STRING 2023-05-04 09:08:23 +10:00
a_d2i_fp.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_digest.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_dup.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_gentm.c Update copyright year 2021-04-08 13:04:41 +01:00
a_i2d_fp.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_int.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_mbstr.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_object.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_octet.c Following the license change, modify the boilerplates in crypto/asn1/ 2018-12-06 14:24:40 +01:00
a_print.c Update copyright year 2021-09-07 13:35:43 +02:00
a_sign.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_strex.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_strnid.c no_autoload: make the no-autoload-config option work again. 2023-08-04 11:57:27 +10:00
a_time.c Add more fixes for WebAssembly/WASI build 2023-07-12 10:50:09 +10:00
a_type.c Update copyright year 2021-04-08 13:04:41 +01:00
a_utctm.c Update copyright year 2021-04-08 13:04:41 +01:00
a_utf8.c ASN1: limit the Unicode code point range in UTF8_getc() and UTF8_putc() 2021-03-18 14:12:48 +10:00
a_verify.c log actual NID causing the 'unknown message digest algorithm error' 2023-06-18 16:58:54 +10:00
ameth_lib.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
asn1_err.c err: rename err_load_xxx_strings_int functions 2021-05-26 13:01:47 +10:00
asn1_gen.c asn1: add ASN1_STRING_set() check result 2023-08-04 13:29:17 -04:00
asn1_item_list.c Update copyright year 2020-11-26 14:18:57 +00:00
asn1_item_list.h CMS: Export CMS_EnvelopedData and add CMS_EnvelopedData_decrypt() 2022-06-28 17:51:21 +02:00
asn1_lib.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
asn1_local.h libcrypto refactoring: introduce and use ossl_asn1_string_set_bits_left() 2022-07-19 08:44:19 +02:00
asn1_parse.c Fix BIO_set_indent() check 2023-02-08 17:03:52 +01:00
asn_mime.c SMIME_crlf_copy(): check for NULL pointer arguments 2023-06-01 09:56:20 +02:00
asn_moid.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
asn_mstbl.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
asn_pack.c Fix incomplete error check on ASN1_item_i2d() 2023-02-28 14:34:57 +11:00
bio_asn1.c Fix BIO_f_asn1() to properly report some errors 2022-12-22 11:01:06 +01:00
bio_ndef.c Fix a UAF resulting from a bug in BIO_new_NDEF 2023-02-07 17:05:10 +01:00
build.info ASN1: rename asn1_par.c to asn1_parse.c for clarity; simplify asn1_parse2() 2021-06-15 14:23:21 +02:00
charmap.h Fix copyright year issues 2022-01-06 09:27:02 +01:00
charmap.pl Add a local perl module to get year last changed 2021-03-31 13:59:53 +02:00
d2i_param.c Update copyright year 2021-06-17 13:24:59 +01:00
d2i_pr.c Improve the performance of d2i_AutoPrivateKey and friends 2023-03-15 08:39:25 +11:00
d2i_pu.c Update copyright year 2022-05-03 13:34:51 +01:00
evp_asn1.c Avoid invoking memcpy if size is zero or the supplied buffer is NULL 2021-08-25 17:02:37 +02:00
f_int.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
f_string.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
i2d_evp.c Coverity 1528496: remove assignment of unused value 2023-06-10 19:23:59 -04:00
n_pkey.c Update copyright year 2021-06-17 13:24:59 +01:00
nsseq.c Following the license change, modify the boilerplates in crypto/asn1/ 2018-12-06 14:24:40 +01:00
p5_pbe.c Change PBES2 KDF default salt length to 16 bytes. 2023-09-04 14:15:34 +10:00
p5_pbev2.c Change PBES2 KDF default salt length to 16 bytes. 2023-09-04 14:15:34 +10:00
p5_scrypt.c Change PBES2 KDF default salt length to 16 bytes. 2023-09-04 14:15:34 +10:00
p8_pkey.c Update copyright year 2020-04-23 13:55:52 +01:00
standard_methods.h configure: introduce no-ecx to remove ECX related feature 2023-06-14 13:06:22 +10:00
t_bitst.c Following the license change, modify the boilerplates in crypto/asn1/ 2018-12-06 14:24:40 +01:00
t_pkey.c Reorganize private crypto header files 2019-09-28 20:26:34 +02:00
t_spki.c Update copyright year 2021-09-07 13:35:43 +02:00
tasn_dec.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
tasn_enc.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
tasn_fre.c Update copyright year 2021-04-08 13:04:41 +01:00
tasn_new.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
tasn_prn.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
tasn_scn.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
tasn_typ.c constify *_dup() and *i2d_*() and related functions as far as possible, introducing DECLARE_ASN1_DUP_FUNCTION 2019-03-06 16:10:09 +00:00
tasn_utl.c asn1: update to structure based atomics 2023-07-01 21:18:25 +10:00
tbl_standard.h Update copyright year 2020-10-15 14:10:06 +01:00
x_algor.c Update copyright year 2022-05-03 13:34:51 +01:00
x_bignum.c Explicitly test against NULL; do not use !p or similar 2019-10-09 21:32:15 +02:00
x_info.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
x_int64.c Cast values to match printf format strings. 2022-11-14 07:47:53 +00:00
x_long.c Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 2020-11-13 09:35:02 +01:00
x_pkey.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
x_sig.c Reorganize private crypto header files 2019-09-28 20:26:34 +02:00
x_spki.c Following the license change, modify the boilerplates in crypto/asn1/ 2018-12-06 14:24:40 +01:00
x_val.c Following the license change, modify the boilerplates in crypto/asn1/ 2018-12-06 14:24:40 +01:00